Install New ConfigMgr Software Update Point Role | SUP | SCCM

Let’s go through the Install New ConfigMgr Software Update Point Role Guide. In this blog, I have detailed steps to configure the First (Upstream) Software update Role (SUP) role installation for Configuration Manager.

You have to Install WSUS for ConfigMgr Software Update Point Role. This guide is to set up a Remote SUP role for SCCM.

Related Post SCCM WSUS Cleanup – Fix SCCM Scan Timeout Errors

SCCM SUP Prerequisites

You need to confirm the operating system support for SCCM Software Update Point installation from here. The following are some of the other prerequisites of SCCM SUP.

Patch My PC
  • Windows Server roles and features
    • .NET Framework 3.5
    • IIS configuration
      • Application Development:
        • ISAPI Extensions
      • Security:
        • Windows Authentication
      • IIS 6 Management Compatibility:
      • IIS 6 Metabase Compatibility
      • IIS 6 WMI Compatibility
  • .NET Framework
    • .NET Framework.NET Framework version 4.5 or later
    • .NET Framework 4.8 (ConfigMgr 1906 or later)
  • SQL Server Native Client

NOTE! – If you are installing WSUS and SUP on a remote server, you need to install WSUS Console-related components in your PRIMARY Server. Otherwise, your SUP installation won’t work.

Add Site Server Account

Ensure your site server has administrative privileges on the remote Software Update Point server before starting the activity.

  • Add Site Server Computer account to SUP (Software Update Point) Server’s local administrator’s Group.

Upstream SUP Role Installation

The following steps help learn how to install the Upstream SUP for SCCM. The steps below will instruct you to install the Software Update Role (SUP).

Add Site Systems Roles

Launch the Configuration Manager Console, Select the Administration tab, Expand Overview -> expand Site Configuration, and Select Servers & Site system Roles. Select the < Server>; Right-click and select Add Site Systems Roles in the right-hand panel.

Add Site System Server - New ConfigMgr Software Update Role
Add Site System Server – Install New ConfigMgr Software Update Point Role 1

Select a Server to Use as a Site System

In the Add Site System Roles Wizard window, click Next in General Tab.

Select a Server to use as a site system -  guide is to setup Remote SUP role for SCCM
Select a Server to use as a site system – Install New ConfigMgr Software Update Point Role. 2

Specify Internet Proxy Server

  • In Add Site System Roles Wizard window,
  • In Proxy Tab,

Note: Mention proxy information and account information to connect to the Internet to download the metadata from the Internet

  • Click Next
Specify Internet Proxy server for New Remote SUP Setup Installation Process
Specify Internet Proxy server for New Remote SUP Setup Installation Process – Install New ConfigMgr Software Update Point Role 3

Specify Roles for this Server

In Add Site System Roles Wizard window, In the System Role Selection Tab, Select Software Update point role and Click Next.

Specify roles this new remote site system server - Software Update Role
Specify roles for this new remote site system server – Install New ConfigMgr Software Update Point Role. 4

Specify Software Update Point Settings

In Add Site System Roles Wizard window, In the Software Update Point Tab, Select the option WSUS is configured to use ports 8530 and 8531 for client communication (default settings for WSUS on Windows Server 2020).

Click Next.

Specify software update point settings - Remote SUP installation guide
Specify software update point settings – Install New ConfigMgr Software Update Point Role 5

Specify Proxy & Account Settings for Software Update Point

In the Add Site System Roles Wizard window, click Next in the Proxy and Account Settings Tab.

Specify proxy and account settings for software update point
Specify proxy and account settings for software update point 6

Specify synchronization source settings

In Add Site System Roles Wizard window, In the Synchronization source Tab, Select the option Synchronize from Microsoft Update, Click Next.

Specify Synchronization source settings - New ConfigMgr Software Update Role
Specify Synchronization source settings – New ConfigMgr Software Update Role 7

Synchronization Settings

In the Add Site System Roles Wizard window, click Next in the Synchronization Schedule Tab.

NOTE! : Enable the Synchronization on a schedule based on the requirement

Synchronization Schedule for remote SUP role installation
Synchronization Schedule for remote SUP role installation 8

Select Behavior for Software Updates are Superseded

In the Add Site System Roles Wizard window, click Next in the Superintendence Rules Tab.

