SSL Configuration in WSUS for 3rd Party Update 

If the WSUS role and the Configuration Manager Site Server role are installed on different servers, or if Easy2Patch 4.0 will be installed on a separate server rather than the machine with the WSUS role installed, the WSUS role must be configured as SSL. For this purpose, it is necessary to obtain an SSL certificate in the appropriate format from a CA operating in an internal structure.