diff --git a/core/ui/public/i18n/en/translation.json b/core/ui/public/i18n/en/translation.json
index 8330ac4fc..e102c609f 100644
--- a/core/ui/public/i18n/en/translation.json
+++ b/core/ui/public/i18n/en/translation.json
@@ -345,6 +345,7 @@
         "list-modules": "List applications",
         "list-installed-modules": "List installed applications",
         "list-updates": "List updates",
+        "set-automatic-updates": "Set automatic updates",
         "get-cluster-status": "Get cluster status",
         "get-defaults": "Get defaults",
         "create-cluster": "Create cluster",
@@ -1013,10 +1014,8 @@
     },
     "software_center": {
         "title": "Software center",
-        "title_tooltip": "Discover, install and update applications in your cluster. To manage installed applications, go to {applications} page",
-        "go_to_applications_center": "Go to applications center",
         "search_placeholder": "Search applications",
-        "software_updates": "Updates",
+        "software_updates": "Updates available",
         "you_have_updates": "You have {numUpdates} application to update | You have {numUpdates} applications to update",
         "testing_warning_title": "Testing repositories enabled",
         "testing_warning_description": "{repos} software repository includes non-stable versions of applications | The following software repositories include non-stable versions of applications: {repos}",
@@ -1036,7 +1035,7 @@
         "update_all_apps": "Update all applications",
         "apps_update_will_start_in_a_moment": "Applications update will start in a moment...",
         "core_update_will_start_in_a_moment": "Core update will start in a moment...",
-        "instances_update_will_start_in_a_moment": "Instances update will start in a moment...",
+        "instances_update_will_start_in_a_moment": "Applications update will start in a moment...",
         "add_to_favorites": "Add to favorites",
         "remove_from_favorites": "Remove from favorites",
         "details": "Details",
@@ -1060,26 +1059,26 @@
         "other_files_remain_on_default_volume": "Other application files remain on the default volume",
         "installing_on_node": "Installing on {node}",
         "instance_installed_on_node": "{module_id} installed on {node}",
-        "app_instances": "{app} instances",
-        "app_instances_no_name": "Application instances",
+        "app_instances": "{app} applications",
+        "app_instances_no_name": "Applications",
         "app_uninstallation": "Uninstall {app}",
         "instance_uninstallation": "Uninstall {instance}",
         "about_to_uninstall_instance": "{instance} will be uninstalled from the cluster",
-        "uninstall_instance": "Uninstall instance",
+        "uninstall_instance": "Uninstall application",
         "uninstalling": "Uninstalling",
-        "no_instance_installed": "No instance installed",
-        "instance": "Instance",
-        "instance_label": "Application instance label",
+        "no_instance_installed": "No applications installed",
+        "instance": "Application",
+        "instance_label": "Application label",
         "instance_label_tooltip": "You can give the application a memorable label to help recall its name.",
-        "edit_instance_label": "Edit instance label",
+        "edit_instance_label": "Edit application label",
         "app_managed_in": "This application is managed in",
         "reload_software_repositories": "Reload repositories",
         "clone": "Clone",
         "move": "Move",
         "clone_app": "Clone application",
         "move_app": "Move application",
-        "clone_app_description": "Clone {instanceLabel} instance and data to any node. Current instance will be left untouched.",
-        "move_app_description": "Move {instanceLabel} instance and data to a different node.",
+        "clone_app_description": "Clone {instanceLabel} application and data to any node. Current application will be left untouched.",
+        "move_app_description": "Move {instanceLabel} application and data to a different node.",
         "select_destination_node": "Select destination node",
         "current_node": "Current node",
         "cloning_app_to_node": "Cloning {instance} to {node}",
@@ -1102,26 +1101,47 @@
         "core_app_update_available": "Core update available",
         "core_app_update_available_description": "Some core applications need to be updated",
         "version": "Version",
-        "id": "Instances",
+        "id": "Applications",
         "node_id": "Node",
         "core_update": "Core update",
-        "app_updates": "Application updates",
+        "core_update_description": "Core updates help keep the cluster secure, stable, and up to date.",
+        "core_updates_available_description": "Core updates are available.",
+        "core_and_app_updates_available": "Core updates and {numUpdates} application update are available. | Core updates and {numUpdates} application updates are available.",
+        "no_updates_available": "No updates are currently available.",
         "review_and_update": "Review and update",
         "core_apps": "Core applications",
-        "update_all_instances": "Update all instances",
-        "update_app_instances": "Update {app} instances",
-        "updating_n_instances_c": "Updating {num} instance | Updating {num} instances",
-        "num_instances_updated": "{numInstances} instances updated",
-        "n_instances_will_be_updated_c": "Update of {num} instance will start in a moment... | Update of {num} instances will start in a moment...",
+        "applications_update": "Applications update",
+        "applications_update_description": "Application updates are installed automatically. Individual applications can be excluded from automatic updates.",
+        "automatic_updates_disabled_title": "Automatic updates disabled",
+        "automatic_updates_disabled_description": "Regular updates help protect applications, core components, and operating system packages from security and stability issues.",
+        "enable_automatic_updates": "Enable automatic updates",
