Signed update package including a software update payload and compatibility data

Abstract

A computer program product and computer-implemented method include operations including identifying a software update payload that is available for distribution and identifying compatibility data for the software update payload, wherein the compatibility data identifies configurations of a computing device that are compatible with the software update payload. The operations further include forming an update package that includes the software update payload and the compatibility data, digitally signing the update package, and providing the signed update package to one or more computing devices over a network. A computing device receiving the signed update package may authenticate the signed update package, verify the package has not experienced an unauthorized modification, access the compatibility data, determine whether the compatibility data indicates that the software update payload is compatible with the configuration of the computing device, and use the software update payload to update the computing device in response to a determination of compatibility.