It was a self-signed cert created within WPP. I then used a GPO to provide the cert to both the trusted pub store and trusted root pub store. I opened the cert on both the upstream and downstream wsus servers and verified the serials are the same, the cert is the same.
↧