Updating Surface Pro 3 drivers and firmware with SCCM and SCUP

Our company has been rolling out Surface Pro 3 devices for several months now. We use SCCM with MDT integration to image these devices and we integrate the latest driver and firmware packages as part of the build process.

As we deployed more Surface Pro 3’s, it was clear that we needed an automated method to update firmware and drivers. We started down the path of creating an application in SCCM but preferred to update our Surface Pro 3’s during monthly patches so we didn’t create an extra reboot for our end users.

I discovered you can use SCUP to deliver Surface Pro 3 drivers and firmware updates as part of your monthly patch process. In the past, it was difficult to do this but as it turns out, Microsoft recently released an .MSI package that installs the latest Surface Pro 3 drivers and firmware making our job much easier.

This guide will help you

Items you will need to create this package:

  • WinRAR or a similar compression program with the ability to create a self extracting .exe
  • Psexec from Windows Sysinternals
  • Working SCCM 2012 and SCUP environment
  • At least one Surface Pro 3 to test with
  • A directory on local PC’s that can be used to extract temporary data

Start by downloading the latest drivers and firmware updates from Microsoft. You only need to download the latest .MSI file http://www.microsoft.com/en-us/download/details.aspx?id=38826

Download Windows Sysinternals PsExec http://technet.microsoft.com/en-us/sysinternals/bb897553

Download WinRAR, use IExpress.exe or use an alternative self extracting program.

Create a folder named SurfacePro3_15_01_1. I chose this folder name as it matches the .MSI file name for this month and will easily be identifiable as time goes on.

Place the downloaded .MSI file in this folder.

Also place the PsExec file in this folder


Using WinRAR, right click the folder and select Add to Archive

Place a check in the box Create SFX Archive and click OK

On the newly created SurfacePro3_15_01_1.exe file, right click and left click Open with WinRAR

On the WinRAR toolbar, click on SFX, then click on Advanced SFX options

On the General tab on the path to extract section enter the path you want to extract the .MSI file. I use the absolute path of C:\Windows\Defminl\Drivers

On the Setup tab, in the Run after extraction section enter in “C:\Windows\Defminl\Drivers\SurfacePro3_15_01_1\psexec.exe” -s -accepteula msiexec /i  “C:\Windows\Defminl\Drivers\SurfacePro3_15_01_1\SurfacePro3_15_01_1.msi” /qn REBOOT=ReallySuppress

On the Modes tab, ensure the Hide all radio button is selected.

On the Update tab, ensure the Extract and replace files and Overwrite all files radio button is selected.

Click OK, then OK again to save the file

I recommend to test the packaged .exe on a test VM before proceeding. It’s much easier to get any issues corrected now rather than to find out after you publish it with SCUP.

When satisfied with the results of your custom .exe, copy to your user profile on your server with SCUP installed to C:\Users\\Documents\LocalSourcePublishing

Adding the drivers and firmware updates to SCUP


Add a new product to SCUP. I named mine Microsoft Corporation (Drivers and Firmware)

Create a new Software Update in your newly created product group.

In the Package source field click Browse and then navigate to your SurfacePro3_15_01_1.exe file

Click the checkbox Use a local source to publish software update content


Click Next

On the Required Information screen, fill in the information as shown


On the Optional Information screen, fill in the information as shown


On the Prerequisites screen, click Next

On the Superseded Updates screen, click Next

On Installable Rules screen click on the star icon to add a new rule.

Choose rule type of System/WMI Query
In the WMI namespace field type in: root\cimv2
In the WMI query filed type in: Select * From Win32_ComputerSystemProduct WHERE Name LIKE “Surface Pro 3”


Click OK
This WMI query ensures that this package is only intended for Surface Pro 3 computers.

While still in the Installable Rules click on the star icon to add another rule.
In this rule, change the following: Common path: Windows Path: Firmware File Name: UEFI.3.11.450.0.cap


Click OK
Highlight the line you just added that starts with File ‘[Windows] and click on the explanation point so the file reads NOT: File ‘[Windows]

Click Next

On the Installed Rules screen, click the star icon to add a rule.
In this rule, change the following: Common path: Windows Path: Firmware File Name: UEFI.3.11.450.0.cap

Click OK


Click Next

Review the summary screen and click Next and then Close.

Publish this update with SCUP and then synchronize your Software Update point. If your new update doesn’t appear in All Software Updates you may need to add your new product under SCCM>Administration>Site Configuration>Sites>Site Server name>Configure Site Components>Software Update Point>Products, then synchronize again.

Add your new update to a test Software Update Group, deploy and test.

Hope this helps in getting your Surface Pro 3’s up to date.

Tagged with: , ,
Posted in SCCM, SCUP, Surface Pro 3
3 comments on “Updating Surface Pro 3 drivers and firmware with SCCM and SCUP
  1. Colin Smith says:

    Good post. Do you mind if I use part of it in a post I am writing at sunbehindtheclouds.com? I will obviously cite you as the original author and link your post.


  2. […] Here’s a good post on how to use the MSI with System Center Configuration Manager. […]


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: