Every three years, UpSlide must renew its code signing certificate. This process is a routine operation and is required by all certification authorities. Before May 2023, we had to provide users with a new setup for the auto-update to continue working. If you have installed an UpSlide version > 6.8.16, you will not be required to install a new setup; our Update Service will automatically install the new certificate to allow auto-update to function.
What is the UpSlide Update Service?
The UpSlide Update Service is a Windows service that is installed during the UpSlide installation. It will run at Windows start-up and check with our server if a new certificate is available.
Communication
Communication is secure with TLS 1.2 and AES 256. For more details, see the communication page.
Detailed explanation
The update system relies on the Update Service, the Update Manager, and the UpSlide Add-in. The flow is described below.
First, the UpSlide Add-in will check on our server for new versions of some files. The files in question are :
- The UpSlide code signing certificate (the public part)
- The Update Manager
- UpSlide Plus (a component necessary for the Excel undo feature)
The add-in will download those files to <installation folder>/ManagerTemp.
The add-in checks for new versions on our server every time you launch PowerPoint, Excel or Word.
Then, the Update Service will run at the next Windows startup or login. The Update Service is a Windows Service, it is installed for all users, and run with system rights. The Update Service will launch the Update Manager. The service does nothing more.
The Update Manager also runs with system rights. It will retrieve the files previously downloaded by the add-in, validate their signature (the files are signed with an asymmetric key to guarantee no one can tamper with them) and install them :
- The certificate will be installed in the Machine store, under Trusted Publishers.
- The Update Manager will be moved next to UpSlide Service (it will replace the current Update Manager)
What happens if users don't have the Update Service
If the service is not installed on the user's machine, their UpSlide won't update anymore when we renew our code-signing certificate. UpSlide will stop retrieving the latest features and security updates, and you will need to deploy a new installer for users.