If the automatic update feature is enabled, OC Scanner will check if a new version of OC Scanner is available. If so, OC Scanner downloads the new version automatically, replaces the old one, and then restarts again.
NOTE: If the machine where OC Scanner is installed has an internet connection, OC Scanner uses port 443 to download the new version from https://splamanager.octopuscloud.ch directly. If the machine where OC Scanner is installed has no connection to the internet, OC Scanner uses OC Configurator server API to download the data from http(s)://<URL ADDRESS OF THE API:PORT>/updater/InventoryScan.exe. During the OC Scanner update, the OC Scanner verifies the downloaded executable file, by checking the certificate validity on that file. The given certificate checks require connectivity to the following URLs:
- http://crl3.digicert.com/sha2-assured-cs-g1.crl
- http://crl4.digicert.com/sha2-assured-cs-g1.crl
- http://ocsp.digicert.com
- http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt
In case the certificate check fails, or the URLs are not accessible, the OC Scanner will not be able to update automatically, regardless of the OC Scanner update is being done from the Internet, or from the central OC Configurator API server.
The same applies to any agent-based deployed OC Scanners.