SCUP 2011 is integrated with SCCM 2012 R2. SCCM deploy the Adobe Reader X! updates but failed with error 0x800b0109. First thing I checked is whether the WSUS certificate is installed in the Trusted Root Certification Authorities and Trusted Publishers of Local Computer. Yes, the WSUS certificate is installed!!
Browsing the internet and saw there is a requirement to set GPO to enable the setting below:
"Administration Templates -> Windows Components -> Windows Update -> 'Allow Signed updates from an intranet Microsoft update service location'
After I enabled the settings, the Adobe Reader updates installed successfully.