Install and Configure System Center Updates Publisher Preview

This post is a step by step guide to install and configure System Center updates publisher. Also referred as SCUP or updates publisher. System Center Updates Publisher (SCUP) is a tool that enables us to import third party software update catalogues. It also allows to create and modify software update definitions. You can then export update definitions to catalogs and publish software updates information to a configured WSUS server. Once you export the updates, you can synchronize these custom updates with Configuration Manager. The updates are then ready for deployment to computers and servers in the organization.

So what is this System Center Updates Publisher Preview tool ?. SCUP preview tool was announced in June 2017. You can consider SCUP as a third party patching solution for Configuration Manager. The SCUP preview adds support for modern OS such as Windows 10 and Windows Server 2016. The look and functionality is almost similar to SCUP 2011. Therefore if you have worked on SCUP 2011, you will not see much difference while working with SCUP preview.

To download SCUP preview click here. Click Download button to download UpdatesPublisher.msi. You will notice that this is a SCUP Preview 1 version 6.0.191.0. Copy it to the server on which you intend to install SCUP preview. Before that check the prerequisites for updates publisher.

Install and Configure System Center Updates Publisher Preview

The steps to install System Center Updates Publisher are very simple. Configuring SCUP preview is something that we will go through in detail. We will be covering both installation and configuration in the same post. The below steps are performed on my primary site server running SCCM 1802 tech preview. Run UpdatesPublisher.msi and click Next.

Install and Configure System Center Updates Publisher PreviewThat’s the default installation location. Click Next.

Install and Configure System Center Updates Publisher PreviewClick Install.

Install and Configure System Center Updates Publisher PreviewThe installation steps are simple. Click Finish to close the setup wizard.

Install and Configure System Center Updates Publisher PreviewYou should find Updates Publisher (PREVIEW) in recently installed applications. Launch Updates Publisher tool.

Install and Configure System Center Updates Publisher PreviewClick OK to accept license terms. This appears only once when you launch tool for first time.

Install and Configure System Center Updates Publisher Preview

Configure System Center Updates Publisher Preview

We will now look at steps to configure system center updates publisher preview. There are many options and we will go through each one of them. Click on drop down at top left and click Options.

The first option on left pane is Update Server. Check the box to enable publishing to an update server. You have to configure update server to use for publishing. You see two options here and they are self explanatory.

  • Connect to a local update server
  • Connect to a remote update server.

In my case SCCM and WSUS are installed and running on same server. So I have selected the first option. Now click Test Connection button.

Notice that test connection succeeded. However it says no signing certificate was detected for update server. Without registering signing certificate, you cannot publish content to update server.

Create Signing Certificate for SCUP

Let’s create a signing certificate by clicking Create button. You will notice that once you click Create button, there is a certificate created. In addition this is a self signed certificate and we need this cert to be imported into cert stores.

Install and Configure System Center Updates Publisher PreviewLet’s look at the certificate location. Launch mmc and load certificates snap-in. Under certificates (Local Computer), expand WSUS at bottom and under certificates you will find WSUS Publishers Self-Signed certificate. Double click certificate to see more details.

Install and Configure System Center Updates Publisher Preview

Exporting Self Signed Certificate for SCUP

This self signed certificate must be imported to Trusted Publishers store and Trusted Root Certification Authorities store. Let’s export the certificate first. Right click certificate and click All Tasks > Export.

Install and Configure System Center Updates Publisher PreviewIf you are familiar with certificate export wizard, you can proceed quickly here. Click Next.

Install and Configure System Center Updates Publisher Preview

There is no option to export private key, click Next.

Install and Configure System Center Updates Publisher Preview

Select DER encoded binary X.509 format and click Next.

Install and Configure System Center Updates Publisher Preview

Click Browse and save the certificate with some name. Click Next.

Install and Configure System Center Updates Publisher Preview

Hit Finish to close the export wizard.

Install and Configure System Center Updates Publisher PreviewWe will now import self signed Certificate to Trusted Root Certification Authorities. Expand Trusted Root Certification Authorities. Right click Certificates > All Tasks > Import.

