Abstract: A vehicle ECU receives an ECU update package from a remote source. The ECU verifies a first timestamp included with the ECU update package postdates a second timestamp stored onboard the vehicle in conjunction with a last-successful update of the ECU and obtains a unique vehicle identifier from the vehicle bus. The ECU obtains secure configuration data for the ECU included in a payload of the update package and calculates a first hash value using at least the unique vehicle identifier and the secure configuration data. Also, the ECU validates the update package based on comparison of the first hash value matching a second hash value included in the update package and, responsive to the first timestamp post-dating the second timestamp and validation of the update package, modifies the ECU through use of the secure configuration data.