Abstract: The disclosed herein relates to automatically updating a first controller application in a component of an automated passenger conveying device. To perform this automatic update, the automated passenger conveying device is disabled from providing service; a switchover is performed from the first controller application to a second controller application; and a post-switchover inspection is performed of the second controller application, where the post-switchover inspection determines whether the automated passenger conveying device works properly while the second controller application is active. The automated passenger conveying device is enabled to provide the service when the post-switchover inspection of the second controller application determines that the automated passenger conveying device works properly.