+        "enable_automatic_updates_description1": "Automatic updates will be enabled for applications, core components, and operating system packages in this cluster.",
+        "enable_automatic_updates_description2": "Applications previously excluded from automatic updates will remain so.",
+        "disable_automatic_updates": "Disable automatic updates",
+        "disable_automatic_updates_description1": "Automatic updates will be disabled for all applications, core components, and operating system packages in this cluster.",
+        "disable_automatic_updates_description2": "Disabling automatic updates may expose the cluster to security issues and reduced stability. Ensure updates are reviewed and installed manually on a regular basis.",
+        "enable_instance_automatic_updates_description1": "{instance} will be included in automatic application updates.",
+        "enable_instance_automatic_updates_description2": "Updates will be installed automatically as soon as they are available.",
+        "disable_instance_automatic_updates_description1": "{instance} will be excluded from automatic application updates.",
+        "disable_instance_automatic_updates_description2": "You can still update it manually.",
+        "go_to_updates": "Go to Updates",
+        "go_to_core_applications": "Go to Core applications",
+        "go_to_software_repositories": "Go to Software repositories",
+        "updates_disabled": "Updates disabled",
+        "update_all_instances": "Update all applications",
+        "update_app_instances": "Update {app} applications",
+        "updating_n_instances_c": "Updating {num} application | Updating {num} applications",
+        "num_instances_updated": "{numInstances} applications updated",
+        "n_instances_will_be_updated_c": "Update of {num} application will start in a moment... | Update of {num} applications will start in a moment...",
         "version_version_available": "Version {version} available",
         "updates_disabled_ns7_migration_title": "Updates are suspended",
         "updates_disabled_ns7_migration_description": "There is an ongoing NS7 migration. Updates will resume once the migration is complete.",
-        "app_restart": "Restart the instance {app}",
+        "app_restart": "Restart the application {app}",
         "restart_app": "Restarting the application {name} will interrupt its operation and may cause downtime. Proceed only if maintenance is needed and users are aware.",
-        "restart_instance": "Restart instance",
+        "restart_instance": "Restart application",
         "restart_module_warning": "Proceed only if maintenance is needed and users are aware.",
         "restarting":" Restarting...",
-        "restart_instance_name": "Restart instance {instance}",
+        "restart_instance_name": "Restart application {instance}",
         "restart_application": "Restart application",
         "app_categories": {
             "core": "Core",
@@ -1152,20 +1172,20 @@
         "level_5_description": "Application developed, certified and supported by Nethesis",
         "update_to_stable_version": "Update to stable version",
         "update_to_testing_version": "Update to testing version",
-        "num_instances_installed": "{num} instance installed | {num} instances installed",
-        "reason_max_per_node_limit": "Limit of {param} instance reached | Limit of {param} instances reached",
+        "num_instances_installed": "{num} application installed | {num} applications installed",
+        "reason_max_per_node_limit": "Limit of {param} application reached | Limit of {param} applications reached",
         "reason_min_core_requirement": "Core version is lower than {param}",
         "search_core_apps": "Search core applications",
         "no_node_eligible_for_app_installation": "No node is eligible for application installation",
-        "no_node_eligible_for_instance_cloning": "No node is eligible for instance cloning",
-        "no_node_eligible_for_instance_migration": "No node is eligible for instance migration",
+        "no_node_eligible_for_instance_cloning": "No node is eligible for application cloning",
+        "no_node_eligible_for_instance_migration": "No node is eligible for application migration",
         "node_offline": "Node is offline",
         "no_version_reason": {
             "no_app_version": "No stable release of {app_name} is available in the '{app_repository}' repository",
             "core_version_too_low": "Update core to version {core_min} or higher to install this application",
             "rootfull_certification_level_too_low": "Applications with administrative privileges must have a minimum certification level of {certification_min}/5 to be installed"
         },
-        "migrating_app_title": "This application instance is undergoing migration",
+        "migrating_app_title": "This application is undergoing migration",
         "migrating_app_description": "You'll be able to use {name} again once the migration from NethServer 7 is complete.",
         "additional_storage_available": "Additional volumes available",
         "volume_usage": "{available} free of {total} ({percentage}% used)",
diff --git a/core/ui/src/components/shell/SideMenuContent.vue b/core/ui/src/components/shell/SideMenuContent.vue
index 1ea38a70a..f84caab40 100644
--- a/core/ui/src/components/shell/SideMenuContent.vue
+++ b/core/ui/src/components/shell/SideMenuContent.vue
@@ -129,7 +129,10 @@ export default {
       return this.$route.path.includes(path);
     },
     goTo(path) {
-      this.$router.push(path);
+      // avoid NavigationDuplicated when clicking the already active menu item
+      if (this.$route.fullPath !== path) {
+        this.$router.push(path);
+      }
       this.setMobileSideMenuShownInStore(false);
     },
   },
diff --git a/core/ui/src/components/software-center/AutomaticUpdatesModal.vue b/core/ui/src/components/software-center/AutomaticUpdatesModal.vue
new file mode 100644
index 000000000..77324aa3d
--- /dev/null
+++ b/core/ui/src/components/software-center/AutomaticUpdatesModal.vue
@@ -0,0 +1,187 @@
+<!--
+  Copyright (C) 2026 Nethesis S.r.l.
