In this post I will show you how to deploy 3rd party Adobe Reader updates through SCCM. For deploying these kinds of updates, first you need to enable third-party updates, once done you can deploy custom catalog such as Adobe Reader and others.
Requirement for adding Custom Catalog
Requirement for enabling Custom catalog is to configure SSL on WSUS and SUP if they are remote.
Configure SSL on WSUS This is the first step you have to do if WSUS and SUP is remote. You may follow how to configure WSUS / SUP to use SSL for communication. Configuring of SSL requires a certificate which could be your on-premises certificate if you have PKI or any external certificate. This also requires configuring few WSUS web services directory by securing it using SSL. All these steps are covered in the link.
Configure SSL on SUP : This is another step we require. This is a simple setting, open configuration manager console and navigate to \Administration\Overview\Site Configuration\Servers and Site System Roles, select site system role where SUP is installed. Under bottom pane, go to the properties of Software Update point, under WSUS Configuration enable “Require SSL communication”
Available Third-party update Catalog for SCCM
Following are the available third-party update catalog available for import (Custom catalog provider):
Adobe
Multiple catalogs are available from Adobe.
https://www.adobe.com/devnet-docs/acrobatetk/tools/DesktopDeployment/sccm.html
Centero Software Manager
https://centero.fi/centero-software-manager/product-editions/#csm-for-mecm
Dell
Partner catalog available in the Third-Party Software Update Catalogs node
https://www.dell.com/support/article/sln311138/
https://downloads.dell.com/Catalog/DellSDPCatalogPC.cab
ftp://ftp.dell.com/catalog/DellSDPCatalog.cab
Fujitsu
https://support.ts.fujitsu.com/GFSMS/globalflash/FJSVUMCatalogForSCCM.cab
HP
Partner catalog available in the Third-Party Software Update Catalogs node
https://hpia.hpcloud.hp.com/downloads/sccmcatalog/HpCatalogForSms.latest.cab
http://ftp.hp.com/pub/softlib/software/sms_catalog/HpCatalogForSms.latest.cab
Ivanti Patch for MEM
https://www.ivanti.com.au/products/patch-management-for-mem
Lenovo
Partner catalog available in the Third-Party Software Update Catalogs node
https://download.lenovo.com/luc/v2/LenovoUpdatesCatalog2v2.cab
Lenovo updates catalog V3 information
https://thinkdeploy.blogspot.com/2020/06/lenovo-updates-catalog-v3-for-sccm.html
Lenovo Patch
https://www.lenovo.com/us/en/software/lenovo-patch-sccm
ManageEngine Patch Connect Plus
https://www.manageengine.com/sccm-third-party-patch-management
Patch My PC Full catalog
https://patchmypc.com/third-party-patch-management-for-sccm-and-intune
Limited catalog
https://patchmypc.com/frequently-asked-questions#trial-catalog
SolarWinds Patch Manager
https://www.solarwinds.com/patch-manager/use-cases/third-party-patch-management-sccm
Add Custom Catalog for Adobe Reader
Navigate to \Software Library\Overview\Software Updates\Third-Party Software Update Catalogs. We can only see partner updates for Dell, HP and Lenovo as these are Partner catalog which got published as part of enabling third-party updates. We need to add custom catalog for that click on Add Custom Catalog.
Information of catalogs are available through the link More Catalogs which will give you details of all custom catalog provider.
The catalog information of Adobe is listed under SCCM-SCUP — Acrobat Desktop Windows Deployment (adobe.com) which gives the information of available catalog. As we are going to deploy Adobe Reader catalog, copy the link for Reader Classic track (xml) which will eventually point to https://armmf.adobe.com/arm-manifests/win/SCUP/ReaderCatalog-2020.cab
Back to Add Custom Catalog, provide the Catalog details as:
Download URL: https://armmf.adobe.com/arm-manifests/win/SCUP/ReaderCatalog-2020.cab
Publisher: Adobe
Name: Adobe Reader
Description: Custom catalog for Adobe Reader
Verify the Summary and click Next to finish the process.
Subscribe to Catalog
Adobe Reader Update catalog is visible now. Click on Subscribe to Catalog.
Under General information for this catalog subscription, click Next.
You will get message that download of catalog succeeded, click Next.
Under Approval to subscribe page, click on View Certificate and Install Certificate
The location of certificate should be Local Machine, click Next.
Once import is successful, click on OK under Certificate and check the box “I have read and understood this message” and click Next.
Set Custom schedule to sync third-party update catalog for Adobe.
Verify the Summary and click Next.
This will initiate the Sync process or you can manually do it by clicking on Sync now.
We can verify the 3rd party sync status through SMS_ISVUPDATES_SYNCAGENT.log
The sync status will show as Success.
Enable Adobe Reader Product under Software Update Point Component
Navigate to \Administration\Overview\Site Configuration\Sites and select Configure Site Components > Software Update Point.
Under All Products, select Adobe > Adobe Reader and click ok.
Do another sync by navigating to \Software Library\Overview\Software Updates\All Software Updates and click on Synchronize Software Updates.
Verify the sync status through wsyncmgr.log.
Once sync is completed, you will be able to see the Adobe Reader updates under \Software Library\Overview\Software Updates\All Software Updates
You will notice the updates are shown in blue icon and there is no Content Information available for it as this is not yet published.
Publish Third-Party Update
Select the update / updates you wanted to publish, right click and select Publish Third-Party Software Update Content which will download the metadata in SCCM Database along with content information.
The process will go through 1st synchronization for 3rd party update to download metadata. Then you have to trigger another synch through All software update. The sequence of log files to check are:
- SMS_ISVUPDATES_SYNCAGENT.LOG
- Wsyncmgr.log
Once the updates are published, we can see the published updates showing in Green icon while others showing with blue icon. The green ones are ready to be download and deploy on the devices with Adobe Reader.
As the update is published you will be able to see the metadata information also published.
Important Links
SCCM-SCUP — Acrobat Desktop Windows Deployment (adobe.com)
Enable third-party updates – Configuration Manager | Microsoft Docs
Available third-party software update catalogs – Configuration Manager | Microsoft Docs
