Prerequisites for software updates in System Center Configuration Manager

 

Aplica-se A: System Center Configuration Manager (current branch)

This topic lists the prerequisites for software updates in O System Center Configuration Manager. For each of these, the external dependencies and internal dependencies are listed in separate tables.Software Update Dependencies External to Configuration ManagerThe following table lists the external dependencies for software updates.RequirementMore informationInternet Information Services (IIS) on the site system servers in order to run the software update point, the management point, and the distribution pointSee Prerequisites for site system roles.Windows Server Update Services (WSUS)WSUS is necessary for software updates synchronization and for the software updates compliance assessment scan on clients. The WSUS server must be installed before you create the software update point site system role. The following versions of WSUS are supported for a software update point:WSUS 4 (role in Windows Server 2012 and Windows Server 2012 R2)WSUS 3.2 (role in Windows Server 2008 R2) <para> When you have multiple software update points at a site, ensure that they are all running the same version of WSUS.</para> <alert class="warning"> The Upgrades software updates classification is only supported beginning in WSUS 4.0. Before you synchronize this new classification and have the ability to evaluate Windows 10 computers in a Windows 10 servicing plan, it is critical that you install hotfix 3095113https://support.microsoft.com/kb/3095113 for WSUS on your software update points and site servers. This hotfix enables WSUS on a Windows Server 2012-based or a Windows Server 2012 R2-based server to sync and distribute feature upgrades for Windows 10. For more information, see Manage Windows as a service using System Center Configuration Manager.If you synchronize software updates with the Upgrades classification before you install hotfix 3095113https://support.microsoft.com/kb/3095113, see Recover from synchronizing the Upgrades category before you install KB 3095113.WSUS Administration ConsoleThe WSUS Administration Console is required on the Gestor de configuração site server when the software update point is on a remote site system server and WSUS is not already installed on the site server. The WSUS version on the site server must be the same as the WSUS version running on the software update points.Do not use the WSUS Administration Console to configure WSUS settings. Gestor de configuração connects to WSUS that is running on the software update point and configures the appropriate settings.Windows Update Agent (WUA)The WUA client is required on clients to enable them to connect to the WSUS server and retrieve the list of software updates that must be scanned for compliance. When you install Gestor de configuração, the latest version of the WUA is downloaded. Then, when the Gestor de configuração client is installed, the WUA is upgraded if necessary. However, if the installation fails, you must use a different method to upgrade the WUA.Software Update Dependencies Internal to Configuration ManagerThe following table lists the dependencies for software updates in Gestor de configuração.RequirementMore informationManagement pointManagement points transfer information between client computers and the Gestor de configuração site. They are required for software updates.Software update pointYou must install a software update point on the WSUS server to be able to deploy software updates in Gestor de configuração. For more information, see Configuring Software Updates in Configuration ManagerDistribution pointDistribution points are required to store the content for software updates.For more information about how to install distribution points and manage content, see Deploy and manage content management infrastructure.Client settings for software updatesBy default, software updates is enabled for clients. However there are other available settings that control how and when clients assess compliance for the software updates and control how the software updates are installed.For more information, see the following: The Client Settings for Software Updates section in the Configuring Software Updates in Configuration Manager topic.The Software Updates section in the About client settings in System Center Configuration Manager topic.Reporting services pointThe reporting services point site system role can display reports for software updates. This role is optional, but recommended. For more information about how to create a reporting services point, see Configuring Reporting in Configuration Manager .Recover from synchronizing the Upgrades category before you install KB 3095113You must install hotfix 3095113https://support.microsoft.com/kb/3095113 for WSUS on your software update points and site servers before you synchronize the Upgrades classification. If the hotfix is not installed when the Upgrades classification is enabled, WSUS will see the Windows 10 build 1511 feature upgrade even if it can’t properly download and deploy the associated packages. If you synchronize any upgrades without having first installed hotfix 3095113https://support.microsoft.com/kb/3095113, you will populate the WSUS database (SUSDB) with unusable data that must be cleared before upgrades can be properly deployed. Use the following procedure to recover from this issue.To recover from synchronizing the Upgrades classification before you install KB 3095113Delete software updates with the Upgrades classification. You can use a PowerShell script similar to the following sample script: $Server = Get-WSUSServer $Config = $Server.GetConfiguration() $Update10563 = “df4e45a3-946d-4467-b3fd-8621174bb666” $UpdateGUID = New-Object Guid($Update10563) $Server.DeleteUpdate($UpdateGUID)You must run the script on all software update points in your Gestor de configuração hierarchy before you go to the next step. To bulk delete software updates with the Upgrades classification, you can modify the PowerShell script to read multiple GUIDs from a txt file. Uncheck the Upgrades classification in the Software Update Point component propertieshttps://technet.microsoft.com/library/mt612804.aspx and then start a software updates synchronizationhttps://technet.microsoft.com/library/mt612804.aspx. Install hotfix 3095113https://support.microsoft.com/kb/3095113 for WSUS on your software update points and site servers. Select the Upgrades classification in the Software Update Point component propertieshttps://technet.microsoft.com/library/mt612804.aspx and then start a software updates synchronizationhttps://technet.microsoft.com/library/mt612804.aspx. Plan for software updates
Mostrar: