Suporte ao produto Segurança IP 2N

2N OS version 2.50.1 for 2N Intercoms includes the following changes

Essential Corrections

• Fixed an issue with 2N Electronic Locks that limited the device directory to 2000 users.
• Fixed an issue where the ProfileStateChanged block in Automation functions caused an error after reboot.
• Added support for a new Vbus display revision.
• Improved ACS connection stability.
• Updated several internal libraries.
• Important bug fixes.

2N OS version 2.50.0 for 2N Intercoms includes the following changes

Precautions to be taken during update to FW version 2.50.x

• For security reasons, network settings can no longer be modified using 2N Network Scanner.
• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.
• Due to essential authentication updates for an improved user experience, you must restart the ACS server to restore connectivity for devices upgraded from a version lower than 2.49.0 to version 2.49.0 or higher.

New Functions and Improvements

• Reception of `In-Band (Audio)` DTMF is now disabled by default to improve resilience against malicious attacks.
• STUN support has been added and can be configured under `Calling > SIP # > Configuration`.
• Added support for the Japanese language in the display UI of Answering Units and IP Style.
• Support for 2N Electronic Locks is now included as part of the standard firmware release.

Essential Corrections

• Improved compatibility of outgoing H.264 and H.265 video streams.
• Private keys are no longer exposed via `GET /api/mobilekey/config`.
• Updated several internal libraries.
• Web configuration pages for Automation features now load correctly even when the device is offline (without an active internet connection).
• Eliminated occasional audio distortions on IP Uni and IP Audio Kit devices.
• Fixed an intermittent issue where audio inputs could become swapped on IP Uni and IP Audio Kit devices.
• Devices no longer crash when a user with a limited validity period presents their card, provided the associated RFID reader extension module has `Door` set to `Not used`.
• Cached DNS entries for SIP registrars now expire immediately and correctly when the registrar IP address changes, preventing registration failures.
• Fixed an issue where devices could lose and reacquire their IP address via DHCP twice after a factory reset and subsequent reboots.
• Resolved a device crash that could occur when sending emails using specific SMTP server configurations.
• The `snmpget` function now works correctly on devices using SNMPv3.
• Devices now correctly process `Too Brief` SIP responses during registration and immediately apply the updated expiry period.
• Fixed device crashes caused by specific malformed or non-standard ONVIF requests.
• Corrected an issue where video resolution could be incorrectly limited when selecting lower bitrate settings for the H.265 codec.
• Added a limited-range mode to the WaveKey opening algorithm to prevent unintended door openings from excessive distance.
• PEAP MSCHAPv2 authentication is now fully functional and reliable across all supported models.
• Eliminated a condition that could cause SIP registration to become permanently stuck in the unregistered state.
• Other corrections and fixes.

b080eef21ac4dab1a1b20a429a04551d222fe4a66faebf0f1079ab711986c206

2N OS version 2.50.0 for 2N Intercoms includes the following changes

Precautions to be taken during update to FW version 2.50.x

• Devices no longer emit audible beeps during boot or network state changes by default. If required, this behavior can be enabled under `Hardware > Audio > Startup and Network States Signalization`.
• For security reasons, network settings can no longer be modified using 2N Network Scanner.
• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.

New Functions and Improvements

• Reception of `In-Band (Audio)` DTMF is now disabled by default to improve resilience against malicious attacks.
• STUN support has been added and can be configured under `Calling > SIP # > Configuration`.
• Added support for the Japanese language in the display UI of Answering Units and IP Style.
• Support for 2N Electronic Locks is now included as part of the standard firmware release.

