Upgrading WSUS from 3.0 SP2 to 4.0 (Windows Server 2012) and re-enabling SSL

-

hi all

our wsus 3.0 sp2 server running on w2k8 r2, using database on remote sql server , using ssl with 80/443 ports (not tcp/853n ports). last week upgraded server 2012. in order upgrade, had uninstall wsus on w2k8 r2, run os upgrade, , add "windows update services" role. during role installation, able de-select wid (windows internal database) , add "database" role service instead. asked name/instance of sql server. after granting current login sysadmin/securityadmin rights in sql server login, wsus seemed db-maintenance , , running - [edit 2012/09/19] on default port , no ssl[end edit]. certificate used (from ad) still present in computer certificate store, expected.

i unable find info on enabling ssl on wsus 4.0, followed advice given on the deployment guide wsus 3.0 sp2 (section "configuring ssl on wsus server"), basically:

    • start iis manager, stop default web site , change bindings (i moved port binding 1 up, e.g. 80 -> 81, 443 -> 444)
    • edit bindings of wsus administration site , assign 80 , 443 , select still present certificate
    • now wsus responding clients management console fails. after running %programfiles%\update services\wsusutil.exe configuressl <fqdn>
    • reboot (since unable find out how restart clientservicingproxy as mentioned deployment guide). seems ok.

hope useful others. ideas or suggestions streamlining welcome.

/maurice


last week upgraded server 2012.

there's bleeding edge experiment! :-)

i'm not aware upgrading win2008/wsus server win2012 supported activity, inasmuch win2008/wsus server .net2 application , win2012/wsus server .net4 application. kudos taking on project!

during role installation, able de-select wid (windows internal database) , add "database" role service instead.

but did uninstall windows internal database on windows server 2008 system before doing os upgrade? or did happen in win2012 server manager after os upgrade?

but on wrong port , no ssl.

well.... port 80 default port, i'm not sure mean "wrong port", , ssl not enabled default on wsus installation. enabling , configuring ssl user-initiated action, need redo work.

i happy hear able perform upgrade successfully; useful information community. did similar 'upgrade exercise' win2003 win2008 few years ago, see happen, although there never use information win2003-to-win2008 scenarios involved hardware migration x86 x64.

lawrence garvin, m.s., mcitp:ea, mcdba, mcsa
product manager, solarwinds
microsoft mvp - software distribution (2005-2012)
mvp profile: http://mvp.support.microsoft.com/profile/lawrence.garvin



Windows Server  >  WSUS



Comments

Post a Comment

Popular posts from this blog

CRL Revocation always failed

-
hi all, i try configure radius server nps, somehow certificate authentication client failed with reason: reason = revocation function unable check revocation because revocation server offline. then check certificate client, certutil -f -urlfetch -verify client7.cer, result follow: issuer:     cn=entca     dc=intra     dc=domain     dc=co     dc=sg subject:     cn=computer.intra.domain.co.sg cert serial number: 1c5b00de000000000041 dwflags = ca_verify_flags_allow_untrusted_root (0x1) dwflags = ca_verify_flags_ignore_offline (0x2) dwflags = ca_verify_flags_full_chain_revocation (0x8) dwflags = ca_verify_flags_console_trace (0x20000000) dwflags = ca_verify_flags_dump_chain (0x40000000) chainflags = cert_chain_revocation_check_chain (0x20000000) hcce_local_machine cert_chain_policy_base -------- cert_chain_context -------- chaincontext.dwinfostatus = ce...
Read more

Failed to query the results of bpa xpath

-
Image
i have new server installed hyper v, iis , domain services roles on it.  i checking event log , see warning multiple times, idea how rid of it?? failed query results of bpa xpath: microsoft/windows/fileservices:$reports$\*\result.xml:/resultdatabase/result. error: device attached system not functioning., last error: system cannot find path specified.. follow me on twitter <<< levalencia blog <<< hi, similar issue discussed in forum: to rid of warnings: 1. go dashboard 2. click on add roles , features 3. click next "before begin step" 4. select "role based or feature based installation" , click next 5. select given server server pool , click next 6. in server roles step make sure following checked:   file , storage services > file , iscsi services > file server, click next 7.click next through rest of steps , install server role 8. rerun bpa scan described earlier for more information please refer foll...
Read more

RDS 2012 r2 collections show black screen and then close

-
Image
greetings,   have deployed 2 server 2012 r2 rds session collections (each 2 rdsh servers, , both going through same gateway/broker server), , during testing had no issues, rolled production, our users have been experiencing black screens when attempting log in, , remote desktop window closes (no actual login performed).   seems happen intermittently, , on both collections @ different times.  thought had solved disabling use of udp in rdp clients, wasn't permanent fix.   looking @ event log of 1 of affected servers, there seems event id 36 generated @ every logon attempt following message: an error occurred when transitioning csrconnected in response evcsrinitialized. (errorcode 0x80070102)   after scouring web looking answers, nothing came up.  here appreciated. edit:  apparently can't screenshot attach, located here: http://imgur.com/rlioxpd so, appears have figured out reason (although, i'm still unsure of root cause).  bi...
Read more