Verify Requirements with the Configuration Checker

Verify Requirements with the Configuration Checker

Purpose

The Configuration Checker is used to determine if your Configuration Manager environment meets all the requirements for using Lenovo Patch.

Description

To access the Lenovo Patch Configuration Checker, do the following:

  1. In the Configuration Manager console, navigate to the Software Library workspace.
  2. Navigate to Software Library > Lenovo Patch > Updates.
  3. In the ribbon bar, click on the Settings button.

    Lenovo Patch Settings Button in Ribbon Bar

  4. Select the General tab.
  5. Click the Launch Configuration Checker button.

Note: The Configuration Checker can be run from the command line:

  1. To find the location of the console installation, open the Registry Editor using regedit.exe
  2. Navigate to HKLM\Software\Wow6432Node\Microsoft\ConfigMgr10\Setup
  3. The location of the console installation is in the 'UI Installation Directory' entry. For the example, the 'UI Installation Directory' will be 'C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\'
  4. The Configuration Checker executable is found in the 'bin' folder.
  5. To run the Configuration Checker in this example, use:
    C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\bin\ST.SCCM.ConfigurationChecker.exe.

The Configuration Checker must be run with full Administrator privileges.

Fill in the required fields and click the Start button.

Most of the information on this dialog will be pre-populated, but can be modified as necessary.

  • WSUS Server FQDN: Type the fully qualified domain name of the WSUS server.
  • Port: Select the port used to access the WSUS server.
  • User account (domain/user): Type the domain and username of the account to be evaluated.
  • Account password: Type the password associated with the user account. This field can be left blank if you are evaluating the account that you are using to run this tool.
  • Configuration Manager Server FQDN: Type the fully qualified domain name of the Configuration Manager server.
  • Use proxy: If enabled, indicates that proxy server credentials are required in order to run the Configuration Checker test. If you clear the check box after specifying credentials, the credentials will be saved but not used. This box will initially mirror what is configured on the Proxy tab but can be temporarily overridden here.
  • Proxy user name: Type the user name for an account on the proxy server. This box will be automatically populated with the user name provided on the Proxy tab, but it can be overridden. It may be necessary to specify a domain as part of your user name (for example: mydomain\my.name).
  • Proxy password: Type the password for the proxy server account.
  • Test Intune Connection: Enabling this option allows an administrator to test the associated Intune connection.
  • Tenant Domain: This setting can be found by logging into the Azure Portal, going to the Active Directory blade, and then clicking on Domain names.
  • Application ID: This setting can be found on the Overview tab of the Azure portal.
  • Client Secret: This setting can be found on the Certificates & Secrets tab of the Azure portal.

The utility performs the following checks:

 Check Remediation
A connection can be made to the site server: SERVERNAME
User has read, write, and delete permissions to the profile directory: C:\Users\USERNAME\Lenovo\Lenovo Patch. 
Checking that the username and password are valid.
  • Verify the password for the user is correct.
A connection can be made to a valid database.
User has 'Logon as a batch job' privilege on this computer.
Can query Active Directory for all users.
User is a member of the 'Administrators' group on the WSUS server.
User is a member of the 'WSUS Administrators' group on the WSUS server.
User has correct MECM Security settings.
Remote Server Administration Tools (RSAT) is enabled.
A connection can be made to the WSUS server using the port specified.
A WSUS signing certificate is in place and can be accessed by the user.
The WSUS signing certificate is not expired.
WSUS signing certificate is in the Root store on SERVERNAME.
WSUS signing certificate is in the Trusted Publishers store on SERVERNAME.
An update can be successfully published as user DOMAIN\USERNAME.
The update was successfully published to the configured WsusContent directory.
The product is licensed.
Retrieve the Lenovo Patch catalog from the internet.

If any of the tests fail, you should correct the issue before using Lenovo Patch.