Essential Corrections

• Improved compatibility of outgoing H.264 and H.265 video streams.
• Private keys are no longer exposed via `GET /api/mobilekey/config`.
• Updated several internal libraries.
• Web configuration pages for Automation features now load correctly even when the device is offline (without an active internet connection).
• Eliminated occasional audio distortions on IP Uni and IP Audio Kit devices.
• Fixed an intermittent issue where audio inputs could become swapped on IP Uni and IP Audio Kit devices.
• Devices no longer crash when a user with a limited validity period presents their card, provided the associated RFID reader extension module has `Door` set to `Not used`.
• Cached DNS entries for SIP registrars now expire immediately and correctly when the registrar IP address changes, preventing registration failures.
• Fixed an issue where devices could lose and reacquire their IP address via DHCP twice after a factory reset and subsequent reboots.
• Resolved a device crash that could occur when sending emails using specific SMTP server configurations.
• The `snmpget` function now works correctly on devices using SNMPv3.
• Devices now correctly process `Too Brief` SIP responses during registration and immediately apply the updated expiry period.
• Fixed device crashes caused by specific malformed or non-standard ONVIF requests.
• Corrected an issue where video resolution could be incorrectly limited when selecting lower bitrate settings for the H.265 codec.
• Added a limited-range mode to the WaveKey opening algorithm to prevent unintended door openings from excessive distance.
• PEAP MSCHAPv2 authentication is now fully functional and reliable across all supported models.
• Eliminated a condition that could cause SIP registration to become permanently stuck in the unregistered state.
• Other corrections and fixes.

da3486e9ba234377ce512cbf6d2e46f33f2540040aad0d0d78a49fafb0ca08d1

2N OS version 2.49.1 for 2N Intercoms includes the following changes

Essential Corrections

• Updated an internal library containing critical vulnerabilities.
• Fixed a critical issue with DNS which caused the device to, e.g., become unable to re-register to a SIP server after its IP address changes. This also solved other DNS-related issues.
• Important bug fixes.

2N OS version 2.49.0 for 2N Intercoms includes the following changes

Precautions to be taken during update to FW version 2.49.x

• Empty device names are no longer supported. Set the name via Services > Web Server > Device Name. If left blank, the device may fail to update.
• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.

New Functions and Improvements

• The administrator account now accepts "root" as a valid username as well.
• AXIS Camera Station integration has been significantly improved:
• The ACS tab in the web interface is now renamed to AXIS.
• AXIS Camera Station integration is now always enabled and accessible using the device's administrator account.
• After the initial login to the web interface, the "root" username can also be used for ACS access.
• An optional dedicated ACS account is now available.
• If ACS was previously enabled with both username and password configured, the dedicated account can still be used.
• If your dedicated ACS account used "admin" or "root" as the username and had the same password as the administrator account, it will be merged with the administrator account and you can continue using the same credentials.
• If your dedicated ACS account used "admin" or "root" but had a different password from the administrator account, it will be migrated to a temporary administrator account. You can continue using the same credentials, and the account will be merged with the administrator account after its password is updated.
• 2N IP Utility can now also be used to configure IP settings after the default password has been changed.
• The `Enter PIN` button on the IP Style home screen is now blue to help distinguish it from call-related buttons.
• Separate parameters are now available to independently enable and select modes for both License Plate Recognition and Character Trimming.
• 2N OS is now fully compatible with and certified for Lenel OnGuard 8.3.
• Native integration with Microsoft Teams has been added, allowing bidirectional calling with our devices and enabling door unlocking directly from the Teams client. Configuration is available via Services > Integration > MS Teams.

Essential Corrections

• Updated several internal libraries.
• Improved precision of WaveKey-based door unlocking.
• Enhanced SMTP reliability.
• Syslog now correctly logs initial packets after reboot.
• Improved overall SIP performance and stability.
• `/api/accesspoint/grantaccess` now activates the configured Door Switch instead of always triggering Switch 1.
• Valid credentials are now correctly logged as `valid=true` even when an extender (e.g., RFID) is not set as Door Entry.
• Improved access signalization for invalid Access Validity periods.
• Automation now supports the newly added SIP accounts 3 and 4.
• Auto Provisioning now runs at the configured time, using the correct timezone offset.
• QR codes are now transmitted correctly to Genetec Synergis as cards.
• Important bug fixes.

e09dae49d2373e488c7eff192a11362fb53c55df0d692eefb37779e93db7bda2

2N OS version 2.49.1 for 2N Intercoms includes the following changes

Essential Corrections

• Updated an internal library containing critical vulnerabilities.
• Fixed a critical issue with DNS which caused the device to, e.g., become unable to re-register to a SIP server after its IP address changes. This also solved other DNS-related issues.
• Important bug fixes.

