T48G EOL due to missing TLS 1.2

[spaxxilein]

Hello,

we just updated to the newest version of 3CX Server and i missed the part that 50% of our phones are Yealink T48G phones which are now EOL and cannot be auto-provisioned anymore by the server due to "missing TLS 1.2" feature.

According to the documentation of Yealink of an older update x. 81.0.110 ( https://support.yealink.com/en/portal/docDetail?documentCode=886bf0f7b16e9862 ) the phone does support TLS 1.2 with this setting:

static.security .default_ssl_ method = 5

Can somebody please explain why we are locking out a perfectly fine phone which technically supports all necessary TLS standards from being autoprovisioned?

Thanks for your help,

spaxxilein

 

[N_G]

Thanks for the heads up! We have the beta firmware but they made a disclaimer they did not do much testing. Maybe we can call on the community to help us test out this firmware? We are in the middle of update 6.

Also some of the phones this relates to we dont actually have. Let us revert with a date asap.

 

[AWS2P]

Do you have specific test process to let us know to make tests on phones you want help to validate ?
And of course the new firmware if it's not directly available from Yealink

 

[CentrexJ]

Thanks for the heads up! We have the beta firmware but they made a disclaimer they did not do much testing. Maybe we can call on the community to help us test out this firmware? We are in the middle of update 6.

Also some of the phones this relates to we dont actually have. Let us revert with a date asap.

I have spare T46G, T48G and T29G available for testing. Also T42G and T41P if they have that.

 

[JulienI]

Hello,

very good news, thank you 3CX team!

I too have a T29G and a T41P if you need some testing

 

[TiagoC]

We have a T41P we can test with also.
We have a high number of clients with this phone model so would be extremely helpful to get handset back in to support.

 

[drewt]

Great news, I have a number of customers with T48g's. I also have a spare T48g for testing purposes. I have been getting the T48g's to register on the system using the T48s template, https://www.3cx.com/sip-phones/manually-provision-yealink/ then manually configuring the BLF's. Brings back unfond memories of the old asterisk days.

 

[Kieron_Voip]

Hi Nick,

We have several of each EOL Model in Stock and ready for intensive testing, T41P/G, T42G, T46G and T48G,

If you could let me know how we can test the beta firmware, i'll be more than happy to test it

 

[Damien C]

Hi,
we have T46G to test too. Ready to help.

 

[jamestalmage]

A bunch of T29G's here. What do we need to do to get our hands on the beta firmware to test it?

 

[HRMNY]

I have a T46G, ready to test the firmware. Such good news to hear Yealink is hopefully fixing this issue.

 

[N_G]

Hi all... We are working on releasing this firmware in update 6.... And to write a procedure for it before that.... Thanks for your patience...

 

[accentlogic]

I have almost all of the affected models available to test. T29G, T42G, T46G and T48G, Happy to do it before u6 if you can send it over.

@Nick Galea This is really good news. The extra effort is much appreciated!

We had a large client add more T29G in 2019 when the unit was still in stock with distribution, and this issue has that system still running u4.

 

[leejor]

NIck

As an aside...you asked....

Most of these phones are between 7 and 8 years old. Their EOL was 2 years ago. Thats a very different thing. Yes devices dont last 10 years anymore - does anyone of you still use a 10 year old iPhone or Android?

As a matter of fact, I still use my 10 year old Samsung Galaxy Rugby Pro i547 as my everyday phone. Its small, still does everything I need it to do, doesn't require a case as it is waterproof, and, I can still get batteries for it.

I have several newer phones including a Google Pixel 6, but I find them too large to carry in my pants pocket, and only use one of them when I travel, and have to put in a foreign SIM.

As long as It does what I require it to do, I'll keep using it. I know I'm the exception, but we actually do exist.

 

[mcsphones]

Hi all... We are working on releasing this firmware in update 6.... And to write a procedure for it before that.... Thanks for your patience...

I'd be happy to test too, we have 1000+ T29G's and a few hundred T46G's out in the wild.

 

[N_G]

Here is the release of the firmware...
https://www.3cx.com/blog/news/yealink-firmware-release/

 

[Kieron_Voip]

Here is the release of the firmware...
https://www.3cx.com/blog/news/yealink-firmware-release/

Nick this is brillants new and i will be testing on our T46G and T48G, Any news regarding T41P/G, T42G ?

 

[Kieron_Voip]

Nick this is brillants new and i will be testing on our T46G and T48G, Any news regarding T41P/G, T42G ?

T46G is working as intended with Zero Side effect, will continue testing the device !

 

[Kieron_Voip]

Here is the release of the firmware...
https://www.3cx.com/blog/news/yealink-firmware-release/

Nick T46's and T48'G are working as intended with Zero issues,

Can i just ask what about having Firmware for Yealink W60B/ T41P and T42G?

As a lot of SMB's have these devices and it would be a shame for these to end up in Landfill due to not being able to support TLS 1.2, for example we only secured a customer due to the fact they are working to be carbon neutral and specifically choose T42G and T41P for their sites to reduce the amount of E-waste in the IT Industry and across their sites have 110 of these devices deployed !

I know for a fact! They would move away to a different PBX Solution if there devices became obsolete to provisioning (long term for an organisation of their size, Manually provisioning is not possible in the practical sense, they love their 3CX PBX and the management console! I’d hate for this small thing to be the reason why would leave and move to a broadsoft solution where these devices are still being support for the next 2-3 years !

we know deep down in the core the firmware is similar for all T4x G family. Is this something you could discuss with Yealink about and see if they can quickly modify the Firmware like they did with the T46 and T48's to support the new security standard ? Again, we are more than happy to extensively test for you,


Kind Regards

 

[N_G]

I already answered this in another post. No Yealink W52 and T41P are not included and will not be. You can configure them manually. If someone wants to go to another PBX for that, then its up to them. We will not jeopardise our entire user base for a few customers that dont understand.

 

[luminite]

I already answered this in another post. No Yealink W52 and T41P are not included and will not be. You can configure them manually. If someone wants to go to another PBX for that, then its up to them. We will not jeopardise our entire user base for a few customers that dont understand.

Hi Nick

What about T42G? Will updated firmware for that model be forthcoming or not?

Out of interest, do you know what determined which models would and wouldn't receive the updated firmware?

We have a client with T42G handsets already provisioned, but they've reported that the 3CX Phonebook no longer works, which I presume is the same TLS issue as with provisioning, that the new firmware will fix.

Thanks