Firmware Update to 96XX VPN phones

[djstandridge]

We are currently on CM6.3 with approximately 8K 96XX VPN phones with firmware 6.4.0.14 and need to upgrade them to 6.6.18c to allow us to capture the expiration of certificates. We currently have a about 10 phones with the new firmware and able to see when the cert if getting ready to expire. What we are trying to alleviate is having to upgrade the firmware in office and ship them out all over the country. Has anyone had any success with this.

 

[wpetilli]

I have a similar problem, in that once we deploy these phones we can't do anything firmware related with them (deploy updated fw). If you know of a way... especially when it comes to an expiring cert to remotely renew that please share. I have the exact same issue. Our cert server will show MAC's that are due to expire, but even if we know it's a phone we aren't able to remotely renew it and the user has to be sent a new phone. Royal pain.

 

[gwebster]

Remote phones connected via VPN will update their software as long as they can reach the central HTTP server.

 

[ZeroZeroOne]

Same here. The only options I've come up with are
[ol 1]
[li]Educate users on how to set up an HTTP server on their PC and manually change the phones to use that IP Address for the update. This couldn't possibly end well for many.[/li]
[li]Set up a site available outside the VPN to contain firmware. You can specify some security but who wants to open up settings files and phone backup files to the world at large?[/li]
[/ol]

I figured out how to separate VPN phones so they don't even TRY to update firmware and are using separate settings files so they don't have the VPN accidentally disabled by using the IP Phone Group ID field. But I haven't successfully downloaded firmware over VPN.

 

[gwebster]

If you have NVHTTPSRVR set to the IP address of the HTTP server which is reachable via the VPN tunnel, then the phones will use it for both software upgrades as well as downloading settings file.