Overview

This guide covers the configuration of WSUS Replica Servers, including setup steps for both replica and primary WSUS servers. 

It ensures proper synchronization between upstream and downstream WSUS servers in your environment.

Steps in WSUS Replica

Once the WSUS Replica server setup is complete, please follow the instructions below to set up a WSUS replica:

1. Open the Windows Server Update Services from Server Manager -> Tools.
2. The first window will explain the requirements that must be met to proceed. Click "Next" to continue.
3. Leave the option as is or uncheck it, then click Next
4. Select the option "Synchronize from another Windows Server Update Services."
5. Enter the FQDN of the Upstream Server
6. Depending on your requirements, check "This is a replica of the Upstream." Click Next
7. Click on "Start Connecting."
8. Select the language for the Windows updates. If you only use Windows in English, choose English. Otherwise, select the appropriate languages based on your requirements. And click Next
9. Schedule the synchronization. Note that the synchronization will be between this WSUS server and the WSUS server you selected in the previous steps.
10. Check the "Begin initial synchronization" option and click "Next" if you wish to start immediately after completing the configuration.
11. Click on the Finish button

Steps in Primary WSUS

1. After completing the configuration, log in to the WSUS Upstream Server.
2. Expand the WSUS section and click on Downstream Servers.
3. Ensure that the Downstream Server is listed there.

JetPatch Credential Assignment (Required)

After completing the WSUS replica configuration, you must assign credentials to the replica server in JetPatch before it can be used for patching. This is a separate step from connector deployment and is required even when the connector is already installed and connected.

Steps:

1. Go to Servers in the JetPatch UI
2. Find and select the WSUS replica server
3. Click Server Actions → Assign Account
4. Select the administrative account that has access to the WSUS replica
5. Click Save

Verify: Go to Servers → Discovery Sources, find the WSUS discovery source, and confirm connection_status = OK. If credentials are missing the status will show an error or the replica will appear disconnected.

Note: Each replica server requires its own credential assignment. A credential assigned to the primary WSUS server does not carry over to replicas. Missing credentials on a replica will cause No access credentials errors in the logs and WSUS sync failures on endpoints managed by that replica, even though the connector is connected.