SOLVED
Home

1810 third party updtaes

%3CLINGO-SUB%20id%3D%22lingo-sub-306923%22%20slang%3D%22en-US%22%3E1810%20third%20party%20updtaes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306923%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%201%20site%20with%203%20server%202%202012%20r2%20with%20SUP%20installed%20working%20with%20the%20same%20SUSDB%20and%20one%202016%20with%20MP%20and%20DP.%20One%202012%20is%20our%20site%20system%20and%20server%20and%20the%20second%20one%20is%20in%20our%20DMZ%20network%20for%20ICBM.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20trying%20to%20deploy%20third%20party%20updates.%20When%20I%20publish%20those%20updates%20and%20sync%20them%20the%20source%20content%20of%20the%20updates%20changes%20to%20our%20DMZ%20server%20location%20for%20some%20reason%20and%20when%20I%20try%20to%20download%20the%20updates%20I%20get%20404%20error%20so%20I%20can't%20deploy%20them.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20really%20appreciate%20the%20help%20because%20I%20tried%20googling%20and%20didn't%20find%20anything.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-306923%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECM%20current%20branch%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Escup%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESoftware%20Update%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-313844%22%20slang%3D%22en-US%22%3ERe%3A%201810%20third%20party%20updtaes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-313844%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F255442%22%20target%3D%22_blank%22%3E%40RahamimL%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20general%2C%20for%20404%20first%20check%20that%20you%20can%20access%20the%20download%20URL%20manually%20with%20the%20same%20network%20configuration(like%20proxy)in%20DMZ.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBased%20on%20the%20details%20you%20provided%20you%20seem%20to%20be%20using%20the%20Shared%20DB%20option%20for%20WSUS%20and%20this%20has%20some%20unique%20issues.%20There%20are%202%20things%20to%20be%20aware%20of%20when%20using%20the%20shared%20db%20option%20for%20WSUS%20with%20Configuration%20Manager%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E1%20%E2%80%93%20(Possibly%20the%20issue%20you%20describe)%20The%20WSUS%20content%20share%20must%20be%20configured%20with%20a%20UNC%20and%20accessible%20for%20primary%20SUP%20server%20so%20downloads%20can%20happen.%20The%20UNC%20requirement%20is%20already%20mentioned%20in%20our%20docs%20around%20%E2%80%9Cshared%20db%E2%80%9D%2C%20and%20again%20in%20this%20blog%20post%3A%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FConfiguration-Manager-Archive%2FHow-to-implement-a-shared-SUSDB-for-Configuration-Manager%2Fba-p%2F274103%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FConfiguration-Manager-Archive%2FHow-to-implement-a-shared-SUSDB-for-Configuration-Manager%2Fba-p%2F274103%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E2%20%E2%80%93The%20certificate%20management%20functions%20will%20not%20work%20correctly%20because%20sync%20will%20use%20a%20random%20SUP%20for%20cert%20operations%20instead%20of%20the%20default%20SUP.%20%26nbsp%3BThis%20is%20a%20known%20issue%20that%20we%20are%20working%20on.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWorkarounds%3A%3C%2FP%3E%0A%3CP%3EFor%20%231%20it%20is%20a%20configuration%20issue.%3C%2FP%3E%0A%3CP%3EFor%20%232%20use%20SCUP%20or%20other%20tools%20to%20configure%20WSUS%20content%20signing%20cert%20and%20install%20the%20same%20cert%20on%20both%20WSUS%20at%20top-level%20site.%20Don%E2%80%99t%20let%20ConfigMgr%20manage%20the%20cert%20or%20don%E2%80%99t%20use%20shared%20db.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20hope%20this%20helps%3C%2FP%3E%0A%3CP%3EYvette%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
RahamimL
Contributor

Hi,

 

I have 1 site with 3 server 2 2012 r2 with SUP installed working with the same SUSDB and one 2016 with MP and DP. One 2012 is our site system and server and the second one is in our DMZ network for ICBM.

 

I'm trying to deploy third party updates. When I publish those updates and sync them the source content of the updates changes to our DMZ server location for some reason and when I try to download the updates I get 404 error so I can't deploy them.

 

I would really appreciate the help because I tried googling and didn't find anything.

 

Thanks in advance.

1 Reply
Solution

Hello @RahamimL

 

In general, for 404 first check that you can access the download URL manually with the same network configuration(like proxy)in DMZ.

 

Based on the details you provided you seem to be using the Shared DB option for WSUS and this has some unique issues. There are 2 things to be aware of when using the shared db option for WSUS with Configuration Manager:

 

1 – (Possibly the issue you describe) The WSUS content share must be configured with a UNC and accessible for primary SUP server so downloads can happen. The UNC requirement is already mentioned in our docs around “shared db”, and again in this blog post: 

https://techcommunity.microsoft.com/t5/Configuration-Manager-Archive/How-to-implement-a-shared-SUSDB...

 

2 –The certificate management functions will not work correctly because sync will use a random SUP for cert operations instead of the default SUP.  This is a known issue that we are working on. 

 

Workarounds:

For #1 it is a configuration issue.

For #2 use SCUP or other tools to configure WSUS content signing cert and install the same cert on both WSUS at top-level site. Don’t let ConfigMgr manage the cert or don’t use shared db.

 

I hope this helps

Yvette

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
38 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
12 Replies