SCCM 2012 SUP Issue

[jaminben]

Hi,

 

I have been trying to setup a SCCM 2012 SUP with WSUS but I don't seem to be able to sync the two together. I've followed the guides on Windows Noob to the letter and the annoying thing is I've already set it up twice successfully in a lab environment.

 

I'm running:

 

Server 2008 R2

SQL Server 2012 SP1

SCCM 2012 SP1

WSUS 3.0 SP2

 

Windows Noob Guide

 

Every time I try and complete the SUP role I get this alert: Synchronization failure alert for software update point

I've also noticed I don't have any WCM.log or wsyncmgr.log.

 

Anyone else come across this or know of another log I can use to track this down?

 

I can't see the wood for the trees anymore

 

Thanks

[eejit]

I've installed SCCM 2012 in almost 40 different sites and the link between SCCM & WSUS is the most usual thing to go wrong. In my experience the best thing is to remove the SUP component, then remove the WSUS role, reboot the server and start again. Let me just copy and paste some of my personal installation instructions and hopefully those will help even though you probably have done the same thing already.

 

Installing WSUS:

Add WSUS Role

• Part of this requires the downloading of files, so you must have internet access when adding the role.

• Save the data in D:\SCCM\Sources\WSUS.

• Use existing database “” (You don't want WSUS to add another SQL installation when you've got a perfectly fine full SQL install set up for SCCM)

• Create a Windows Server Update Services 3.0 SP2 Web site which will be port 8530. This ensures it won’t clash with any other port 80 websites that someone else may add later.

 

When this wizard is finished close it, but do not run the post install configuration wizard as SCCM will configure WSUS later.

 

• Install KB2720211

• Install KB2734608

 

Your WSUS should be left at version 3.2.7600.256.

 

REBOOT YOUR SERVER NOW

 

Configure Software Update Point

• Start up the ConfigMgr console

• Click on “Administration” >> “Overview” >> “Site Configuration” >> “Sites”

• Right click on your server and choose “Add Site System Role”

• Skip the first page.

• Add proxy if required.

• Chose “Software Update Point”

• Select the 8530 and 8531 radio button.

• “Allow intranet-only client connections” will suffice.

• Synchronize from Microsoft Update. Do not create WSUS reporting events.

• Create custom schedule of daily updates at 23:00

• Immediately expire a superseded software update.

• Select “Critical Update”, “Definition Updates”, “Security Updates”, “Service Packs”, “Update Rollups”, “Updates”

• DE-select all products for now. (Caution some Office and Windows will be selected and hidden by default - expand those sections)

• Select “English” only and complete the wizard.

• Go to “Software Library” >> “Software Updates” >> “All Software Updates”, right click “Synchronize Software Updates”.

 

o Check the progress in:

o “D:\Program Files\Microsoft Configuration Manager\Logs\WCM.log”

o You will see “Starting WSUS category sync from upstream...”

o Then “WSUS sync running” every minute for about 9 minutes

o Once that is finished, re-sync updates to force their download. Check

o “D:\Program Files\Microsoft Configuration Manager\Logs\wsyncmgr.log”

o It will take about 5 minutes and at the end you will see something like:

o “Done synchronizing SMS with WSUS Server Server.domain.pri”

Tip: WSUS doesn’t know which new classifications exist so doing the first online sync before choosing any products is the correct procedure. This will also update all the WSUS product categories and you should see “sync: WSUS synchronizing categories” in the log.

 

At this point go back to the Software Update Point and select the products you want to protect. Then synchronize the updates again.

Hope that helps.

[jaminben]

Thanks for the very detailed reply

 

Your method is virtually the same as what I've been doing.... I will try again tomorrow once I've found the enthusiasm to start over for the fourth time.

 

EDIT:

Well I couldn't wait until tomorrow (although I guess it is technically tomorrow now).... I tried again and it worked fine this time. There were two things I did different:

 

1. Rebooted the server after installing the two updates for WSUS.

2. Looked in the right place for the log files... DOH!!!

 

I was previously looking in D:\Program Files\SMS_CCM\Logs rather than D:\Program Files\Microsoft Configuration Manager\Logs\ and thats the reason I couldn't see the WCM.log or wsyncmgr.log.

 

Out of curiosity do you also install SCCM to your D drive and not the OS drive?

 

Anyway... your reply was a massive help

 

Thanks again.

Edited March 30, 2013 by jaminben

[eejit]

That's great news. The reboot after WSUS is vital all right

 

Yeah, I generally work with VMs, so make a relatively small C: VHD of about 70GB and a D: drive of about 200GB for SQL, SCCM install, WSUS storage, MDT etc.

[jaminben]

That's great news. The reboot after WSUS is vital all right

 

Yeah, I generally work with VMs, so make a relatively small C: VHD of about 70GB and a D: drive of about 200GB for SQL, SCCM install, WSUS storage, MDT etc.

 

Ok, thanks.

[mullet_man]

Has anyone setup SCCM + WSUS on a 2016 server?

 

Am trying to set it up but am struggling

 

Getting

 

System.Security.SecurityException: Request for principal permission failed.~~ at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)~~ at Microsoft.SystemsManagementServer.WSUS.WSUSServer.ConnectToWSUSServer(String ServerName, Boolean UseSSL, Int32 PortNumber)~~The Zone of the assembly that failed was:~~MyComputer $$<06-26-2017 15:03:57.197-60>

Remote configuration failed on WSUS Server.~ $$<06-26-2017 15:03:57.220-60>

 

SCCM server has rights on the WSUS server?!

[StephenHardy]

You don't setup WSUS you just do it in SCCm and use ADRs - once I get back to my office I'll send some links on how to do it

[mullet_man]

You don't setup WSUS you just do it in SCCm and use ADRs - once I get back to my office I'll send some links on how to do it

 

Ah ok! But am using WSUS from another server?

[StephenHardy]

Try running through this:

 

https://4sysops.com/archives/unifying-sccm-and-wsus/

 

Worked for me on SCCM 2016, running on Server 2016 updating Server 2016. Word of warning Windows Defender for SCEP updates not EP

 

Thanks

 

Stephen

[mullet_man]

Thanks Stephen I'll check that out.

 

Ah ok I'll look out for that too.

 

Cheers

 

Stevo!