The isolated wsus needs to trust the package. So,
- if you have used a self-signed certificate, you need to put this certificate in the Trusted Root Certification Authority and in the Trusted Publisher
-
if you have used a home made certificate, you need to put the certificate of the authority in the Trusted Root Certification Authority and the code-signing certificate itself in the Trusted Publisher