How To Use The Configuration Checker To Verify Requirements For Using The Shavlik Patch Add-On

Version 8


    Configuration Checker is used to determine if you meet all the requirements for using Shavlik Patch.



    You can access the Shavlik Patch Settings screen using one of two methods.

    Method 1.  Select Software Library in the SCCM Console Screen.  Right-click on Shavlik Patch Plugin and select Settings.


    Method 2.  Click the Settings button in the top left hand corner of the Software Library Home screen in the SCCM Console.


    Click on Verify Setup and click on the Launch Configuration Checker button.


    Please note: You can also run it from the command line: C:\Program Files (x86)\Microsoft Configuration

    Manager\AdminConsole\bin\ST.SCCM.ConfigurationChecker.exe. You must run

    Configuration Checker with full Administrator privileges, but you can use it to evaluate

    accounts that do not have full Administrator privileges.


    Fill out the required fields and click the Start button.



    Most of the information on this dialog will be pre-populated for you but it can be modified as necessary.


    • WSUS Server FQDN: Type the fully qualified domain name of your WSUS server.
    • Port: Select the port used to access the WSUS server.
    • Cloud account: Type your Protect Cloud user name.
    • Cloud Password: Type your Protect Cloud password.
    • User account (domain/user): Type the domain and user name of the account that you want to evaluate.
    • Account password: Type the password associated with the user account. This field can be left blank if you are evaluating the account that you are using to run this tool.
    • Use proxy: If enabled, indicates that proxy server credentials are required in order to run the Configuration Checker test. If you clear the check box after specifying credentials, the credentials will be saved but not used. This box will initially mirror what is configured on the Proxy tab but can be temporarily overridden here.
    • Proxy user name: Type the user name for an account on the proxy server. This box will be automatically populated with the user name provided on the Proxy tab but it can be overridden. It may be necessary to specify a domain as part of your user name (for example: mydomain\
    • Proxy password: Type the password for the proxy server account.


    The utility checks for the following:


    • Ability to connect to the WSUS server using a fully qualified domain name and port number
    • Ability to connect to Protect Cloud using a user name and password
    • Ability to retrieve the Shavlik Patch catalog
    • User account has Log on as a batch job privileges
    • User account is a member of the Administrators group and the WSUS Administrators group on the WSUS server
    • WSUS signing certificate is contained in the Trusted Root and Trusted Publisher stores and is current (not expired)


    If any of the tests fail, you should correct the issue before using Shavlik Patch.


    The Installation Checklist would be a good place to start correcting configuration issues:


    Affected Product(s)

    Shavlik Patch 2.1