SCCM 2012 – Installing the SUP Role

I posted previously about configuring software updates in SCCM. This post is about installing the SUP role on the CAS and site servers. A little backwards, I know.

This post is a slightly modified version of my internal documentation on the process. Sorry if it’s a little un-treated. These instructions assume that you’re not using a proxy server, and that you’re installing the SUP role on the same server as your CAS and site server management points.

Install WSUS and Hotfix on CAS

  • WSUS 3 SP1 Download
  • WSUS Install cmd line. The F:\WSUS line is where you want WSUS to store the license agreements for updates which require them.
    WSUS30-KB972455-x64.exe /q CONTENT_LOCAL=1 CONTENT_DIR=F:\WSUS SQLINSTANCE_NAME=%COMPUTERNAME% MU_ROLLUP=1 DEFAULT_WEBSITE=0 CREATE_DATABASE=1 CONSOLE_INSTALL=0
  • WSUS Hotfix Download
  • WSUS Hotfix Install cmd line:
    WSUS-KB2734608-x64.exe /q

Install SUP Role on CAS

  • Administration -> Site Configuration -> Servers and Site System Roles -> CAS Server.
  • Right-click -> Add Site System Role
  • Specify the server’s FQDN.
  • Check ‘Software Update Point’.
  • Do not use a proxy sever unless actually needed.
  • Active Settings: Check ‘Use this server as the active software update point’, and ‘WSUS is configured to use a custom website’.
  • Synchronization Source: ‘Synchronize from Microsoft Update’ and ‘Do not create WSUS reporting events’
  • Synchronization Schedule: Check ‘Enable synchronization on a schedule’. Run every 1 days. Alert when synchronization fails on any site in the hierarchy.
  • Supersedence Rules: Choose ‘Immediately expire a superseded software update’.
  • Classifications: All
  • Products: DO NOT CHOOSE EVERYTHING, only what you need right now. You can always add more later. Choosing everything makes the console really slow.
  • Languages: Only select languages for which you actually install that specific language’s OS version of Windows. This is not about keyboard layouts, it’s about the whole OS language scheme.
  • Next, wait, close.

Run a Full WSUS Synchronization

  • Software Library -> Software Updates -> Right-click -> Run Synchronization

Enable SUP Internet Mode on CAS

  • Admin -> Sites -> Right-click Site -> Configure Site Components -> Software Update Point
  • Choose ‘Allow both intranet and internet clients’.

Install WSUS and Hotfix on Site Server

  • See the previous section regarding the WSUS and Hotfix install. It’s the same process for both the CAS and Site Server.

Install SUP Role on Site Server

  • Admin -> Site Config -> Servers and Site System Roles -> CAS Serevr.
  • Right-click -> Add Site System Role
  • Specify FQDN
  • Check Software Update Point
  • Do not use a proxy sever
  • Active Settings: Check Use this server as the active software update point, and WSUS is configured to use a custom website.
  • Synchronization Source: Do not create WSUS reporting events.
  • Languages: Only select languages for which you actually install that specific language’s OS version of Windows. This is not about keyboard layouts, it’s about the whole OS language scheme.
  • Next, wait, close.

Run a Full WSUS Synchronization

  • Software Library -> Software Updates -> Right-click -> Run Synchronization

Now, you should be ready to actually configure the SUP to push out updates. Good luck!

Advertisements

One thought on “SCCM 2012 – Installing the SUP Role

  1. Pingback: Table of Contents | windowsmasher

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s