+  SPDX-License-Identifier: GPL-3.0-or-later
+-->
+<template>
+  <NsModal
+    size="default"
+    :visible="visible"
+    :isLoading="loading"
+    :primaryButtonDisabled="loading"
+    autoHideOff
+    v-on:modal-hide-request="onModalHideRequest"
+    @secondary-click="onModalHideRequest"
+    @primary-click="applyAutomaticUpdates"
+  >
+    <template slot="title">
+      {{ title }}
+    </template>
+    <template slot="content">
+      <p class="mg-bottom-md">
+        {{ description1 }}
+      </p>
+      <p>
+        {{ description2 }}
+      </p>
+      <div v-if="error.setAutomaticUpdates" class="mg-top-md">
+        <NsInlineNotification
+          kind="error"
+          :title="$t('action.set-automatic-updates')"
+          :description="error.setAutomaticUpdates"
+          :showCloseButton="false"
+        />
+      </div>
+    </template>
+    <template slot="secondary-button">{{ $t("common.cancel") }}</template>
+    <template slot="primary-button">{{
+      pendingEnable ? $t("common.enable") : $t("common.disable")
+    }}</template>
+  </NsModal>
+</template>
+<script>
+import to from "await-to-js";
+import { UtilService, TaskService } from "@nethserver/ns8-ui-lib";
+
+export default {
+  name: "AutomaticUpdatesModal",
+  mixins: [UtilService, TaskService],
+  props: {
+    visible: Boolean,
+    enable: Boolean,
+    // when set, automatic updates are toggled for this instance only
+    instance: {
+      type: Object,
+      default: null,
+    },
+  },
+  data() {
+    return {
+      loading: false,
+      // frozen at open: the caller flips its own state while the modal closes
+      pendingEnable: false,
+      error: {
+        setAutomaticUpdates: "",
+      },
+    };
+  },
+  computed: {
+    title() {
+      return this.pendingEnable
+        ? this.$t("software_center.enable_automatic_updates")
+        : this.$t("software_center.disable_automatic_updates");
+    },
+    instanceName() {
+      if (!this.instance) {
+        return "";
+      }
+      return this.instance.ui_name || this.instance.id;
+    },
+    description1() {
+      if (this.instance) {
+        return this.pendingEnable
+          ? this.$t(
+              "software_center.enable_instance_automatic_updates_description1",
+              { instance: this.instanceName }
+            )
+          : this.$t(
+              "software_center.disable_instance_automatic_updates_description1",
+              { instance: this.instanceName }
+            );
+      }
+      return this.pendingEnable
+        ? this.$t("software_center.enable_automatic_updates_description1")
+        : this.$t("software_center.disable_automatic_updates_description1");
+    },
+    description2() {
+      if (this.instance) {
+        return this.pendingEnable
+          ? this.$t(
+              "software_center.enable_instance_automatic_updates_description2"
+            )
+          : this.$t(
+              "software_center.disable_instance_automatic_updates_description2"
+            );
+      }
+      return this.pendingEnable
+        ? this.$t("software_center.enable_automatic_updates_description2")
+        : this.$t("software_center.disable_automatic_updates_description2");
+    },
+  },
+  watch: {
+    visible(newVal) {
+      if (newVal) {
+        this.error.setAutomaticUpdates = "";
+        this.pendingEnable = this.enable;
+      }
+    },
+  },
+  methods: {
+    async applyAutomaticUpdates() {
+      this.error.setAutomaticUpdates = "";
+      this.loading = true;
+      const data = this.instance
+        ? { instances: { [this.instance.id]: this.pendingEnable } }
+        : { apply_updates_is_active: this.pendingEnable };
+      const taskAction = "set-automatic-updates";
+      const eventId = this.getUuid();
+
+      this.$root.$once(
+        `${taskAction}-completed-${eventId}`,
+        this.setAutomaticUpdatesCompleted
+      );
+      this.$root.$once(
+        `${taskAction}-aborted-${eventId}`,
+        this.setAutomaticUpdatesAborted
+      );
+      this.$root.$once(
+        `${taskAction}-validation-failed-${eventId}`,
+        this.setAutomaticUpdatesValidationFailed
+      );
+
+      const res = await to(
+        this.createClusterTask({
+          action: taskAction,
+          data,
+          extra: {
+            title: this.title,
+            eventId,
+          },
+        })
+      );
+      const err = res[0];
+      if (err) {
+        console.error(`error creating task ${taskAction}`, err);
+        this.error.setAutomaticUpdates = this.getErrorMessage(err);
+        this.loading = false;
+      }
+    },
+    setAutomaticUpdatesAborted(taskResult, taskContext) {
+      console.error(`${taskContext.action} aborted`, taskResult);
+      this.error.setAutomaticUpdates = this.$t("error.generic_error");
+      this.loading = false;
+    },
+    setAutomaticUpdatesValidationFailed(validationErrors) {
+      console.error(
+        "set-automatic-updates validation failed",
+        validationErrors
+      );
+      this.error.setAutomaticUpdates = this.$t("error.generic_error");
+      this.loading = false;
+    },
+    setAutomaticUpdatesCompleted() {
+      this.loading = false;
+      // close before the caller flips its state
+      this.$emit("hide");
+      this.$emit("completed", this.pendingEnable);
+    },
+    onModalHideRequest() {
+      // stay open while the task runs, so a failure stays visible
+      if (this.loading) {
+        return;
+      }
+      this.error.setAutomaticUpdates = "";
+      this.$emit("hide");
+    },
+  },
+};
+</script>
diff --git a/core/ui/src/components/software-center/CloneOrMoveAppModal.vue b/core/ui/src/components/software-center/CloneOrMoveAppModal.vue
index 8b72d0abf..206060234 100644
--- a/core/ui/src/components/software-center/CloneOrMoveAppModal.vue
+++ b/core/ui/src/components/software-center/CloneOrMoveAppModal.vue
@@ -674,6 +674,9 @@ export default {
 
       // reload instances and highlight cloned/moved instance
       this.$emit("cloneOrMoveCompleted", newModuleId);
+
+      // a clone adds an app, a move changes its node: the drawer lists both
