Cumulative Update 1 (CU1) for SCCM 2012 R2 SP1 and SCCM 2012 SP2 is now available. This post is a complete step-by-step SCCM 2012 R2 SP1 CU1 Installation guide. If you’re looking for a complete SCCM 2012 installation guide, see our blog series which covers it all.

Installing SCCM cumulative updates is very important to your infrastructure. It fix lots of issues, which some of them are important.

As this is the first post-R2 SP1 cumulative update, the important requirement for the installation is that SCCM 2012 R2 SP1 is installed. The latest non-R2 SP1 cumulative update is CU5. Don’t get confused, this CU could have been named CU6 (chronologically wise) but Microsoft has decided to reset the numbering due to the Service Pack release. See our SCCM 2012 versions post to have a clear view of all build numbers.

Improvements/Fixes

The major new functionality of CU1 is the Automatic Client Upgrade feature during CU setup wizard. This will facilitate client upgrade when applying further CU.

Latest KB are included and many bugs are fixed in this cumulative update. Follow this Microsoft Support page to see a detailed list.

Before you begin

Installing this update is very similar to prior CU. I’ll guide you through the upgrade process step-by-step in a standalone primary scenario.

This update can be applied directly to the following Systems/Roles:

  • The Central Administration Site (CAS)
  • Primary Site
  • Secondary Site
  • SMS Provider
  • Configuration Manager Console

In this guide, we’ll be updating a Primary Site Server, console and clients.

SCCM 2012 R2 SP1 CU1 Installation guide

To start the installation, lauch a remote desktop session on your Primary Site Server, and run CM12_SP2R2SP1CU1-KB3074857-X64-ENU.exe

A log file will be created in C:\Windows\Temp\CM12_SP2R2SP1CU1-KB3074857-X64-ENU.log

  • On the Welcome Screen, click Next

SCCM 2012 R2 SP1 CU1 Installation guide

  • Accept the license agreement, and click Next

SCCM 2012 R2 SP1 CU1 Installation guide

  • Ensure that everything is green, and click Next. On the screenshot, a restart is required before installing the CU

SCCM 2012 R2 SP1 CU1 Installation guide

  • Check the box to update the console, click Next

SCCM 2012 R2 SP1 CU1 Installation guide

  • Select Yes, update the site database, click Next

SCCM 2012 R2 SP1 CU1 Installation guide

  • This is the new Automatic Client Update addition. Select the behavior that you want
  • Choosing the Automatically apply option results in following steps:
    • Places the most recent client patch file on the site server
    • Updates content on the distribution points for this site and any child sites. Note this only occurs when the cumulative update runs on the Central Administration Site (CAS)
    • Updates the client package on the Management Point of the local site; this source is used in the event there are no distribution points available for client installation
    • Future client installations using the Client Push method will apply the new patch automatically
    • The time frame for updating the client depends on your Automatic Client Upgrade settings
  • If you chose the Manually Apply option, you will need to update your client manually as in prior CU (See our Updating the clients section)

SCCM 2012 R2 SP1 CU1 Installation guide

  • Check all 3 checkbox (Server, Console and Clients), click Next

SCCM 2012 R2 SP1 CU1 Installation guide

  • Edit the package name and program to your need, click Next

SCCM 2012 R2 SP1 CU1 Installation guide

SCCM 2012 R2 SP1 CU1 Installation guide

  • Review the Summary page, click Install

SCCM 2012 R2 SP1 CU1 Installation guide

  • Installation is in progress

SCCM 2012 R2 SP1 CU1 Installation guide

  • You can follow the installation progress in the log file (C:\Windows\Temp\CM12_SP2R2SP1CU1-KB3074857-X64-ENU.log)

SCCM 2012 R2 SP1 CU1 Installation guide

  • When setup is complete, click Next and then Finish

SCCM 2012 R2 SP1 CU1 Installation guide

Verification

Consoles

After setup is completed, launch the System Center 2012 Configuration Manager Console and verify the build number of the console. If the upgrade was successful, the console build number will be 5.0.8239.1203.

SCCM 2012 R2 SP1 CU1 Installation guide

Servers

Open registry editor and check the HKLM\Software\Microsoft\SMS\Setup\ key. If the installation succeeded CULevel key value will be 1.

