In order to use any 3rd party updates imported through the System Center Updates Publisher, it is necessary to sign those updates during the publishing process. To correctly sign those updates you will need a certificate that is trusted by the client machines. There are a few options when obtaining this certificate:

  • Using an internal PKI infrastructure obtain a certificate that is trusted by the machines automatically in your domain.
  • Obtain a certificate that is automatically trusted. These can usually be purchased from companies like Microsoft, Verisign, and GoDaddy. By default, Windows Operating systems will trust these certficates.
  • Use a self-signed certificate from the SCUP publishing machine. It will be necessary to force machines to trust these certs. This can be done via a PKI infrastructure, or using command line utilities (http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dscj_mcs_ooiy.mspx?mfr=true). This is most useful when combined in a task sequence - e.g. Install the certificate then update the hardware.
These 2 Technet articles will list the appropriate places to place the certificate:
http://technet.microsoft.com/en-us/library/bb531031.aspx
http://technet.microsoft.com/en-us/library/bb531049.aspx


Back to Dell Updates Catalog