GRANDSTREAM GRP261x Carrier Grade IP Phones User Guide
- October 27, 2023
- GRANDSTREAM
Table of Contents
GRANDSTREAM GRP261x Carrier Grade IP Phones
SUPPORTED DEVICES
INTRODUCTION
Grandstream devices support two generations of individual certificates. Most of the devices currently support Generation 1 (Gen 1) certificate using SHA-256 with RSA Encryption. For security purposes, the new firmware has supported Generation 2 (Gen 2) certificate: ECDSA + SHA 384. To assist customers to upgrade devices to use Gen 2 certificate, Grandstream provided the following website for customers to search for factory certificate status on their device and update the certificate for the devices:
https://upgradecert.grandstream.com:9443/
This document describes how to use the above website to update device certificates from Gen 1 to Gen 2 for customers.
Search Certificate Status by MAC Address
- Enter the MAC address of the device. For Multiple MAC addresses, please separate them in different lines. Up to 1000 MAC addresses can be supported.
- Enter captcha.
- Click on the “Search” button
- The search result will show in the list. “New certificate status” indicates whether the device has Gen 2 certificate or not.
- If “New certificate status” shows “Yes”, the device already has Gen 2 certificate built-in at factory settings. There is no need to update the device certificate.
- If “New certificate status” shows “No”, the device does not come with Gen 2 certificate at factory settings.
- If “New certificate status” shows “N/A”, this device is not eligible for a certificate update from this website. Please contact Grandstream Technical support if assistance is needed.
Update Certificate
- After the search result is listed from the previous step, select the MAC address you wish to update the certificate from the list.
- Click on “Select MAC address and request certificate update”.
- A new dialog will be prompted for the user to enter the email address and captcha. Fill in your email address and captcha.
- Click on “Obtain email verification code”.
- Now check the email inbox to obtain the verification code and enter the verification code in the dialog. Then click on “OK” to submit the certificate update request.
- Now the request has been submitted, please check your email for certificate update instructions.
- According to the instructions in the email, please reset your device to factory default settings, wait for the device to reboot and ensure the device is connected to the Internet.
- If the device is on old firmware that doesn’t support certificate updates, it will be automatically upgraded to eligible firmware first. LCD will show upgrading progress. Please do not power cycle or disconnect from the Internet during firmware upgrading.
- The device will reboot automatically after firmware upgrading is completed. Now it will start certificate updating. LCD will show certificate upgrading progress. Please do not power cycle or disconnect from the Internet during the certificate upgrading progress.
- Once the device boots up again, please check the certificate status on the device LCD menu->Status->System Info. It will show the certificate is now “GEN 2”. This is also listed on the device webUI->Status->System Info page (for GRP261x/2624/2634/2670).
Input MAC Address and Request Certificate Update
If the user doesn’t need search for certificate status for the device before updating certificate update, the user can click on “Input MAC Address and Request Certificate Update” to start entering MAC address to update their certificate.
-
Click on “Input MAC Address and Request Certificate Update”.
-
Enter the email address and Captcha, then click on “Obtain email verification code”.
-
Check your email inbox for the verification code and enter in the dialog.
-
Enter the MAC addresses. If there are multiple MAC addresses, please separate them in different lines. Up to 1000 MAC addresses can be entered. Then click on “OK”.
-
A prompt will display notifying the user of the number of qualified and unqualified MAC addresses. The unqualified MAC addresses are the ones with “New certificate status” as “N/A” which means the device is not eligible for a certificate update. The user can then check email for details and certificate update instructions.
-
According to the instructions in the email, please reset all qualified device to factory default settings, wait for the devices to reboot and ensure the devices are connected to the Internet.
Note:
If you have a large number of devices to be updated in the same network, it’s recommended to reboot them in smaller batches. This is because the devices may need firmware upgrade and downloading firmware file from large quantities of devices may result in failure due to network bandwidth conditions. The device certificate will not be updated if the device is not upgraded to the required firmware version prior to the certificate update. -
If the device is on old firmware that doesn’t support certificate updates, it will be automatically upgraded to eligible firmware first. LCD will show upgrading progress. Please do not power cycle or disconnect from the Internet during firmware upgrading.
-
The device will reboot automatically after firmware upgrading is completed. Now it will start certificate updating. LCD will show certificate upgrading progress. Please do not power cycle or disconnect from the Internet during the certificate upgrading progress.
-
Once the device boots up again, please check the certificate status on the device LCD menu->Status->System Info. It will show the certificate is now “GEN 2”. This is also listed on the device web UI->Status->System Info page (for GRP261x/2624/2634/2670).
Note:
Please contact Grandstream Technical Support if assistance is needed for a
certificate update: https://helpdesk.grandstream.com/
Your device MAC addresses may be required during the troubleshooting process
with Grandstream Technical Support.
References
Read User Manual Online (PDF format)
Read User Manual Online (PDF format) >>