SCCM 2012 R2 SP1 CU1 Installation guide

You can also verify both client and console version using PowerShell :

  • Server : Get-ItemProperty -Path HKLM:\SOFTWARE\Microsoft\SMS\Setup -Name “CULevel”
  • Console : (Get-Item ($env:SMS_ADMIN_UI_PATH.Substring(0,$env:SMS_ADMIN_UI_PATH.Length – 5) + ‘\Microsoft.ConfigurationManagement.exe’)).VersionInfo.FileVersion

SCCM 2012 R2 SP1 CU1 Installation guide

Clients

The client version will be updated to 5.0.8239.1203 (after updating, see section below)

SCCM 2012 R2 SP1 CU1 Installation guide

This update also brings the anti-malware client version to 4.7.0209.0. You can find the version information by clicking About on the Help menu of the Endpoint Protection client UI.

Package distribution

Navigate to Software Library / Packages / Configuration Manager Updates

  • You’ll see that your CU1 updates packages are created

SCCM 2012 R2 SP1 CU1 Installation guide

  • Go ahead and Distribute Content to your distribution points

SCCM 2012 R2 SP1 CU1 Installation guide

Updating the Clients

If you select the Automatically Apply option in the installation wizard, your client will update using your time frame settings.

  • Open the SCCM Console
  • Go to Administration / Site Configuration / Sites
  • Click the Hierarchy Settings in the top ribbon
  • Select Automatic Client Upgrade tab
  • The Upgrade client automatically when the new client update are available checkbox has been enabled
  • Review your time frame and adjust it to your needs

SCCM 2012 R2 SP1 CU1 Installation guide

If you select the Manually Apply option in the wizard, you will need to update your client manually.

This update contains 2 update packages for client installations. One for 32-bit clients and one for 64-bit clients.

Create two collections for the client upgrade. (If not already done in previous CU)

All-x64-based Clients

[pastacode lang=”sql” message=”” highlight=”” provider=”manual” manual=”select%20SMS_R_SYSTEM.ResourceID%2CSMS_R_SYSTEM.ResourceType%2CSMS_R_SYSTEM.Name%2CSMS_R_SYSTEM.SMSUniqueIdentifier%2CSMS_R_SYSTEM.ResourceDomainORWorkgroup%2CSMS_R_SYSTEM.Client%20from%20SMS_R_System%20inner%20join%20SMS_G_System_COMPUTER_SYSTEM%20on%20SMS_G_System_COMPUTER_SYSTEM.ResourceId%20%3D%20SMS_R_System.ResourceId%20where%20SMS_G_System_COMPUTER_SYSTEM.SystemType%20%3D%20%22X64-based%20PC%22″/]

All-x86-based Clients

[pastacode lang=”sql” message=”” highlight=”” provider=”manual” manual=”select%20SMS_R_SYSTEM.ResourceID%2CSMS_R_SYSTEM.ResourceType%2CSMS_R_SYSTEM.Name%2CSMS_R_SYSTEM.SMSUniqueIdentifier%2CSMS_R_SYSTEM.ResourceDomainORWorkgroup%2CSMS_R_SYSTEM.Client%20from%20SMS_R_System%20inner%20join%20SMS_G_System_COMPUTER_SYSTEM%20on%20SMS_G_System_COMPUTER_SYSTEM.ResourceId%20%3D%20SMS_R_System.ResourceId%20where%20SMS_G_System_COMPUTER_SYSTEM.SystemType%20%3D%20%22X86-based%20PC%22″/]

Adjust the package options to fit your environments and deploy the update to your clients.

Once deployed I like to create a collection that targets clients without the latest CU. I use it to monitor which client haven’t been updated yet.

