The software update point in Configuration Manager 2007 is a required component of software updates and is installed as a site system role in the Configuration Manager console. The software update point site system role must be created on a site system server that has Microsoft Windows Server Update Services (WSUS) 3.0 installed. For more information about installing WSUS 3.0, see How to Install Windows Server Update Services 3.0.

Note
Configuration Manager 2007 Service Pack 1 (SP1) requires WSUS 3.0 SP1 or WSUS 3.0 Service Pack 2 (SP2). WSUS 3.0 SP2 is required to support Configuration Manager 2007 SP2 software update management for the Windows 7 and Windows Server 2008 R2 operating systems.

There can be multiple site system servers with the software update point site system role, but only one site system server can be configured as the active software update point. When the site is in native mode, an additional active Internet-based software update point can be assigned to a remote site system server that allows communication from only Internet-based client computers. Additionally, if the active software update point is configured as a Network Load Balancing (NLB) cluster, a site system server with the software update point site role should be created for each server in the NLB cluster. For information that will help you to determine the software update point configuration in your environment, see Planning for the Software Update Point Settings.

Use the following procedure to create an active Internet-based software update point site role on a site system server and configure the software update point properties.

Note
The active software update point must be created and configured before creating an active Internet-based software update point. For more information, see How to Create and Configure an Active Software Update Point.

To create and configure the active Internet-based software update point

  1. Create a software update point site system role on the site system that will be assigned the active Internet-based software update point. When creating the site system role, do not select Use this server as the active software update point. For the step-by-step procedure, see How to Add the Software Update Point Site Role to a Site System.

  2. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Site Management / <site code> - <site name> / Site Settings / Component Configuration.

  3. Right-click Software Update Point Component, and then click Properties.

  4. Click the General tab, and then select Allow intranet-only client connections. This prevents communication from Internet-based client computers on the active software update point and allows you to configure an active Internet-based software update point.

  5. Click the Internet-based tab, select Active remote Internet-based software update point, and then configure the following properties:

    • Port number: Specify the HTTP port setting for the WSUS server that is installed on the server specified in Active server name.

      Important
      The site server will fail to communicate with the WSUS server if the port settings are not correct. For information about how to find this information, see How to Determine the Port Settings Used by WSUS.
    • SSL port number: Specify the HTTPS (SSL) port setting for the WSUS server that is installed on the server specified in Active server name.

    • Active server name: Specify from the drop-down list the site system server that will be assigned the active Internet-based software update point site role.

    • Software Update Point Connection Account: Specify the account that will be used by the site server to connect to the site system server to configure WSUS components and initiate synchronization. If this account is left blank, the computer account for the site system will be used.

    • Do not synchronize from the software update point located on the intranet: Select this setting if the active Internet-based software update point will be unable to connect to the active software update point. The export and import functionality of the WSUSUtil tool will need to be used to synchronize software updates metadata when this setting is selected. For more information, see How to Synchronize Updates Using Export and Import.

  6. Click OK to close the Software Update Point Component Properties dialog box.

  7. Open SUPSetup.log in <InstallationPath>\Logs to monitor the installation progress for the software update point. When the installation completes, Installation was successful is written to the log file.

See Also