Page 1 of 1

Automated package updates

Published: November 18, 2025 - 10:27 AM
by ludo69
Hello,

I'm using WAPT Enterprise on Windows version 2.6.0.17392.

How can I automatically update packages from the TranquilIT repository on my WAPT Enterprise server?

Currently, I go to the private repository -> refresh available packages,
then update from the store for packages marked in 'red',
then add the packages to the cart,
and finally import the package cart.

This method is quite slow and, more importantly, doesn't allow for automated daily updates, which would be necessary for faster response to vulnerabilities.

How can I automate this?
Or is there a simpler manual process?

Thank you.

Re: Automated package updates

Published: November 18, 2025 - 12:00 PM
by sfonteneau
Automatic import is not possible because the WAPT server does not have the private key.

You MUST recheck the Tranquility packages during import (they are not guaranteed), which is why we recommend a pre-production environment.

In short, we don't want to create a CrowdStrike2 by automatically updating your network.

By approving updates yourself, YOU take responsibility for what you import.

Rather than using the "red packages,"

simply click on "Import from internet" and check the boxes:

* "Newer than in my repository"
* "Compatible with known machines"
* "Latest version only."

Select all the packages and import them according to your chosen maturity level.

Re: Automated package updates

Published: November 18, 2025 - 1:17 PM
by ludo69
Thank you for your reply.

Is there a way to script this?

Because if I run the script, I assume the same responsibility

. Sincerely,

Re: Automated package updates

Published: November 18, 2025 - 1:36 PM
by sfonteneau
The easiest way is to push the tranquility key on all your parks.

https://wapt.tranquil.it/wapt/catranquilit.crt

In this way, tranquility is easily controlled All your park.

And on your end, you just added the Tranquility packages to your repository:

example :

Code: Select all

cd /var/www/wapt
wget https://wapt.tranquil.it/wapt/tis-chrome_109.0.5414.120-42_x64_windows_6.1_10.0_PROD.wapt
wapt-scanpackages /var/www/wapt -ldebug
This way you don't re-sign the packages, you use ours directly, and this way we can control your fleet.

Re: Automated package updates

Published: November 18, 2025 - 7:51 PM
by vcardon
Simon is teasing; Tranquil IT absolutely does not want to replace your work. We're simply trying to make it more enjoyable and worthwhile for you.

If you're looking for a complete WAPT managed services solution with the associated contractual guarantees, you can contact a company like Suricate.

Otherwise, yes, it's just 3 clicks every day or 2-3 times a week—a 10-minute process that previously took you days and hours, without the quality assurance that WAPT now provides. So no, you never waste time with WAPT.

Re: Automated package updates

Published: November 19, 2025 - 09:53
by sfonteneau
vcardon wrote: Nov 18, 2025 - 7:51 PM Simon is teasing
I was perfectly serious :) and the proposed solution is perfectly valid (it's better than automatically re-signing).

Automatic duplication without verification leads to this exact conclusion: "peace of mind can control your entire fleet"