Here’s the query to achieve this: (You can also refer to our Set of Operational Collection Powershell Script)

[pastacode lang=”sql” message=”” highlight=”” provider=”manual” manual=”select%20SMS_R_SYSTEM.ResourceID%2CSMS_R_SYSTEM.ResourceType%2CSMS_R_SYSTEM.Name%2CSMS_R_SYSTEM.SMSUniqueIdentifier%2CSMS_R_SYSTEM.ResourceDomainORWorkgroup%2CSMS_R_SYSTEM.Client%20from%20SMS_R_System%20where%20SMS_R_System.ClientVersion%20!%3D%20’5.0.8239.1203′”/]

Happy updating ! 🙂

Comments (60)

Russell

08.13.2015 AT 07:50 PM
What other servers than the primary site server should we deploy the server update to? Do site systems need the update? Thanks, Russell

Benoit Lecours

08.14.2015 AT 08:08 AM
As stated in the article : This update can be applied directly to the following Systems/Roles: The Central Administration Site (CAS) Primary Site Secondary Site SMS Provider Configuration Manager Console Site systems (DP,RP,SUP...) if located on separate server doesn't need to be updated.

Emerson Simette

08.13.2015 AT 07:26 AM
Hí Benoit Lecours, Great site! Thanks for sharing his knowledge.

Benoit Lecours

08.14.2015 AT 08:07 AM
Thanks

Anton Masyan

08.11.2015 AT 11:01 AM
Did you try to install console update silently? Everytime I get an error (1603) and "An installation package for the product System Center Configuration Manager Console cannot be found. Try the installation again using a valid copy of the installation package 'adminconsole.msi'." but if I use commandline "msiexec.exe /p \\sccm\SMS_ASD\hotfix\KB3074857\AdminConsole\i386\configmgr2012adminui-sp2r2sp1-kb3074857-i386.msp /L*v c:\configmgr2012adminui-sp2r2sp1-kb3074857-i386.msp.LOG REINSTALLMODE=mous REINSTALL=ALL" everything is OK. The same thing with a new console update from KB3081699. Same error.

Benoit Lecours

08.12.2015 AT 08:13 AM
This could be a permission error. When you launch the installation using SCCM, it runs with the SYSTEM account. Check if the SYSTEM account has rights on \\sccm\SMS_ASD\hotfix\KB3074857\AdminConsole\i386\configmgr2012adminui-sp2r2sp1-kb3074857-i386.msp You can also test this manually by launching a command prompt using the SYSTEM account (using psexec -i -s)

Paul

08.10.2015 AT 04:12 PM
Is it possible to select the option to manually/automatically apply the CU across the environment outside of the install?

Benoit Lecours

08.12.2015 AT 08:05 AM
Sure, Go to Administration / Site Configuration / Sites Click the Hierarchy Settings in the top ribbon Select Automatic Client Upgrade tab Enable the "Upgrade client automatically when the new client update are available" checkbox Done ! 🙂

VR

10.23.2015 AT 12:31 PM
I upgraded to CU1 and during the installation I didn't get the option for automatic /manual upgrade, not sure why. Our lab is stand alone primary site server. Can someone assist on why. After upgrade is complete, in Hierarchy settings the option to Enable the automatic client push is greyed out. All registry key seems to be updated correct as expected.

Benoit Lecours

10.26.2015 AT 11:49 AM
Hi VR, First time I heard something like this. Have you look the CU1 installation log located in C:\Windows\Temp ?

VR

11.03.2015 AT 01:32 PM
I am not able to open the log ConfigMgrUpdateSetup.log. It crashes whenever I open, even in notepad it displays as ASCII.

Benoit Lecours

11.04.2015 AT 05:08 PM
Hum... never seen that one

Aaron Whittaker

08.10.2015 AT 12:50 AM
Check out the first 'Important' box here https://technet.microsoft.com/en-us/library/Hh508770.aspx?f=255&MSPPError=-2147217396 "If you manage endpoint protection for Windows 10 Technical Preview computers, then you must configure System Center 2012 Configuration Manager to update and distribute malware definitions for Windows Defender. Because Windows Defender is included in Windows 10, an endpoint protection agent does not need to be deployed to client computers."

Benoit Lecours

08.10.2015 AT 07:44 AM
Hi Aaron and QMJ, We'll make a blog post dedicated to Endpoint Protection this week. Stay tuned 😉

MJQIAN

08.07.2015 AT 01:33 AM
Hi Benoit 🙂 Hope you are doing well. Have you noticed that Microsoft removed endpoint protection on WIN10 and use Windows defender ONLY. There is no KB and blog mentioned this change.