Forefront Client Security TechCenter >
Forefront Client Security Forums
>
Forefront Client Security Setup and Configuration
>
WSUS and SCCM
WSUS and SCCM
- We have SCCM 2007 installed on a server with Server 2003 R2 Enterprise x64 Edition as its operating system and the plan was to use the existing WSUS on this server for Forefront Client Security. After reviewing the Forefront WSUS documentation it states that x64 is not supported. Does anyone know if this will still work and is just not supported or if it will not work at all?
Answers
- We support the WSUS server being x64 and part of SCCM. You cannot have WSUS clients multi-homed to 2 different WSUS servers. Also do not install the actual "Distribution Server" components to an x64 WSUS server. The "Distribution Server" component that is with the installer was intended for wsus 2.x which did not have the ability to check for updates more the 1x per day.. this role basically had a service which used the wsus api to help it check more frequently for updates ie for av signatures throughout the day to ensure newest signatures would always be available when clients check for them. Instead just manually configure WSUS with approvals for FCS signatures and set to sync more frequently and should be fine.
CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfalde- Marked As Answer byNick Gu - MSFTMSFT, ModeratorWednesday, October 28, 2009 7:04 AM
All Replies
Hi,
Thank you for your post.
As far as I know, there is no support for x64 on ANY of the FCS(v1) server roles. If you deploy Distribution server, you can use Windows Server 2003(32bit) and WSUS 3.0 with SP1 or later.
For more information, please see:
http://www.microsoft.com/forefront/clientsecurity/sysreqs.mspx
Regards,
Nick Gu - MSFT- Proposed As Answer byNick Gu - MSFTMSFT, ModeratorWednesday, October 21, 2009 2:12 AM
- Thanks for the reply Nick.
Is it possible to have 2 WSUS servers online at the same time?
Thank You! Hi,
Thank you for your update.
Yes, we don't care what/who the WSUS server is as long as they have definitions for the client is right.
Regards,
Nick Gu - MSFT- We support the WSUS server being x64 and part of SCCM. You cannot have WSUS clients multi-homed to 2 different WSUS servers. Also do not install the actual "Distribution Server" components to an x64 WSUS server. The "Distribution Server" component that is with the installer was intended for wsus 2.x which did not have the ability to check for updates more the 1x per day.. this role basically had a service which used the wsus api to help it check more frequently for updates ie for av signatures throughout the day to ensure newest signatures would always be available when clients check for them. Instead just manually configure WSUS with approvals for FCS signatures and set to sync more frequently and should be fine.
CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfalde- Marked As Answer byNick Gu - MSFTMSFT, ModeratorWednesday, October 28, 2009 7:04 AM
