Update Certificates for Zoom CRC

[NocturnalDC]

Does anything need to be done in regards to Zoom's email here:

Dear Valued Customer,

Zoom periodically updates the certificates required for SIP devices to join a Zoom meeting via Zoom Conference Room Connector (CRC) using a secure SIP TLS connection. We are reaching out with a reminder that if you are using Zoom’s Conference Room Connector (CRC) with a secure SIP TLS connection, you may need to add new certificates to the trust store of your device(s) prior to January 27th, 2024, to ensure that secure SIP TLS connections to Zoom CRC continue to work as expected. 

On January 27, 2024 at 10 p.m. US Pacific time, Zoom CRC services will begin to use certificates issued by the DigiCert Global Root G2 root certificate and DigiCert Global G2 TLS RSA SHA256 2020 CA1 intermediate certificate for SIP TLS connections.

Zoom understands that this change may have an impact on your SIP-based room systems or integrations that use Zoom CRC services. Zoom performed testing with a variety of common SIP/H.323 conference room equipment in default configuration to ensure the Zoom CRC certificate will not affect their ability to connect to Zoom Meetings through Zoom CRC using SIP TLS. Zoom performed the tests with SIP/H.323 conference room equipment using the most recently released device vendor firmware. Zoom tested each device by making direct calls to Zoom CRC with SIP TLS as the configured call protocol. The following device/firmware combinations successfully connected to Zoom CRC using SIP TLS with the new certificates when the device was in default configuration:

• Cisco EX-series, C-series, and MX-series "generation 1" devices using firmware TC7.3.21
• Cisco DX-series, SX-series, and MX-series "generation 2" devices using firmware CE9.15.17.4
• Cisco Room-series, Desk-series, and Board-series devices using firmware RoomOS 10.19.5.6 (on-premises) or 10.20.1.6 (cloud-registered)
• Cisco Room-series, Desk-series, and Board-series devices using firmware RoomOS 11.1.4.1 and greater (on-premises) or 11.4.1.8 and greater (cloud-registered)
• Polycom HDX devices using firmware 3.1.7 and greater
• Polycom RealPresence Group-series devices using firmware 6.1.7.2 and greater
• Polycom Trio devices (including Visual Plus and Visual Pro configurations) using firmware 7.2.6-0019

Zoom encourages you to review your SIP/H.323 conference room devices to ensure they meet these requirements. Zoom recommends updating your devices, if necessary, to ensure they are supported with Zoom CRC.

If your device, application, or platform is not listed above and uses SIP — specifically SIP over TLS — to connect to Zoom CRC, consult your vendor’s documentation or contact your vendor’s support services to determine whether the trust store certificates available to your device, application, or platform include the DigiCert Global Root G2 root certificate.  Your vendor can provide instructions to install additional certificates, if necessary.

Consult our support page article Updating root certificates for Zoom services for further details, including:

• When is the change occurring?
• How does this affect SIP-based room systems?
• What Zoom CRC connection types are impacted?
• How can I check whether my SIP-based room system will be impacted?
• How can I perform a confirmation test ahead of the change with my SIP-based room system?
• What to do if my SIP-based room system is impacted?
• How to download root (and intermediate) certificates for manual installation

If you have any questions or need assistance, please refer to our support article or reach out to our Support Team. 

Team Zoom

[SteffenBaierUK · Accepted solution]

Hello @NocturnalDC ,

welcome back to the HP Poly community. One of your older posts>here< or >here< never received the relevant requested information. While they are in this state, other users may find them and may have the same issue but no solution or follow up detail.

Your new posts are rather broad, what Poly product do you have or are you worried about?

Zoom is pretty clear:

• If you have any questions or need assistance, please refer to our support article or reach out to our Support Team. 

Have you contacted Zoom Support as of yet as they provide this statement and must have tested this and have a documented solution for each device mentioned in their alert?

Please go ahead and provide a meaningful update to your old posts and if you still have questions, and no other volunteer replies, I suggest you contact our Support organization in your region. Details are in my Signature.

Best Regards

Steffen Baier