How to Connect the CSI Console to WSUS | University of Oregon: Information Security
Information Security Information Services home

How to Connect the CSI Console to WSUS

The following guide provides a step by step on how to connect the Secunia CSI Console to a WSUS server, as well as creating a GPO.

In order to connect to the WSUS, the user must have Domain Administrator rights on their account.

Requirements for the Secunia GPO are as follows:

  • Enable: Configure Automatic Updates
  • Enable: Specify intranet Microsoft update service location
  • Enable: Allow signed updates from an intranet Microsoft update service location
  • The WSUS Self-Signed Certificate must be placed in "Trusted Publishers" and "Trusted Root Certification Authorities"


  1. From the CSI console, select Patch > WSUS Configuration
  2. Select "Configure Upstream Server"
  3. Enter the WSUS server name and its corresponding port number (port number is typically 80 or 8530), click "Next"
  4. Select "Automatically create and install certificate."

    Once the signing certificate is installed, select "Next"
  5. We are deploying via a WSUS server so select "Use WSUS to distribute packages" and click "Create Group Policy"
  6. If successful, select "Close"