+      this.$root.$emit("reloadAppDrawer");
     },
     onSelectNode(selectedNode) {
       this.selectedNode = selectedNode;
diff --git a/core/ui/src/views/ApplicationsCenter.vue b/core/ui/src/views/ApplicationsCenter.vue
index 0c36a1697..719dcfff6 100644
--- a/core/ui/src/views/ApplicationsCenter.vue
+++ b/core/ui/src/views/ApplicationsCenter.vue
@@ -31,11 +31,37 @@
             <NsButton
               kind="tertiary"
               size="field"
-              :icon="Application20"
+              :icon="ArrowRight20"
               @click="showSoftwareCenterCoreApps()"
               class="page-toolbar-item"
-              >{{ $t("software_center.core_apps") }}</NsButton
+              >{{ $t("software_center.go_to_core_applications") }}</NsButton
             >
+            <NsIconMenu
+              :flipMenu="true"
+              tipPosition="top"
+              tipAlignment="end"
+              class="page-toolbar-item"
+            >
+              <cv-overflow-menu-item
+                v-if="subscriptionIsActive"
+                @click="toggleAutomaticUpdates()"
+              >
+                <NsMenuItem
+                  :icon="applyUpdatesIsActive ? PauseOutline20 : PlayOutline20"
+                  :label="
+                    applyUpdatesIsActive
+                      ? $t('software_center.disable_automatic_updates')
+                      : $t('software_center.enable_automatic_updates')
+                  "
+                />
+              </cv-overflow-menu-item>
+              <cv-overflow-menu-item @click="goToSoftwareCenter()">
+                <NsMenuItem
+                  :icon="ArrowRight20"
+                  :label="$t('applications.go_to_software_center')"
+                />
+              </cv-overflow-menu-item>
+            </NsIconMenu>
           </div>
         </cv-column>
       </cv-row>
@@ -49,6 +75,20 @@
           />
         </cv-column>
       </cv-row>
+      <cv-row v-if="subscriptionIsActive && !applyUpdatesIsActive">
+        <cv-column>
+          <NsInlineNotification
+            kind="warning"
+            :title="$t('software_center.automatic_updates_disabled_title')"
+            :description="
+              $t('software_center.automatic_updates_disabled_description')
+            "
+            :actionLabel="$t('software_center.enable_automatic_updates')"
+            @action="toggleAutomaticUpdates"
+            :showCloseButton="false"
+          />
+        </cv-column>
+      </cv-row>
       <cv-row v-if="error.addFavorite">
         <cv-column>
           <NsInlineNotification
@@ -238,13 +278,21 @@
                     }}</span>
                   </cv-data-table-cell>
                   <cv-data-table-cell>
-                    <span>{{ row.version }}</span>
-                    <cv-tag
-                      v-if="row.update"
-                      class="mg-left-sm"
-                      kind="green"
-                      :label="$t('applications.update_available')"
-                    />
+                    <div class="flex items-center">
+                      <span>{{ row.version }}</span>
+                      <cv-tag
+                        v-if="row.update"
+                        class="mg-left-sm"
+                        kind="green"
+                        :label="$t('applications.update_available')"
+                      />
+                      <cv-tag
+                        v-if="isUpdatesDisabledShown(row)"
+                        class="mg-left-sm"
+                        kind="high-contrast"
+                        :label="$t('software_center.updates_disabled')"
+                      />
+                    </div>
                   </cv-data-table-cell>
                   <cv-data-table-cell class="table-overflow-menu-cell">
                     <cv-overflow-menu flip-menu class="table-overflow-menu">
@@ -302,6 +350,24 @@
                           "
                         />
                       </cv-overflow-menu-item>
+                      <!-- enable/disable automatic updates -->
+                      <cv-overflow-menu-item
+                        v-if="isAutomaticUpdatesOptOutAvailable"
+                        @click="toggleInstanceAutomaticUpdates(row)"
+                      >
+                        <NsMenuItem
+                          :icon="
+                            row.automatic_updates
+                              ? PauseOutline20
+                              : PlayOutline20
+                          "
+                          :label="
+                            row.automatic_updates
+                              ? $t('software_center.disable_automatic_updates')
+                              : $t('software_center.enable_automatic_updates')
+                          "
+                        />
+                      </cv-overflow-menu-item>
                       <!-- add to favorites -->
                       <cv-overflow-menu-item
                         v-if="!favoriteApps.includes(row.id)"
@@ -400,6 +466,14 @@
       @hide="isShownUninstallModal = false"
       @confirmDelete="uninstallInstance"
     />
+    <!-- automatic updates modal -->
+    <AutomaticUpdatesModal
+      :visible="isShownAutomaticUpdatesModal"
+      :enable="enableAutomaticUpdates"
+      :instance="instanceToToggleAutomaticUpdates"
+      @hide="isShownAutomaticUpdatesModal = false"
+      @completed="onAutomaticUpdatesChanged"
+    />
     <!-- Restart instance modal -->
     <RestartModuleModal
       :visible="isShowRestartModuleModal"
@@ -451,7 +525,10 @@ import SetInstanceLabelModal from "@/components/software-center/SetInstanceLabel
 import RestartModuleModal from "@/components/software-center/RestartModuleModal.vue";
 import AddNoteModal from "@/components/applications-center/AddNoteModal.vue";
 import RequestQuote20 from "@carbon/icons-vue/es/request-quote/20";
+import PauseOutline20 from "@carbon/icons-vue/es/pause--outline/20";
+import PlayOutline20 from "@carbon/icons-vue/es/play--outline/20";
 import AppInfoModal from "@/components/software-center/AppInfoModal.vue";
