forums.wsusoffline.net

Hello, this is my first post and while I have some experience with IT I beg your forbearance if I don't automatically understand some terms. Okay, I ran WSUS for the first time today and was pleasantly surprised at how powerful the program was, essentially it offered everything I needed which was to allow me to save time (following a new pc build) to update Windows, Service Packs etc, C++, Office etc. WSUS also allowed me to choose an external USB drive to save the data to.
Prior to starting the program I ran Windows Updates and ensured the system was up to date so was surprised and I must admit a little dismayed to discover that WSUS stated my Trusted Root Certificates were out of date, with trepidation I exited the program created a Restore Point and started again, this time hitting 'yes' for updating the certificates.
Now, my question is this; WSUS updated certificates from march 2014, not the 23rd February 2015 so I have to ask am I in trouble? Will I have to re-update all my WIndows Updates?

Thanks in advance

J1

wsusou updates the Root Certificates using the rootsupd.exe provided by MS. This will update the certificates to the version of 12.02.2014. wsusou will NOT downgrade the certificates, if a more recent version is installed.

There is a problem inside the file wsusscn2.cab, which will report the root certificates as outdated, even if they are up to date. That's why this update has been blacklisted.

aker wrote:wsusou updates the Root Certificates using the rootsupd.exe provided by MS. This will update the certificates to the version of 12.02.2014. wsusou will NOT downgrade the certificates, if a more recent version is installed.

There is a problem inside the file wsusscn2.cab, which will report the root certificates as outdated, even if they are up to date. That's why this update has been blacklisted.

Fantastic news, thanks so much for your quick response, thats a real weight off my mind. Out of interest how does WSUS work when I've built the new pc, how do I point Windows Updates at the files in the USB drive folder?

Just use UpdateGenerator's "Copy to USB"-feature. On the client just start UpdateInstaller.exe.

aker wrote:Just use UpdateGenerator's "Copy to USB"-feature. On the client just start UpdateInstaller.exe.

Ah, fantastic, I have now found the update installer exe in the client folder thanks very much!

Best wishes

J1