Install New ConfigMgr Software Update Role Setup Guide|SUP|SCCM

0
New ConfigMgr Software Update Role Setup

Let’s go through Install New ConfigMgr Software Update Role Setup Guide. In this blog, I have detailed steps to configure the First (Upstream) Software update Role (SUP) role installation for Configuration Manager. You have to Install WSUS for ConfigMgr Software Update Point Role. This guide is to setup Remote SUP role for SCCM.

Related Post SCCM WSUS Cleanup – Fix SCCM Scan Timeout Errors

SUP Prerequisites

You need to confirm the operating system support for SCCM Software Update Point installation from here. The following are some of the other prerequisites of SCCM SUP.

  • Windows Server roles and features
    • .NET Framework 3.5
    • IIS configuration
      • Application Development:
        • ISAPI Extensions
      • Security:
        • Windows Authentication
      • IIS 6 Management Compatibility:
      • IIS 6 Metabase Compatibility
      • IIS 6 WMI Compatibility
  • .NET Framework
    • .NET Framework.NET Framework version 4.5 or later
    • .NET Framework 4.8 (ConfigMgr 1906 or later)
  • SQL Server Native Client

More details of Software Update Point (SUP) role here.

NOTE! – If you are installing WSUS and SUP on a remote server, then you need to install WSUS Console related components in your PRIMARY server. Otherwise, your SUP installation won’t work.

Add Site Server Account

Make sure the your site server has administrative privileges on remote Software Update Point server before start of the activity.

  • Add Site Server Computer account to SUP (Software Update Point) server’s local administrators Group
Altaro Office 365 Backup
Advertisement Altaro Office 365 Backup

Upstream SUP Role Installation

The following steps help to learn How to Install the Upstream SUP for SCCM. The below step by step will instruct to install Software Update Role (SUP).

Add Site Systems Roles

  • Launch the Configuration Manager Console,
  • Select the Administration tab,
  • Expand Overview -> expand Site Configuration
  • Select Servers & Site system Roles
  • In the right-hand panel, select the <Server>
  • Right-click select Add Site Systems Roles
Add Site System Server - New ConfigMgr Software Update Role
Add Site System Server – New ConfigMgr Software Update Role

Select a Server to Use as a Site System

  • In Add Site System Roles Wizard window,
  • In General Tab,
  • Click Next
Select a Server to use as a site system -  guide is to setup Remote SUP role for SCCM
Select a Server to use as a site system – guide is to setup Remote SUP role for SCCM

Specify Internet Proxy Server

  • In Add Site System Roles Wizard window,
  • In Proxy Tab,

Note: Mention proxy information and account information to connect to the Internet to download the metadata from the Internet

  • Click Next
Specify Internet Proxy server for New Remote SUP Setup Installation Process
Specify Internet Proxy server for New Remote SUP Setup Installation Process

Specify Roles for this Server

  • In Add Site System Roles Wizard window,
  • In the System Role Selection Tab,
  • Select Software Update point role
  • Click Next
Specify roles this new remote site system server - Software Update Role
Specify roles this new remote site system server – Software Update Role

Specify Software Update Point Settings

  • In Add Site System Roles Wizard window,
  • In the Software Update Point Tab,
  • Select the option WSUS is configured to use ports 8530 and 8531 for client communication (default settings for WSUS on Windows Server 2020)
  • Click Next
Specify software update point settings - Remote SUP installation guide
Specify software update point settings – Remote SUP installation guide

Specify Proxy & Account Settings for Software Update Point

  • In Add Site System Roles Wizard window,
  • In the Proxy and Account Settings Tab,
  • Click Next
Specify proxy and account settings for software update point
Specify proxy and account settings for software update point

Specify synchronization source settings

  • In Add Site System Roles Wizard window,
  • In the Synchronization source Tab,
  • Select the option Synchronize from Microsoft Update
  • Click Next
Specify Synchronization source settings - New ConfigMgr Software Update Role
Specify Synchronization source settings – New ConfigMgr Software Update Role

Synchronization Settings

  • In Add Site System Roles Wizard window,
  • In the Synchronization Schedule Tab,
  • Click Next

NOTE! : Enable the Synchronization on a schedule based on the requirement

Synchronization Schedule for remote SUP role installation
Synchronization Schedule for remote SUP role installation

