Home > Forefront TMG 2010 > Slipstream Service Pack 2 for Forefront TMG 2010

Slipstream Service Pack 2 for Forefront TMG 2010

October 23, 2011

Now that Service Pack 2 (SP2) for Microsoft Forefront TMG 2010 is available I’ve had numerous people ask me about the process of slipstreaming the service pack with the Forefront TMG 2010 installation media. Having Forefront TMG 2010 with SP2 slipstreamed is a great time saver if you install TMG frequently like I do, but it is also essential if you wish to install Forefront TMG 2010 on a read-only domain controller (RODC). Last year when service pack 1 for Forefront TMG 2010 was released I wrote this post on how to slipstream the service pack. The process is nearly identical with Forefront TMG 2010 SP2 with the exception that there are a few more steps required because of TMG SP2’s dependencies on SP1 and software update 1 for TMG SP1.

To slipstream SP2 with the Forefront TMG 2010 installation media, begin by copying the contents of your Forefront TMG 2010 DVD or extracting the ISO to a temporary folder. Next, download Forefront TMG 2010 SP1, Forefront TMG 2010 SP1 software update 1, and Forefront TMG 2010 SP2. Software update 1 for Forefront TMG 2010 SP1 and SP2 for Forefront TMG 2010 are both .exe files that can’t be used for slipstreaming. To support slipstreaming we’ll need to extract the .msp files from them by opening an elevated command prompt and issuing the following commands:

For software update 1 for Forefront TMG 2010 SP1

TMG-KB2288910-amd64-ENU.exe /t d:\temp\SP1U1

For Forefront TMG 2010 SP2

TMG-KB2555840-amd64-ENU.exe /t d:\temp\SP2

Now begin the slipstreaming process by navigating to the \FPC folder of the TMG installation source and then issuing the following commands:

First, slipstream SP1 for Forefront TMG 2010

msiexec /a MS_FPC_Server.msi /p d:\temp\sp1\TMG-KB981324-AMD64-ENU.msp

Next, slipstream software update 1 for Forefront TMG 2010 SP1

msiexec /a MS_FPC_Server.msi /p d:\temp\sp1u1\TMG-KB2288910-amd64-ENU.msp

Finally, slipstream Forefront TMG 2010 SP2

msiexec /a MS_FPC_Server.msi /p d:\temp\sp2\TMG-KB2555840-amd64-ENU.msp

Once complete, use your favorite tool to burn a DVD or create an ISO file.

Important Note: If you install the Forefront TMG 2010 firewall client from the new SP2 slipstreamed installation source, you will still need to install the October 2011 Forefront TMG 2010 firewall client hotfix rollup as outlined in my previous blog post.

  1. Faridi Martinez
    November 4, 2011 at 11:53 am

    I’m trying to slipstream the service packs into the Forefront TMG 2010

    sp1 went right through without a glitch.

    then i tried to extract the .msp from the software update 1 and the sp2 but have had no luck.

    i renamed the file for the software update to cut down on typing times to sp1u1.exe and tried the following command from an elevated cmd prompt:

    >sp1.exe /t e:\temp\sp1u1

    it returned the following:
    ‘sp1.exe’ is not recognized as an internal or external command, operable program or batch file.

    i can extract the contents of both of the exe files but have not found any .msp file in any of them….

    really hit a brick wall here as i would like to deploy TMG 2010 to a readonly DC on a branch office and this would cut down on installation time.


  2. November 5, 2011 at 7:03 am

    I’m not sure if it is a typo in your comment, buy it says that you renamed the file to sp1u1.exe, but then you entered the command sp1.exe /t e:\temp\sp1u1. It should have been sp1u1.exe /t e:\temp\sp1u1. Regardless, if you follow the instructions in this article it should work without issue. I’ve done this a dozen times already and have had no issues. Remember that the Windows command prompt will autocomplete, so if you start typing the name of the executable you can hit tab and you won’t have to do all that typing. You also reduce the risk of a typo. 🙂

  3. Faridi Martinez
    November 6, 2011 at 10:20 am

    Thank you very much for the assistance sir,

    I realized i was indeed typing the command in the wrong directory, I’ve managed to extract the files successfully.