+import AutomaticUpdatesModal from "@/components/software-center/AutomaticUpdatesModal";
 
 import {
   QueryParamService,
@@ -473,6 +550,7 @@ export default {
     AddNoteModal,
     RequestQuote20,
     AppInfoModal,
+    AutomaticUpdatesModal,
   },
   mixins: [
     IconService,
@@ -513,6 +591,12 @@ export default {
       appUpdates: [],
       app: null,
       modules: [],
+      PauseOutline20,
+      PlayOutline20,
+      subscriptionIsActive: false,
+      applyUpdatesIsActive: false,
+      isShownAutomaticUpdatesModal: false,
+      instanceToToggleAutomaticUpdates: null,
       tableColumns: ["name", "type", "node", "version"],
       tablePage: [],
       filter: {
@@ -607,6 +691,17 @@ export default {
 
       return filteredModules;
     },
+    // gates both the menu entry and the tag, which must not diverge
+    isAutomaticUpdatesOptOutAvailable() {
+      return this.subscriptionIsActive && this.applyUpdatesIsActive;
+    },
+    // no instance means the modal was opened for the cluster-wide toggle
+    enableAutomaticUpdates() {
+      const instance = this.instanceToToggleAutomaticUpdates;
+      return instance
+        ? instance.automatic_updates === false
+        : !this.applyUpdatesIsActive;
+    },
   },
   beforeRouteEnter(to, from, next) {
     next((vm) => {
@@ -627,6 +722,31 @@ export default {
       this.appInfo.isShown = true;
       this.appInfo.app = app;
     },
+    isUpdatesDisabledShown(row) {
+      return (
+        this.isAutomaticUpdatesOptOutAvailable &&
+        row.automatic_updates === false
+      );
+    },
+    toggleInstanceAutomaticUpdates(row) {
+      this.instanceToToggleAutomaticUpdates = row;
+      this.isShownAutomaticUpdatesModal = true;
+    },
+    toggleAutomaticUpdates() {
+      // the previous instance outlives its modal: clear it or the cluster-wide
+      // toggle would retarget the last app the user opted out
+      this.instanceToToggleAutomaticUpdates = null;
+      this.isShownAutomaticUpdatesModal = true;
+    },
+    onAutomaticUpdatesChanged(enable) {
+      // apply the reported value instead of re-listing the whole catalogue.
+      // the instance is kept until the next toggle: the closing modal reads it
+      if (this.instanceToToggleAutomaticUpdates) {
+        this.instanceToToggleAutomaticUpdates.automatic_updates = enable;
+      } else {
+        this.applyUpdatesIsActive = enable;
+      }
+    },
     onClose() {
       const context = this;
 
@@ -837,6 +957,8 @@ export default {
     },
     removeModuleCompleted() {
       this.listModules();
+      // the drawer lists the same estate: it would keep the removed app
+      this.$root.$emit("reloadAppDrawer");
     },
     showSetInstanceLabelModal(instance) {
       this.currentInstance = instance;
@@ -934,6 +1056,7 @@ export default {
             ui_note: installedData.ui_note || "",
             version: installedData.version || "",
             update: installedData.update || "",
+            automatic_updates: item.automatic_updates,
             appInfoData: moduleData, // needed for clone/move/info modals
           });
         }
@@ -942,6 +1065,12 @@ export default {
       extractedModules.sort(this.sortByProperty("id"));
       this.modules = extractedModules;
 
+      // flags are repeated on every module: an empty list carries none
+      if (modules.length) {
+        this.subscriptionIsActive = !!modules[0].subscription_is_active;
+        this.applyUpdatesIsActive = !!modules[0].apply_updates_is_active;
+      }
+
       // map module types for filter
       const moduleTypes = [
         {
diff --git a/core/ui/src/views/SoftwareCenter.vue b/core/ui/src/views/SoftwareCenter.vue
index 29d96a82b..55e99ef92 100644
--- a/core/ui/src/views/SoftwareCenter.vue
+++ b/core/ui/src/views/SoftwareCenter.vue
@@ -9,21 +9,6 @@
         <cv-column :md="4" :xlg="10" class="page-title">
           <h2>
             {{ $t("software_center.title") }}
-            <cv-interactive-tooltip
-              alignment="start"
-              direction="right"
-              class="info"
-            >
-              <template slot="content">
-                <i18n path="software_center.title_tooltip" tag="p">
-                  <template v-slot:applications>
-                    <cv-link @click="goToApplicationsCenter">
-                      {{ $t("applications.title") }}
-                    </cv-link>
-                  </template>
-                </i18n>
-              </template>
-            </cv-interactive-tooltip>
           </h2>
         </cv-column>
         <cv-column :md="4" :xlg="6">
@@ -46,18 +31,31 @@
               tipAlignment="end"
               class="page-toolbar-item"
             >
+              <cv-overflow-menu-item
+                v-if="subscriptionIsActive"
+                @click="toggleAutomaticUpdates()"
+              >
+                <NsMenuItem
+                  :icon="applyUpdatesIsActive ? PauseOutline20 : PlayOutline20"
+                  :label="
+                    applyUpdatesIsActive
+                      ? $t('software_center.disable_automatic_updates')
+                      : $t('software_center.enable_automatic_updates')
+                  "
+                />
+              </cv-overflow-menu-item>
               <cv-overflow-menu-item @click="showSoftwareCenterCoreApps()">
                 <NsMenuItem
-                  :icon="Application20"
-                  :label="$t('software_center.core_apps')"
+                  :icon="ArrowRight20"
+                  :label="$t('software_center.go_to_core_applications')"
                 />
               </cv-overflow-menu-item>
               <cv-overflow-menu-item
                 @click="goToSettingsSoftwareRepositories()"
               >
                 <NsMenuItem
-                  :icon="Settings20"
-                  :label="$t('settings_sw_repositories.title')"
+                  :icon="ArrowRight20"
+                  :label="$t('software_center.go_to_software_repositories')"
                 />
               </cv-overflow-menu-item>
             </NsIconMenu>
@@ -94,29 +92,32 @@
           />
         </cv-column>
       </cv-row>
-      <cv-row v-if="q.view !== 'updates'">
-        <cv-column v-if="isCoreUpdateAvailable">
+      <cv-row v-if="subscriptionIsActive && !applyUpdatesIsActive">
+        <cv-column>
           <NsInlineNotification
             kind="warning"
-            :title="$t('software_center.core_app_update_available')"
+            :title="$t('software_center.automatic_updates_disabled_title')"
             :description="
-              $t('software_center.core_app_update_available_description')
+              $t('software_center.automatic_updates_disabled_description')
             "
-            :actionLabel="$t('common.see_details')"
-            @action="showSoftwareCenterCoreApps"
+            :actionLabel="$t('software_center.enable_automatic_updates')"
+            @action="toggleAutomaticUpdates"
             :showCloseButton="false"
           />
         </cv-column>
-        <cv-column v-else-if="appUpdates.length && !loading.listCoreModules">
+      </cv-row>
+      <cv-row v-if="q.view !== 'updates'">
+        <cv-column
+          v-if="
+            (isCoreUpdateAvailable || appUpdates.length) &&
+            !loading.listCoreModules
+          "
+        >
           <NsInlineNotification
             kind="warning"
             :title="$t('software_center.software_updates')"
-            :description="
-              $tc('software_center.you_have_updates', appUpdates.length, {
-                numUpdates: appUpdates.length,
-              })
-            "
-            :actionLabel="$t('common.see_details')"
+            :description="updatesNotificationDescription"
+            :actionLabel="$t('software_center.go_to_updates')"
             @action="goToUpdates"
             :showCloseButton="false"
           />
@@ -235,28 +236,6 @@
             />
           </div>
           <div v-if="csbUpdatesSelected">
-            <!-- core update -->
-            <template
-              v-if="
-                isCoreUpdateAvailable &&
-                !loading.listModules &&
-                !loading.listCoreModules
-              "
-            >
-              <h4 class="mg-bottom-md">
-                {{ $t("software_center.core_update") }}
-              </h4>
-              <AppList
-                :apps="[coreApp]"
-                :skeleton="false"
-                tab="updates"
-                key="core-update"
-                :light="true"
-              />
-              <h4 v-if="appUpdates.length" class="mg-bottom-md">
-                {{ $t("software_center.app_updates") }}
-              </h4>
-            </template>
             <NsInlineNotification
               v-if="error.updateModules"
               kind="error"
@@ -264,7 +243,7 @@
               :description="error.updateModules"
               :showCloseButton="false"
             />
-            <!-- apps updates -->
+            <!-- holds the only Cancel: must stay mounted while the list reloads -->
             <NsInlineNotification
               v-if="updateAllAppsTimeout"
               kind="info"
@@ -282,29 +261,68 @@
               :showCloseButton="false"
               :timer="UPDATE_DELAY"
             />
-            <div
-              v-if="
-                appUpdates.length &&
-                !updateAllAppsTimeout &&
-                !loading.listModules &&
-                !loading.listCoreModules
-              "
-              class="toolbar"
-            >
-              <NsButton
-                kind="primary"
-                :icon="Upgrade20"
-                @click="willUpdateAllApps()"
-                :disabled="isUpdateInProgress"
-                >{{ $t("software_center.update_all_apps") }}</NsButton
+            <!-- core update -->
+            <template v-if="isCoreUpdateAvailable && !loadingUpdates">
+              <h4 class="mg-bottom-lg">
+                {{ $t("software_center.core_update") }}
+              </h4>
+              <p class="title-description mg-bottom-lg">
+                {{ $t("software_center.core_update_description") }}
+              </p>
+              <AppList
+                :apps="[coreApp]"
+                :skeleton="false"
+                tab="updates"
+                key="core-update"
+                :light="true"
+              />
+            </template>
+            <!-- apps updates -->
+            <template v-if="appUpdates.length && !loadingUpdates">
+              <h4 class="mg-bottom-lg">
+                {{ $t("software_center.applications_update") }}
+              </h4>
+              <p
+                v-if="subscriptionIsActive && applyUpdatesIsActive"
+                class="title-description mg-bottom-lg"
               >
-            </div>
+                {{ $t("software_center.applications_update_description") }}
+              </p>
+              <div v-if="!updateAllAppsTimeout" class="toolbar">
+                <NsButton
+                  kind="primary"
+                  :icon="Upgrade20"
+                  @click="willUpdateAllApps()"
+                  :disabled="isUpdateInProgress"
+                  >{{ $t("software_center.update_all_apps") }}</NsButton
+                >
+              </div>
+              <AppList
+                :apps="appUpdates"
+                :skeleton="false"
+                tab="updates"
+                @install="openInstallModal"
+                key="updates-app-list"
+                :light="true"
+              />
+            </template>
+            <!-- loading skeleton -->
+            <AppList
+              v-if="loadingUpdates"
+              :apps="[]"
+              :skeleton="true"
+              tab="updates"
+              key="updates-skeleton"
+              :light="true"
+            />
+            <!-- no updates: not to be claimed when a listing failed -->
             <cv-tile
               v-if="
                 !appUpdates.length &&
                 !isCoreUpdateAvailable &&
-                !loading.listModules &&
-                !loading.listCoreModules
