SCCM 2007 – System Center Updates Publisher 2011

System Center Updates Publisher is the new coolest thing since the last coolest thing. It makes patching Adobe products a breeze. This post will cover installing and configuring SCUP on your SCCM server. A future post will cover publishing Adobe updates and pushing certificates to your domain clients.


  1. Install WSUS SCUP Hotfix
  2. Install SCUP 2011
  3. Enable Publishing
  4. Generate a certificate
  5. Enable ConfigMgr Integration
  6. Import the certificate on your SCCM Server


 The Process:

  1. First, run the WSUS hotfix installer. When it pops up a message warning about about running applications, press OK.
  2. The hotfix should install with no other messages.
  3. Next, Run the SCUP 2011 installer. At the welcome screen click “Next”.
  4. On the ‘WSUS 3.0 SP2 hotfix dependency’ screen click “Next”.
  5. On the ‘License Agreement’ screen click “I accept” then click “Next”.
  6. On the ‘Installation Location’ screen click “Next”.
  7.  On the ‘Installation’ screen click “Next”.
  8. On the ‘Setup Complete’ screen click “Next”.
  9. Now, launch SCUP. Click the Menu Button then Options.
  10. On the ‘Update Server’ screen check “Enable publishing”, then “Connect to a local server”, then click “Test Connection”.
  11. On the ‘Test Connection’ pop up press “OK”.
  12. Now, on the ‘Update Server’ screen click “Create” to create a certificate.
  13. On the ‘Test Connection’ popup, click “OK”.
  14. On the ‘Update Server’ screen you should now see information about the newly created certificate.
  15. On the ‘ConfigMgr Server’ screen, check “Enable Configuration Manager intergration”, then select “Connect to a local server”, then click “Test Connection”.
  16. On the ‘Test Connection’ popup, click “OK”.
  17. On the ‘Advanced’ screen, check “Add timestamp” and “Check for new catalog alerts”, then click “OK”.
  18. Click Start then Run, type “mmc”, then click “OK”.
  19. In Microsoft Management Console click “File” then “Add/Remove Snap-In…”.
  20. Click “Certificates”, then “Add”.
  21. On the ‘Certifiactes snap-in’ screen, click “Computer account”, then click “Next”.
  22. On the ‘Select Computer’ screen click “Local computer”, then click “Finish”.
  23. Next, on the “Add orRemove Snap-ins screen” click “OK”.
  24. Navigate to the “WSUS” Certificates store. Right-click the certificate and choose “All Tasks” then “Export…”
  25. On the ‘Welcome to the Certificate Export Wizard’ screen, click “Next”.
  26. On the ‘Export Private Key’ screen, choose “No, do not export the private key” then click “Next”.
  27. On the ‘Export File Format’ screen, select “DER encoded binary X.509 (.CER)”, then click “Next”.
  28. On the ‘File to Export’ screen, type “C:\wsuscert.cer” then click “Next”.
  29. On the ‘Completing the Certifiacte Export Wizard’ screen, click “Finish”.
  30. On the ‘Certificate Export Wizard’ message box, click “OK”.
  31. Next, open command prompt and run the following commands:
    certutil.exe -addstore TrustedPublisher C:\wsuscert.cer
    certutil.exe -addstore root C:\wsuscert.cer
Congrats! You’re now ready to start publishing updates to SCCM. Beware that you’ll need to push the WSUS certificate to your domain clients with GPO before they will accept updates published by SCUP. I’ll have another post about pushing Certificates and Adobe Flash updates as soon as possible.

5 thoughts on “SCCM 2007 – System Center Updates Publisher 2011

  1. Pingback: SCCM 2007 – Pushing the SCUP Certificate to Clients « windowsmasher

  2. Pingback: Sertaç Topal – Kişisel Sitesi » System Center Updates Publisher 2011 Kurulumu

  3. Pingback: System Center Updates Publisher 2011 Kurulumu « SAMİ GÖNCÜ

  4. Pingback: Table of Contents | windowsmasher

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s