Select Behavior for software updates that are superseded for SUP
Select Behavior for software updates that are superseded 9

Configure WSUS Maintenance Behavior

In the Add Site System Roles Wizard window, click Next in the WSUS Maintenance Tab.

Note: From SCCM Current branch 1906, enabling the WSUS maintenance options is part of SUP role configuration at the top-level site. For more information https://support.microsoft.com/en-us/help/4490644/complete-guide-to-microsoft-wsus-and-configuration-manager-sup-maint

Configure WSUS Maintenance Behavior - New ConfigMgr Software Update Role
Configure WSUS Maintenance Behavior – New ConfigMgr Software Update Role 10

Configure Maximum Run Time

In the Add Site System Roles Wizard window, click Next in the Maximum Run Time Tab.

Note: Change the update installation maximum amount of time-based on the environment.

Configure Maximum run time for SUP role
Configure Maximum run time 11

Specify Configuration for Software Update Content

In Add Site System Roles Wizard window, In the Update Files Tab, Select the option Download full files for all approved updates, Click Next.

Specify Configuration for Software Update Content - Download full files for a all approved updates
Specify Configuration for Software Update Content – Download full files for all approved updates 12

Select the Software update classifications that you want to Synchronize

In Add Site System Roles Wizard window, In the Classifications Tab, Select the Software update classifications based on the environment.

Click Next.

Select the Software update classification that you want to synchronize - New ConfigMgr Software Update Role
Select the Software update classification that you want to synchronize – New ConfigMgr Software Update Role 13

Select the Products that You Want to Synchronize

NOTE! – Do Not Setup SUP With Default WSUS Product Selection ConfigMgr SCCM. More details https://howtomanagedevices.com/sccm/1625/default-wsus-product-selection/

  • In Add Site System Roles Wizard window,
  • In the Products Tab,
  • Select the Products based on the environment
  • Click Next

A new SUP product filter option is available in the SCCM 2203 version or later.

Select the products that you want to synchronize - New SCCM Remote SUP Installation Options
Select the products that you want to synchronize – New SCCM Remote SUP Installation Options 14

Specify the Language Settings that you want to Synchronize

In the Add Site System Roles Wizard window, Select the Languages based on the environment in the Languages Tab.

Click Next

Specify the Language settings that you want to synchronize - New ConfigMgr Software Update Role
Specify the language settings that you want to synchronize – New ConfigMgr Software Update Role 15

Confirm the Settings

In the Add Site System Roles Wizard window, click Next in the Summary Tab.

SUP Role Setup Confirm the Settings
SUP Role Setup Confirm the Settings 16

Progress

In the Add Site System Roles Wizard window, Role installation initiation is in progress in the Process Tab.

Work in progress - SUP -- New ConfigMgr Software Update Role
Work in progress – SUP – New ConfigMgr Software Update Role 17

Summary

In the Add Site System Roles Wizard window, click Close in the Completion Tab.

SCCM SUP Installation - The Add Site System Roles Wizard completed successfully
SCCM SUP Installation – The Add Site System Roles Wizard was completed successfully 18

Check the installation Status using Log File.

The below log information will provide complete setup information. Logfile folder Location: <Drive>\Program Files\Microsoft Configuration Manager\Logs.

SUPSetup.log: The log represents the installation of the Software Update role

SUPSetup.log  - SUP Installation Guide
SUPSetup.log – SUP Installation Guide 19

Logfile folder Location: <Drive>\Program Files\Microsoft Configuration Manager\Logs

WCM.log: The log represents the  site server that connects to the WSUS server

WCM.log - Remote SUP Installation Guide - New ConfigMgr Software Update Role
WCM.log – Remote SUP Installation Guide – New ConfigMgr Software Update Role 20

Logfile folder Location: <Drive>\Program Files\Microsoft Configuration Manager\Logs

WSUSCtrl.log: The log represents the  site server configuration, database connectivity, and health of the WSUS server of the site

WSUSCtrl.log - Log file details - New ConfigMgr Software Update Role
WSUSCtrl.log – Log file details – New ConfigMgr Software Update Role 21

Resources

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.