SCUP 2011 + WSUS + SCCM 2012

Case:

Implementing SCUP 2011 into existing SCCM infrastructure

Environment:

CM Server Windows 2012 STD:

  • SCCM 2012 SP1
  • WSUS role local
  • SCUP local

Process Overview:

  1. Add WSUS role
  2. Add Software Update Point role to CM
  3. Install SCUP 2011
  4. Configure SCUP 2011
  5. Distribute SCUP Certificates
  6. Publish Updates
  7. Add SCUP Catalogs in SUP configuration
  8. Change GPO

Steps:

1.Add WSUS role

No special requirements except adding after installation of the role to group “WSUS Administrators” local administrator. If you fail to do this publishing of updates will not work

2. Add Software Update Point role

1 2 3 4 5 6 7 8 9 10 11 133. Install SCUP 2011

follow this works fine no comments needed

4. Configure SCUP 2011

follow this but remember to start SCUP console always by Run as Administrator if you fail to do that almost every configuration will not be succesfull.

5. Distribute SCUP Certificates

follow this works fine no comments needed

6. Publish Updates

follow this works fine no comments needed

7. Add SCUP Catalogs in SUP configuration

Now we have to refresh the configuration in SUP by adding new catalogs that are visible after configuring and publishing updates from SCUP

141616

The last part is to change the GPO to not point at any WSUS (if it was configured before) and add “Allow signed content from intranet Microsoft update service location”

Now what  remains is to sync SUP with WSUS. Do not try to find published updates from SCUP in WSUS they only appear in SUP.

Troubleshooting:

SCCM Logs CM side:

WSUSCtrl.log – Records details about the configuration, database connectivity, and health of the WSUS server for the site.

wsyncmgr.log – Records details about the software updates synchronization process.

SUPSetup.log – Records details about the software update point installation. When the software update point installation completes, Installation was successful is written to this log file.

WCM.log – Records details about the software update point configuration and connections to the Windows Server Update Services (WSUS) server for subscribed update categories, classifications, and languages.

SCCM Logs Client side:

WUAHandler.log -shows exactly what is updated and if the process ended with success or not

 

WindowsUpdate.log – system log regarding windows update located in c:\Windows

 

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s