Every 3 years, UpSlide must renew its code-signing certificate. This process is routine and required by all certification authorities. Before May 2023, we had to provide users with a new setup to keep the auto-update working. If you have installed an UpSlide version > 6.8.16, you do not need to install a new setup; our Update Service will automatically install the new certificate to enable auto-update.
What is the UpSlide Update Service?
The UpSlide Update Service is a Windows service installed during UpSlide installation. It will run at Windows startup and check our server for a new certificate.
Communication
Communication is secure using TLS 1.2 and AES-256. For more details, see the communication page.
Detailed explanation
The update system relies on the Update Service, the Update Manager, and the UpSlide Add-in. The flow is described below.
First, the UpSlide Add-in will check on our server for new versions of some files. The files in question are:
- The UpSlide code signing certificate (the public part)
- The Update Manager
- UpSlide Plus (a component necessary for the Excel undo feature)
The add-in will download those files to <installation folder>/ManagerTemp.
The add-in checks for new versions on our server every time you launch PowerPoint, Excel or Word.
Then, the Update Service will run at the next Windows startup or login. The Update Service is a Windows Service; it is installed for all users and runs with system rights. The Update Service will launch the Update Manager. The service does nothing more.
The Update Manager also runs with system rights. It will retrieve the files previously downloaded by the add-in, validate their signature (the files are signed with an asymmetric key to guarantee no one can tamper with them), and install them :
- The certificate will be installed in the Machine store, under Trusted Publishers.
- The Update Manager will be moved next to UpSlide Service (it will replace the current Update Manager)
What happens if users don't have the Update Service
If the service is not installed on the user's machine, their UpSlide won't update anymore when we renew our code-signing certificate. UpSlide will stop retrieving the latest features and security updates, and you will need to deploy a new installer for users.