SEP.cloud on-premise manager question: how does this agent get updated?

With the recent notice that Endpoint security was going from 20.4.0.40 to 21.5.0.19, I just realized I don't know the anser to the question: How does the on-premise version get updated (since it was a stand-alone download)?

Thanks!