You have two Windows Server Update Services (WSUS) servers named Server01 and Server02. Server01
synchronizes from Microsoft Update. Server02 synchronizes updates from Server01. Both servers are
members of the same Active Directory domain.
You configure Server01 to require SSL for all WSUS metadata by using a certificate issued by an enterprise
root certification authority (CA).
You need to ensure that Server02 synchronizes updates from Server01.
What should you do on Server02?
A.
From a command prompt, run wsusutil.exe configuresslproxy server02 443.
B.
From a command prompt, run wsusutil.exe configuressl server01.
C.
From a command prompt, run wsusutil.exe configuresslproxy server01 443.
D.
From the Update Services console, modify the Update Source and Proxy Server options.
Explanation:
We configure server02 to use server01 as an proxy for the updates through the wsusutil.exe configuresslproxy
<ssl_proxy_ip_or_name> <port>
Server01 is the ssl_proxy and the port is 443 (the sll port).
A work-around when using different proxies for HTTP and SSL in WSUS 3.0 SP1
http://blogs.technet.com/b/craigf/archive/2009/05/04/a-work-around-when-using-different-proxies-for-http-andssl-in-wsus-3-0-sp1.aspx
Why not just D?
2
0
I’m with you, the configuresslproxy parameter and then running a manual SQL insert command is more of a bug fix workaround thing. If we need to memorize every bug/fix workaround to pass a test, God help us! Unless someone can offer something more, I’m going D.
0
0
definitely D.
By testtaker:
Absolutely just D.
tested in my lab environment.
the whole procedure is as follows:
To force WSUS connectivity to use HTTPS you need 3 things:
1. Configure the WSUS virtual directories in IIS on the upstream server to require SSL
2. Bind the WSUS website on port 8351 to a server certificate
3. Configure the WSUS service on the Upstream server to use port 8351 and the Server name on the certificate (wsusutil configuressl )
4. Configure the downstream server to start a WSUS connection on port 8351, to use the server name as on the certificate and to use SSL
Step 4 can be achieved with:
GUI
Update Services console, modify the Update Source
PS
Wsussyncronizationserver -UssServername -usessl
6
0
Yes it D
The explanation provided was for the WSUS primary server which is server01
Since Server2 download updates to server01. Server02 can be classified as downstream wsus server hence the procedure will be this.
Configure SSL for downstream WSUS servers
The following instructions configure a downstream server to synchronize to an upstream server that uses SSL.
To synchronize a downstream server to an upstream server that uses SSL
Log on to the computer by using a user account that is a member of the local Administrators group or the WSUS Administrators group.
Click start, click All Programs, click Administrative Tools, and then click Windows Server Update Service.
In the right pane, expand the server name.
Click Options, and then click Update Source and Proxy Server.
On the Update Source page, select Synchronize from another Windows Server Update Services server.
type the name of the upstream server into the Server name text box. type the port number that the server uses for SSL connections into the Port number text box.
select the Use SSL when synchronizing update information check box, and then click OK.
source: https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus#bkmk_2.5.ConfigSSL
1
0