For the complete documentation index, see llms.txt. This page is also available as Markdown.

Show Certificate in Patch My PC Publisher

Applies to: Patch My PC Publisher V3.x

The Show Certificate option in Patch My PC (PMPC) Publisher displays detailed information about the code-signing certificate currently configured for use by Publisher.

This view allows you to verify that a valid certificate is selected, confirm its trust status, and ensure it meets the signing requirements of Microsoft WSUS and ConfigMgr.

Show a Certificate

To show a certificate:

  1. Load Publisher.

  2. On the General tab, under the Certificate Management section, click the Show Certificate button. The Certificate Information screen is shown, displaying the information in the table below.

'Certificate Information' screen
Field
Description

Issuer

The authority that issued the certificate. This may be ConfigMgr, Publisher, or an internal/public Certificate Authority.

Subject

The identity the certificate was issued to.

Effective Date

The date and time from which the certificate is valid.

Expiration Date

The date and time the certificate expires.

Cert Usage

Indicates whether the certificate is valid for code-signing operations, which is required for publishing updates to WSUS and signing ConfigMgr detection method scripts.

Public Key

The cryptographic algorithm and key length used by the certificate (for example, RSA 2048-bit).

Thumbprint

A unique identifier for the certificate, useful for verification and troubleshooting.

Trusted Publisher

Confirms whether the certificate is trusted for publishing updates to WSUS.

Trusted Root Authority

Indicates whether the certificate chain is trusted by the local system and WSUS.

Self Signed

Indicates this is a self-signed certificate.

Validate Trust Chain

Clicking Validate Trust Chain checks whether the certificate and its chain of trust are trusted by the local system.

Clicking 'Validate Trust Chain'

This is a useful troubleshooting step if the publishing of updates fails due to certificate or trust-related errors.

Validate the certificate trust chain

Troubleshooting Certificates

If you receive an error when you click Show Certificate, use the steps in this section to identify the cause.

No Certificate found in the WSUS Store on this Server

No Certificate foundin the WSUS Store on this Server

If clicking Show Certificate displays No certificate found in the WSUS store on this server, review PatchMyPC.log for related certificate extraction errors. An entry such as

An error occurred while extracting the certificate from WSUS: C:\WINDOWS\SystemTemp\PMP-1d2xluld\jwpcs1ov.tmp : The request failed with HTTP status 503: Service Unavailable. CertManager 18/04/2026 12:12:54 34 (0x0022) Failed to extract the certificate from WSUS CertManager 18/04/2026 12:12:54 34 (0x0022)

Verify that the WSUS Application Pool is started in IIS, then retry the action.

Verify that the WSUS Application Pool is started in IIS, then retry the action.

Last updated

Was this helpful?