SCCM client auto-upgrade by client parameter instead of SCCM Site server
There are many such agent / clients available in market which can check on vendor web sites for updates and then download and install them. Since SCCM and hub and spoke setup, we can enable SCCM client to perform timely checks on SCCM site servers or DP locations, for any client updates available. If it finds new version, client should download and install the updates.
This will simplify the overall client upgrade process with recurring upgrade needs in CB model. Also, this will reduce firewall connectivity requirements from Site servers to clients that we normally need for client push. This option should be available in client settings for enabling or disabling the update checks and provide location where client can check the updates. Next action will be have SCCM check for SCEP updates on path and upgrade SCEP AV as well. :) Am I asking too much?
SCEP works exactly the same way. SCEP client is two parts. The SCEP wrappers, and the AM engine. The AM engine is upgraded through the same channel as signatures & patches (WUMU/WSUS). The SCEP wrapper is upgraded synchronous to the SCCM CCMSetup client. If you use Autoupgrade in CB, you get both clients upgraded the way you ask.
Thanks djam for the response. Checked the option and it is useful for SCCM client updates but looking for option for SCEP as well if we can get similar option for it.
This is already implemented in current branch. This is what the auto-upgrade feature of the client does. If you enable it on, you can set the timeframe for clients to check for updates and to upgrade themselves. There is no need to open any firewalls for server -> client communication; as the client is doing the checks on schedule and will pull down the needed content from DPs when it determines it needs to upgrade.
Have you looked into this feature?