Slipstream Service Pack 2 for Forefront TMG 2010
Now that Service Pack 2 (SP2) for Microsoft Forefront TMG 2010 is available I’ve had numerous people ask me about the process of slipstreaming the service pack with the Forefront TMG 2010 installation media. Having Forefront TMG 2010 with SP2 slipstreamed is a great time saver if you install TMG frequently like I do, but it is also essential if you wish to install Forefront TMG 2010 on a read-only domain controller (RODC). Last year when service pack 1 for Forefront TMG 2010 was released I wrote this post on how to slipstream the service pack. The process is nearly identical with Forefront TMG 2010 SP2 with the exception that there are a few more steps required because of TMG SP2’s dependencies on SP1 and software update 1 for TMG SP1.
To slipstream SP2 with the Forefront TMG 2010 installation media, begin by copying the contents of your Forefront TMG 2010 DVD or extracting the ISO to a temporary folder. Next, download Forefront TMG 2010 SP1, Forefront TMG 2010 SP1 software update 1, and Forefront TMG 2010 SP2. Software update 1 for Forefront TMG 2010 SP1 and SP2 for Forefront TMG 2010 are both .exe files that can’t be used for slipstreaming. To support slipstreaming we’ll need to extract the .msp files from them by opening an elevated command prompt and issuing the following commands:
For software update 1 for Forefront TMG 2010 SP1
TMG-KB2288910-amd64-ENU.exe /t d:\temp\SP1U1
For Forefront TMG 2010 SP2
TMG-KB2555840-amd64-ENU.exe /t d:\temp\SP2
Now begin the slipstreaming process by navigating to the \FPC folder of the TMG installation source and then issuing the following commands:
First, slipstream SP1 for Forefront TMG 2010
msiexec /a MS_FPC_Server.msi /p d:\temp\sp1\TMG-KB981324-AMD64-ENU.msp
Next, slipstream software update 1 for Forefront TMG 2010 SP1
msiexec /a MS_FPC_Server.msi /p d:\temp\sp1u1\TMG-KB2288910-amd64-ENU.msp
Finally, slipstream Forefront TMG 2010 SP2
msiexec /a MS_FPC_Server.msi /p d:\temp\sp2\TMG-KB2555840-amd64-ENU.msp
Once complete, use your favorite tool to burn a DVD or create an ISO file.
Important Note: If you install the Forefront TMG 2010 firewall client from the new SP2 slipstreamed installation source, you will still need to install the October 2011 Forefront TMG 2010 firewall client hotfix rollup as outlined in my previous blog post.
Connect
Richard Hicks' Forefront TMG Blog 
Hi,
I’m trying to slipstream the service packs into the Forefront TMG 2010
sp1 went right through without a glitch.
then i tried to extract the .msp from the software update 1 and the sp2 but have had no luck.
i renamed the file for the software update to cut down on typing times to sp1u1.exe and tried the following command from an elevated cmd prompt:
>sp1.exe /t e:\temp\sp1u1
it returned the following:
‘sp1.exe’ is not recognized as an internal or external command, operable program or batch file.
i can extract the contents of both of the exe files but have not found any .msp file in any of them….
really hit a brick wall here as i would like to deploy TMG 2010 to a readonly DC on a branch office and this would cut down on installation time.
Thanks.
I’m not sure if it is a typo in your comment, buy it says that you renamed the file to sp1u1.exe, but then you entered the command sp1.exe /t e:\temp\sp1u1. It should have been sp1u1.exe /t e:\temp\sp1u1. Regardless, if you follow the instructions in this article it should work without issue. I’ve done this a dozen times already and have had no issues. Remember that the Windows command prompt will autocomplete, so if you start typing the name of the executable you can hit tab and you won’t have to do all that typing. You also reduce the risk of a typo. 🙂
Thank you very much for the assistance sir,
I realized i was indeed typing the command in the wrong directory, I’ve managed to extract the files successfully.
Regards,
Useful info, Richard. But I doubt that such slipstreaming is _supported_ by Microsoft. Do you know official statement from PG of Support team?
I’ve seen no formal statement from PSS or the product team stating that it isn’t supported. 🙂
Bless you! That’s very usefull info when someone wants to install a purchased TMG over a trial version that has been updated to SP2. Thank you
I have internal communication with my colleagues, Richard. Aaaaand…you were right – slipstreaming for Forefront TMG installers IS officially SUPPORTED by Microsoft 🙂
Great info, thanks!
I was having problems slipstreaming SP1 (getting a “Internal error 2203”); it turns out that the MS_FPC_Server.mis file was marked read-only when it was copied from the DVD image. Once I removed the read-only attribute things went perfectly.
Thanks again!
Thanks for sharing the guide, we were trying to install a full-version TMG over our trial version but it kept failing because our trial was running SP2 and the installer we had was TMG version 1. After slipstreaming SP1 and SP2, the upgrade went fine.
Great to hear! 🙂
Hi Richard,
Thank you very much for your continuous updates and informative posts. Without your efforts, and I think I speak for a lot of admins here when I say this, we would be almost certainly lost. I regularly come across your blogs when looking for information on TMG and I always find them of a very high quality and accuracy. Thanks again for saving me a lot time in research and anguish!
Thanks Adrian! Be sure to also follow me on Twitter and Facebook. I regularly share information their that you will find helpful too. 🙂
Don’t forget to keep your slipstream package updated! Since Richard wrote this, the TMG SE team has released two separate rollups for TMG 2010 SP2.
Also, you should bear in mind tht the updates for TMG itself do not include updates for SQL Express 2008 SP1 or Forefront Protection 2010 for Exchange (they’re not TMG bits, after all). You need to ensure that you gather these updates periodically as well.
Excellent advice, Jim. Thanks for making that point! 🙂
I don’t suppose you’ve got a process for UAG 2010 SP2?
I’ve not done this myself, but I would expect the same process would work. Not sure though…
Hey Richard,
while I haven’t tested it with a deployment, I did come up with a process and posted it here: http://social.technet.microsoft.com/Forums/en-NZ/forefrontedgeiag/thread/a27a3865-24b4-49e1-a39e-1488a8e4dbc3
Thanks!
Craig
Thanks Craig! 🙂
Thank you so very much for the steps. You are a lifesaver and have saved me tremedous time – Paul
I plan on running TMG 2010 for some time yet and used this guide to slipstream up to the Service Pack #2 level.
What I’d like to do is install the SP#2 Rollups 1,2, & 3 into the mix. 1 & 2 are .exe files (not .msp files).
Does anyone know how to do this – thanks!
The file you download from Microsoft is an .EXE file. It’s nothing more than an archive, however. If you extract that .EXE file you’ll find an .MSP file that you can slipstream using the method I’ve outlined here.