+                !loadingUpdates &&
+                !error.listModules &&
+                !error.listCoreModules
               "
               kind="standard"
               :light="true"
@@ -315,17 +333,12 @@
                 animationTitle="rocket"
                 :loop="1"
                 key="updates-empty-state"
-              />
+              >
+                <template #description>
+                  <p>{{ $t("software_center.no_updates_available") }}</p>
+                </template>
+              </NsEmptyState>
             </cv-tile>
-            <AppList
-              v-else
-              :apps="appUpdates"
-              :skeleton="loading.listModules || loading.listCoreModules"
-              tab="updates"
-              @install="openInstallModal"
-              key="updates-app-list"
-              :light="true"
-            />
           </div>
         </section>
         <!-- search results -->
@@ -368,6 +381,12 @@
       @close="isShownInstallModal = false"
       @installationCompleted="listModules"
     />
+    <AutomaticUpdatesModal
+      :visible="isShownAutomaticUpdatesModal"
+      :enable="!applyUpdatesIsActive"
+      @hide="isShownAutomaticUpdatesModal = false"
+      @completed="onAutomaticUpdatesChanged"
+    />
   </div>
 </template>
 
@@ -375,6 +394,9 @@
 import AppList from "@/components/software-center/AppList";
 import to from "await-to-js";
 import InstallAppModal from "@/components/software-center/InstallAppModal";
+import AutomaticUpdatesModal from "@/components/software-center/AutomaticUpdatesModal";
+import PauseOutline20 from "@carbon/icons-vue/es/pause--outline/20";
+import PlayOutline20 from "@carbon/icons-vue/es/play--outline/20";
 import {
   QueryParamService,
   UtilService,
@@ -390,6 +412,7 @@ export default {
   components: {
     AppList,
     InstallAppModal,
+    AutomaticUpdatesModal,
   },
   mixins: [
     IconService,
@@ -424,6 +447,11 @@ export default {
       appToInstall: null,
       isCoreUpdateAvailable: false,
       coreApp: null,
+      applyUpdatesIsActive: false,
+      subscriptionIsActive: false,
+      isShownAutomaticUpdatesModal: false,
+      PauseOutline20,
+      PlayOutline20,
       loading: {
         listModules: true,
         cleanRepositoriesCache: false,
@@ -449,6 +477,26 @@ export default {
     csbUpdatesSelected() {
       return this.q.view === "updates";
     },
+    loadingUpdates() {
+      return this.loading.listModules || this.loading.listCoreModules;
+    },
+    updatesNotificationDescription() {
+      if (this.isCoreUpdateAvailable && this.appUpdates.length) {
+        return this.$tc(
+          "software_center.core_and_app_updates_available",
+          this.appUpdates.length,
+          { numUpdates: this.appUpdates.length }
+        );
+      }
+      if (this.isCoreUpdateAvailable) {
+        return this.$t("software_center.core_updates_available_description");
+      }
+      return this.$tc(
+        "software_center.you_have_updates",
+        this.appUpdates.length,
+        { numUpdates: this.appUpdates.length }
+      );
+    },
     installedModules() {
       return this.modules.filter((app) => {
         return app.installed.length;
@@ -500,9 +548,6 @@ export default {
   },
   methods: {
     ...mapActions(["setUpdateInProgressInStore"]),
-    goToApplicationsCenter() {
-      this.$router.push("/applications-center");
-    },
     async listModules() {
       this.loading.listModules = true;
       this.error.listModules = "";
@@ -510,6 +555,7 @@ export default {
 
       // register to task completion
       this.$root.$once(taskAction + "-completed", this.listModulesCompleted);
+      this.$root.$once(taskAction + "-aborted", this.listModulesAborted);
 
       const res = await to(
         this.createClusterTask({
@@ -529,6 +575,13 @@ export default {
         return;
       }
     },
+    listModulesAborted(taskResult) {
+      console.error("list-modules aborted", taskResult);
+      // the cluster-wide automatic updates flags travel with this output
+      this.loading.listModules = false;
+      this.loading.listCoreModules = false;
+      this.error.listModules = this.$t("error.generic_error");
+    },
     // List repositories to show the warning inline message in case some of them have testing switch turned on
     async listRepositories() {
       const taskAction = "list-repositories";
@@ -568,6 +621,12 @@ export default {
       }
       this.appUpdates = appUpdates;
       this.modules = modules;
+
+      // cluster-wide automatic updates flags are repeated on every module
+      if (modules.length) {
+        this.applyUpdatesIsActive = !!modules[0].apply_updates_is_active;
+        this.subscriptionIsActive = !!modules[0].subscription_is_active;
+      }
       this.listCoreModules();
     },
     async listCoreModules() {
@@ -836,6 +895,13 @@ export default {
     showSoftwareCenterCoreApps() {
       this.$router.push("/software-center/core-apps");
     },
+    toggleAutomaticUpdates() {
+      this.isShownAutomaticUpdatesModal = true;
+    },
+    onAutomaticUpdatesChanged(enable) {
+      // apply the reported value instead of re-listing the whole catalogue
+      this.applyUpdatesIsActive = enable;
+    },
   },
 };
 </script>
diff --git a/core/ui/src/views/SoftwareCenterAppInstances.vue b/core/ui/src/views/SoftwareCenterAppInstances.vue
index 84014d153..2aba9778c 100644
--- a/core/ui/src/views/SoftwareCenterAppInstances.vue
+++ b/core/ui/src/views/SoftwareCenterAppInstances.vue
@@ -273,6 +273,24 @@
                       :label="$t('software_center.restart_instance')"
                     />
                   </cv-overflow-menu-item>
+                  <!-- enable/disable automatic updates -->
+                  <cv-overflow-menu-item
+                    v-if="isAutomaticUpdatesOptOutAvailable"
+                    @click="toggleInstanceAutomaticUpdates(instance)"
+                  >
+                    <NsMenuItem
+                      :icon="
+                        instance.automatic_updates
+                          ? PauseOutline20