  4. December 22, 2011 at 1:22 am

    Useful info, Richard. But I doubt that such slipstreaming is _supported_ by Microsoft. Do you know official statement from PG of Support team?

  5. December 22, 2011 at 2:00 pm

    I’ve seen no formal statement from PSS or the product team stating that it isn’t supported. 🙂

  6. bvc
    December 28, 2011 at 8:37 am

    Bless you! That’s very usefull info when someone wants to install a purchased TMG over a trial version that has been updated to SP2. Thank you

  7. January 20, 2012 at 6:02 am

    I have internal communication with my colleagues, Richard. Aaaaand…you were right – slipstreaming for Forefront TMG installers IS officially SUPPORTED by Microsoft 🙂

  8. February 23, 2012 at 9:38 am

    Great info, thanks!

    I was having problems slipstreaming SP1 (getting a “Internal error 2203”); it turns out that the MS_FPC_Server.mis file was marked read-only when it was copied from the DVD image. Once I removed the read-only attribute things went perfectly.

    Thanks again!

  9. May 16, 2012 at 5:51 am

    Thanks for sharing the guide, we were trying to install a full-version TMG over our trial version but it kept failing because our trial was running SP2 and the installer we had was TMG version 1. After slipstreaming SP1 and SP2, the upgrade went fine.

  10. May 16, 2012 at 8:05 am

    Great to hear! 🙂

  11. Adrian
    June 17, 2012 at 3:27 am

    Hi Richard,

    Thank you very much for your continuous updates and informative posts. Without your efforts, and I think I speak for a lot of admins here when I say this, we would be almost certainly lost. I regularly come across your blogs when looking for information on TMG and I always find them of a very high quality and accuracy. Thanks again for saving me a lot time in research and anguish!

  12. June 17, 2012 at 7:06 pm

    Thanks Adrian! Be sure to also follow me on Twitter and Facebook. I regularly share information their that you will find helpful too. 🙂

  13. July 5, 2012 at 11:30 am

    Don’t forget to keep your slipstream package updated! Since Richard wrote this, the TMG SE team has released two separate rollups for TMG 2010 SP2.
    Also, you should bear in mind tht the updates for TMG itself do not include updates for SQL Express 2008 SP1 or Forefront Protection 2010 for Exchange (they’re not TMG bits, after all). You need to ensure that you gather these updates periodically as well.

  14. July 5, 2012 at 1:17 pm

    Excellent advice, Jim. Thanks for making that point! 🙂

  15. Craig
    August 12, 2012 at 8:27 pm

    I don’t suppose you’ve got a process for UAG 2010 SP2?

  16. August 22, 2012 at 9:46 am

    I’ve not done this myself, but I would expect the same process would work. Not sure though…

  17. August 22, 2012 at 1:21 pm

    Hey Richard,
    while I haven’t tested it with a deployment, I did come up with a process and posted it here: http://social.technet.microsoft.com/Forums/en-NZ/forefrontedgeiag/thread/a27a3865-24b4-49e1-a39e-1488a8e4dbc3

  18. August 22, 2012 at 2:57 pm

    Thanks Craig! 🙂

  19. Paul
    January 11, 2013 at 8:27 am

    Thank you so very much for the steps. You are a lifesaver and have saved me tremedous time – Paul

  20. Marviin
    April 22, 2013 at 5:48 pm

    I plan on running TMG 2010 for some time yet and used this guide to slipstream up to the Service Pack #2 level.

    What I’d like to do is install the SP#2 Rollups 1,2, & 3 into the mix. 1 & 2 are .exe files (not .msp files).

    Does anyone know how to do this – thanks!

  21. April 24, 2013 at 8:08 am

    The file you download from Microsoft is an .EXE file. It’s nothing more than an archive, however. If you extract that .EXE file you’ll find an .MSP file that you can slipstream using the method I’ve outlined here.

  1. October 23, 2011 at 8:44 pm
  2. March 12, 2012 at 7:37 am
  3. July 25, 2012 at 2:52 pm
  4. July 25, 2012 at 5:15 pm
Comments are closed.