WSUS Server Synchronization Issues

CapaInstaller integrates directly with WSUS through the Patch Management service. This page covers problems that have been seen in real installations.

Solution 1 - Make the Patch Management service resynchronize with WSUS

Register the Patch Management service again to start a complete resynchronization of data between the Patch Management service and WSUS.

1. In the CapaInstaller Console, go to System Administration → Services → Patch Management Services.
2. Open the properties of the Patch Management service and make a note of the URL on the WSUS tab.
3. Right-click the Patch Management service and select Remove.
4. Select Unregister only. This removes the service from the database but leaves its files and folders on the server.
5. Right-click Patch Management Services and select Deploy Patch Management service…. This menu item is only available when no Patch Management service is registered.
6. Enter the same URL that you noted from the old service, and complete the wizard.

The new Patch Management service is deployed and starts a complete resynchronization with WSUS.

Solution 2 - Move the Patch Management service to another WSUS server

Before you start

Open these ports in the firewall:

Port	Used for
8530/TCP (HTTP) or 8531/TCP (HTTPS)	WSUS
8484, 8585, and 8686/TCP	Patch Management service communication with the console (defaults)
135/TCP (RPC) and 445/TCP (SMB)	Deploying the service. Only needed during setup.
1433/TCP, and 1434/UDP for a named SQL Server instance	From the WSUS server to the CapaInstaller database
:::

1. In the CapaInstaller Console, go to System Administration → Services → Patch Management Services.
2. Right-click the Patch Management service and select Remove.
3. Select Unregister only.
4. Right-click Patch Management Services and select Deploy Patch Management service….
5. Enter the URL of the new WSUS server. Enter it as Internal URL if you use HTTP, or as Public URL if you use HTTPS. For example: http://wsusserver.domain.local:8530. The standard WSUS port is 8530 for HTTP and 8531 for HTTPS.
6. Select This server replaces another Patch Management Service.
7. Complete the wizard to deploy the new Patch Management service.

The service is deployed to the server in the URL. It then synchronizes all the existing content to the new Patch Management service. This can take up to 24 hours.