Installation, Configuration and Deployment of Software Updates – SCCM 2007-Part2

                                            Installation of Software Update Point and Software Update Synchronization



In my last article I explained about the basic overview of software updates and installation of WSUS. In this article I will show you how to install software Update Point (SUP) and Synchronization Process.

Installation of Software updates point:
The SUP role needs to install on the sccm server before the software updates can be synchronized and deployed on the client computers.

Software Update Point Requirements:
 Install WSUS 3.0 for RTM or WSUS3.0 sp1 for SCCM Sp1
 If you have WSUS on different server and SCCM going to be installed on different server then you need to have atleast WSUS console to be installed
 Important thing internet connection, allow atleast vendor website open to download the software.

How to create software update point:
1. Navigate to System Center Configuration Manager / Site Database / Site Management / <site code> - <site name> / Site Settings / Site Systems / Right click Site Server and click on New Roles.
2. It will open “New Role Wizard” , let it be the default – click on next (you can customize if you want something to be changed like protected boundaries configuration
Figure 1:
 

3. Then select “Software Update Point” site role and click on NEXT and finish the task
Figure 2:

 
Note : if you are using any proxy server then you need to add the proxy server details, if not let it be the default setting

4. Under the active setting wizard, select the WSUS web site port number, for me it is 8530 and 8531 SSL
Figure 3:

 

5. Sync Source : Under sync source you will get 3 options for synchronization
            1. Microsoft Update : Which recommended for the central site server
            2. Synchronize from an upstream update server: The active software update points on all child sites and all Internet-based software update points should use this setting. The wizard selects this setting by default if this active software update point meets the criteria.
            3. Do not synchronize from Microsoft Update or an upstream update server: Use this setting when this active software update point cannot connect to the upstream update server. 
            4. Keep the default setting Do not create WSUS reporting events, and then click Next.
Figure 4:

 

6. Sync Schedule : Enable by default for 7 days because once in a week patch will be released by Microsoft
Figure 5:

 

7. Classification : Classification required to set based on the requirement, the minimum requirement you can select critical updates, security updates, updates rollup & if required service pack
Figure 6:

 

8. Products : Select the current product which is being running in the environment, I have chosen only Windows XP and language as English
Figure 7:
 

It will display the summary of the selection and it will install Software Update Point

Note : For Installation status you can see SUPSetup.log which can be found under C:\Program Files\Microsoft Configuration Manager\Logs”

Figure 8:
 

And even you can check WCM.log to verify that the connection to the WSUS server was successful.
Figure 9:
 

Software Update Synchronization:
By default the synchronization will happen automatically as per the schedule set, or else you can initiate manually. As a first time I would suggest manually initiate to confirm and download all the latest updates. All you need is internet connection and vendor website need to be accessed.

Inorder to do manual sync:
1. In the Configuration Manager console for the highest site with software updates enabled, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates / Update Repository.
2. Right-click Update Repository, and then click Run Synchronization. Software updates synchronization is initiated as soon as possible.  “Click on Yes”
Figure 10:
 

To know the status - review “wsyncmgr.log”
 

After the complete synchronization Wsyncmgr.log should give below information in the log
Figure11:
 


And even you can see the updates from SCCM Console => Expand Computer Management => Software Updates
Figure 12:

 

Enable Software update point client installation:
 Open SCCM Console
 Navigate to Client Installation Methods
 Double click Software Update Point Client Installation
 Select “Enable Software Update Point Client Installation”
 

Recommended to install this hotfix KB-954960 on WSUS server and restart the computer because some computers do not receive updates from the WSUS server. This problem occurs if the computers have Microsoft Office 2003 or components of Office 2003 installed.

Related Article:
Overview of Software Updates & Installation of WSUS 3.0 - Part 1
Installation of SUP and Software Update Synchronization - Part 2Configuring Software Update & Deployment Procedure - Part 3