none
software download issue RRS feed

  • Question

  • Hi.

    I've two SCCM server inter or external.
    Internal SCCM is offline and can not access to internet.
    External SCCM is online and internet can access.
    There are two Software Update Point with WSUS for each.
    I want to set like below flow.

    It is not hierarchical structure, just only separated site.
    Here is my question.

    Is this can be possible setting?
    If yes, how to configure this setting?

    Internal SUP has setting upstream source to External.
    Catalog synced successfully but failed to download software update content from External. 

    I was download from my network location(External) and I've failed it with path not found.

    Is this possible setting?
    What am I wrong?


    Tuesday, October 15, 2019 7:05 AM

Answers

  • Hi,

    Do you have a primary and secondary sites? Is it standalone Site server? What is your current version?

    Yes, you can configure an offline Software Update Point and get the software update from the remote WSUS, you can set this when you install the SUP, don't forget to allow the related ports between the both servers, more details: 

    https://docs.microsoft.com/en-us/sccm/sum/get-started/install-a-software-update-point

    For your software update download issue, you have to check first the health of the SUP (under Monitoring, System Status), or, check the following log files:

    • WCM.log
    • WSUSCtrl.log
    • Wsyncmgr.log

    Regards,

    SAAD Youssef

    ______

    Please remember to mark the replies as answer if they help, thank you!

    • Marked as answer by ccamacal Friday, October 18, 2019 12:23 AM
    Tuesday, October 15, 2019 7:20 AM
  • Are both domains are in same forest?

    Kindly refer the below blog also

    INSTALLING A SCCM DP/MP/SUP IN AN UNTRUSTED DOMAIN

    • Marked as answer by ccamacal Thursday, October 17, 2019 11:59 PM
    Tuesday, October 15, 2019 9:46 AM
  • First, I'm assuming that the Internal server is your primary site server and the external server is a site system. I'm also assuming that both have the software update point role installed.

    If so, then the above can work if the Software Update Point role installed on the external site system was installed first and is thus the top-level SUP in the environment as the top-level SUP is what communicates with Windows Update to download the update metadata/catalog. You won't however be able to use ADRs that download content from Microsoft as the primary site server is responsible for downloading content during ADR evaluation.


    Jason | https://home.configmgrftw.com | @jasonsandys

    • Marked as answer by ccamacal Friday, October 18, 2019 12:00 AM
    Tuesday, October 15, 2019 2:26 PM

All replies

  • If you have two standalone SCCM server, you should have internet connection on both server to download updates from Microsoft.

    Otherwise you need to plan like below,

    Primary Site with internet connection to download update

    Put secondary site with SUP that will download update from upstream server (doesn't required internet connection)

     
    Tuesday, October 15, 2019 7:14 AM
  • Hi,

    Do you have a primary and secondary sites? Is it standalone Site server? What is your current version?

    Yes, you can configure an offline Software Update Point and get the software update from the remote WSUS, you can set this when you install the SUP, don't forget to allow the related ports between the both servers, more details: 

    https://docs.microsoft.com/en-us/sccm/sum/get-started/install-a-software-update-point

    For your software update download issue, you have to check first the health of the SUP (under Monitoring, System Status), or, check the following log files:

    • WCM.log
    • WSUSCtrl.log
    • Wsyncmgr.log

    Regards,

    SAAD Youssef

    ______

    Please remember to mark the replies as answer if they help, thank you!

    • Marked as answer by ccamacal Friday, October 18, 2019 12:23 AM
    Tuesday, October 15, 2019 7:20 AM
  • If you have two standalone SCCM server, you should have internet connection on both server to download updates from Microsoft.

    Otherwise you need to plan like below,

    Primary Site with internet connection to download update

    Put secondary site with SUP that will download update from upstream server (doesn't required internet connection)

     

    Thanks for your reply.

    Shoud I configure primary site and secondary site that servers?
    I was installed by each domains they are not trusted.
    Ports opened only.
    Is it possible configure primary site and secondary site if they are not same domain?


    Tuesday, October 15, 2019 9:02 AM
  • Hi,

    Do you have a primary and secondary sites? Is it standalone Site server? What is your current version?

    Yes, you can configure an offline Software Update Point and get the software update from the remote WSUS, you can set this when you install the SUP, don't forget to allow the related ports between the both servers, more details: 

    https://docs.microsoft.com/en-us/sccm/sum/get-started/install-a-software-update-point

    For your software update download issue, you have to check first the health of the SUP (under Monitoring, System Status), or, check the following log files:

    • WCM.log
    • WSUSCtrl.log
    • Wsyncmgr.log

    Regards,

    SAAD Youssef

    ______

    Please remember to mark the replies as answer if they help, thank you!

    It has setting standalone site.

    Version is 1902 (5.0.8790.1000).

    I've opened SMB and WSUS 8530 port.

    I will check these logs.

    Thanks.

    Tuesday, October 15, 2019 9:20 AM
  • Are both domains are in same forest?

    Kindly refer the below blog also

    INSTALLING A SCCM DP/MP/SUP IN AN UNTRUSTED DOMAIN

    • Marked as answer by ccamacal Thursday, October 17, 2019 11:59 PM
    Tuesday, October 15, 2019 9:46 AM
  • Put secondary site with SUP that will download update from upstream server (doesn't required internet connection)

    This is not correct. A secondary site will not address this issue and will cause more problems.


    Jason | https://home.configmgrftw.com | @jasonsandys

    Tuesday, October 15, 2019 2:19 PM
  • First, I'm assuming that the Internal server is your primary site server and the external server is a site system. I'm also assuming that both have the software update point role installed.

    If so, then the above can work if the Software Update Point role installed on the external site system was installed first and is thus the top-level SUP in the environment as the top-level SUP is what communicates with Windows Update to download the update metadata/catalog. You won't however be able to use ADRs that download content from Microsoft as the primary site server is responsible for downloading content during ADR evaluation.


    Jason | https://home.configmgrftw.com | @jasonsandys

    • Marked as answer by ccamacal Friday, October 18, 2019 12:00 AM
    Tuesday, October 15, 2019 2:26 PM
  • Keep in mind here that what SAAD is describing is not about making the SUP on the internal site server reference the WSUS instance on the external site system as that's not a valid configuration and would create a loop. What he's referring to is an additional, stand-alone WSUS system as described at https://docs.microsoft.com/en-us/sccm/sum/get-started/synchronize-software-updates-disconnected.

    Jason | https://home.configmgrftw.com | @jasonsandys

    Tuesday, October 15, 2019 2:28 PM
  • Are both domains are in same forest?

    Kindly refer the below blog also

    INSTALLING A SCCM DP/MP/SUP IN AN UNTRUSTED DOMAIN

    It was not in same forest.

    It was solved work around.

    Thanks. :)

    Thursday, October 17, 2019 11:53 PM
  • First, I'm assuming that the Internal server is your primary site server and the external server is a site system. I'm also assuming that both have the software update point role installed.

    If so, then the above can work if the Software Update Point role installed on the external site system was installed first and is thus the top-level SUP in the environment as the top-level SUP is what communicates with Windows Update to download the update metadata/catalog. You won't however be able to use ADRs that download content from Microsoft as the primary site server is responsible for downloading content during ADR evaluation.


    Jason | https://home.configmgrftw.com | @jasonsandys

    I was solved it workaround.

    It was one source WSUS and two SUP.

    Thanks for your response.

    Thursday, October 17, 2019 11:59 PM