Install and Configure System Center Updates Publisher PreviewOn Certificate Import Wizard page, click Next.

Install and Configure System Center Updates Publisher PreviewClick Browse and select the cert to import. Click Next.

Install and Configure System Center Updates Publisher PreviewThe certificate is stored in Trusted Root Certification Authorities store. Click Next.

Install and Configure System Center Updates Publisher PreviewThe certificate has been imported, click Finish.

Install and Configure System Center Updates Publisher Preview

Using the same steps listed above, import certificate to Trusted Publishers store. Expand Trusted Publishers, right click Certificates > All Tasks > Import.

Install and Configure System Center Updates Publisher Preview

Select the certificate and click Next.

Install and Configure System Center Updates Publisher PreviewTo confirm check if the cert is now visible in both stores. If Yes, proceed to next step.

Install and Configure System Center Updates Publisher PreviewInstall and Configure System Center Updates Publisher PreviewWhen you now click Test Connection, it shows the connection test was successful. It also tells you to add signing certificate to both Trusted Publishers and Trusted Root Certification Authorities store. This is what we did in the above steps so let’s proceed with next steps.

Install and Configure System Center Updates Publisher PreviewIntegrating SCUP and Configuration Manager

On the left pane click ConfigMgr Server. Check the box “Enable Configuration Manager integration. Again there are two options

  • Connect to a local Configuration Manager server.
  • Connect to a remote Configuration Manager server.

Click Test Connection. Now see you see a box which confirms whether test was successful or not. Click OK.

Install and Configure System Center Updates Publisher PreviewUnder Proxy Settings, you can specify proxy server details. If you aren’t using any, leave it as it is.

Install and Configure System Center Updates Publisher PreviewIn this section you will see some certificates as you work with updates. Catalogs or update installation files signed with certificates below will be automatically accepted. For now you won’t see anything here, probably you might later see more certs in this space.

Install and Configure System Center Updates Publisher PreviewIn the Advanced menu, it is now possible to change the database location directly. Another good feature which was not possible in SCUP 2011.

Install and Configure System Center Updates Publisher Preview

Furthermore under Updates there are two options.

  • Automatically check for available updates at startup.
  • Include preview builds when checking for updates.

Install and Configure System Center Updates Publisher PreviewLogging in SCUP provides options to configure max log size. Updates Publisher logs basic information about Updates Publisher to <path>\Windows\Temp\UpdatesPublisher.log. It’s more of allowing detailed logging. Click OK if you have completed configuring all the options.

Install and Configure System Center Updates Publisher Preview

7 COMMENTS

  1. One note that I could offer, is to not forget to enable the products in your software update point after you’ve published your updates. I had a moment of panic after I set everything up and couldn’t figure out why the new updates weren’t showing up in sccm.

  2. Great post, and timely too!

    You know, I am attempting this with Current Branch, but it will not accept any Code Signing certificate. I tried creating one andrequesting one from AD services. The SCUP wizard does not see the .cer file in the browse and the “OK” button continues to be disabled.

    Have you any advice for this situation?

      • I do and I have created certificates this way. However, when I export and then browse to the file’s location, it does not appear in the browse window. As I type the name in, the file appears in the autocomplete/dropdown. When selected, it does the “OK” button is never enabled. I just can’t figure it out. The only difference I see is that I am running Current Branch 1710.

      • I should note that I am running WSUS on a separate server.

        If I export to .pfx, Browse can see the certificate, but it still does not work. It also does not work with .p7b.

        I also created a self signed certificate on the WSUS server, both through the Domain CA and a self-signed using powershell. None of these certificates satisfy the installer.

        I’m baffled.

      • Just an update. The configuration never worked.

        I updated the CA to 2012R2 from 2008R2, which gives more options for certificates.

        There was no combination of certificates, regardless of the application policy, that the SCUP interface would accept and allow me to proceed. I uninstalled.

        Thanks for your article, though. You do great work.

LEAVE A REPLY

Please enter your comment!
Please enter your name here