For the installation of Forefront TMG I slipstreamed the updates which saves a lot of time. For Forefront UAG it is even more interesting to slipstream the updates. Since both Forefront TMG and Forefront UAG have a set of updates that need to be applied.
When searching for a tutorial I only found a post on the Microsoft Forum regarding the slipstreaming the updates for Forefront UAG. However, no one is reporting any results good nor bad.
Installation Media
Forefront UAG is available from Microsoft with UAG SP1 already slipstreamed into it. The installation media also contains Forefront TMG with SP1 Software Update 1. Although a lot of people, even from Microsoft, write that the TMG updates are slipstreamed into the product. This is not the case. The installation folder of TMG contains an Update folder with the two Windows Installer update packages:
- TMG-KB981324-AMD64-ENU.msp (Forefront TMG Service Pack 1)
- TMG-KB2288910-amd64-ENU.msp (Forefront TMG Service Pack 1 Software Update 1)
During the installation these updates are applied to the already installed product, this is an importent difference opposed to actual slipstreamed updates.
Forefront UAG SP1 is actually slipstreamed into the installation media.
To get Forefront UAG to the latest version, the following updates need to be applied:
- Service Pack 1 Update 1 (4.0.1773.10100)
- Service Pack 2 (4.0.2095.10000)
- Service Pack 3 (4.0.3123.10000)
- Service Pack 3 Rollup 1 ( 4.0.3206.10100)
- Service Pack 4 (4.0.4083.10000)
See the Update Rollup and Version Number Reference overview for more information. Although this overview is no longer maintained and missing Service Pack 4. Microsoft seems to move and maintain this information at Wikipedia.
Update Order
There are dependencies from UAG on TMG and thus possible also in the update order. Ben Ari wrote an post from on Forefront UAG update order. However it is not up to date with the recent set of updates.
Based on the information provided in the Knowledge Base articles of the UAG updates the following can be concluded. There is no update dependency for UAG updates on TMG updates.
Slipstreaming
Because the TMG updates Service Pack 1 (7.0.8108.200) and Service Pack 1 Software Update 1 (7.0.9027.400) are not slipstreamed but as updates present on the installation media it is not possible to slipstream the TMG updates on the UAG installation media. I tried and it will look fine, but during installation an error message will be shown.
It is possible to slipstream the UAG updates, still saves the installation of 5 updates. For TMG there are then only 2 updates required to install:
- Service Pack 2 (7.0.9193.500)
- Service Pack 2 Update Rollup 4 (7.0.9193.601)
The drill is the same as with the TMG updates:
- Copy the Forefront UAG installation media to a writable location
- Download the updates.
- Apply them using the Windows Installer (msiexec.exe) with the /a /p parameters.
Copy Installation Media
The installation media looks like the screenshot below, although the real installation magic is in the UAG folder and ISA folder for the Forefront TMG installation. It is the UAG folder that contains the actual MSI of Forefront UAG.
The TMG installer is automatically called by the UAG installer.
Download Updates
Again, some of the updates are only available via an e-mail request.
Here are the download links:
- KB2585140 Service Pack 1 Update 1 (4.0.1773.10100)
- KB2710791 Service Pack 2 (4.0.2095.10000)
- KB2744025 Service Pack 3 (4.0.3123.10000)
- KB2827350 Service Pack 3 Rollup 1 ( 4.0.3206.10100)
- KB2861386 Service Pack 4 (4.0.4083.10000)
Some updates provide a direct download to the MSP file which is a Windows Installer Patch file that can be applied to an existing MSI file. Others come in an exe that can be extracted by using the filename.exe /t switch.
I put together the following file structure:
- .\4.0.1752.10000\UAG\ForefrontUAG.msi
- .\UAG SP1 Update 1\UAG-KB2585140-v4.0.1773.10100-ENU.msp
- .\UAG SP2\UAG-KB2710791-v4.0.2095.10000-ENU.msp
- .\UAG SP3\UAG-KB2744025-v4.0.3123.10000-ENU.msp
- .\UAG SP3 Rollup 1\UAG-KB2827350-v4.0.3206.10100-ENU.msp
- .\UAG SP4\UAG-KB2861386-v4.0.4083.10000-ENU.msp
Apply MSI Patches to Forefront UAG Installer
msiexec /a .\4.0.1752.10000\UAG\ForefrontUAG.msi /update .\UAG SP1 Update 1\UAG-KB2585140-v4.0.1773.10100-ENU.msp
msiexec /a .\4.0.1752.10000\UAG\ForefrontUAG.msi /update .\UAG SP2\UAG-KB2710791-v4.0.2095.10000-ENU.msp
msiexec /a .\4.0.1752.10000\UAG\ForefrontUAG.msi /update .\UAG SP3\UAG-KB2744025-v4.0.3123.10000-ENU.msp
msiexec /a .\4.0.1752.10000\UAG\ForefrontUAG.msi /update .\UAG SP3 Rollup 1\UAG-KB2827350-v4.0.3206.10100-ENU.msp
msiexec /a .\4.0.1752.10000\UAG\ForefrontUAG.msi /update .\UAG SP4\UAG-KB2861386-v4.0.4083.10000-ENU.msp
The end result is updated Forefront UAG installation media that installs out of the box with all updates. Only left are the two TMG updates to apply after the installation.
Result
I was able to slipstream all Forefront UAG updates into the installation media and run the installation. The installer runs fine but at the very end setup.exe crashes. I suspect that an result code is unexpected and causes the issue. Setup.exe is just delegating the installation to the ForefrontUAG.msi file. The installation itself is therefore done correctly. Post installation I applied both Forefront TMG updates with success.
So it seems to work, however the crash at the end might for some be a reason to not slipstream the updates for a production scenario.