Windows Server Update Services (WSUS)

Software updates requires WSUS for software updates synchronization and for the software update compliance assessment scan on clients. The WSUS server must be installed before you create the software update point site system role. The software update point handles synchronization requests to WSUS, inserting synchronized software updates metadata into the site server database and sending state messages to indicate the current status. Clients connect to the WSUS server when performing compliance assessment scans for software updates. The Windows Update Agent (WUA) on the client computer connects to the WSUS server to retrieve the relevant software updates metadata to perform the scan. WSUS is available for download on the Microsoft Download Center Web site.

WSUS Administration Console

The WSUS Administration Console is required on the Configuration Manager 2012 site server when the active software update point is on a remote site system server and WSUS is not already installed on the site server. The site server depends on the local WSUS installation to communicate with the WSUS server on the remote active software update point, allowing the site server to configure WSUS settings and synchronize software updates.

Windows Update Agent

The WUA client is required on clients to connect to the WSUS server and retrieve the list of software updates that need to be scanned for compliance. When running the Configuration Manager installation, the latest version of the WUA is downloaded, and then when the Configuration Manager client is installed the WUA is upgraded if necessary. When the installation fails, the WUA will need to be upgraded using a different method.

Site server communication to the active software update point

There could be configuration settings that must be addressed depending on the software update point infrastructure and Configuration Manager 2012 site settings.

Network Load Balancing (NLB)

Each software update point can support up to 100,000 client computers1 when it is installed on a remote site system server running WSUS 3.0 SP2 and less when it is co-located with the site server. When you expect that more client computers will connect to the active software update point, WSUS and the active software update point must be configured for NLB.

1 For details about software update point supported capacity, see

SRS Reporting Point

The SRS reporting point site system role must be installed before software updates reports can be displayed. For more information about creating a reporting point, see Configuring Reporting in Configuration Manager 2012.