Install Sites and Create a Hierarchy for Configuration Manager

On a computer that has Internet access, open Windows Explorer, and browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64.

Double-click Setupdl.exe. The Setup Downloader opens.

Specify the path for the folder that will host the updated installation files, and then click Download. Setup Downloader verifies the files that are currently in the download folder and downloads only the files that are missing or are newer than the existing files. Setup Downloader creates subfolders for the downloaded languages. Setup Downloader will create the folder if it does not exist.

Security Note
To run the Setup Downloader application, you must have Full Control NTFS file system permissions to the download folder.

View the ConfigMgrSetup.log file in the root of the drive C to review the download results.

Open a Command Prompt window and browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64.

Type setupdl.exe to open Setup Downloader. Optionally, you can use the following command-line options:

- /VERIFY: Use this option to verify the files in the download folder, which include language files. Review the ConfigMgrSetup.log file in the root of the drive C for a list of files that are outdated. No files are downloaded when you use this option.

- /VERIFYLANG: Use this option to verify the language files in the download folder. Review the ConfigMgrSetup.log file in the root of the drive C for a list of language files that are outdated.

- /LANG: Use this option to download only the language files to the download folder.

- /NOUI: Use this option to start Setup Downloader without displaying the user interface. When you use this option, you must specify the download path as part of the command line.

- \<*DownloadPath*\>: You can specify the path to the download folder to automatically start the verification or download process. You must specify the download path when you use the /NOUI option. When you do not specify a download path, you must specify the path when Setup Downloader opens. Setup Downloader will create the folder if it does not exist.

  <div class="alert">

  <table>
  <colgroup>
  <col style="width: 100%" />
  </colgroup>
  <thead>
  <tr class="header">
  <th><img src="images/Gg712320.s-e6f6a65cf14f462597b64ac058dbe1d0-system-media-system-caps-security(TechNet.10).jpeg" title="System_CAPS_security" alt="System_CAPS_security" /> Security Note</th>
  </tr>
  </thead>
  <tbody>
  <tr class="odd">
  <td><p>To run the Setup Downloader application, you must have <strong>Full Control</strong> NTFS file system permissions to the download folder.</p></td>
  </tr>
  </tbody>
  </table>

  </div>

Usage examples:

- **setupdl** \<*DownloadPath*\>

  Setup Downloader starts, verifies the files in the specified download folder, and downloads only the files that are missing or are newer than the existing files.

- **setupdl /VERIFY** \<*DownloadPath*\>

  Setup Downloader starts and verifies the files in the specified download folder.

- **setupdl /NOUI** \<*DownloadPath*\>

  Setup Downloader starts, verifies the files in the specified download folder, and downloads only the files that are missing or are newer than the existing files.

- **setupdl /LANG** \<*DownloadPath*\>

  Setup Downloader starts, verifies the language files in the specified download folder, and downloads only the language files that are missing or are newer than the existing files.

- **setupdl /VERIFY**

  Setup Downloader starts, and then you must specify the path to the download folder. Next, after you click **Verify**, Setup Downloader verifies the files in the download folder.

View the ConfigMgrSetup.log file in the root of the drive C to review the download results.

In Windows Explorer, browse to one of the following locations:

- \<*ConfigMgrInstallationMedia*\>\\SMSSETUP\\BIN\\X64.

- \<*ConfigMgrInstallationPath*\>\\BIN\\X64.

Copy the following files to the destination folder on the other computer:

- Prereqchk.exe

- Prereqcore.dll

- Basesql.dll

- Basesvr.dll

- Baseutil.dll

In Windows Explorer, browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64 or <ConfigMgrInstallationPath>\BIN\X64.

Open prereqchk.exe to start Prerequisite Checker.

Prerequisite Checker detects existing sites, and if found, performs checks for upgrade readiness. If no sites are found, all checks are performed. The Site Type column provides information about the site server or site system with which the rule is associated.

Open a Command Prompt window and browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64 or <ConfigMgrInstallationPath>\BIN\X64.

Type prereqchk.exe /LOCAL to start Prerequisite Checker and run all prerequisite checks on the server.

Open a Command Prompt window and browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64 or <ConfigMgrInstallationPath>\BIN\X64.

Type prereqchk.exe and choose from the following command-line options to check requirements for a primary site installation.

Usage examples (optional options are displayed in brackets):

- prereqchk.exe \[/NOUI\] /PRI /SQL \<*FQDN of SQL Server*\> /SDK \<*FQDN of SMS Provider*\> \[/JOIN \<*FQDN of central administration site*\>\] \[/MP \<*FQDN of management point*\>\] \[/DP \<*FQDN of distribution point*\>\]

When you run the command, unless you use the NOUI option, Prerequisite Checker opens and starts scanning the specified servers by using prerequisite checks that are applicable to the specified command-line options. Prerequisite Checker creates a list in the Prerequisite result section for any detected problems.

Click an item in the list for details about how to resolve the problem. You must resolve all items in the list that have an Error status before you install the site server, site system, or Configuration Manager console. You can also open the ConfigMgrPrereq.log file in the root of the system drive to review Prerequisite Checker results. The log file can contain additional information that are not displayed in the user interface.

Open a Command Prompt window and browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64 or <ConfigMgrInstallationPath>\BIN\X64.

Type prereqchk.exe and choose from the following command-line options to check requirements for a central administration site installation.

Usage examples (optional options are displayed in brackets):

- prereqchk.exe /CAS /SQL \<*FQDN of SQL Server*\> /SDK \<*FQDN of SMS Provider*\> /Ssbport 4022

- prereqchk.exe /NOUI /CAS /SQL \<*FQDN of SQL Server*\> /SDK \<*FQDN of SMS Provider*\>

When you run the command, unless you use the NOUI option, Prerequisite Checker opens and starts scanning the specified servers by using prerequisite checks that are applicable to the specified command-line options. Prerequisite Checker creates a list in the Prerequisite result section for any problems that are found.

Click an item in the list for details about how to resolve the problem. You must resolve all items in the list that have an Error status before you install the site server, site system, or Configuration Manager console. You can also open the ConfigMgrPrereq.log file in the root of the system drive to review the prerequisite checker results. The log file can contain additional information that are not displayed in the user interface.

On the primary site server from which you plan to install the secondary site, open a Command Prompt window and browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64 or <ConfigMgrInstallationPath>\BIN\X64.

Type prereqchk.exe and choose from the following command-line options to check requirements for a secondary site installation on a remote server.

Usage examples (optional options are displayed in brackets):

- prereqchk.exe /SEC /Ssbport 4022 /SourceDir \<*Source Folder Path*\>

- prereqchk.exe \[/NOUI\] /SEC \<*FQDN of secondary site*\> \[/INSTALLSQLEXPRESS\]

When you run the command, unless you use the NOUI option, Prerequisite Checker opens and starts scanning the specified servers by using prerequisite checks that are applicable to the specified command-line options. Prerequisite Checker creates a list in the Prerequisite result section for any problems that are found.

Click an item in the list for details about how to resolve the problem. You must resolve all items in the list that have an Error status before you install the site server, site system, or Configuration Manager console. You can also open the ConfigMgrPrereq.log file in the root of the system drive to review the prerequisite checker results. The log file can contain additional information that is not displayed in the user interface.

On the primary site server from which you install the secondary site, open a Command Prompt window and browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64 or <ConfigMgrInstallationPath>\BIN\X64.

Type prereqchk.exe /Adminui to check requirements for Configuration Manager console installation on the local computer.

When you run the command, Prerequisite Checker opens and starts scanning the specified servers by using prerequisite checks that are applicable to the specified command-line options. Prerequisite Checker creates a list in the Prerequisite result section for any detected problems.

Click an item in the list for details about how to resolve the problem. You must resolve all items in the list that have an Error status before you install the site server, site system, or Configuration Manager console. You can also open the ConfigMgrPrereq.log file in the root of the system drive to review the prerequisite checker results. The log file can contain additional information that is not displayed in the user interface.

In Windows Explorer, browse to <ConfigMgrInstallationPath>\Tools\ConsoleSetup\LanguagePack.

Rename the .msp and .mst files. For example, you could change <file name>.MSP to <file name>.MSP.disabled.

Install the Configuration Manager console on the computer.

On the computer that is running the Configuration Manager console, close the Configuration Manager console.

In Windows Explorer, browse to <ConsoleInstallationPath>\Bin\ on the Configuration Manager console computer.

Rename the appropriate language folder for the language that is configured on the computer. For example, if the language settings for the computer were set for German, you could rename the de folder to de.disabled.

To open the Configuration Manager console in the language that is configured for the computer, rename the folder to the original name. For example, rename de.disabled to de.

Verify that the administrative user who runs Setup has the following security rights:

- Local Administrator rights on the central administration site server computer.

- Local Administrator rights on each computer that hosts one of the following:

    - The site database

    - An instance of the SMS Provider for the site

- Sysadmin rights on the instance of SQL Server that hosts the site database. After setup completes, both the user account that runs setup and the site server computer account must retain sysadmin rights to SQL Server. It is not supported to remove the sysadmin rights from these accounts.

On the central administration site computer, open Windows Explorer and browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64.

Double-click Setup.exe. The Configuration Manager Setup Wizard opens.

On the Before You Begin page, click Next.

On the Getting Started page, select Install a Configuration Manager central administration site, and then click Next.

On the Product Key page, choose whether to install Configuration Manager as an evaluation or a full installation. Enter your product key for the full installation of Configuration Manager. Click Next.

If you install Configuration Manager as an evaluation, after 180 days the Configuration Manager console becomes read-only until you activate the product with a product key from the Site Maintenance page in Setup.

On the Microsoft Software License Terms page, read and accept the license terms, and then click Next.

On the Prerequisite Licenses page, read and accept the license terms for the prerequisite software, and then click Next. Setup downloads and automatically installs the software on site systems or clients when it is required. You must select all check boxes before you can continue to the next page.

On the Prerequisite Downloads page, specify whether Setup must download the latest prerequisite redistributable files, language packs, and the latest product updates from the Internet or use previously downloaded files, and then click Next. If you previously downloaded the files by using Setup Downloader, select Use previously downloaded files and specify the download folder. For information about Setup Downloader, see the Setup Downloader section in this topic.

On the Server Language Selection page, select the languages that are available for the Configuration Manager console and for reports, and then click Next. English is selected by default and cannot be removed.

On the Client Language Selection page, select the languages that are available to client computers, specify whether to enable all client languages for mobile device clients, and then click Next. English is selected by default and cannot be removed.

On the Site and Installation Settings page, specify the site code and site name for the site. For more information about site code naming, including best practices and limitations, see the Configuration Manager Site Naming section in this topic.

Specify the installation folder and whether Setup will install the Configuration Manager console on the local computer, and then click Next. The folder path must not contain trailing spaces or Unicode characters.

If you are using Configuration Manager with no service pack, skip to step 15.

On the Central Administration Site Installation page, select the option that is appropriate to your scenario:

• To install a central administration site as the first site of a new hierarchy, select Install as the first site in a new hierarchy, and then click Next to continue.

• To install a central administration site to expand an existing stand-alone primary site into a hierarchy, select Expand an existing stand-alone primary into a hierarchy, specify the FQDN of the stand-alone primary site server, and then click Next to continue.

  Note

  The stand-alone primary site must run the same version of Configuration Manager as the version that you use to install the central administration site.

On the Database Information page, specify the information for the site database server and the SQL Server Service Broker (SSB) port that the SQL Server is to use. You must specify a valid port that no other site or service is using, and that no firewall restrictions block.

With System Center 2012 Configuration Manager with no service pack or with SP1, click Next to continue on to the SMS Provider Settings page.

Beginning with System Center 2012 R2 Configuration Manager, click Next to continue to a second Database Information page where you can specify non-default locations for the SQL Server data file and SQL Server log file for the site database. Then, click Next to continue.

On the SMS Provider Settings page, specify the FQDN for the server that hosts the SMS Provider, and then click Next. You can configure additional SMS providers for the site after the initial installation.

On the Customer Experience Improvement Program Configuration page, choose whether to participate, and then click Next.

On the Settings Summary page, review the setting and verify that they are accurate. Click Next to start Prerequisite Checker to verify server readiness for the central administration site server.

On the Prerequisite Installation Check page, if no problems are listed, click Next to install the central administration site. When Prerequisite Checker finds a problem, click an item in the list for details about how to resolve the problem. You must resolve all items in the list that have an Error status before you continue setup. After you resolve the issue, click Run Check to restart prerequisite checking. You can also open the ConfigMgrPrereq.log file in the root of the system drive to review the Prerequisite Checker results. The log file can contain additional information that is not displayed in the user interface. For a complete list of installation prerequisite rules and descriptions, see Technical Reference for the Prerequisite Checker in Configuration Manager.

On the Installation page, Setup displays the overall installation status. When Setup completes the core site server installation, you can close the wizard. Site configuration continues in the background.

Verify that the administrative user that runs Setup has the following security rights:

- Local Administrator rights on the central administration site server computer

- Sysadmin rights on the site database of the central administration site. After setup completes, both the user account that runs setup and the site server computer account must retain sysadmin rights to SQL Server. It is not supported to remove the sysadmin rights from these accounts.

- Local Administrator rights on the primary site server computer

- Local Administrator rights on each computer that hosts one of the following at the primary site:

    - The site database

    - An instance of the SMS Provider for the site

    - A management point for the site

    - A distribution point for the site

- Sysadmin rights on the instance of SQL Server that hosts the site database. After setup completes, both the user account that runs setup and the site server computer account must retain sysadmin rights to SQL Server. It is not supported to remove the sysadmin rights from these accounts.

- Role-based administration rights that are equivalent to the security role of Infrastructure Administrator or Full Administrator

On the new primary site computer, open Windows Explorer and browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64.

Double-click Setup.exe. The Configuration Manager Setup Wizard opens.

On the Before You Begin page, click Next.

On the Getting Started page, select Install a Configuration Manager primary site, verify that Use typical installation options for a stand-alone primary site is cleared, and then click Next.

On the Product Key page, choose whether to install Configuration Manager as an evaluation or a full installation. Enter your product key for the full installation of Configuration Manager. Click Next.

If you install Configuration Manager as an evaluation, after 180 days the Configuration Manager console becomes read-only until you activate the product from the Site Maintenance page in the Setup Wizard.

On the Microsoft Software License Terms page, read and accept the license terms, and then click Next.

On the Prerequisite Licenses page, read and accept the license terms for the prerequisite software, and then click Next. Setup downloads and automatically installs the software on site systems or clients when it is required. You must select all check boxes before you can continue to the next page.

On the Prerequisite Downloads page, specify whether Setup will download the latest prerequisite redistributable files, language packs, and the latest product updates from the Internet or use previously downloaded files, and then click Next. If you previously downloaded the files by using Setup Downloader, select Use previously downloaded files and specify the download folder. For information about Setup Downloader, see the Setup Downloader section in this topic.

On the Server Language Selection page, select the languages that are available for the Configuration Manager console and for reports, and then click Next. English is selected by default and cannot be removed.

On the Client Language Selection page, select the languages that are available to client computers, specify whether to enable all client languages for mobile device clients, and then click Next. English is selected by default and cannot be removed.

On the Site and Installation Settings page, specify the site code and site name for the site. For more information about site code naming, including best practices and limitations, see the Configuration Manager Site Naming section in this topic.

Specify the installation folder and whether Setup will install the Configuration Manager console on the local computer, and then click Next. The folder path must not contain trailing spaces or Unicode characters.

On the Primary Site Installation page, select Join the primary site to an existing hierarchy, specify the FQDN for the central administration site, and then click Next. Setup verifies that the primary site server has access to the central administration site server, and that the site code for the central administration site can be retrieved by using the security credentials of the administrative user that is running Setup.

On the Database Information page, specify the information for the site database server and the SQL Server Service Broker (SSB) port that SQL Server is to use, and then click Next. You must specify a valid port that no other site or service is using, and that no firewall restrictions block. Typically, the Service Broker is configured to use TCP port 4022, but other ports are supported.

With System Center 2012 Configuration Manager with no service pack or with SP1, click Next to continue on to the SMS Provider Settings page.

Beginning with System Center 2012 R2 Configuration Manager, click Next to continue to a second Database Information page where you can specify non-default locations for the SQL Server data file and SQL Server log file for the site database. Then, click Next to continue.

On the SMS Provider Settings page, specify the FQDN for the server that will host the SMS Provider, and then click Next. You can configure additional SMS providers for the site after the initial installation.

On the Client Computer Communication Settings page, choose whether to configure all site systems to accept only HTTPS communication from clients or for the communication method to be configured for each site system role, and then click Next. When you select All site system roles accept only HTTPS communication from clients, the client computer must have a valid PKI certificate for client authentication. When you select Configure the communication method on each site system role, you can choose Clients will use HTTPS when they have a valid PKI certificate and HTTPS-enabled site roles are available. This ensures that the client selects a site system that is configured for HTTPS if is available. For more information about PKI certificate requirements, see PKI Certificate Requirements for Configuration Manager.

On the Site System Roles page, choose whether to install a management point or distribution point. When selected for installation, enter the FQDN for site system and select the client connection method. Click Next. If you selected All site system roles accept only HTTPS communication from clients on the previous page, the client connection settings are automatically configured for HTTPS and cannot be changed unless you go back and change the setting.

On the Customer Experience Improvement Program Configuration page, choose whether to participate, and then click Next.

On the Settings Summary page, review the setting and verify that they are accurate. Click Next to start Prerequisite Checker to verify server readiness for the primary site server and for specified site system roles.

On the Prerequisite Installation Check page, if no problems are listed, click Next to install the primary site and site system roles that you selected. When Prerequisite Checker finds a problem, click an item on the list for details about how to resolve the problem. You must resolve all items in the list that have an Error status before you continue setup. After you resolve the issue, click Run Check to restart prerequisite checking. You can also open the ConfigMgrPrereq.log file in the root of the system drive to review the Prerequisite Checker results. The log file can contain additional information that is not displayed in the user interface. For a complete list of installation prerequisite rules and descriptions, see Technical Reference for the Prerequisite Checker in Configuration Manager.

On the Installation page, Setup displays the overall installation status. When Setup completes the core site server and site system installation, you can close the wizard. Site configuration continues in the background.

Verify that the administrative user who runs Setup has the following security rights:

- Local Administrator rights on the primary site server computer

- Local Administrator rights on each computer that hosts one of the following:

    - The site database

    - An instance of the SMS Provider for the site

    - A management point for the site

    - A distribution point for the site

- Sysadmin rights on the instance of SQL Server that hosts the site database. After setup completes, both the user account that runs setup and the site server computer account must retain sysadmin rights to SQL Server. It is not supported to remove the sysadmin rights from these accounts.

On the new primary site computer, open Windows Explorer and browse to <ConfigMgrInstallationMedia>\SMSSETUP\BIN\X64.

Double-click Setup.exe. The Configuration Manager Setup Wizard opens.

On the Before You Begin page, click Next.

On the Getting Started page, select Install a Configuration Manager primary site, verify that Use typical installation options for a stand-alone primary site is not selected, and then click Next.

On the Product Key page, choose whether to install Configuration Manager as an evaluation or a full installation. Enter your product key for the full installation of Configuration Manager. Click Next.

If you install Configuration Manager as an evaluation, after 180 days the Configuration Manager console becomes read-only until you activate the product with a product key from the Site Maintenance page in Setup.

On the Microsoft Software License Terms page, read and accept the license terms, and then click Next.

On the Prerequisite Licenses page, read and accept the license terms for the prerequisite software, and then click Next. Setup downloads and automatically installs the software on site systems or clients when it is required. You must select all check boxes before you can continue to the next page.

On the Prerequisite Downloads page, specify whether Setup will download the latest prerequisite redistributable files, language packs, and the latest product updates from the Internet or use previously downloaded files, and then click Next. If you previously downloaded the files by using Setup Downloader, select Use previously downloaded files and specify the download folder. For information about Setup Downloader, see the Setup Downloader section in this topic.

On the Server Language Selection page, select the languages that will be available for the Configuration Manager console and for reports, and then click Next. English is selected by default and cannot be removed.

On the Client Language Selection page, select the languages that will be available to client computers, specify whether to enable all client languages for mobile device clients, and then click Next. By default, English is selected and cannot be removed.

On the Site and Installation Settings page, specify the site code and site name for the site. For more information about site code naming, including best practices and limitations, see the Configuration Manager Site Naming section in this topic.

Specify the installation folder and whether Setup will install the Configuration Manager console on the local computer, and then click Next. The folder path must not contain trailing spaces or Unicode characters.

On the Primary Site Installation page, select Install the primary site as a stand-alone site, and then click Next. Click Yes to confirm that you want to install the site as a stand-alone site.

On the Database Information page, specify the information for the site database server and the SQL Server Service Broker (SSB) port that SQL Server is to use, and then click Next. You must specify a valid port that no other site or service is using, and that no firewall restrictions block. Typically, the Service Broker is configured to use TCP port 4022, but other ports are supported.

With System Center 2012 Configuration Manager with no service pack or with SP1, click Next to continue on to the SMS Provider Settings page.

Beginning with System Center 2012 R2 Configuration Manager, click Next to continue to a second Database Information page where you can specify non-default locations for the SQL Server data file and SQL Server log file for the site database. Then, click Next to continue.

On the SMS Provider Settings page, specify the FQDN for the server that will host the SMS Provider, and then click Next. You can configure additional SMS providers for the site after the initial installation.

On Client Communication Settings page, choose whether to configure all site systems to accept only HTTPS communication from clients or for the communication method to be configured for each site system role, and then click Next. When you select to All site system roles accept only HTTPS communication from clients, client computer must have a valid PKI certificate for client authentication. For more information about PKI certificate requirements, see PKI Certificate Requirements for Configuration Manager.

On the Site System Roles page, choose whether to install a management point or distribution point. When selected for installation, enter the FQDN for site system and choose the client connection method. Click Next. When you selected All site system roles accept only HTTPS communication from clients on the previous page, the client connection settings are automatically configured for HTTPS and cannot be changed unless you go back and change the setting.

On the Customer Experience Improvement Program Configuration page, choose whether to participate, and then click Next.

On the Settings Summary page, review the setting and verify that they are accurate. Click Next to start Prerequisite Checker to verify server readiness for the primary site server and site system roles.

On the Prerequisite Installation Check page, if no problems are listed, click Next to install the primary site and site system roles. When Prerequisite Checker finds a problem, click an item on the list for details about how to resolve the problem. You must resolve all items in the list that have an Error status before you continue Setup. After you resolve the issue, click Run Check to restart prerequisite checking. You can also open the ConfigMgrPrereq.log file in the root of the system drive to review the Prerequisite Checker results. The log file can contain additional information that is not displayed in the user interface. For a complete list of installation prerequisite rules and descriptions, see Technical Reference for the Prerequisite Checker in Configuration Manager.

On the Installation page, Setup displays the overall installation status. When Setup completes the core site server and site system installation, you can close the wizard. Site configuration continues in the background.

Verify that the following security rights exist:

- The administrative user who configures the installation of the secondary site in the Configuration Manager console must have role-based administration rights that are equivalent to the security role of Infrastructure Administrator or Full Administrator.

- The computer account of the parent primary site must be a Local Administrator on the secondary site server computer.

- When the secondary site uses a previously installed instance of SQL Server to host the secondary site database:

    - The computer account of the parent primary site must have sysadmin rights on the instance of SQL Server on the secondary site server computer.

    - The Local System account of the secondary site server computer must have sysadmin rights on the instance of SQL Server on the secondary site server computer.

    - After setup completes, both the site server computer accounts must retain sysadmin rights to SQL Server. It is not supported to remove the sysadmin rights from these accounts.

In the Configuration Manager console, click Administration.

In the Administration workspace, expand Site Configuration, and then click Sites.

On the Home tab, in the Site group, click Create Secondary Site. The Create Secondary Site Wizard opens.

On the Before You Begin page, confirm that the primary site that is listed is the site in which you want this secondary site to be a child, and then click Next.

On the General page, specify the following settings:

- **Site code**: Specify a site code for the secondary site. For more information about site code naming, including best practices and limitations, see the Configuration Manager Site Naming section in this topic.

- **Site server name**: Specify the FQDN for the secondary site server. Verify that the server meets the requirements for secondary site installation. For more information about supported configurations, see [Supported Configurations for Configuration Manager](gg682077\(v=technet.10\).md).

- **Site name**: Specify a name for the secondary site.

- **Installation folder**: Specify the installation folder to create on the secondary site server.

Click Next.

On the Installation Source Files page, specify the location for the installation files for the secondary site, and then click Next. You can copy the files from the parent site to the secondary site, use the source files from a network location, or use source files that are already available locally on the secondary site server.

When you choose the Use the source files at the following network location or Use the source files at the following location on the secondary site computer options, the location must contain the Redist subfolder with the prerequisite redistributable files, language packs, and the latest product updates for Setup. Use Setup Downloader to download the required files to the Redist folder before you install the secondary site. The secondary site installation will fail if the files are not available in the Redist subfolder. For more information about Setup Downloader, see Setup Downloader in this topic.

Security Note
The computer account for the secondary site must have Read NTFS file system permissions and share permissions to the Setup source folder and share. Avoid using administrative network shares (for example, C$ and D$) because they require the secondary site computer account to be an administrative user on the remote computer.

On the SQL Server Settings page, specify whether the secondary site will use SQL Server Express or an existing instance of SQL Server for the site database, and then configure the associated settings.

Install and configure a local copy of SQL Express on the secondary site computer

- **SQL Server Service port**: Specify the SQL Server service port for SQL Server Express to use. The service port is typically configured to use TCP port 1433, but you can configure another port.

- **SQL Server Broker port**: Specify the SQL Server Service Broker (SSB) port for SQL Server Express to use. The Service Broker is typically configured to use TCP port 4022, but you can configure a different port. You must specify a valid port that no other site or service is using, and that no firewall restrictions block.

Use an existing SQL Server instance

- **SQL Server FQDN**: Review the FQDN for the SQL Server computer. You must use a local SQL Server to host the secondary site database and cannot modify this setting.

- **SQL Server instance**: Specify the instance of SQL Server to use as the secondary site database. Leave this option blank to use the default instance.

- **ConfigMgr site database name**: Specify the name to use for the secondary site database.

- **SQL Server Broker port**: Specify the SQL Server Service Broker (SSB) port for SQL Server to use. You must specify a valid port that no other site or service is using, and that no firewall restrictions block.

  <div class="alert">


  > [!NOTE]
  > <P>Setup does not validate the information that you enter on this page until it starts the installation. Before you continue, verify these settings.</P>


  </div>

Click Next.

On the Distribution Point page, configure the general distribution point settings.

- **Install and configure IIS if required by Configuration Manager**: Select this setting to let Configuration Manager install and configure Internet Information Services (IIS) on the server if it is not already installed. IIS must be installed on all distribution points. If IIS is not installed on the server and you do not select this setting, you must install IIS before the distribution point can be installed successfully.

- Configure how client devices communicate with the distribution point. There are advantages and disadvantages for using HTTP and HTTPS. For more information, see [Security Best Practices for Content Management](gg699360\(v=technet.10\).md) section in the [Security and Privacy for Content Management in Configuration Manager](gg699360\(v=technet.10\).md) topic.

  <div class="alert">


  > [!IMPORTANT]
  > <P>You must select HTTPS when the parent primary site is configured to communicate only by using HTTPS.</P>


  </div>

  For more information about client communication to the distribution point and other site systems, see the [Planning for Client Communications in Configuration Manager](https://go.microsoft.com/fwlink/?linkid=234538) section in the [Planning for Communications in Configuration Manager](gg712701\(v=technet.10\).md) topic.

- **Allow clients to connect anonymously**: This setting specifies whether the distribution point will allow anonymous connections from Configuration Manager clients to the content library.

  <div class="alert">


  > [!WARNING]
  > <P>When you deploy a Windows Installer application on a Configuration Manager client, Configuration Manager downloads the file to the local cache on the client and the files are eventually removed after the installation finishes. The Configuration Manager client updates the Windows Installer source list for the installed Windows Installer applications with the content path for the content library on associated distribution points. Later, if you start the Repair action from <STRONG>Add/Remove Programs</STRONG> on a Configuration Manager client that is running Windows XP, MSIExec attempts to access the content path by using an anonymous user. You must select the <STRONG>Allow clients to connect anonymously</STRONG> setting, or the repair fails for clients that are running Windows XP. For all other operating systems, the client connects to the distribution point by using the logged-on user account.</P>


  </div>

- Create a self-signed certificate or import a public key infrastructure (PKI) client certificate for the distribution point. The certificate has the following purposes:

    - It authenticates the distribution point to a management point before the distribution point sends status messages.

    - When you select the **Enable PXE support for clients** check box on the **PXE Settings** page, the certificate is sent to computers that perform a PXE boot so that they can connect to a management point during the deployment of the operating system.

  When all your management points in the site are configured for HTTP, create a self-signed certificate. When your management points are configured for HTTPS, import a PKI client certificate.

  To import the certificate, browse to a Public Key Cryptography Standard (PKCS \#12) file that contains a PKI certificate with the following requirements for Configuration Manager:

    - Intended use must include client authentication.

    - The private key must be enabled to be exported.

  <div class="alert">


  > [!NOTE]
  > <P>There are no specific requirements for the certificate subject or subject alternative name (SAN), and you can use the same certificate for multiple distribution points.</P>


  </div>

  For more information about the certificate requirements, see [PKI Certificate Requirements for Configuration Manager](gg699362\(v=technet.10\).md).

  For an example deployment of this certificate, see the [Deploying the Client Certificate for Distribution Points](gg682023\(v=technet.10\).md) section in the [Step-by-Step Example Deployment of the PKI Certificates for Configuration Manager: Windows Server 2008 Certification Authority](gg682023\(v=technet.10\).md) topic.

- **Enable this distribution point for prestaged content**: Select this setting to enable the distribution point for prestaged content. When this setting is selected, you can configure distribution behavior when you distribute content. You can choose whether you always want to prestage the content on the distribution point, prestage the initial content for the package, but use the normal content distribution process when there are updates to the content, or always use the normal content distribution process for the content in the package.

On the Drive Settings page, specify the drive settings for the distribution point. You can configure up to two disk drives for the content library and two disk drives for the package share, although Configuration Manager can use additional drives when the first two reach the configured drive space reserve. The Drive Settings page configures the priority for the disk drives and the amount of free disk space to remain on each disk drive.

• Drive space reserve (MB): The value that you configure for this setting determines the amount of free space on a drive before Configuration Manager chooses a different drive and continues the copy process to that drive. Content files can span multiple drives.

• Content Locations: Specify the content locations for the content library and package share. Configuration Manager copies content to the primary content location until the amount of free space reaches the value that is specified for Drive space reserve (MB). By default, the content locations are set to Automatic, and the primary content location will be set to the disk drive that has the most disk space at installation and the secondary location that is assigned the disk drive that has the second most free disk space. When the primary and secondary drives reach the drive space reserve, Configuration Manager selects another available drive with the most free disk space and continues the copy process.

On the Content Validation page, specify whether to validate the integrity of content files on the distribution point. When you enable content validation on a schedule, Configuration Manager initiates the process at the scheduled time, and all content on the distribution point is verified. You can also configure the content validation priority. To view the results of the content validation process, click the Monitoring workspace, expand Distribution Status, and click the Content Status node. The content for each package type (for example, Application, Software Update Package, and Boot Image) is displayed.

On the Boundary Groups page, manage the boundary groups for which this distribution point is assigned. During content deployment, clients must be in a boundary group that is associated with the distribution point to use it as a source location for content. You can select the Allow fallback source location for content option to allow clients outside these boundary groups to fall back and use the distribution point as a source location for content when no preferred distribution points are available. For more information about preferred distribution points, see the Planning for Preferred Distribution Points and Fallback section in the Planning for Content Management in Configuration Manager topic.

On the Summary page, verify the settings, and then click Next to install the secondary site.

On the Completion page, click Close to exit the wizard.

In the Configuration Manager console, click Administration.

In the Administration workspace, expand Site Configuration, and then click Sites.

Select the secondary site server to check installation status, and then on the Home tab, in the Site group, click Show Install Status.

Verify that the secondary site successfully finished.

Verify the administrative user that runs Setup has the following security rights:

- Administrative rights on the secondary site computer.

- Local Administrator rights on the remote site database server for the primary site, if it is remote.

- Infrastructure Administrator or Full Administrator security role on the parent primary site.

- Sysadmin rights on the site database of the secondary site.

In the Configuration Manager console, click Administration.

In the Administration workspace, expand Site Configuration, and then click Sites.

Select the secondary site server to remove.

On the Home tab, in the Site group, click Delete.

On the General page, select whether to uninstall or delete the secondary site, and then click Next.

On the Summary page, verify the settings, and then click Next.

On the Completion page, click Close to exit the wizard.

Verify the administrative user that runs Setup has the following security rights:

- Local Administrator rights on the central administration site server.

- Local Administrator rights on the remote site database server for the central administration site, if it is remote.

- Sysadmin rights on the site database of the central administration site.

- Local Administrator rights on the primary site computer.

- Local Administrator rights on the remote site database server for the primary site, if it is remote.

- User name associated with the Infrastructure Administrator or Full Administrator security role on the central administration site.

Start Configuration Manager Setup on the primary site server by using one of the following methods:

- On **Start**, click **Configuration Manager Setup**.

- Open Setup.exe from \<*ConfigMgrInstallationMedia*\>\\SMSSETUP\\BIN\\X64.

- Open Setup.exe from \<*ConfigMgrInstallationPath*\>\\BIN\\X64.

On the Before You Begin page, click Next.

On the Getting Started page, select Uninstall a Configuration Manager site, and then click Next.

On the Uninstall the Configuration Manager Site, specify whether to remove the site database from the primary site server and whether to remove the Configuration Manager console. By default, Setup removes both items.

Click Yes to confirm to uninstall the Configuration Manager primary site.

Before you uninstall any primary site, you must disable distributed views on each link in the hierarchy between the central administration site and a primary site.

After you disable distributed views on each link, confirm that the data from the primary site completes reinitialization at the central administration site. You can monitor the initialization of data when you view the link in the Database Replication node of the Monitoring workspace of the Configuration Manager console.

After the data successfully reinitializes with the central administration site, you can uninstall the primary site. To uninstall a primary site, see the Uninstall a Primary Site section in this topic.

After the primary site is completely uninstalled, you can reconfigure distributed views on links to primary sites.

Verify that the administrative user who runs Setup has the following security rights:

- Local Administrator rights on the central administration site server.

- Local Administrator rights on the site database server for the central administration site, when the site database server is not installed on the site server.

Start Configuration Manager Setup on the central administration site server by using one of the following methods:

- On **Start**, click **Configuration Manager Setup**.

- Open Setup.exe from \<*ConfigMgrInstallationMedia*\>\\SMSSETUP\\BIN\\X64.

- Open Setup.exe from \<*ConfigMgrInstallationPath*\>\\BIN\\X64.

On the Before You Begin page, click Next.

On the Getting Started page, select Uninstall a Configuration Manager site, and then click Next.

On the Uninstall the Configuration Manager Site, specify whether to remove the site database from the central administration site server and whether to remove the Configuration Manager console. By default, Setup removes both items.

Click Yes to confirm to uninstall the Configuration Manager central administration site.