A method (3600) and system (2800, 2900, 3000, 3100) autonomously create a restore point for a luminaire controller (2810, 3110) and restore it to proper operation when required. The luminaire controller operates by using first operating software having a first software image, and receives a second software image of second operating software. The luminaire controller communicates the first software image to a first device (2820, 3120) connected to the luminaire controller via a communication network (2805, 3105), installs the second operating software, and performs a self test of the luminaire controller. If the luminaire controller fails the self test, the luminaire controller requests via the network that the first device transfer the first software image to the luminaire controller via the network, receives the first software image, installs the first operating software, and reverts to operation with the first operating software.