2N OS version 2.49.0 for 2N Intercoms includes the following changes

Precautions to be taken during update to FW version 2.49.x

• Empty device names are no longer supported. Set the name via Services > Web Server > Device Name. If left blank, the device may fail to update.
• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.

New Functions and Improvements

• The administrator account now accepts "root" as a valid username as well.
• AXIS Camera Station integration has been significantly improved:
• The ACS tab in the web interface is now renamed to AXIS.
• AXIS Camera Station integration is now always enabled and accessible using the device's administrator account.
• After the initial login to the web interface, the "root" username can also be used for ACS access.
• An optional dedicated ACS account is now available.
• If ACS was previously enabled with both username and password configured, the dedicated account can still be used.
• If your dedicated ACS account used "admin" or "root" as the username and had the same password as the administrator account, it will be merged with the administrator account and you can continue using the same credentials.
• If your dedicated ACS account used "admin" or "root" but had a different password from the administrator account, it will be migrated to a temporary administrator account. You can continue using the same credentials, and the account will be merged with the administrator account after its password is updated.
• 2N IP Utility can now also be used to configure IP settings after the default password has been changed.
• The `Enter PIN` button on the IP Style home screen is now blue to help distinguish it from call-related buttons.
• Separate parameters are now available to independently enable and select modes for both License Plate Recognition and Character Trimming.
• 2N OS is now fully compatible with and certified for Lenel OnGuard 8.3.
• Native integration with Microsoft Teams has been added, allowing bidirectional calling with our devices and enabling door unlocking directly from the Teams client. Configuration is available via Services > Integration > MS Teams.

Essential Corrections

• Updated several internal libraries.
• Improved precision of WaveKey-based door unlocking.
• Enhanced SMTP reliability.
• Syslog now correctly logs initial packets after reboot.
• Improved overall SIP performance and stability.
• `/api/accesspoint/grantaccess` now activates the configured Door Switch instead of always triggering Switch 1.
• Valid credentials are now correctly logged as `valid=true` even when an extender (e.g., RFID) is not set as Door Entry.
• Improved access signalization for invalid Access Validity periods.
• Automation now supports the newly added SIP accounts 3 and 4.
• Auto Provisioning now runs at the configured time, using the correct timezone offset.
• QR codes are now transmitted correctly to Genetec Synergis as cards.
• Important bug fixes.

5d2d4f61abd64369717be422cfd572b3889c259d08bab64a0d0ba0ef404d83b3

2N OS version 2.48.1 for 2N Intercoms includes the following changes

Precautions to be taken during update to FW version 2.48.x

• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.

New Functions and Improvements

• IP Style now turns off the display backlight when idle to improve power efficiency. This setting can be adjusted via Hardware > Backlight > Backlight in Power Saving Mode.
• Devices can now generate Certificate Signing Requests (CSR) directly from the web interface under System > Certificates > CSR.
• All SIP accounts now support additional backup proxy and registrar servers.
• Accessibility features added to IP Style include Blind Assistance Mode and support for quick dial button modules. These can be configured under Calling > Dialing.
• The Bluetooth button on IP Style has been enlarged and centered in the navigation bar, which now shares a consistent design across both the standard and custom GUI interfaces.
• Changing the web interface password now requires entering the current password. As a result, restoring a configuration will no longer change the password. Auto Provisioning can change the password only if the current one is still set to default.
• A firewall has been added to ARTPEC-based devices: IP Style, IP Verso 2.0, IP One, Access Unit QR, and IP Force 2.0.

