Updates are installed remotely by R3. To ensure security, the client initiates the start of the update process.