For those of you still using SBS 2011 and still using the WSUS 3.0 SP2 with it… keep reading.
If you want to keep using WSUS 3.0 sp2 on SBS 2011 after June, you will need to install an update that adds SHA-2 support (it’s the digital signature on the patching files) to the server so it can handle these.
This update WILL NOT come down on MU. It is only offered up from the catalog site.
This update has been tested on the SBS 2011 platform and is fully supported on it.
(anyone else that has long since said goodbye to that platform, congrats, one less patch to worry about)
Windows 7 is also in the process of getting updates to support this as well, look for them in the coming months: