Deploying Non-MS Patches (Test with Adobe Flash 10)

[guest]

I'm getting started with SCCM, and at this moment i'm trying to install third party updates. I choose the 'easiest' one to patch (from my point of view) : Flash Player, because after getting registered with Adobe I can import Flash updates pretty easy.

I had a little trouble trying to make the certificate work between SCUP & SCCM/WSUS. Let me explain you a little bit about what happend, so that might help to explain a little bit about what's going on....


-since I have never worked with certificates before, I did some test-error with SCUP and I created a two certificates (both Self-Signed); I exported the first one into a file, but i couldnt make it work. After reading on Technet a little bit more about how the ceriticates work on SCUP, I created the second one, and I was able to 'connect / sync' between SCUP & SCCM/WSUS. I used this link, that did help me a lot:
http://technet.microsoft.com/en-us/library/bb531049

-After configuring the second certificate successfully, I was able to see Adobe Updates on my product catalog and consequently on my Update Repository.

-After that I tried to Deploy that update into my two test computers, but then i realized that I had to have the certificate installed on the computers. After using technet again, I found the link below to install the certificate on the client computers (using Software Distribution).
http://technet.microsoft.com/en-us/libr ... 31031.aspx

-After understading the certutil.exe program (and the switches); I was able to install the certifcate on the test computers (I checked that on IE properties). Note: It was installed on the Trusted Publishers & Trusted root Certification Authorities. Then I ran the deployment again, and got new errors; after checking the log it seems that it was a 'certificate' problem. Then I noticed that I deployed the first certificate which it was not the same that SCUP & SCCM/WSUS were using.... ugghhh.....

-Then I decided to remove all certificates and start all over with only one certificate. I did all the same steps I just explained above, then I tried to deploy the update again, but I was not even able to deploy it; after checking the error message; it said that it was a certificate problem; then I realized that I had to re-sign the certificate from the catalogs @ SCUP (ugghhh #2). What I did was to remove all the catalogs (only Adobe Flash Player) and re-create them again, publish them and Import updates.

-This time I was able to create the package, and deploy it on SCCM; on the computers I was able to download them but at the end...(during the install) it cannot be installed. This time I don't know what the problem it could be; the client's log doesn't help me; and that's why I'm here :).....

Edit [Start]:

Something that I noticed is that even when I uncheck the Adobe products on the 'component config' in SCCM the Adobe updates remain on my Update Repository; actually those updates remained there when I remove the updates from SCUP PRoduct catalog. Is that normal ??

Edit [End]

Edit#2 [Start]

I forgot to add that I have configured the group policy on the clients to enable 'Allow signed content from intranet Microsoft update service location'

Edit#2 [End]

LAPTOP1 (DO-SPARE-LAP06)
UpdatesDeployment.log
UpdatesHandler.log
UpdatesStore.log
WUAHandler.log


LAPTOP2 (DO-SPED-LAP01)
UpdatesDeployment.log
UpdatesHandler.log
UpdatesStore.log
WUAHandler.log


thank you very much for your help !

[guest]

I finally make it work!.


As I said on my previous post, I didn't use the 'Import updates' from the catalog (for Adobe Flash Player Updates). I had to create the product update manually using the install files from Adobe,

First I tried using the MSI file, but with that one I had the same problem as I had before; so I tried using the exe update. On that case I was able to install FlashPlayer without any problems.

At this time I don't know if it was a problem related with just that particular MSI, or if it was a problem why any 'third-party' app MSI that I try to deploy (We will see with the next program, Java Run Time Environment).....

More to come....problably on a different post....