Also, when you test the WSUS funcionality from your client computer without a SSL imported, you should see this error in Chrome (sorry, SK language) (in my case address is: https://FQDN:8531/selfupdate/wuident.cab You can use loginscript/gpo or something smarter like PDQ Deploy ...