- The updater looks for updates to certificates from the certificate store. - The updates are spaced by random time intervals so that the reconstruction of the content of the cert store is made more difficult. - The updater can be send into the background - start, stop and status are implemented. - The state of the updater is persisted to disk so that the update procedure survives a restart.