WSUS clients with ssl will not contact port 80 for selfupdate

Set up WSUS server and added cert for ssl using port 8531.
In Group Policy set the AU client to https://wsusservername.domain.com:8531

Just over half of the test group contacted the WSUS server.
Those that did contact the server had Wuaueng.dll version 5.8.x.xxxx
Those that did not contact the server had Wuaueng.dll version 5.4.x.xxxx
This happens on Windows 2000 SP4 and Windows XP SP2
Errors in the IIS logs show that the failed clients look for
/autoupdate/getmanifest.asp which is the old SUS update and not a folder on
the WSUS server.

All machines can browse to http://WSUSServerName/iuident.cab and
http://WSUSServerName/selfupdate/AU/...e/wuaucomp.cab

When I change AU client to http://wsusservername.domain.com:8530 the client
gets the version 5.8.x.xxxx update from port 80 and is seen in the WSUSadmin
page. Going by the IIS logs no client using the ssl connection tries to
contact the server using port 80 so they cannot self update.

Has anyone seen this on their site and if so is there a fix?

Hi,

Fyi:

Please post WSUS related issues to the newsgroup dedicated to WSUS:
microsoft.public.windows.server.update_services

WebNews link to the WSUS newsgroup:
http://www.microsoft.com/communities...pdate_services


Or use a newsgroup reader (default Outlook Express) to access this new
group:

Clicking on this link should open this group in OE:

news://msnews.microsoft.com/microsof...pdate_services


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx