WSUS

Scope: Easy2Patch 4.0

Depending on the license, the SCCM/WSUS/INTUNE button is clicked in the settings page. WSUS settings are made from the WSUS Settings menu as follows:

1. In the Host address part, the server address of the SUP role is written as FQDN.

2. If WSUS is running securely, the use SSL option should be selected and the SSL port on which WSUS is running should be entered.

3. Enter the Secure Port value configured in WSUS in the Port field. By default it is 8531. But it could be 443 or any other port.

4. Base Url is new in Easy2Patch 4.0. This URL is the address used to contact WSUS. It consists of 2 parts.

   • The first part is the portal address of easy2patch 4.0, and the second part is the fixed ConfigMgr.

   • For example: If the address where Easy2Patch is published is e2p.domain.com, https://e2p.domain.com/ConfigMgr is written in this field.

5. The connection test is performed by pressing the test button. If the test is successful, a question about saving the record is asked. Yes is clicked.

WSUS Secure Port is the HTTPS port used by the WSUS server. By default, WSUS uses the Secure Port as 8531.

To verify which port the WSUS server is using, you can follow these steps:

1. On the WSUS server, open IIS Manager.

2. In the left-hand panel, expand the "Sites" node and click on the "WSUS Administration" site.

3. On the page that opens, click on "Bindings" in the "Actions" section on the right.

4. In the window that opens, click the "Edit" button next to the port specified as "https" in the "Type" column.

5. In the window that opens, in the "Port" field, you can see the WSUS Secure Port number.

By following these steps, you can find out the secure port used by the WSUS server.

Size limit for WSUS Update Publishing

WSUS server has a maximum size limit. Some update packages may exceed the size limit. When you want to deploy updates larger than 384 MB You shouldn't do that in general. Updates can't be published to the WSUS server due to the locally published packages size limit. The WSUS package size limit is 382 MB by default.

You can change the default size limitation in 2 ways.

First method is, you can change the maximum file size from registry. When you run the powershell script, maximum file size for publishing updates in wsus changed to 512 MB. Maximum file size for publishing is 2047 MB.

[reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer()
$size = $wsus.GetConfiguration().LocalPublishingMaxCabSize
Write-host "Current Max Size" $size
$config = $wsus.GetConfiguration()
$config.LocalPublishingMaxCabSize = 512
$config.save()

You can change this value easily in Easy2Patch Console. Change Local Publishing Max Size (MB) value to 512 and then click submit button.