Select Behavior for Software Updates are Superseded

  • In Add Site System Roles Wizard window,
  • In the Superintendence Rules Tab,
  • Click Next
Select Behavior for software updates that are superseded for SUP
Select Behavior for software updates that are superseded

Configure WSUS Maintenance Behavior

  • In Add Site System Roles Wizard window,
  • In the WSUS Maintenance Tab,
  • Click Next

Note: From SCCM Current branch 1906, enabling the WSUS maintenance options is part of SUP role configuration at the top-level site, for more information https://support.microsoft.com/en-us/help/4490644/complete-guide-to-microsoft-wsus-and-configuration-manager-sup-maint

Configure WSUS Maintenance Behavior - New ConfigMgr Software Update Role
Configure WSUS Maintenance Behavior – New ConfigMgr Software Update Role

Configure Maximum Run Time

  • In Add Site System Roles Wizard window,
  • In the Maximum Run Time Tab,
  • Click Next

Note: Change the update installation maximum amount of time-based on the environment.

Configure Maximum run time for SUP role
Configure Maximum run time

Specify Configuration for Software Update Content

  • In Add Site System Roles Wizard window,
  • In the Update Files Tab,
  • Select the option Download full files for all approved updates
  • Click Next
Specify Configuration for Software Update Content - Download full files for a all approved updates
Specify Configuration for Software Update Content – Download full files for a all approved updates

Select the Software update classifications that you want to Synchronize

  • In Add Site System Roles Wizard window,
  • In the Classifications Tab,
  • Select the Software update classifications based on the environment
  • Click Next
Select the Software update classification that you want to synchronize - New ConfigMgr Software Update Role
Select the Software update classification that you want to synchronize – New ConfigMgr Software Update Role

Select the Products that You Want to Synchronize

NOTE! – Do Not Setup SUP With Default WSUS Product Selection ConfigMgr SCCM. More details https://howtomanagedevices.com/sccm/1625/default-wsus-product-selection/

  • In Add Site System Roles Wizard window,
  • In the Products Tab,
  • Select the Products based on the environment
  • Click Next
Select the products that you want to synchronize - New SCCM Remote SUP Installation Options
Select the products that you want to synchronize – New SCCM Remote SUP Installation Options

Specify the Language Settings that you want to Synchronize

  • In Add Site System Roles Wizard window,
  • In the Languages Tab,
  • Select the Languages based on the environment
  • Click Next
Specify the Language settings that you want to synchronize - New ConfigMgr Software Update Role
Specify the Language settings that you want to synchronize – New ConfigMgr Software Update Role

Confirm the Settings

  • In Add Site System Roles Wizard window,
  • In the Summary Tab,
  • Click Next
SUP Role Setup Confirm the Settings
SUP Role Setup Confirm the Settings

Progress

  • In Add Site System Roles Wizard window,
  • In the Process Tab,
  • Role installation initiation is in progress
Work in progress - SUP -- New ConfigMgr Software Update Role
Work in progress – SUP – New ConfigMgr Software Update Role

Summary

  • In Add Site System Roles Wizard window,
  • In the Completion Tab,
  • Click Close
SCCM SUP Installation - The Add Site System Roles Wizard completed successfully
SCCM SUP Installation – The Add Site System Roles Wizard completed successfully

Check the installation Status using Log File

  • The below logs information will provide complete setup information
  • Logfile folder Location: <Drive>\Program Files\Microsoft Configuration Manager\Logs
  • SUPSetup.log: The log represents the installation of the Software Update role
SUPSetup.log  - SUP Installation Guide
SUPSetup.log – SUP Installation Guide
  • Logfile folder Location: <Drive>\Program Files\Microsoft Configuration Manager\Logs
  • WCM.log: The log represents the  site server that connects to the WSUS server
WCM.log - Remote SUP Installation Guide - New ConfigMgr Software Update Role
WCM.log – Remote SUP Installation Guide – New ConfigMgr Software Update Role
  • Logfile folder Location: <Drive>\Program Files\Microsoft Configuration Manager\Logs
  • WSUSCtrl.log: The log represents the  site server configuration, database connectivity and health of WSUS server of the site
WSUSCtrl.log - Log file details - New ConfigMgr Software Update Role
WSUSCtrl.log – Log file details – New ConfigMgr Software Update Role

Resources

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.