Software updates in the field

Keep delivered machines current.
Without travelling.

If you look after hundreds of machines at many customers, every update needs a process — not a service technician with a USB stick.

With logiccloud ORCHESTRATE you see which software runs on which machine, roll out new versions in stages and document every change. Across vendors — including software that was not built with logiccloud.

logiccloud ORCHESTRATElive
Installed base · X200 / Europe
MachineCustomer · siteVersionState
X200-0142Customer A · Lyon4.8.0current
X200-0156Customer B · Graz4.7.2outdated
X200-0161Customer B · Graz4.7.2outdated
X200-0177Customer C · Brno4.8.0current
X200-0183Customer D · Linz4.6.9outdated

3 machines not on the released version

Rollout 4.8.0 · canary
MachineHardwareVersionRollout
X200-0156WAGO CC1004.7.24.8.0canaryupdated
X200-0161Kontron KBox4.7.24.8.0waitingupdated
X200-0183ctrlX CORE4.6.94.8.0waitingupdated

Auto-rollback once the failure rate passes the threshold

Evidence
  • Version 4.8.0 from the registrysha256 checked
  • Batches approved by an admincanary → rest
  • All machines in the group on 4.8.05 / 5
  • Every change in the audit logimmutable · CSV
Illustrative example — names and values are made up.

Today and tomorrow

From one-off jobs to an update process

Updates today

  • Nobody knows for sure which version runs on which machine
  • Every update is a site visit or a remote session
  • Customers stay on old versions — known vulnerabilities included
  • Evidence is pieced together afterwards, when someone asks

With logiccloud ORCHESTRATE

  • Inventory: version per machine, customer and site at a glance
  • Roll out new versions in stages: one machine first, then the group
  • The rollout stops automatically once the failure rate passes a threshold
  • Every change in the immutable audit log

Know what runs out there. Without travelling.

Roll out in stages

Three strategies, one platform

Which strategy fits depends on how critical the machines are and how sure you are of the new version.

  • Immediate

    All targets at once — for non-critical changes.

  • Canary

    A few systems first, then the rest once all is well.

  • Rolling

    Batch by batch; optionally with an admin approving each batch.

The markers show the principle, not customer figures.

What it takes

The building blocks of updates in the field

  • Connect securely

    Devices onboard with a one-time token and receive a certificate from the tenant’s own CA.

  • Form groups

    Labels by customer, site, machine type and version — new machines sort themselves in.

  • Roll out in a controlled way

    Immediate, canary or rolling; applications as Helm charts or Compose files from Git and OCI registries.

  • Provide evidence

    Audit log with CSV export: who rolled out or approved what, and when.

  • Monitor

    Telemetry via OpenTelemetry, device logs, alerts by email or webhook.

  • Many customers, one team

    Tenants strictly separated, each with its own branding.

logiccloud ORCHESTRATE · machine X200CRA
Provable in the field
  • Which software runs on which machineinventory
  • Vulnerability scan (premium module)2 findings
  • Fixed version built and released4.8.1
  • Update rolled out in stagescanary → all
  • Every change recordedaudit log, CSV export

CRA conformity of the overall product remains the manufacturer’s responsibility.

Illustrative example — names and values are made up.

Cyber Resilience Act

Updates in the field become mandatory in 2027

The Cyber Resilience Act requires manufacturers to handle vulnerabilities and provide security updates for the whole support period. Reporting duties have applied since 11 Sep 2026, the full requirements from 11 Dec 2027.

ORCHESTRATE provides the technical capabilities for this: inventory, controlled updates, evidence. CRA conformity of the overall product remains the manufacturer’s responsibility.

Frequently asked questions about software updates in the field

Does this only work with logiccloud CONTROL?

No. ORCHESTRATE distributes any container application as a Helm chart or Compose file — including software that was not built with logiccloud.

Which hardware does it run on?

On edge devices from many vendors with Linux and a container runtime. The hardware page lists the devices.

What happens if an update goes wrong?

In canary and rolling rollouts ORCHESTRATE stops automatically once the failure rate passes the threshold you set. Rollouts can also be paused, resumed or cancelled at any time.

How does this relate to the open Margo standard?

ORCHESTRATE implements the Margo Workload Management API, an open specification under the Linux Foundation. The specification is not final yet; we keep ORCHESTRATE current with every release.