How does VT deal with program updates?
Easily. When a token is customized, the only specific piece of information loaded inside it is a cryptographic key to decrypt the coprocessor instructions. All the programs protected using the matching encryption key will work equally well with the token. For instance, a software publisher can protect all minor versions of a program with the same key but change key for major versions when he requires the customer to buy a new/upgraded license/token. All the software versions can be freely available for download but cannot be used without token.