The software update point in Microsoft System Center Configuration Manager 2007 is a required component of software updates on primary sites, is an optional component of software updates on secondary sites, and is installed as a site system role in the Configuration Manager console. The software update point site system role must be created on a server that has Windows Server Update Services (WSUS) 3.0 installed. The software update point interacts with the WSUS services to configure update settings, to request synchronization to the upstream update source, and on the central site, to synchronize software updates from the WSUS database to the site server database.

Note
Configuration Manager 2007 Service Pack 1 (SP1) requires WSUS 3.0 SP1 or WSUS 3.0 Service Pack 2 (SP2). WSUS 3.0 SP2 is required to support Configuration Manager 2007 SP2 software update management for the Windows 7 and Windows Server 2008 R2 operating systems.

There can be multiple site system servers with the software update point site system role, but only one site system server can be configured as the active software update point. When the site is in native mode, the active software update point can be configured to accept communication from all client computers. Alternatively, an active Internet-based software update point can be assigned to a remote site system server that accepts communication from only Internet-based client computers and the active software update point accepts communication from client computer on the intranet.

Requirements for the Software Update Point

WSUS 3.0 must be installed on each site system server before it is assigned the software update point site system role, and other requirements might be necessary depending on your environment and the Configuration Manager 2007 site server infrastructure. For information about planning for the software update point requirements, see Planning for the Software Update Point Installation.

Software Update Point Settings

The software update point settings are initially specified when creating an active software update point, and they can be modified from the Software Update Point Component properties. The software update point settings configure what site system server is the active software update point; what site system server is the active Internet-based software update point if one is specified at the site; the synchronization source; the synchronization schedule; and the products, classifications, and languages for which software updates will be synchronized. For more information about the settings for the software update point, see Planning for the Software Update Point Settings. After the active software update point is installed at a site, it must be synchronized to retrieve the software updates metadata.

Active Software Update Point

When the software update point site system role is created and configured as the active software update point, the software update point components are installed and enabled. As part of the installation, the WSUS Control Manager component is installed on the software update point computer and is responsible for periodically checking the health of WSUS. The WSUS Configuration Manager component of the SMS Executive service on the site server initially configures the WSUS settings with the settings that were specified while creating the software update point site system role. The WSUS settings are verified every hour, by default, and if any settings have been changed WSUS Configuration Manager will change them to coincide with the software update point settings. This emphasizes the fact that all settings should be made in the Software Update Point Component properties in Configuration Manager and not from within the WSUS console.

Active Internet-based Software Update Point

When the primary site server is configured for native mode, you have the option to install a second software update point to handle connections from Internet-based client computers. A new software update point site system is created but not configured as active. Then, from the Software Update Point Component Properties dialog box, you specify the site system as the Internet-based software update point. The initial configuration is the same as an active software update point except that there are additional requirements when the site is in native mode.

Note
Internet-based software update points are only supported on site systems for primary site servers. Even though the option to install an Internet-based software update point on secondary sites is available, it will not be accessed by client computers and is not supported.

For more information about the requirements for installing software updates in native mode, see Administrator Checklist: Configuring the Software Update Point in a Native Mode Site.

Installing a Software Update Point at a Secondary Site

At a secondary site, you have the option of installing an active software update point for the site. Having a software update point at a secondary site provides local access to client computers when scanning for software updates compliance. When the secondary site does not have a configured software update point, client computers will connect to the active software update point on the parent site. You will need to determine whether client computers at the remote site have sufficient connectivity to WSUS running on the parent site or whether WSUS running on a local software update point is required.

Note
WSUS running on the software update point for the secondary site is configured to be a replica of the active software update point for the parent site.
Important
Internet-based software update points are not supported on secondary sites.

For more information about when to install a software update point at a secondary site, see Determine the Software Update Point Infrastructure.

See Also