Article: vtkb2986.htm
Difficulty: Difficult
Time to Complete (minutes): 60
Last Updated: Apr 28, 2008

Question:

How do I set up a Downstream or Sidestream WSUS Server in the VT WSUS System?

Answer:

  1. Install WSUS 2.0 (SP1) on a capable server system. For more information, see Microsoft's Download Windows Server Update Services with Service Pack 1 page (http://www.microsoft.com/downloads/details.aspx?FamilyID=9e89e4ef-00a8-4193-8997-fe4e92215a57&DisplayLang=en).
  2. Contact 4Help by using the Help Request Form (http://4help.vt.edu) or by calling (540) 231-HELP (4357) to request a VTWSUSRollUp package.
  3. Complete, sign, and submit the Participation Requirements Agreement (http://www.computing.vt.edu/security_and_viruses/vtwsus/ParReqVTWsusv1.2.pdf).
  4. Download and install the .NET framework version 2.0 onto your WSUS server from Microsoft .NET Framework Version 2.0 Redistributable Package (x86) (http://www.microsoft.com/downloads/details.aspx?FamilyID=0856eacb-4362-4b0d-8edd-aab15c5e04f5&displaylang=en).
  5. After the Participation Requirements Agreement is processed, you will receive the packaged VTWSUSRollUp tool. Download the tool and extract it to a folder of your choice on your WSUS server.
  6. Configure your firewall (if applicable) to allow communication to the VT WSUS Master server via TCP/3306 or the alternate MySQL port.
  7. Configure an existing or create a new IPSec policy to encrypt traffic to and from the VT WSUS master server.
  8. If necessary, configure the <connectionStrings> element in the WSUSRollUp.exe.config file with the user ID and password provided by the WSUS administrators.
  9. Create and configure a scheduled task to run the WSUSRollUp.exe program:
    1. Coordinate with the WSUS Administrators to determine the optimal run times and frequency.
    2. Allow read, write, and modify permissions for the account as which the scheduled tasks run.
    3. To extract data from the WSUS server, make the account that the scheduled task runs as a member of the WSUS Administrators group.
      Note: Be careful not to allow the password to expire on the account that the scheduled task runs as. If you change the password for this account, make sure to also configure the scheduled task with the new password.
  10. If you encounter problems getting the VTWSUSRollUp tool to run properly, contact 4Help by using the Help Request Form (http://4help.vt.edu) or by calling (540) 231-HELP (4357).