diff --git a/_toc.yml b/_toc.yml
index c6f9a11a..4974d33d 100644
--- a/_toc.yml
+++ b/_toc.yml
@@ -37,7 +37,7 @@ chapters:
         sections:
           - file: admin-guide/configuration/icinga2
           - file: admin-guide/configuration/packages
-#          - file: admin-guide/configuration/package_updates
+          - file: admin-guide/configuration/package_updates
 #          - file: admin-guide/configuration/package_repositories
 #          - file: admin-guide/configuration/services
           - file: admin-guide/configuration/mount
diff --git a/admin-guide/configuration/package_updates.md b/admin-guide/configuration/package_updates.md
new file mode 100644
index 00000000..7525cba9
--- /dev/null
+++ b/admin-guide/configuration/package_updates.md
@@ -0,0 +1,12 @@
+# Automated Package Updates
+
+The automatic updates are controlled in Hiera:
+
+| Hiera key                         | default  | comments                                                                      |
+|-----------------------------------|----------|-------------------------------------------------------------------------------|
+| base::automatic_updates::interval | weekly   |  valid are `daily`, `weekly` and `never` which disables the automatic updates |
+| base::automatic_updates::type     | security | `security` installs only security updates whereas `all` installs all updates  |
+| base::automatic_updates::exclude  | []       | list of packages not to update, wildcards like "*" are allowed                |
+| base::automatic_updates::kernel   | false    | define if new kernel packages also should be installed automatically          |
+
+Note that the updates run on midnight, for `weekly` from Sunday to Monday. There is no automatic reboot, e.g. for kernel updates.