How to configure SCCM Software Update point in SSL

Jonathan LefebvreSCCM2 Comments

While the requirements of running SCCM/MEMCM in full SSL may be less required theses days with the Cloud Management Gateway being so effective with remote computers management, running the WSUS – Software Update point in SSL is likely to show up as a requirement whenever doing a security audit of your environment. In this post, we will detail the required steps, from the certificate template creation to the client validation on enabling SSL for WSUS and the SCCM Software Update Point. Requirements Any SCCM version Communication on port 8531 must be open on your Firewall Certificate template Creation The first step to enable SSL communication is to create a server certificate for your server. On the server that is running the Certification Authority, open the Certification Authority console (certsrv.mmc), right-click Certificate Templates and select Manage The Certificate Templates management console opens Right-click the Web Server template and then select Duplicate … Read More

How to use SCCM to add On-Demand Hotfix in WSUS

Benoit LecoursSCCM11 Comments

For this post, we will be looking into how to use SCCM to add Microsoft Update Catalog into WSUS Server. Have you ever ran into a software update that wasn’t available in WSUS, but lo and behold, a quick internet search and you are able to manually download it via the Microsoft Update Catalog? I have. Way too often for my own liking. I published a post last week entitled How to add Latest Windows 7 Convenience Update in a SCCM Image. One reader, Dave, had a very good proposition that inspired the idea of doing this post and show you an easy way to add such updates in your WSUS database. The whole process is quite easy and pretty straightforward. Importing the update in WSUS So, for my last article, I was using KB3125574. In the spirit of continuity, let’s keep the ball rolling with that update. I will inject … Read More

How to fix SCCM HTTP Error 503 – The service is unavailable

Benoit LecoursSCCM11 Comments

Friday morning, the sun is shining, coffee is flowing… You monitor your SCCM site and find out that your WSUS Synchronization is failing when it was working perfectly yesterday. The first error that you encounter is SCCM HTTP Error 503 The service is unavailable in a couple of places: In Wsyncmgr.log:  Sync failed: The request failed with HTTP status 503: Service Unavailable. Source: Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer In Component Status : Monitor / System Status / Component Status SMS_WSUS_SYNC_Manager is in a warning state: WSUS Synchronization failed. Message: The request failed with HTTP status 503: Service Unavailable. Source:Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer If you try to access the URL for the WSUS Administration website (ex: http://SCCM2012:8530) it fails with the error: HTTP Error 503. The service is unavailable What cause SCCM HTTP Error 503 ? Don’t panic, this issues can usually be fixed easily…but not that quickly. There are two main causes of this error: The WsusPool Application Pool … Read More