Configure and Manage Replica Servers

 

Applies To: Windows Server Update Services, Windows Small Business Server 2011 Standard, Windows Server 2008 R2, Windows Server 2003 with SP2, Windows Server 2008 R2 with SP1

A WSUS replica server inherits update approvals and computer groups from the upstream WSUS server. A WSUS deployment that uses replica servers typically consists of a single WSUS root server that manages updates, and one or more downstream replica WSUS servers.

For planning guidance on when to use replica servers, see Replica mode (centralized administration).

In this topic:

Configure a replica server

You can identify a WSUS server as a replica server by using the WSUS server configuration wizard, or by using the procedure that is described in this topic. For more information about the WSUS server configuration wizard, see Configure WSUS by Using the WSUS Server Configuration Wizard.

To configure a WSUS replica server

  1. Install the WSUS server software by following the instructions in Install the WSUS 3.0 SP2 Server Software Through the User Interface or Install the WSUS 3.0 SP2 Server Software in Unattended Mode.

  2. Open the WSUS Administrator Console by following the instructions in Open the WSUS Administration Console.

  3. In the WSUS Administration Console, expand the server name, and then click Options.

  4. In the Options pane, click Update Source and Proxy Server.

  5. On the Update Source page, select Synchronize from another Windows Server Update Service server.

  6. In the Server name text box, type the name of the local upstream WSUS server.

  7. In the Port number text box, type the port number that this WSUS server will use to communicate with the upstream WSUS server. The default port number is 80.

    For more information about port configuration options, see Configure Internet Information Services.

  8. To use Secure Sockets Layer (SSL) to help secure WSUS communications, select the Use SSL when synchronizing update information check box. This option works only if this WSUS server and the local upstream WSUS server support SSL.

    For more information about how to use SSL with WSUS, see Secure WSUS with the Secure Sockets Layer Protocol.

  9. Select the This is a replica of the upstream server check box, and then click OK.

Manage a replica server

You can perform limited administration on a WSUS replica server. This administration consists of the following tasks:

  • Add and remove computers from computer groups.

    You must assign the client computers that are serviced by the replica WSUS server to the computer groups that are inherited from the upstream WSUS server. For more information about how to assign computers to computer groups, see Manage WSUS client computers [SP_2].

  • View approved updates.

    On a replica WSUS server, you can view updates that are approved on the upstream WSUS server. For more information about how to view approved updates, see View Updates in the WSUS 3.0 SP2 Operations Guide.

  • Monitor update, synchronization, computer status, and WSUS settings.

    You can view all standard WSUS reports on replica WSUS servers. You can also roll up replica server reports to an upstream WSUS server. For more information about how to view and use reports, see Use Reports in Windows Server Update Services 3.0 SP2 in the WSUS 3.0 SP2 Operations Guide.

Import updates or metadata to a replica server

In some situations, you might want to import updates or metadata to a replica server. To copy update content to a replica server, follow these steps:

  1. Turn off the replica setting on the replica server.

  2. Export the updates and metadata from the upstream server.

  3. Import the updates and metadata to the replica server.

  4. Turn on the replica setting on the replica server.

To import updates and metadata to a replica server

  1. Follow the instructions in the Export updates and metadata section to export the data from the upstream WSUS server.

  2. Open the WSUS Administration Console by following the instructions in Open the WSUS Administration Console.

  3. In the left pane of the WSUS Administration Console, expand the server name, and then click Options.

  4. In the Options pane, click Update Source and Update Server, and then click the Update Source tab.

  5. Clear the This is a replica of the upstream server check box, and then click OK. Do not close the WSUS Administration Console.

  6. Import the content to the replica server by following the instructions in the Import updates and metadata section.

  7. Return to the WSUS Administration Console. In the Options pane, click Update Source and Update Server, and then click the Update Source tab.

  8. Select the This is a replica of the upstream server check box, and then click OK.