Freigeben über

System Center Update Publisher 2011 and Windows Server 2012

  • Artikel

Windows Server 2012 is released recently. System Center Update Publisher 2011 can work well on Windows Server 2012 except for the following known issues:

1. On Windows Server 2012, the WSUS version is 4.0. While on all other OSes, you can only install WSUS 3.0 (with or without service pack). WSUS 3.0 & WSUS 4.0 cannot communicate with each other. So if you install SCUP on a machine with WSUS 3.0 admin console and try to publish to Windows Server 2012 with WSUS 4.0, you’ll get a WSUS version mismatch error in the SCUP log.

You can, however, install SCUP 2011 on Windows 8 and publish to the WSUS on Windows Server 2012. You need to install Remote Server Administration Tools for Win 8 https://www.microsoft.com/en-us/download/details.aspx?id=28972 on Windows 8 machine. It will install the WSUS 4.0 version of the WSUS admin console binary on Win 8. And with that, you can talk with WSUS 4.0 on Windows Server 2012.

2. Low right user scenario is broken currently on Windows Server 2012. Normally, the user should only be in the WSUS administrative group to publish updates successfully. But the user to use and publish update to Windows Server 2012 must be a member of the local administrator.

Workaround for this: (do the followings on the Windows Server 2012)

(1)    Change the ownership of HKEY_CLASSES_ROOT\AppID\{8F5D3447-9CCE-455C-BAEF-55D42420143B} to Administrators

https://technet.microsoft.com/en-us/library/cc786173(v=WS.10).aspx

(2)    Change the permission on that key. Make sure Administrators and System have full control on that.

(3)    launch Dcomcnfg.exe in elevated mode.

(4)    Select “Component Services”àComputeràMy Computerà”Dcom Config”àWSusCertServer. Right Click and select “Properties”.

(5)    “WSusCertServer Properties” dialog will show up. Switch to“Security tab”

(6)    Set “Launch and Activation Permissions” and “Access Permissions” like the following

(7)    restart WSusCertServer (net stop/net start)

 Hope you enjoy using SCUP 2011 with Windows Server 2012.

Comments

  • Anonymous
    January 16, 2013
    I have attempted to use SCUP 2011 on Server 2012 with success.  I am able to install and run it, but when I try to add the signning certificate I get the error below. Unable to perform the requested operation on the update server.  This can happen when you try to perform certain functions remotely that require SSL.  %1 is not a valid Win32 application The WSUS server is local and so is SCCM 2012 SP1.

  • Anonymous
    January 16, 2013
    That should be Without success.  It is not working

  • Anonymous
    February 07, 2013
    The comment has been removed

  • Anonymous
    March 01, 2013
    You do have to publish the certificate for SCUP as a trusted publisher through your organization.  Have you ensured the certificate has been published?

  • Anonymous
    May 08, 2013
    On the client side check under c:windowswindowsupdate.log for error. Second check on client - with mmc that the client has sucessufully installed wsus server certificate.

  • Anonymous
    July 10, 2013
    I had the same issue  as jtwaddle and boggot.  I resolved this by running SCUP by right clicking and choosing Run as Administrator.  This allowed me to create the certificate I browsed to for my PFX file.  Hope it helps!

  • Anonymous
    July 10, 2013
    The comment has been removed

  • Anonymous
    September 30, 2013
    I am currently having the same issue as Chase. Has anyone figured this out yet?

  • Anonymous
    February 18, 2015
    I have a real Cert, Exported fine.  Had to run SCUP as Administrator to make it work.  I had the SSL error.