Friday 2 September 2016

Synchronizing Updates with Export and Import

When a software update point is not configured or cannot synchronize with its upstream server in the Configuration Manager 2012 hierarchy, the export and import functions of the WSUSUtil tool can be used to synchronize Software Updates metadata manually. The user who performs the export/import must be a member of the local Administrators group on the WSUS server, and the tool must be run locally on the WSUS server itself.

The files found in the WSUSContent folder (by default located in <WSUSInstallDrive>\WSUS\ WSUSContent) must also be copied from the upstream update server to the software update point so that locally stored updates and the license terms for the updates are available to the import server. This procedure can also be used for migrating the software update content from Configuration Manager 2007 to Configuration Manager 2012.

To export and import software updates from the export WSUS server to the import WSUS server, follow these steps:
1. Copy files from the export server to the import server:
     a. On the export server, go to the folder where software updates and the license terms for those software updates are stored. By default, this will be <WSUSInstallDrive>\WSUS\ WSUSContent.
     b. Copy all of these files to the same folder on the import server.

2. Export metadata from the database of the export server:
     a. At a command prompt on the export WSUS server, go to the folder that contains WSUSUtil.exe. By default, this will be located at %ProgramFiles%\Update Service\ Tools.
     b. Then enter the following:
                     WSUSUTIL.exe export packagename logfile 
The name of packagename doesn’t really matter, as long as it and the log file are unique in that folder. This command will export the Software Updates metadata into a file called packagename.cab.
     c. Move the export package that you just made to the folder that contains WSUSUtil.exe on the import WSUS server.

3. Import metadata to the database of the import server:
     a. At a command prompt on the WSUS server that you are importing the updates to, go to the folder that contains WSUSUtil.exe, which is %Program Files%\Update Services\ Tools.
     b. Enter
WSUSUTIL.exe import packagename logfilewith packagename being the name of the export file that you exported in step 2.

This will import all the metadata from the exporting server and create a log file that you can use to review the status.

Configuring Software Updates Settings and Synchronization

Software updates in Configuration Manager 2012 must be synchronized with Microsoft Update or an upstream WSUS server before information on those updates will be available to view in the Configuration Manager console. Synchronization starts at the highest level in the hierarchy that has a software update point and either has a configured schedule or is started manually using the Run Synchronization action.

When synchronization is started on a configured schedule, all changes to the Software Updates metadata since the last scheduled sync are inserted into the site database. This will include metadata for new software updates or metadata that has been modified or deleted. When a sync is started manually, only new software updates metadata since the last sync is inserted into the database. The manual sync process is faster since it is not pulling as much Software Updates metadata. A manual sync action is available only on parent sites.

To manually sync the software update point, do the following:

1. In the Configuration Manager console, choose the Software Library workspace ➢
Overview ➢ Software Updates ➢ All Software Updates.
2. Select the Home tab of the ribbon and click Synchronize Software Updates. Click Yes to initiate a sitewide synchronization of software updates.

The synchronization process might take longer than an hour to finish, depending on several factors, including whether a synchronization has been run before and what languages, products, and update classifications have been configured to be synchronized. You can monitor the synchronization process by looking at the log file for WSUS Synchronization Manager, wsyncmgr.log. This is located by default at %Program Files%/Microsoft Configuration Manager/Logs.

When the synchronization is complete, you will see a 6702 status message from SMS_WSUS_SYNC_MANAGER.
New in Configuration Manager 2012 is that you also can monitor the synchronization in the Configuration Manager console.

To monitor the synchronization in the hierarchy do the following:
1. In the Configuration Manager console, choose the Monitoring workspace ➢ Overview ➢
software update point Synchronization Status.
2. Look at the synchronization status, the link state, and the catalog versions. When the synchronization with Microsoft Update is complete (either from a schedule or started manually) at the highest site in the hierarchy, sync requests are sent to all child sites, and they in turn start synchronization with their configured upstream WSUS servers as soon as the request has finished processing.

The Software Updates metadata that is synced from Microsoft Update is based on the update classes, products, and languages that were selected when the software update point was first configured. A child site will synchronize whatever updates have been configured on its parent site.
Although all of the settings for update classes, products, and so on were configured at
the setup of the software update point, you can still reconfigure these options if needed. To
configure the update properties for software updates, follow these steps.
1. In the Configuration Manager console, choose the Administration workspace ➢
Overview ➢ Site Configuration ➢ Sites, and select the site that is the highest in the
hierarchy.
2. Choose Configure Site Components on the Settings section of the Home tab of the ribbon,
and click software update point.
3. To configure Update Classifications, click the Classifications tab, as shown in Figure 

4. To configure products that are being synced, click the Products tab, as shown in Figure

 5. To configure languages that are being synced, click the Languages tab, as shown in Figure .

 6. To reconfigure the supersedence settings, click the Supersedence Rules tab, as shown in Figure



To configure the software updates synchronization schedule, follow these steps:
1. In the Configuration Manager console choose the Administration workspace ➢ Overview ➢ Site Configuration ➢ Sites, and select the site that is the highest in the hierarchy.
2. Choose Configure Site Components on the Settings section of the Home tab of the ribbon, and click software update point.
3. To configure the synchronization schedule, click the Sync Schedule tab, as shown in Figure



 

4. To enable synchronization on a schedule, select Enable Synchronization On A Schedule, and set the schedule as you want it.
5. When you have finished, click OK to save the schedule.
Unless you change the Start value in the custom schedule, synchronization will be started as soon as possible and will repeat based on the schedule that you configured.
6. If you want alerts to be reported in the Alerts node of the Configuration Manager 2012 console, enable the Alert When Synchronization Fails On Any Site In The Hierarchy option.

How to Check the Installation of the Software Update Point

After the installation of the software update point(s) it is a good idea to check some log files to be sure that the software update point(s) are installed correctly.

1. To monitor the install of the software update point, open the SUPSetup.log in the 
<Configuration Manager Install Path>\Logs or %SMS_LOG_PATH% folder.When the install has finished, you will see the text “Installation Was Successful.”
 
2. Open the WCM.log in the same directory to verify that the connection to the WSUS server worked.
 
When the connection to the WSUS server is made and the WSUS components are checked, you will see

There are no unhealthy WSUS Server components on WSUS Server servername and 
Successfully checked database connection on WSUS server servername in the log file.

Setting Up the Software Update Point in a Stand-alone Primary Site