Versions Compared

Old Version 2

changes.mady.by.user Ribbon Communications

Saved on

compared with

New Version Current

changes.mady.by.user Ribbon Communications

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Add_docset_workflow
APPRJIDSYM-19123, SYM-19124
AUTH1UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cd5909df, userName='null'}
DEV1UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cc5207f0, userName='null'}
LDEV1UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cd5909df, userName='null'}
SVT1UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26ca170396, userName='null'}
LSVT1UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cd5909df, userName='null'}
AUTHJIDSYM-19122

 

width
Section
Column
This document details updating the ASM with Microsoft Windows Updates. 
40%
Panel
titleTable of Contents
Table of Contents
Column
Info
titleAbout this Page
Tip
titleRelated Articles

...

Tip

None

 

Summary

As Because the SBC 1k/2k ASM employs Microsoft's Windows Server operating system, it is necessary to periodically download Windows Updates.   Updates are normally downloaded directly to the ASM from the Microsoft Windows Update website. 

...

Info

The WSUS installation instructions are provided as a convenience.    Please consult the Microsoft's WSUS documentation should you have any further questions or issues.

...

Info

An additional benefit to using a WSUS Server is that the ASM installs Windows Updates much faster.    The WSUS Server works by pre-fetching all necessary updates as they become available.   When the ASM requests an update, the update itself is loaded to the ASM directly from the WSUS Server.

...

  1. On the target WSUS Server, begin the WSUS installation by opening the Server Manager and selecting Add role and feature.

    Panel
    borderStylenone

    Caption
    0Figure
    1Add Roles

    And

    and Features

    Image Modified

  2. Click Next until you reach the Server Role tab.

  3. Select Windows Server Update Services.

  4. Click Add Features to accept the additional features required.

    Panel
    borderStylenone

    Caption
    0Figure
    1Add Features

    Image Modified

  5. Click Next.

  6. Select .NET Framework 3.5 Features.

    Panel
    borderStylenone

    Caption
    0Figure
    1.NET Framework 3.5 Features

    Image Modified 

  7. Click Next until the Content tab, fill a folder the will host the update.

    Panel
    borderStylenone

    Caption
    0Figure
    1Content

    Image Modified

  8. Click Next then Install, let the install complete and click on Launch Post-Installation tasks

    Panel
    borderStylenone

    Caption
    0Figure
    1Launch Post-Installation Tasks

    Image Modified 

  9. Once the Configuration successfully completed, you can close the Wizard

    Panel
    borderStylenone

    Caption
    0Figure
    1Close Wizard

    Image Modified

  10. Start the Windows Server Update Services, hit Next until the Proxy Server tab

    Panel
    borderStylenone

    Caption
    0Figure
    1Windows Server Update Services

    Image Modified 

  11. Click Start Connecting to ensure the access to the Microsoft Server.

    Panel
    borderStylenone

    Caption
    0Figure
    1Start Connecting

    Image Modified

  12. Choose your languages.

    Panel
    borderStylenone

    Caption
    0Figure
    1Choose Language

    Image Modified

  13. Choose the following Products
    • Silverlight
    • Microsoft SQL Server 2012
    • Microsoft SQL Server 2014
    • SQL Server 2008 R2
    • Windows Defender
    • Windows Drivers
    • Windows Server 2008 R2
    • Windows Server 2012 R2
    • Visual Studio 2008
    • Visual Studio 2010
    • Visual Studio 2012
    • Visual Studio 2013

  14. In the Choose Classifications tab, select then click Next
    • Critical Updates
    • Feature Packs
    • Security Updates
    • Service Packs
    • Updated Rollups
    • Update

    Panel
    borderStylenone

    Caption
    0Figure
    1Choose Classifications

    Tab

    tab

    Image Modified

  15. Click Begin initial synchronization then Finish

    Panel
    borderStylenone

    Caption
    0Figure
    1Initial Synchronization

    Image Modified

Configuring the WSUS server to accept Windows Update Requests from an ASM

The WSUS Server must be configured to accept incoming requests from the ASM server.    Use  Use the instructions below to configure the WSUS server to accept incoming requests. 

...

  1. On the WSUS server, open Update Services.

  2. Go to Options, then Computer.

    Panel
    borderStylenone

    Caption
    0Figure
    1Options

    Image Modified

  3. Choose Use Group Policy or registry settings one computers.

    Panel
    borderStylenone

    Caption
    0Figure
    1Computers

    Image Modified

Configuring the ASM to Use the WSUS Server

The ASM must be configured to use the local WSUS server instead of Microsoft's Windows Update site.  There There are two methods for configuring the ASM to use a WSUS Server to download updates:

...

  1. Remote desktop to the ASM Server.

  2.  Using the Group Policy editor set "Computer Configuration" \ Policies \ "Windows Components" \ "Administrative Templates" \ "Windows Update" \ “Specifying an  Intranet Microsoft Update Service location”.

  3. Set the Specify intranet Microsoft update service location to Enabled.

  4. Configure replace two server addresses listed in the Options section with the appropriate information for your WSUS Server.

Panel
borderStylenone

Caption
0Figure
1Group Policy Management Editor

Image Modified

...

 

 

Note

Do not modify the Configure Automatic Update setting. See the warning below.

...

To set the ASM's WSUS Server via the ASM registry, modify the WindowsUpdate key with the Sonus Require values as noted below:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate

Caption
0Table
1ASM Registry 'WindowsUpdate' Keys
Entry name
Data type
Sonus Required Values
Values

AcceptTrustedPublisherCerts

Reg_DWORD

0
  • 1 = Enabled. The WSUS server distributes available signed non-Microsoft updates.
  • 0 = Disabled. The WSUS server does not distribute available signed non-Microsoft updates.

DisableWindowsUpdateAccess

Reg_DWORD

1
  • 1 = Disables access to Windows Update.
  • 0 = Enables access to Windows Update.

ElevateNonAdmins

Reg_DWORD

1
  • 1 = All members of the Users security group can approve or disapprove updates.
  • 0 = Only members of the Administrators security group can approve or disapprove updates.

TargetGroup

Reg_SZ

 

Name of the computer group to which the computer belongs. This policy is paired with TargetGroupEnabled.

TargetGroupEnabled

Reg_DWORD

 
  • 1 = Use client-side targeting.
  • 0 = Do not use client-side targeting. This policy is paired with TargetGroup.

WUServer

Reg_SZ

Your_Wsus

HTTP(S) URL of the WSUS server that is used by Automatic Updates and API callers (by default). This policy is paired with WUStatusServer, and both keys must be set to the same value to be valid.

WUStatusServer

Reg_SZ

Your_Wsus

The HTTP(S) URL of the server to which reporting information is sent for client computers that use the WSUS server that is configured by the WUServer key. This policy is paired with WUServer, and both keys must be set to the same value to be valid.

Warning

Do not modify the HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU key to permit the ASM to automatically load updates from either the WSUS Server or Microsoft Windows Update site.    Sonus selects specific updates to the ASM to ensure the SBC appliance operates within our published specifications, eliminating updates which might either break functionality or reduce the ASM's capacity.  

Downloading unapproved updates to the ASM violates Sonus' Terms of Service

How to Initiate ASM Roll-up Updates

Go to ASM Roll-up Update page to apply ASM Roll-up updates on Sonus SBC 1000/2000 nodes.

Warning

Do not update ASM using any other method than what is documented.

Pagebreak