Using SCUP and third party self signed updates in a OS Deployment

[SwedishChef]

Using the excellent guides here I have working labs of OSD and software updates.

 

However I have run into a probelm using SCUP, my updates can be installed when the os is up and running on the domain (once it has got the self signed cert and settings as detailed here)

http://blogs.msdn.com/b/steverac/archive/2009/04/03/system-center-updates-publisher-and-wsus-self-signed-cert-option.aspx

 

However they won't install when used in a task sequence in an operating deployment, using F8 i have looked at the certificate store and it is not there...

 

Microsoft says that group policy updates get applied after the TS has finished.

http://technet.microsoft.com/en-us/library/bb693951.aspx

 

This topic seems to show my proplem.

http://social.technet.microsoft.com/Forums/en-US/configmgrosd/thread/2b6274b7-2ce3-44b0-9e36-8ea6bca77fbd/

 

Anyone ever found a solution ????

 

I can import the cert usnig certutil, but it's the changing of the local policy setting setting to allow signed cupdates from an intranet Microsoft update service location that is the last sticking point.

[Peter van der Woude]

Software Updates during the Task Sequence are seperate from Group Policies... The SCCM client uses it's own local policy to point to the Software Update Point.

[SwedishChef]

Software Updates during the Task Sequence are seperate from Group Policies... The SCCM client uses it's own local policy to point to the Software Update Point.

 

Peter, it's not the software point that is the problem, as group policies have not run then certain settings that allow SCCM to install 3rd prty scup updates (HP or acrobat) to run are not applied hence the error.

 

The links i have put in the post explain it all.