This is a quick and dirty how-to guide as I have a couple of customer who have asked for the same – how to Install the CSI Plugin in order to Connect the Flexera CSI to your ConfigMgr/WSUS/SUP infrastructure where you get the ability to monitor 3rd party vulnerabilities and remediate any threats by patching or removing software. This is a great management tool addon to your WSUS/ConfigMgr infrastructure and is a must for a complete patch management solution. If you are new to Flexera Software CSI I suggest you go to the following links where you can read up [...]
Need a new search?
If you didn't find what you were looking for, try a new search!
In Part I focused on installing and configuring Secunia CSI 7 and System Center 2012 R2 ConfigMgr. In this part I will explain how you can deploy software updates. I do anticipate that you already have a working Software Update Management infrastructure managed by System Center 2012 R2 ConfigMgr. Deploying 3rd party software updates The process of deploying 3rd party software updates can be initiated from the CSI web portal or using the System Center 2012 R2 ConfigMgr plugin. In my world updates are divided into two categories: Applications managed and supported by the organization. In this category I often [...]
Question if often get when visiting customers;”Is there really a need for managing our 3rd. party applications when we already patch Adobe Reader and JAVA”? The short answer is Yes, and the longer answer is please look at the numbers. The absolute number of vulnerabilities detected in 2013 was 13,073, discovered in 2,289 products from 539 vendors. The number shows a 45% increase in vulnerabilities in the five year trend, and a 32% increase from 2012 to 2013. Knowing these numbers I get the feeling that only patching Adobe Reader and JAVA is not enough to keep my environment secure. [...]
Lately I have done a lot of Secunia CSI installations. One of the questions that keeps coming up is “what client scanning options do we have, if we do not install the CSI agent locally?”. You basically have three options as described below. Software Inventory You can use ConfigMgr Inventory and gather information about *.EXE, *.OCX and *.DLL files. This process will get the job done although you are gathering much more information than CSI requires. This method requires that the Site Server (where you installed CSI) have access to the Cloud based database hosted by Secunia. Network scanning Perform [...]
A few years ago I wrote a blog posts on Microsoft SCUP and Secunia CSI 5.0. Back then my conclusion was that Secunia had a superb security database but required a custom agent and didn’t have an easy Configuration Manager Console integration. With the latest release of Secunia CSI those “obstacles” are removed and the solution looks very promising. In this, my first test drive of the product, I will see how quickly I can install the solution and start patching my environment. The installation CSI requires that you first install the CSI administrator console and then the CSI SCCM [...]
Could you please tell me how many days can I use the trial version of Dashboard? Looks very useful for my SCCM infra. Also please let me know how to opt for dashboard after the trial period.First a huge thanks for all attending the webinar, as promised he are a list of the questions that we didn’t have time to answer during the webinar. Q: We already use Flexera for compliance. Is "Patching" included in it OR is it a separate module? A: Patching is integrated in the standard CSI solution. You can either patch using WSUS or integrate with [...]
Lately I have been doing some Secunia integrations with System Center 2012 R2: Configuration Manager (SCCM/ConfigMgr 2012). When you are setting up the connector between Secunia CSI and WSUS one of the first things the wizard is asking you to do is to Configure a WSUS Self-Signed Certificate, the WSUS signing certificate is required to create and install local packages. Without it, only packages from Microsoft Update will be installed. How-ever this time I got this error when trying to 'Automatically create and install certificate' during the Connector Wizard: An error occurred when creating the WSUS Signing Certificate Now this [...]
Slides and links Here is the link to the slides: http://deploymentresearch.com/DRFiles/MSIgnite2015preday.zip Video to deploying Windows 10 IoT to Raspberry Pi 2 https://www.youtube.com/watch?v=Q5SfPTykM6A Hydration Kit for System Center 2012 R2 http://deploymentresearch.com/Research/Post/407/The-Hydration-Kit-for-System-Center-2012-R2-is-available-for-download The script that exported task sequences was gathered from the following post http://trevorsullivan.net/2010/05/13/exporting-configmgr-task-sequences (by Trevor Sullivan) The script that imported task sequences was gathered from the following post http://www.david-obrien.net/2012/09/29/how-to-backup-restore-your-tasksequenceconfiguration-manager-2012-and-powershell (by David O’Brien) TechNet Docs - Create a Windows 8.1 Reference Image http://technet.microsoft.com/en-us/library/dn744290.aspx TechNet Docs - Deploy a Windows 8.1 Image Using MDT 2013 http://technet.microsoft.com/en-us/library/dn744279.aspx TechNet Virtual Labs - Creating a Windows 8.1 reference image http://go.microsoft.com/?linkid=9845755 Building reference images like a [...]
Merry x-mas! In today’s December calendar tips & trick I'm going to a post some useful powershell snippets for Service Manager. As we all know, the December 11th is the special day where the Bethlehem-powershell star outshined all the others. The scripts here is mostly for administrative purposes. They are of course provided “as-is” so feel free to expand/optimize/ include more error handling etc. Create Management Pack UPDATE: Script now works with different windows localization. Default language will now be set according to the console language user preference and not the windows locale Unfortunately we are not [...]
Welcome to the Coretech x-mas blog Calendar where we will give you a little insiders tip every single day in December. Even if I don’t deploy 3rd party updates with SCUP 2011 I still use the tool for two purposes. I always upgrade my ConfigMgr clients and consoles to the latest CU using the built-in cab files. This allow me to use my existing software updates collections and I don’t have to worry about specific platforms since the detection rules in SCUP will take care of that. You can find the cab files on the site server in %Program [...]