You’ve Got a Cloud- Familiar Tools to Manage IT Bob Hunt Sr. IT Pro Evangelist

System Center Virtual Machine Manager 2012 RC integration involving WSUS 3.0 SP2 System Center Updates Publisher 2011 (SCUP 2011) What’s new in SCUP 2011 SCUP 2011 Prerequisites SCUP 2011 Installation SCUP 2011 Review Summary Agenda

SCVMM 2012 and WSUS Integration System Center Virtual Machine Manager 2012 RC provides the capability to use a Windows Server Update Services (WSUS) server to manage updates for the following computers in your VMM environment: Virtual Machine Hosts Library servers VMM management server PXE servers The WSUS server

Installing WSUS on Windows Server 2008 Install WSUS 3.0 SP2 Console on the SCVMM server if the server does not have WSUS role installed On the WSUS Server, download and install the WSUS hotfix WSUS- KB x64 from Download and install.NET Framework 4.0 from = =17851

DEMO Overview of Windows Software Update Services (WSUS) within SCVMM 2012 RC Update Server

Resource Links Windows Server Update Services Windows Server Update Services Life Cycle and Road Map: Frequently Asked Questions Windows Server Update Services 3.0 SP2 Deployment Guide WSUS 3.0 SP2 System Requirements Design the WSUS 3.0 SP2 Deployment Install the WSUS 3.0 SP2 Server Configure the WSUS 3.0 SP2 Server Update and Configure the Automatic Updates Client Computer Troubleshoot WSUS 3.0 SP2 Server Setup Appendix A: Setup Return Codes Appendix B: Prerequisites Schema

What’s new in System Center Updates Publisher 2011 SCUP 2011 Prerequisites SCUP 2011 Installation SCUP 2011 Review System Center Updates Publisher 2011

Why System Center Updates Publisher? Import software updates from catalogs created by non-Microsoft organizations or created from within the administrator's organization Create applicability and deployment metadata for software updates Publish software updates to a configured updates server Export software update definitions to other Updates Publisher 2011 consoles Same experience as deploying Microsoft updates using System Center Configuration Manager Deploy EXE, MSI and MSP based updates

Prerequistes Supported Operating Systems: Windows Vista, Windows 7, Windows Server 2008, Windows Server 2008 R2 Install WSUS 3.0 SP2 Console, if the server does not have WSUS role installed Download and install the WSUS hotfix WSUS-KB x86 or WSUS- KB x64 from Download and install.NET Framework Download and install SCUP f7a-be c3a9b01&displaylang=en 4f7a-be c3a9b01&displaylang=en Load Report Reviewer 2008 Redistributable for reports within SCUP 2011

DEMO -System Center Updates Publisher 2011

What's New in Updates Publisher 2011 New User Interface which is similar to SCCM 2012 Ribbon bar Quick links Link to blog and screencasts Alerts from subscribed catalogues Wunderbar Publications to logically group updates

What's New in Updates Publisher 2011 Easy Partner Catalogue subscription Easy wizard to import catalogue From subscriptions or from disk Catalogue summary on console New Catalogue Options

What's New in Updates Publisher 2011 Update details section Edit updates Installable Roles: Check if a machine needs this update Installed Rules: Check if a machine already has this update Publishing information Logic based publishing option Improved Update Management Custom Rules

What's New in Updates Publisher 2011 Updates clean-up wizard Go to advance SCUP options Start: Software Update Cleanup Wizard

Configure Updates Publisher 2011 Configure Publishing and Configuration Manager Integration Click and select Options Select Update server local/remote Run Test Connection Create Signing Certificate for update server, and say OK Only create new certificate only if there is no existing Signing Certificate in WSUS Press OK to save changes

Configure Updates Publisher 2011 Configure Publishing and Configuration Manager Integration Select ConfigMgr Server and select local/remote SCCM server Run Test Connection Set values for Requested Client Count threshold: Package source size threshold (MB): Click OK to close window

Configure Updates Publisher 2011 Export WSUS Signing Certificate These steps are required to add WSUS signing certificate to Trusted Publishers and Trusted Root Certificate authorities, and export the certificate to be deployed to client computers 1.Go to Run and type MMC 2.Click Ctrl+M and click Add to add a snap-in to the console. Select Certificates and click Add. 3.Select Computer account and click Next. 4.Click Finish and Click Add and Close to return to the MMC with Certificate snap-in 5.On the Console Root, click on Certificates > WSUS > Certificates 6.Right Click on the WSUS publisher Self-signed certificate and select copy 7.Paste certificate under 1.Trusted Root Certification Authority > Certificates 2.Trusted Publishers > Certificates 8.Again right click on WSUS publisher Self-signed certificate and select All Tasks > export 1.Do Not export Private key 2.Select export format as : DER encoded binary X.509 (.CER)

Configure Updates Publisher 2011 Create the Group Policy 1.Go to Group Policy Management Console 2.Select Default Group Policy to edit or create a new group policy 3.Once you are in Group Policy Management Editor, Go to Computer Configuration > Policies >Administrative Templates > Windows Components > Windows Update 4.Select “Allow signed updates from an intranet Microsoft Update service location” 5.Select “Enable” and say OK

Configure Updates Publisher 2011 Deploy WSUS Self signed certificate to clients 1.Open SCCM Console and go to Computer Management > Software Distribution > Packages 2.Create a new package with following 3 files in the source folder 3.Create two new programs under the package with following command lines certutil.exe -addstore Root.cer certutil.exe -addstore TrustedPublisher.cer 1. is the name of the exported certificate from WSUS 2.Run the second program after the first one using “Run another program first:” option (see picture) 3.Suppress notifications in both programs and deploy using a mandatory advertisement

Steps for Installing Updates Publisher 2011 on Windows Server 2008 Install WSUS 3.0 SP2 Console, if the server does not have WSUS role installed Download and install the WSUS hotfix WSUS-KB x86 or WSUS- KB x64 from Download and install.NET Framework from Download Report Viewer 2008 Redistributable SP1 for reports within WSUS Download and install SCUP 2011 from 4f7a-be c3a9b01&displaylang=en 4f7a-be c3a9b01&displaylang=en Double click SystemCenterUpdatesPublisher.msi to start the installation Follow the simple wizard and if needed, change installation directory

Call to Action Download the evaluations System Center Updates Publisher Screencasts My screencasts go here.

Coverage of SCVMM 2012 RC – Update Management integration with WSUS 3.0 SP2 Download the evaluation on TechNet Coverage of System Center Updates Publisher 2011 Reviewed what’s new in SCUP 2011 SCUP 2011 Prerequisites SCUP 2011 Installation SCUP 2011 Configuration Summary