A vehicle may include at least one controller configured to maintain a communication channel over a network between a vehicle and a vehicle service server accessible through an access point node. The at least one controller may be further configured to receive, over the network out-of-band from the communication channel, an update message including updated communication channel connection information, and upon receiving the message, reconnect the communication channel according to the updated connection information. A secure server may be configured to generate the update message specifying at least one of updated access point node information and updated address information, encrypt the update message according to an encryption key shared with a vehicle destination, and provide the update message over a network to the vehicle out-of-band from the communication channel.