Blog

System Health Validator Point

No Comments

System Health Validator Point

We will describe how to install SCCM Current Branch System Health Validator Point (SHVP).

ROLE DESCRIPTION

The SHVPoint  validates Configuration Manager Network Access Protection (NAP) policies.

This is not a mandatory site system but you need a SHVPoint if you plan to use NAP evaluation in your software update deployments. This site system integrates with an existing NAP server in your infrastructure.

SITE SYSTEM ROLE PLACEMENT IN HIERARCHY

The SHVPoint is a hierarchy-wide option. It’s supported to install this role on a Central Administration site, stand-alone Primary site, child Primary site. It’s not supported to install it on a Seconday site. The SHVPoint must be installed on a NAP health policy server.

SCCM SYSTEM HEALTH VALIDATOR POINT INSTALLATION

  • Open the SCCM console
  • Navigate to Administration / Site Configuration / Servers and Site System Roles
  • Right click your Site System and click Add Site System Roles
  • On the General tab, click Next
·         On the Proxy tab, click Next
·         On the Site System Role tab, select System Health Validator Point, click Next
·        On the System Health Validator tab, click Next
o    There are no properties to configure for this site system role
·         On the Summary tab, review your settings, click Next and complete the wizard

VERIFICATION AND LOGS FILES

You can verify the installation in the following logs:

  • ConfigMgrInstallationPath\Logs\SMSSHVSetup.log – Detailed System Health Validator Point installation status

CONFIGURE CLIENT SETTINGS

In order to enable Network Access Protection on your clients, you must configure your client settings :

  • Open the SCCM console
  • Browse to Administration / Client Settings
  • Create a new client settings, select Network Access Protection on the left and choose Yes under Enable Network Access Protection on clients
  • Select the desired NAP re-evaluation schedule and click Ok

In case you’re used to NAP in SCCM 2007 and looking for a Network Access Protection node in the console, the 2012 version of NAP is slightly different.

From Technet:

The New Policies Wizard is no longer available to create a NAP policy for software updates: The Network Access Protection node in the Configuration Manager console and the New Policies Wizard are no longer available in System Center 2012 Configuration Manager. To create a NAP policy for software updates, you must select Enable NAP evaluation on the NAP Evaluation tab in software update properties.

SCCM Training 

Live Instructor-led Online Training

Click here for SCCM Course Content

Watch SCCM Demo Video

Leave a Reply