+                          : PlayOutline20
+                      "
+                      :label="
+                        instance.automatic_updates
+                          ? $t('software_center.disable_automatic_updates')
+                          : $t('software_center.enable_automatic_updates')
+                      "
+                    />
+                  </cv-overflow-menu-item>
                   <cv-overflow-menu-item
                     @click="showCloneAppModal(instance)"
                     :data-test-id="index == 0 ? 'first-clone' : ''"
@@ -319,7 +337,9 @@
                     >
                   </div>
                   <div class="row">
-                    {{ $t("common.version") }} {{ instance.version }}
+                    <span
+                      >{{ $t("common.version") }} {{ instance.version }}</span
+                    >
                   </div>
                   <div
                     v-if="isStableUpdateAvailable(app, instance)"
@@ -331,6 +351,12 @@
                       })
                     }}
                   </div>
+                  <div v-if="isUpdatesDisabledShown(instance)" class="row">
+                    <cv-tag
+                      kind="high-contrast"
+                      :label="$t('software_center.updates_disabled')"
+                    />
+                  </div>
                   <div
                     v-if="
                       app.docs.relnotes_url &&
@@ -390,6 +416,14 @@
       @hide="isShownUpdateModal = false"
       @updateCompleted="onUpdateCompleted"
     />
+    <!-- automatic updates modal -->
+    <AutomaticUpdatesModal
+      :visible="isShownAutomaticUpdatesModal"
+      :enable="enableAutomaticUpdatesForInstance"
+      :instance="instanceToToggleAutomaticUpdates"
+      @hide="isShownAutomaticUpdatesModal = false"
+      @completed="onInstanceAutomaticUpdatesChanged"
+    />
     <!-- Restart instance modal -->
     <RestartModuleModal
       :visible="isShowRestartModuleModal"
@@ -460,6 +494,9 @@ import UpdateAppModal from "../components/software-center/UpdateAppModal";
 import SetInstanceLabelModal from "@/components/software-center/SetInstanceLabelModal.vue";
 import RestartModuleModal from "@/components/software-center/RestartModuleModal.vue";
 import Information16 from "@carbon/icons-vue/es/information/16";
+import PauseOutline20 from "@carbon/icons-vue/es/pause--outline/20";
+import PlayOutline20 from "@carbon/icons-vue/es/play--outline/20";
+import AutomaticUpdatesModal from "@/components/software-center/AutomaticUpdatesModal";
 
 export default {
   name: "SoftwareCenterAppInstances",
@@ -470,6 +507,7 @@ export default {
     Information16,
     SetInstanceLabelModal,
     RestartModuleModal,
+    AutomaticUpdatesModal,
   },
   mixins: [
     TaskService,
@@ -487,6 +525,12 @@ export default {
       UPDATE_DELAY: 10000,
       appName: "",
       app: null,
+      PauseOutline20,
+      PlayOutline20,
+      subscriptionIsActive: false,
+      applyUpdatesIsActive: false,
+      isShownAutomaticUpdatesModal: false,
+      instanceToToggleAutomaticUpdates: null,
       isShownInstallModal: false,
       isShownEditInstanceLabel: false,
       isShownUninstallModal: false,
@@ -554,6 +598,14 @@ export default {
       }
       return [];
     },
+    // gates both the menu entry and the tag, which must not diverge
+    isAutomaticUpdatesOptOutAvailable() {
+      return this.subscriptionIsActive && this.applyUpdatesIsActive;
+    },
+    enableAutomaticUpdatesForInstance() {
+      const instance = this.instanceToToggleAutomaticUpdates;
+      return instance ? instance.automatic_updates === false : false;
+    },
   },
   methods: {
     ...mapActions(["setAppDrawerShownInStore", "setUpdateInProgressInStore"]),
@@ -564,6 +616,7 @@ export default {
 
       // register to task completion
       this.$root.$once(taskAction + "-completed", this.listModulesCompleted);
+      this.$root.$once(taskAction + "-aborted", this.listModulesAborted);
 
       const res = await to(
         this.createClusterTask({
@@ -578,10 +631,33 @@ export default {
 
       if (err) {
         console.error(`error creating task ${taskAction}`, err);
+        this.loading.modules = false;
         this.error.listModules = this.getErrorMessage(err);
         return;
       }
     },
+    listModulesAborted(taskResult) {
+      console.error("list-modules aborted", taskResult);
+      this.loading.modules = false;
+      this.error.listModules = this.$t("error.generic_error");
+    },
+    isUpdatesDisabledShown(instance) {
+      return (
+        this.isAutomaticUpdatesOptOutAvailable &&
+        instance.automatic_updates === false
+      );
+    },
+    toggleInstanceAutomaticUpdates(instance) {
+      this.instanceToToggleAutomaticUpdates = instance;
+      this.isShownAutomaticUpdatesModal = true;
+    },
+    onInstanceAutomaticUpdatesChanged(enable) {
+      // apply the reported value instead of re-listing the whole catalogue.
+      // the instance is kept until the next toggle: the closing modal reads it
+      if (this.instanceToToggleAutomaticUpdates) {
+        this.instanceToToggleAutomaticUpdates.automatic_updates = enable;
+      }
+    },
     listModulesCompleted(taskContext, taskResult) {
       this.loading.modules = false;
       let modules = taskResult.output;
@@ -592,6 +668,12 @@ export default {
         this.app = app;
       }
 
+      // flags are repeated on every module: an empty list carries none
+      if (modules.length) {
+        this.subscriptionIsActive = !!modules[0].subscription_is_active;
+        this.applyUpdatesIsActive = !!modules[0].apply_updates_is_active;
+      }
+
       // highlight instance
       if (this.elementToHighlight) {
         this.isElementHighlighted = true;
@@ -809,6 +891,8 @@ export default {
     },
     removeModuleCompleted() {
       this.listModules();
+      // the drawer lists the same estate: it would keep the removed app
+      this.$root.$emit("reloadAppDrawer");
     },
     showRestartModuleModal(instance) {
       this.instanceToRestart = instance;