SCCM Site System Roles
The Site System roles on SCCM server are used to manage the client computers. By default certain roles get installed along with the installation of SCCM site server. The following roles get installed during the setup as given below:-
· ConfigMgr component server
· ConfigMgr distribution point
· ConfigMgr management point
· ConfigMgr site server
· ConfigMgr site system
· ConfigMgr site database
Navigate to Site Management>Site (KAL)>Site Settings>Site Systems. In site systems select the Primary site server. This will display the default roles which are installed on the right side of the console as shown above.
To add more roles to the Primary site server, right click on the site server and select New Roles as shown below
In the New Site Role Wizard, check mark the option and provide FQDN for the site system as shown above. Then click on Next to continue
In System Role Selection window select Server locator point, PXE Service Point, Reporting point, Software update point and Fallback status point as shown above and click Next.
Click Yes on the Popup for the Port configurations for PXE service point.
For Server Locator Point, select ‘Use the site database’ as shown above and click Next.
On the next window select ‘Allow this PXE service point to respond to incoming PXE requests’. Uncheck the option to require password as shown above. In the Interfaces column you can select the network interfaces on which the server should respond. Then click Next to continue.
On the PXE database window select ‘Use the PXE service point’s computer account’ and select ‘Create self –signed PXE certificate’. If you are configuring SCCM in native mode then you need to provide the certificate for PXE role. In this case you can import the certificate by choosing the other option.
For Reporting Point, the name of the report folder and the URL will get displayed automatically. Keep the default settings and click on Next.
If proxy server is present then provide the server name and port for proxy settings. If direct internet connection is present then do not select proxy settings. Click on Next to continue.
Check mark the option ‘Use this server as the active software point’ and provide port number 80 and 443 for SSL port as shown above.
In Sync Source tab, select ‘Synchronise from Microsoft Update’ and select ‘Do not create WSUS reporting events’. Click on Next to continue.
Since synchronisation will be done manually, do not provide any synchronisation schedule and click on Next as shown above.
In Classification tab, select the update classifications like Critical Updates, Security Updates etc as shown above and click Next.
In Products option, select the products for which the updates have to be downloaded and click on Next as shown above.
In languages tab, select only English language and click Next to continue.
Keep default settings for Fallback Status Point and click Next as shown above.
Click on Next on the summary window as shown above.
Click on Close to complete the wizard.
All the Roles will appear as above.