Microsoft WSUS connector

Microsoft WSUS connector reads security update information from WSUS (Windows Server Update Services) or Microsoft SCCM, and imports the data to Miradore. In Miradore, the data is used as a part of quality index and inventory information. WSUS connector Installer can be found from <Miradore server installation directory>\Connectors\WSUS Connector.

Requirements

• Windows Server Update Services 3

• The connector host computer must have .NET Framework 4.7.2 or later installed.

• User account which runs WSUS connector must have read access to WSUS database or valid  SQL Server Authentication username and password must be provided to connector.

• Connector can be installed to any device which has connection to WSUS database. If connector is not installed to WSUS server, database information must be provided to connector.

• Correct SSL certificate must be available in connector host computer's Windows certificate store if HTTPS connection method is enabled from Miradore system settings

Installation using Windows Installer

1. Run “WSUS 3 Connector.msi” installer file (located in <Miradore server installation directory>\Connectors\WSUS Connector).

2. Set connector configurations (1 of 2)). All fields must be filled before Next button can be pressed.

1. Miradore server name: Host name or IP-address of Miradore server. Collected data is sent to this server.

2. Miradore instance name: Many Miradore Servers can run on same host. Instance name specifies the server.  By default, server is installed with instance name "Miradore".

3. Miradore server port: TCP/IP port that Miradore server uses. By default it is 80.

4. Use HTTPS: This option defines protocol (HTTP/HTTPS) that is used when WSUS connector sends result file to the Miradore server.

5. Ignore SSL errors: If checked, all SSL certificate errors are ignored.

6. Use proxy: If checked, connector uses proxy server to connect with Miradore server.

7. Proxy server: Host name or IP-address of proxy server.

8. Proxy port: Proxy server’s port

9. Proxy authentication method: Authentication method that proxy server uses. Available methods: none, basic, digest and NTLM

10. Proxy user name: User name for proxy server

11. Proxy password: Password for proxy server

3. Set connector configurations (2 of 2)

   1. Data source: This selection defines whether the connector should read the information from Microsoft WSUS or SCCM.

   2. WSUS computer group: WSUS computer group name. If you want to define path to subgroup use '\' as delimiter (For example: 'All Computers\Workstations'). If this field is left empty, information about all computers in WSUS database is read. See the Connector configuration section for more information on configuration of computer groups.

   3. Scanned items: This selection determines which data is being scanned by WSUS connector.

      • Updates: Scans for update data only

      • Computers: Scans for computer data only

      • Both: Scans for update and computer data.

   4. Include computers from replica downstream servers: Check this to include computers replicated from other WSUS servers. Otherwise, only computers which are managed by this server are included.

   5. Read database settings from WSUS: If this is checked, WSUS API is used to get database settings. In this case the connector must be installed to WSUS server. Notice that Database Server name, Instance, and Database name can be read from WSUS, whereas SQL Server user ID and password must always be entered manually. In addition to that, the user account used to run the connector, must have access to database.  

   6. Database server: Database server name and instance. You can also leave this field empty if connector is installed on WSUS server,

   7. Database name: Database name. If 'Database server' is left empty also this field is read from WSUS settings.

   8. Database user ID: SQL Server user ID which has read access to WSUS database. If this field is left empty, Windows user account that runs the connector is used to connect to database.

   9. Database password: Database password.

4. Set Windows Task Scheduler configurations.

   1. Add to Scheduled Tasks checkbox: If checked, Miradore WSUS Connector task is added to Windows Scheduled Task and all fields must be filled before Next button can be pressed.

   2. Start time: Connector is run daily at this time.

   3. User account: Select to use SYSTEM account or give username and password that is used to run task.

   4. [Domain\] User Name: Scheduler will run task as it was started by this user. Add domain if needed.

   5. Password and Retype password: User’s password. Passwords must match.

5. Start installation

6. Authorize connector, see Connector authorization

7. Test that connector works properly

Testing

1. Open Scheduled Tasks menu (Start Menu -> All Programs -> Accessories -> System Tool -> Scheduled Tasks).

2. Right click WSUS Connector and click Run.

3. Open WSUS Connector log file (see log for details).

4. Check that there are no errors or warnings in the log.

Log

WSUS Connector writes log every time it is run. It creates two files for log: wsus_connector.log and wsus_connector.old. Wsus_connector.log has information about last run and wsus_connector.old archives old log files. Size of wsus_connector.old is limited to 2MB. Location of those files is defined in wsus_connector.ini file. By default log files are stored to  <Connector installation directory>\Log

Technical description

Miradore connector for Microsoft WSUS

Additional information

MSI Installer parameters
 

Connector configuration

See also

Network settings for connectors

Connector authorization

System settings for connectors

Connector item

Microsoft patches status view

Microsoft patches view

Copyright © 2022 Miradore Ltd. All rights reserved. Miradore is a registered trademark of Miradore Ltd. All other trademarks or registered trademarks are property of their respective owners.