WSUS Settings

Scope: Easy2Patch (All versions)

Depending on the license, the SCCM/WSUS/INTUNE button in the ribbon menu is clicked on the Settings screen. WSUS settings are made from the WSUS Settings tab as follows:

1. In the Host address part, the server address of the SUP role is written as FQDN.

2. Select the Use SSL button

3. Enter the Secure Port value configured in WSUS in the Port field. By default it is 8531. But it could be 443 or any other port.

4. The connection test is performed by pressing the test button. If the test is successful, a question about saving the record is asked. Yes is clicked.

WSUS Secure Port is the HTTPS port used by the WSUS server. By default, WSUS uses the Secure Port as 8531.

To verify which port the WSUS server is using, you can follow these steps:

1. On the WSUS server, open IIS Manager.

2. In the left-hand panel, expand the "Sites" node and click on the "WSUS Administration" site.

3. On the page that opens, click on "Bindings" in the "Actions" section on the right.

4. In the window that opens, click the "Edit" button next to the port specified as "https" in the "Type" column.

5. In the window that opens, in the "Port" field, you can see the WSUS Secure Port number.

By following these steps, you can find out the secure port used by the WSUS server.

Size limit for WSUS Update Publishing

WSUS server has a maximum size limit. Some update packages may exceed the size limit. When you want to deploy updates larger than 384 MB You shouldn't do that in general. Updates can't be published to the WSUS server due to the locally published packages size limit. The WSUS package size limit is 382 MB by default.

You can change the default size limitation in 2 ways.

First method is, you can change the maximum file size from registry. When you run the powershell script, maximum file size for publishing updates in wsus changed to 512 MB. Maximum file size for publishing is 2047 MB.

[reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer()
$size = $wsus.GetConfiguration().LocalPublishingMaxCabSize
Write-host "Current Max Size" $size
$config = $wsus.GetConfiguration()
$config.LocalPublishingMaxCabSize = 512
$config.save()

You can change this value easily in Easy2Patch Console. Change Local Publishing Max Size (MB) value to 512 and then click submit button.

Local Publishing Max Size (MB)