I took over our SCCM environment about 9 months ago. Something I have discovered it that there are no security patches showing for our Server 2012 r2 machines. I checked to make sure WSUS was selected to download them and it was not. I made that change and they still will not show in SCCM. I don't see any errors.