It’s been a long, careful road to bring Auto-Updating to the Watchman Client, and I’m happy to say it’s done.
Security was at the heart of the matter, with stability a close second. We’ve achieved both.
In a nutshell:
- The client downloads a list of authorized installer sha512 signatures.
- The client then checks to see if the most recent version is installed.
- The client would then download the newest version, and if the hash comparison validates, the updated client is installed.
Subscribers can always check the contents of the Signed Update Packages to verify the installer package. Each subscriber will be able to decide when they are ready for a new version to be deployed to their installed clients.
This should pave the way for even more widespread installation of the Watchman Client, and we are excited!