My default Windows Update routine is that I install the updates on the WSUS servers as the very last steps. By then I have already updated all my other servers. This month I was in for an surprise when both WSUS servers no longer functioned correctly.
Apparently the KB3159706 update needs manual steps that I did overlook when installing this update. As best practice my WSUS servers are running on a Core version of the OS, so the provided steps from Microsoft needs some translation. Since I also use SSL I need to do the additional configuration steps for the bindings too.
Luckily p0w3rsh3ll already posted a good blog post for all these steps on Windows 2012 R2 server core.