WSUS (Windows Server Update Services) and PA Secure

WSUS (Windows Server Update Services) utilizes a 64 bit compression algorithm which can prevent 32 bit application pools from functioning correctly.

Most of our products will by default run with a 32 bit application pool, and consequently will encounter issues if co-located with WSUS.  However many will work quite happily with a 64 bit application pool.

So we'll cover two methods to resolve the issue, the first covers converting the application pools used by our products to 64 bit.  The second covers how to disable the compression utilized by WSUS.

Whenever possible the first method would be preferred.

Setting up 64 bit application pools:

1) Open Internet Information Services.

2) Expand the Web Server

3) Expand Sites

4) Select the site for the product in question (painfinite, pasecure, etc.) and in the right hand sidebar, select Advanced Properties:

Secure15.png 145.41 KB

5) The application pool used by the site is listed at the top of the dialog:

Secure16.png 24.47 KB

6) In the left sidebar, select Application Pools, select the pool you identified in Step 5, and again select Advanced Settings from the right hand sidebar

7) The second entry should be labeled "Enable 32-bit applications" and will be set to True, set it to false as in the following screenshot:

Secure17.png 30.92 KB

8) Restart IIS

If disabling 32-bit applications does not resolve the problem, you'll have to enable them again, and proceed to disabling WSUS compression.

Disabling WSUS compression

1) Open an elevated command prompt (Run command prompt as Administrator)

2) Enter the following command:
%windir%\system32\inetsrv\appcmd.exe set config -section:system.webServer/httpCompression /-[name='xpress']

Disabling compression is, again, the option of last resort, it may be better to relocate the Print Audit application to a computer without the WSUS role. In general the application pool method would be preferred.

Most of our products should support the 64 bit application pool, if one does not please report this to support. At this time only Sharp Embedded appears to have any issues that would require disabling compression, but future releases of Sharp should be 64 bit enabled.

So at some point you may want to enable WSUS compression again, the command to do so:

%windir%\system32\inetsrv\appcmd.exe set config -section:system.webServer/httpCompression /+[name=’xpress’,doStaticCompression=’false’,dll=’%windir%\system32\inetsrv\suscomp.dll’]
How did we do with this article?