If you are planning on using System Center Updates Publisher for WSUS on Windows Server 2012 take a look at this, it will change the way you need to deal with Certificates.

http://blogs.technet.com/b/wsus/archive/2013/08/15/wsus-no-longer-issues-self-signed-certificates.aspx