Grandstream Networks, Inc.
How-to Guide:
Update Grandstream Device Certificate
Update Grandstream Device Certificate
Page | 2
Table of Contents
SUPPORTED DEVICES .................................................................................................... 4
INTRODUCTION ................................................................................................................ 5
Search Certificate Status by MAC Address .................................................................. 5
Update Certificate ............................................................................................................. 6
Input MAC Address and Request Certificate Update ................................................ 10
Update Grandstream Device Certificate
Page | 3
Table of Figures
Figure 1: Search by Device MAC Addresses 5
Figure 2: New Certificate Status in Search Result 6
Figure 3: Select MAC Address and Request Certificate Update 6
Figure 4 : Request Certificate Update Dialog 7
Figure 5 : Obtain Email Verification Code 8
Figure 6 : Certificate Update Request Submitted 8
Figure 7 : Gen 2 Certificate Status Displayed on GRP261x LCD 9
Figure 8: Input MAC Address and Request Certificate Update 10
Figure 9: Dialog to Input MAC Address and Request Certificate Update 10
Figure 10: Enter Multiple MAC Addresses 11
Figure 11: Submit Certificate Update Request 11
Figure 12 : Gen 2 Certificate Status Displayed on GRP261x LCD 12
Update Grandstream Device Certificate
Page | 4
SUPPORTED DEVICES
Model
Supported
GRP261x/2624/2634/2670
Yes
GRP260x
Yes
GXP21xx
Yes
WP810/WP822/WP825
Yes
HT8xx
Coming soon
GXW42xx V2
Coming soon
Update Grandstream Device Certificate
Page | 5
INTRODUCTION
Grandstream devices support two generations of individual certificate. Most of the devices currently support
Generation 1 (Gen 1) certificate using SHA-256 with RSA Encryption. For security purpose, new firmware
has supported Generation 2 (Gen 2) certificate: ECDSA + SHA 384. To assist customers to upgrade devices
to use Gen 2 certificate, Grandstream provided the following website for customers to search for factory
certificate status on device and update certificate for the devices:
https://upgradecert.grandstream.com:9443/
This document describes how to use the above website to update device certificate from Gen 1 to Gen 2
for customers.
Search Certificate Status by MAC Address
1. Enter the MAC address of the device. For Multiple MAC addresses, please separate them in
different lines. Up to 1000 MAC addresses can be supported.
2. Enter captcha.
3. Click on “Search” button.
Figure 1: Search by Device MAC Addresses
4. The search result will show in the list. “New certificate status” indicates whether the device has Gen
2 certificate or not.
- If “New certificate status” shows “Yes”, the device already has Gen 2 certificate built-in at factory
settings. There is no need to update device certificate.
- If “New certificate status” shows “No”, the device does not come with Gen 2 certificate at factory
settings.
- If “New certificate status” shows “N/A”, this device is not eligible for certificate update from this
website. Please contact Grandstream Technical support if assistance is needed.
Update Grandstream Device Certificate
Page | 6
Figure 2: New Certificate Status in Search Result
Update Certificate
1. After search result is listed from previous step, select the MAC address you wish to update
certificate from the list.
2. Click on “Select MAC address and request certificate update”.
Figure 3: Select MAC Address and Request Certificate Update
3. A new dialog will be prompted for the user to enter email address and captcha. Fill in your email
address and captcha.
4. Click on “Obtain email verification code”.
Update Grandstream Device Certificate
Page | 7
Figure 4 : Request Certificate Update Dialog
5. Now check the email inbox to obtain the verification code and enter the verification code in the
dialog. Then click on “OK” to submit the certificate update request.
Update Grandstream Device Certificate
Page | 8
Figure 5 : Obtain Email Verification Code
6. Now the request has been submitted, please check email for certificate update instructions.
Figure 6 : Certificate Update Request Submitted
7. According to the instructions in the email, please reset your device to factory default settings, wait
for the device to reboot and ensure the device is connected to Internet.
Update Grandstream Device Certificate
Page | 9
8. If the device is on an old firmware that doesn’t support certificate update, it will be automatically
upgraded to an eligible firmware first. LCD will show upgrading progress. Please do not power cycle
or disconnect from Internet during firmware upgrading.
9. The device will reboot automatically after firmware upgrading is completed. Now it will start
certificate updating. LCD will show certificate upgrading progress. Please do not power cycle or
disconnect from Internet during certificate upgrading progress.
10. Once the device boots up again, please check certificate status on device LCD
menu->Status->System Info. It will show certificate is now “GEN 2”. This is also listed on device
webUI->Status->System Info page (for GRP261x/2624/2634/2670).
Figure 7 : Gen 2 Certificate Status Displayed on GRP261x LCD
Update Grandstream Device Certificate
Page | 10
Input MAC Address and Request Certificate Update
If the user doesn’t need search for certificate status for the device before updating certificate update, the
user can click on “Input MAC Address and Request Certificate Update” to start entering MAC address to
update their certificate.
1. Click on “Input MAC Address and Request Certificate Update”.
Figure 8: Input MAC Address and Request Certificate Update
2. Enter the email address and Captcha, then click on “Obtain email verification code”.
Figure 9: Dialog to Input MAC Address and Request Certificate Update
3. Check your email inbox for the verification code and enter in the dialog.
4. Enter the MAC addresses. If there are multiple MAC addresses, please separate them in different
lines. Up to 1000 MAC addresses can be entered. Then click on “OK”.
Update Grandstream Device Certificate
Page | 11
Figure 10: Enter Multiple MAC Addresses
5. A prompt will display notifying user the number of qualified and unqualified MAC addresses. The
unqualified MAC addresses are the ones with “New certificate status” as “N/A” which means the
device is not eligible for certificate update. The user can then check email for details and certificate
update instructions.
Figure 11: Submit Certificate Update Request
Update Grandstream Device Certificate
Page | 12
6. According to the instructions in the email, please reset all qualified device to factory default settings,
wait for the devices to reboot and ensure the devices are connected to Internet.
Note:
If you have a large quantity of devices to be updated in the same network, it’s recommended to
reboot them in smaller batches. This is because the devices may need firmware upgrade and
downloading firmware file from large quantity of devices may result in failure due to network
bandwidth condition. The device certificate will not be updated if the device is not upgraded to the
required firmware version prior to certificate update.
7. If the device is on an old firmware that doesn’t support certificate update, it will be automatically
upgraded to an eligible firmware first. LCD will show upgrading progress. Please do not power cycle
or disconnect from Internet during firmware upgrading.
8. The device will reboot automatically after firmware upgrading is completed. Now it will start
certificate updating. LCD will show certificate upgrading progress. Please do not power cycle or
disconnect from Internet during certificate upgrading progress.
9. Once the device boots up again, please check certificate status on device LCD
menu->Status->System Info. It will show certificate is now “GEN 2”. This is also listed on device
web UI->Status->System Info page (for GRP261x/2624/2634/2670).
Figure 12 : Gen 2 Certificate Status Displayed on GRP261x LCD
Note:
Please contact Grandstream Technical Support if assistance is needed for certificate update:
https://helpdesk.grandstream.com/
Your device MAC addresses may be required during troubleshooting process with Grandstream Technical
Support.
/