The software update point in Configuration Manager 2007 is a required component of software updates, and after it is installed, the software update point is displayed as a site system role in the Configuration Manager console. The software update point site system role must be created on a site system server that has Windows Server Update Services (WSUS) 3.0 installed.

When a Configuration Manager site server is in native mode, or when the active software update point is configured to use Secure Sockets Layer (SSL), you must configure five virtual roots to use a secured channel on the active software update point server. If an active Internet-based software update point server is in use, that Internet-based software update point must be configured in the same manner as the active software update point. The virtual roots are located on the Web site that the WSUS server uses, and they are modified by using the Internet Information Services (IIS) Manager. After you have configured the virtual roots, you must run the WSUSUtil tool to let the health monitoring component of WSUS know that it should use SSL.

When you create and configure an active software update point or active Internet-based software update point in Configuration Manager, you must specify the port settings that the WSUS 3.0 server uses.

When the Software Updates Client Agent is enabled in Configuration Manager, it sends a policy to the client computers that are assigned to the site. This policy requests that the software updates components be enabled. The Software Updates Client Agent components work together to perform compliance assessment scans, install software updates at their configured deadline or when they are manually initiated, and reevaluate whether previously installed software updates are still installed, and if not, install them again. The Software Updates Client Agent properties are site-wide client settings.

Concepts

Other Resources