"Don't forget to patch it !"
This sentence has become the mantra of IT administrators and has been deeply rooted in them. Given that software vulnerabilities are quickly discovered and are very likely to be exploited, administrators need to install them as soon as software patches are released.
Windows Server Update Services (WSUS) is a good way to push Microsoft-authorized patches. However, there are some problems when dealing with third-party software or upgrading internal applications.
Fortunately, Microsoft has developed another tool to help administrators solve this problem. It allows you to import third-party software directories and release updates through the System Center Configuration Manager (SCCM. This tool is called System Center update Publishing Server System Center Updates Publisher, SCUP). The current version number is 4.5 As of 11/23/2009), and the latest version 2011 is coming soon.
Microsoft SCUP requires the computer to run at least the SP1 version on the WSUS3.0 console), SCCM2007, System Center essenessen2007, SQL Server 2005 Express SP2, SQL Server 2005 SP3, or SQL Server 2008 SP1. All Windows servers or clients need to run Windows XP SP2 and higher operating systems.
The system center update Publishing Server provides the following four basic functions:
Create software update definition import software update directory to SCUP export software update directory from SCUP release update information to a Patch Update Server
You can import one or more software directories and automatically check the update directories provided by third-party software by specifying locations. You can also set dependencies for a specific update to ensure that the update is not released at will.
The system center update and publishing server packages and releases the upgrade in three formats:. EXE,. MSI, and. MSP. These upgrades must have the certificate signature on the client computer, otherwise they cannot be used.
Almost all versions of the system center update Publishing Server support only publishing updates, only publishing metadata related to updates, or both. This feature is used to deploy an update in stages or test compatibility before the actual deployment. This feature can also be used if the update released by the update provider has poor compatibility or is completely incompatible.
Some other high-level Microsoft partners-Dell, HP, Intel, and Citrix-have created and released their own update directories for servers and clients. With these directories, you can obtain and release the hardware and software updates released by these companies, and deploy them in your enterprise as soon as possible. Note that these directories are updated on a regular basis, so you should contact every company to learn their update frequency.