App Auto Update
How to enable or disable auto update for the CSE desktop apps in your org
- Updated on
- Overview
- How auto update works
- Steps to Enable or Disable App Auto Update
- Device Credential Auto-Renewal
Overview
Admins can use this feature to enable silent desktop app version updates to end users’ devices. This setting will be on by default for new orgs (i.e., orgs created after April 2026 release) and off by default for existing orgs.
Note: Desktop app version 4.2.0+ will auto update on next restart without user interaction or admin permissions necessary. The console toggle (org-wide) controls silent auto update. The mdm_disable_auto_update flag in mdmconfig.json (per-device) controls whether the user sees an update notification.
How auto update works
| Console Toggle (Silent Auto Update) | MDM Flag (disable=true) | 4.2.0+ Behavior | Pre-4.2.0 Behavior |
|---|---|---|---|
| ON | false / not set | Silent auto update on next launch, no notification | No silent update; user gets notification |
| ON | true (disabled) | No silent update; no notification | No silent update; no notification |
| OFF | false / not set | No silent update; user gets notification | No silent update; user gets notification |
| OFF | true (disabled) | No silent update; no notification | No silent update; no notification |
Steps to Enable or Disable App Auto Update
-
In the CSE Command Center, navigate from Settings > SonicWall CSE Client > the Deployment tab.
-
Under the App Auto Update section, toggle on to enable auto update or toggle off to disable auto update and continue manually updating app versions.
Device Credential Auto-Renewal
In addition to app version updates, desktop app v4.3.0+ silently renews device certificates and long-lived tokens in the background. Users never see a re-registration prompt, and enrolled devices stay enrolled across renewal cycles. No admin or end-user action is required.
For details on the device certificate lifecycle, see Device Certificates - Management and Expiration.