System Center Updates Publisher 2011 Support Statement Update

System Center Updates Publisher 2011 Support Statement Update

  • Comments 10
  • Likes

System Center Updates Publisher 2011 and Windows Server 2012 R2

System Center Updates Publisher 2011 (SCUP) is supported for use on computers with Windows Server 2012 R2 with the following known limitations:

1. Windows Server 2012 R2 includes Windows Server Update Services (WSUS) 4.1. WSUS 4.1 cannot communicate with WSUS 3.0 and WSUS 4.0.  If you install System Center Updates Publisher 2011 on a machine with pre-WSUS 4.1 admin console and try to publish to Windows Server 2012 R2 based WSUS Server with WSUS 4.1, you’ll get a WSUS version mismatch error in the SCUP log.

This issue doesn’t occur when System Center Updates Publisher 2011 is installed on Windows 8.1 for use with a Windows Server 2012 R2 based WSUS server.  To install System Center Updates Publisher 2011 on a Windows 8.1 system the Remote Server Administration Tools for Windows 8.1 (RSAT) http://www.microsoft.com/en-us/download/details.aspx?id=39296 is required.  Installation of RSAT 8.1 includes the WSUS 4.1 version of the WSUS admin console binary for Windows 8.1 and allows applications like System Center Updates Publisher 2011 to connect to a Windows Server 2012 R2 based WSUS Server.

2. To allow local administrators to publish updates from System Center Updates Publisher 2011 to Windows Server 2012 R2, you still need the same workaround for Windows Server 2012 as described here: http://technet.microsoft.com/en-us/library/hh134747.aspx#PublishToServer2012

3. The updated version of WSUS for Windows Server 2012 R2 no longer issues self-signed certificates as described here: http://blogs.technet.com/b/wsus/archive/2013/08/15/wsus-no-longer-issues-self-signed-certificates.aspx

When using System Center Updates Publisher 2011 this change to WSUS affects the “Create” button for the Signing Certificate group in the Update Server configuration settings (see picture).

 

By default because the updated version of WSUS no longer issues self-signed certificates this button will not work.  The recommended way to work around this is to use a Certificate Authority to generate the signing certificate. You can refer to this blog for a step-by-step guidance to create a signing certificate with Windows Certificate Authority:  http://blogs.technet.com/b/jasonlewis/archive/2011/07/12/system-center-updates-publisher-signing-certificate-requirements-amp-step-by-step-guide.aspx.  In addition to this recommended approach there is a way to configure the new version of WSUS to issue self-signed certificates described in the update to the WSUS Product Team blog entry referenced above. Once this is configured, the “Create” button should work as before. However as mentioned the issue of self-signed certificates by WSUS remains a deprecated feature and may be removed in the future.

 

System Center Updates Publisher 2011 and System Center 2012 R2 Configuration Manager

System Center Updates Publisher 2011 fully supports System Center 2012 R2 Configuration Manager.


--Minfang Lv

This posting is provided "AS IS" with no warranties and confers no rights.

 

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment
  • Thanks for the information. When will you fix this?

    Kind regards.

    Rogier

  • The "create" button worked for me. I had no issues at all.

  • Will above link for creating the pki cert works for Server 2012 R2 CA as well ?

  • thank you

  • Thank you this was helpful. I am using SCUP 2011 and Server 2012 R2 and SCCM 2012 R2. I do not have a Cert authority in my test/dev environment so I used the registry workaround and it worked. I will try to use the CA option in prod. HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup\
    Create DWORD value: EnableSelfSignedCertificates = 1