SCCM 2012 SUP Issue
I have been trying to setup a SCCM 2012 SUP with WSUS but I don't seem to be able to sync the two together. I've followed the guides on Windows Noob to the letter and the annoying thing is I've already set it up twice successfully in a lab environment.
Server 2008 R2
SQL Server 2012 SP1
SCCM 2012 SP1
WSUS 3.0 SP2
Windows Noob Guide
Every time I try and complete the SUP role I get this alert: Synchronization failure alert for software update point
I've also noticed I don't have any WCM.log or wsyncmgr.log.
Anyone else come across this or know of another log I can use to track this down?
I can't see the wood for the trees anymore :(
I've installed SCCM 2012 in almost 40 different sites and the link between SCCM & WSUS is the most usual thing to go wrong. In my experience the best thing is to remove the SUP component, then remove the WSUS role, reboot the server and start again. Let me just copy and paste some of my personal installation instructions and hopefully those will help even though you probably have done the same thing already.
Add WSUS Role
• Part of this requires the downloading of files, so you must have internet access when adding the role.
• Save the data in D:\SCCM\Sources\WSUS.
• Use existing database “<Default>” (You don't want WSUS to add another SQL installation when you've got a perfectly fine full SQL install set up for SCCM)
• Create a Windows Server Update Services 3.0 SP2 Web site which will be port 8530. This ensures it won’t clash with any other port 80 websites that someone else may add later.
When this wizard is finished close it, but do not run the post install configuration wizard as SCCM will configure WSUS later.
• Install KB2720211
• Install KB2734608
Your WSUS should be left at version 3.2.7600.256.
REBOOT YOUR SERVER NOW
Configure Software Update Point
• Start up the ConfigMgr console
• Click on “Administration” >> “Overview” >> “Site Configuration” >> “Sites”
• Right click on your server and choose “Add Site System Role”
• Skip the first page.
• Add proxy if required.
• Chose “Software Update Point”
• Select the 8530 and 8531 radio button.
• “Allow intranet-only client connections” will suffice.
• Synchronize from Microsoft Update. Do not create WSUS reporting events.
• Create custom schedule of daily updates at 23:00
• Immediately expire a superseded software update.
• Select “Critical Update”, “Definition Updates”, “Security Updates”, “Service Packs”, “Update Rollups”, “Updates”
• DE-select all products for now. (Caution some Office and Windows will be selected and hidden by default - expand those sections)
• Select “English” only and complete the wizard.
• Go to “Software Library” >> “Software Updates” >> “All Software Updates”, right click “Synchronize Software Updates”.
o Check the progress in:
o “D:\Program Files\Microsoft Configuration Manager\Logs\WCM.log”
o You will see “Starting WSUS category sync from upstream...”
o Then “WSUS sync running” every minute for about 9 minutes
o Once that is finished, re-sync updates to force their download. Check
o “D:\Program Files\Microsoft Configuration Manager\Logs\wsyncmgr.log”
o It will take about 5 minutes and at the end you will see something like:
o “Done synchronizing SMS with WSUS Server Server.domain.pri”
Tip: WSUS doesn’t know which new classifications exist so doing the first online sync before choosing any products is the correct procedure. This will also update all the WSUS product categories and you should see “sync: WSUS synchronizing categories” in the log.
At this point go back to the Software Update Point and select the products you want to protect. Then synchronize the updates again.
Hope that helps.
Thanks for the very detailed reply :)
Your method is virtually the same as what I've been doing.... I will try again tomorrow once I've found the enthusiasm to start over for the fourth time.
Well I couldn't wait until tomorrow (although I guess it is technically tomorrow now).... I tried again and it worked fine this time. There were two things I did different:
1. Rebooted the server after installing the two updates for WSUS.
2. Looked in the right place for the log files... DOH!!!
I was previously looking in D:\Program Files\SMS_CCM\Logs rather than D:\Program Files\Microsoft Configuration Manager\Logs\ and thats the reason I couldn't see the WCM.log or wsyncmgr.log.
Out of curiosity do you also install SCCM to your D drive and not the OS drive?
Anyway... your reply was a massive help :)
That's great news. The reboot after WSUS is vital all right :)
Yeah, I generally work with VMs, so make a relatively small C: VHD of about 70GB and a D: drive of about 200GB for SQL, SCCM install, WSUS storage, MDT etc.
Originally Posted by eejit