Yes, it can still update just fine. It installs its own certificate at install time and all updates are signed with it.