For client computers to successfully scan for and install the software updates that are published to an update server by using System Center Updates Publisher, they must have Windows Update Agent (WUA) 3.0 installed. The client computer must also have a specific digital certificate in the local certificate store and a local registry key value configured.

Step Reference

The same certificate that is used to sign the software updates when they are published to the updates server must also be in the certificate store on the client.

How to Configure the Digital Certificate on Client Computers

The Allow signed content from intranet Microsoft update service location Group Policy must be enabled.

How to Configure Group Policy on Client Computers

See Also