xc3ss1v3 Posted July 17, 2014 Report post Posted July 17, 2014 I'm hoping this one is something simple (thinking it will be). I'm just getting started on using SCUP 2011 to handle our 3rd party software updates via ConfigMgr. So far, I've been able to install SCUP 2011 on my Primary Site Server, download an Adobe Reader 11 catalog, and publish it to WSUS (seems to be successful according to scup.log). Of course, things were going too smoothly for that catalog to just magically show up in ConfigMgr for me after running a synchronization. What I have a feeling I'm missing is that ConfigMgr doesn't know to go look for the Adobe Reader update and I cannot, for the life of me, figure out where to set that up. I also don't seem to find any documentation on the topic. Everything seems to be aimed at how to set up and configure SCUP for downloading and publishing catalog, but not how to actually get them into ConfigMgr. Am I missing something somewhere? Thanks in advance. *EDIT: I just found under Software Update Point on the Central Admin Site where I can select to synchronize updates from a local publisher. I have checked that and am running synchronization again. We'll see... Quote Share this post Link to post Share on other sites More sharing options...
Aggre Posted July 18, 2014 Report post Posted July 18, 2014 Have you marked that the update should be synced? Administration -> Site Configuration -> Sites -> Select your site -> Settings -> Choose 'Software Update Point' -> Products --Agg Quote Share this post Link to post Share on other sites More sharing options...
xc3ss1v3 Posted July 18, 2014 Report post Posted July 18, 2014 Have you marked that the update should be synced? Administration -> Site Configuration -> Sites -> Select your site -> Settings -> Choose 'Software Update Point' -> Products --Agg Yes, that is what I noted in my EDIT above. I've selected "Locally Published Packages" under All Products > Local Publisher. However, I do not see specific 3rd party vendors in my list like I do in some screenshots around the web. Not sure if that's a ConfigMgr versioning thing or what. Note that after selecting that option last night, I still am not seeing the Adobe Reader update in my list. Is there a way for me to check that the update is, in fact, published to WSUS other than the SCUP.log? Quote Share this post Link to post Share on other sites More sharing options...
wilbywilson Posted July 18, 2014 Report post Posted July 18, 2014 Did you re-sync All Software Updates after checking that box? It definitely sounds like one of your "categories" isn't checked. I did the same thing that you're currently doing a few months ago, and I can't recall with 100% accuracy, but I believe I had a box called "Adobe Systems" or "Adobe" that I had to check. Also, just so you know, I found the Adobe catalog to be sorely lacking. The detection rules said that every machine in my environment needed Flash (instead of just the machines that had pre-existing versions of Flash.) I've since moved to a third-party product called Shavlik Patch, that offers so much more. Check it out: http://www.shavlik.com/products/patch/#/overview/ Installation and configuration is pretty simple, and it's working well for us. Pricing is reasonable too. Quote Share this post Link to post Share on other sites More sharing options...
xc3ss1v3 Posted July 18, 2014 Report post Posted July 18, 2014 Did you re-sync All Software Updates after checking that box? It definitely sounds like one of your "categories" isn't checked. I did the same thing that you're currently doing a few months ago, and I can't recall with 100% accuracy, but I believe I had a box called "Adobe Systems" or "Adobe" that I had to check. Also, just so you know, I found the Adobe catalog to be sorely lacking. The detection rules said that every machine in my environment needed Flash (instead of just the machines that had pre-existing versions of Flash.) I've since moved to a third-party product called Shavlik Patch, that offers so much more. Check it out: http://www.shavlik.com/products/patch/#/overview/ Installation and configuration is pretty simple, and it's working well for us. Pricing is reasonable too. Thanks for that... will check it out. I did notice that I didn't have "updates" selected under Classifications in Software Update Point settings. I've done that and re-synced. While it seems that I've now synchronized a butt-load more updates, I still am not seeing the one published from SCUP. Also, will all of these new updates that just synced with the setting change be deployed with the already created ADR for monthly Microsoft Updates? If so, there's going to be a ton :/ Another thing... I still don't see extra groups under Products. Just "Local Publisher." Anyone know if that is a ConfigMgr version thing that I'm missing? Quote Share this post Link to post Share on other sites More sharing options...
xc3ss1v3 Posted July 18, 2014 Report post Posted July 18, 2014 So I found this little blip on another thread... The "Local Publisher" option, along with any specific Vendors and Products will appear in the Products listing once something has been published to the SUP and it has been synchronized back to the Site Server. I'm guessing that since the Adobe Product group is not showing up, something isn't right with SCUP publishing the catalog to WSUS? Quote Share this post Link to post Share on other sites More sharing options...
xc3ss1v3 Posted July 18, 2014 Report post Posted July 18, 2014 Just thought of another question... Sorry for bringing up yet another. In my hierarchy, we have a Central Admin Site and a Primary Site Server. The CAS has the WSUS role installed and configured to go out to Microsoft to retrieve updates. The PSS also has the WSUS role, but is configured to pull from CAS (not sure if that's needed or if redundant, as that is just how it was configured by my predecessor). We have installed SCUP on the PSS. Is that going to create an issue? Does it need to be installed at the top level site for updates to be seen by the SUP? Quote Share this post Link to post Share on other sites More sharing options...
wilbywilson Posted July 18, 2014 Report post Posted July 18, 2014 So I found this little blip on another thread... I'm guessing that since the Adobe Product group is not showing up, something isn't right with SCUP publishing the catalog to WSUS? Potentially there is something that's not configured right. When you installed SCUP, and did the "Test Connection", everything worked OK? Also, when you launch SCUP, I believe that you should logged in as the same user that installed it originally, and "Run as Administrator." It's a funny little program... I can't answer your questions about the CAS/PSS, simply because I don't know. Sorry. Quote Share this post Link to post Share on other sites More sharing options...
xc3ss1v3 Posted July 18, 2014 Report post Posted July 18, 2014 Update: So it looks like we had updates being published to what is basically the secondary WSUS server instead of the top-most WSUS server. After changing that, the option to choose Adobe products appeared in the Product list for Software Update Point settings. However now, it seems we are having some certificate issues in publishing the actual content to the CAS. Starting to wonder if it wouldn't just be easier to install SCUP on the CAS instead of on the PSS. Quote Share this post Link to post Share on other sites More sharing options...
xc3ss1v3 Posted July 18, 2014 Report post Posted July 18, 2014 In regard to certificates in this situation, I'm a bit confused. Currently, I have WSUS self-signed certificates in both the CAS and PSS servers in the Trusted Root Certificate Authority, Trusted Publishers, and WSUS. Do I need to have the opposite server's certificate stored in each store as well? In other words, have the CAS's WSUS self-signed cert stored in the PSS's Trusted Root Certificate Authority? Sorry if this is an ignorant question. Just have never really messed with this. Quote Share this post Link to post Share on other sites More sharing options...
