For detailed certificate information beyond that presented in this section, please see the following articles.

For information on establishing a trust relationship to support third-party patching:

For information on why WSUS in Windows Server 2012 R2 no longer by default supports generating code signing certificates, and for a workaround:

Patch for MEM will automatically invoke this workaround if you choose to create a self-signed certificate using the Settings dialog.