A method and system for automatically holding and authenticating a configuration change payload job. An upgrade payload file can be transmitted to a rendering device as a rendering job via a print submission protocol. The upgrade payload file can be detected by a configuration change detection and hold module configured in association with the rendering device upon receiving the rendering job. The rendering job can be automatically held at the rendering device until an authenticated user releases the rendering job. The held rendering job can be also automatically deleted after a predetermined time period. The configuration change detection and hold module can be enabled and/or disabled by the authenticated user in order to prevent an unauthorized and accidental system upgrade and configuration change.