After Re-Installing WSUS and/or SUP, all Updates appear as expired

There are a whole host of different reasons you may need to re-install WSUS on a server. As part of this process you may well have removed the System Update Point (SUP) from SCCM and then re-added it as well. At this point you may notice all your updates are expired....

Issue
All the updates which were previously fine and now listed as expired:

This means you are unable to deploy any of the updates through Deployment Management because an error message pops up stating that all the updates are expired. As an added bonues, any new updates you download will automatically be set as epired too!

Cause
Removal of the System Update Point causes all updates to be set to an expired state.

Resolution
First, check that you have enabled the Software Update Point after you reinstalled it:

Essentially, SUP needs to first clear out all the old updates and then perform a full syncronisation. Kick this off by going to:
Site Database > Site Management > (Site Name) > Site Settings > Component Configuration > Software Update Point Component > Properties
Then switch to the Sync Schedule tab
Tick the 'enable syncronisation on a schedule' and set a schedule
Click OK

This will then kick off the deletion of old updates and syncronisation of current updates. As confirmation of this, you can open the wsyncmgr.log file from (SCCM install location)\Microsoft Configuration manger\Logs folder. It should look somehting like this:

 

Once the Sync has finished (which can take anything up to 12 hours) you should see that updates are no longer defaulted to Expired.

 

As a sidenote, if you're still having trouble be sure to check that you website blocking software isn't preventing WSUS from pulling the content down from Microsoft's website. As a quick test, on your SCCM server open up your browser and check you can navigate to http://update.microsoft.com and http://download.windowsupdate.com.