The active software update point in Microsoft System Center Configuration Manager 2007 is a required component of software updates and is installed as a site system role in the Configuration Manager console. The software update point site system role must be created on a server that has Windows Server Update Services (WSUS) 3.0 installed. The software update point interacts with WSUS services to configure update settings, request synchronization to the upstream update server, and synchronize the updates from the WSUS database to the site server database. Before software updates can be deployed to client computers, the active software update point must be installed, configured, and synchronized.

Note
Configuration Manager 2007 Service Pack 1 (SP1) requires WSUS 3.0 SP1.

When the site is in native mode, an active software update point can accept communication from both client computers on the intranet and Internet, the active software update point can accept communication from client computers on the intranet, and an additional active Internet-based software update point can accept communication from client computers on the Internet.

The following checklist for Configuration Manager 2007 software updates provides the steps necessary to plan for and configure the active software update point for a native mode site, and links to where you can locate more information about those steps.

Step                                                        More Information                                    

Review the software update point concepts.

About the Software Update Point

Learn about and plan for the software update point installation.

Planning for the Software Update Point Installation

Learn about and plan for the software update point settings.

Planning for the Software Update Point Settings

Determine what computer will be created as a site system server and be assigned the software update point site system role.

Determine the Software Update Point Infrastructure

If the acting software update point will be on a remote site system server, install the Windows Server Update Services (WSUS) 3.0 Administration Console on the site server computer.

How to Install the Windows Server Update Services 3.0 Administration Console

Install WSUS 3.0 on the computer that will be assigned the active software update point site system role.

How to Install Windows Server Update Services 3.0

Create the site system server with the software update point site system role, configure the server as the active software update point, and then configure the active software update point settings.

How to Create and Configure an Active Software Update Point

Verify that the active software update point is configured to use the correct ports. If you installed WSUS with a custom WSUS Web site, the custom WSUS Web site defaults to HTTP port 8530 and HTTPS (SSL) port 8531. If you used the existing Internet Information Services (IIS) Default Web site, the default ports are HTTP port 80 and HTTPS (SSL) 443.

How to Determine the Port Settings Used by WSUS

How to Create and Configure an Active Software Update Point

If an Internet-based software update point is needed, do the following:

 

  • Install WSUS 3.0 on the computer that will be assigned the active Internet-based software update point site system role.

How to Install Windows Server Update Services 3.0

  • Configure WSUS for Secure Sockets Layer (SSL) on the computer that will be assigned the active Internet-based software update point site system role.

How to Configure the WSUS Web Site to Use SSL

  • Create the site system server with the software update point site system role.

How to Add the Software Update Point Site Role to a Site System

  • Configure the site system server as the acting Internet-based software update point.

How to Create and Configure an Active Internet-Based Software Update Point

See Also