Essential Corrections

• Improved certificate handling.
• The visitor message on IP Style is now shown only when access is granted during a call.
• Fixed occasional camera preview outages after reboot.
• Prevented some certificates from reverting to factory defaults after a software factory reset (without selecting Network Settings), avoiding potential network disconnection.
• Enhanced stability of IP Style when streaming and displaying multiple video feeds.
• SIP unregistration now works correctly with non-RFC-compliant User Agent Servers.
• Removed certain unnecessary syslog messages.
• Improved stability of the Custom GUI on IP Style.
• Improved formatting of exported Directory CSV files.
• `/api/camera/snapshot` now properly applies the `quality` parameter when supported.
• SIP authentication passwords can now be up to 255 characters in length.
• The `UserAuthorized` Automation block now behaves correctly even for failed authorizations.
• DNS request lengths can now be up to 255 characters.
• Devices can now be integrated with Ateas VMS.
• RADIUS certificates are now validated properly in EAP-TLS/MSCHAPv2 scenarios.
• Commas in the Subject field of the `SendEmail` Automation block no longer cause the subject line to be truncated.
• Fixed device crashes caused by missing Origin fields in SDP offers.
• SRTP media is now correctly offered in the ACK response when using delayed SDP negotiation enforced via options.
• When SRTP is re-negotiated during a RE-INVITE, the newly established encryption key is now properly applied to outgoing media streams.
• Improved stability of the G.729 codec.
• Improved SMTP reliability.
• Enhanced handling of large-scale user directory operations.
• Important bug fixes.

f627daf4de88144a0d4d9ba01bfeb075ed1f426be4ed803f285d0bbecd8542f7

2N OS version 2.48.0 for 2N IP Access Control Systems includes the following changes

Precautions to be taken during update to FW version 2.48.x

• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.
  
  

New Functions and Improvements

• Support for 2N Electronic Locks with Secure Cards added.
• Devices can now generate Certificate Signing Requests (CSR) directly from the web interface under System > Certificates > CSR.
• Changing the web interface password now requires entering the current password. As a result, restoring a configuration will no longer change the password. Auto Provisioning can change the password only if the current one is still set to default.
• A firewall has been added to ARTPEC-based devices: IP Style, IP Verso 2.0, IP One, Access Unit QR, and IP Force 2.0.
  
  

Essential Corrections

• Improved certificate handling.
• Prevented some certificates from reverting to factory defaults after a software factory reset (without selecting Network Settings), avoiding potential network disconnection.
• Removed certain unnecessary syslog messages.
• Improved formatting of exported Directory CSV files.
• The `UserAuthorized` Automation block now behaves correctly even for failed authorizations.
• DNS request lengths can now be up to 255 characters.
• RADIUS certificates are now validated properly in EAP-TLS/MSCHAPv2 scenarios.
• Commas in the Subject field of the `SendEmail` Automation block no longer cause the subject line to be truncated.
• Improved SMTP reliability.
• Enhanced handling of large-scale user directory operations.
• Important bug fixes.

eb32f5d74156cbc84be659ce13ed58298b62f4e7eda1aed348a09dd3b6347b08

2N OS version 2.50.1 for 2N Intercoms includes the following changes

Essential Corrections

• Fixed an issue with 2N Electronic Locks that limited the device directory to 2000 users.
• Fixed an issue where the ProfileStateChanged block in Automation functions caused an error after reboot.
• Added support for a new Vbus display revision.
• Improved ACS connection stability.
• Updated several internal libraries.
• Important bug fixes.

2N OS version 2.50.0 for 2N Intercoms includes the following changes

Precautions to be taken during update to FW version 2.50.x

• For security reasons, network settings can no longer be modified using 2N Network Scanner.
• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.
• Due to essential authentication updates for an improved user experience, you must restart the ACS server to restore connectivity for devices upgraded from a version lower than 2.49.0 to version 2.49.0 or higher.

New Functions and Improvements

• Reception of `In-Band (Audio)` DTMF is now disabled by default to improve resilience against malicious attacks.
• STUN support has been added and can be configured under `Calling > SIP # > Configuration`.
• Added support for the Japanese language in the display UI of Answering Units and IP Style.
• Support for 2N Electronic Locks is now included as part of the standard firmware release.

Essential Corrections

• Improved compatibility of outgoing H.264 and H.265 video streams.
• Private keys are no longer exposed via `GET /api/mobilekey/config`.
• Updated several internal libraries.
• Web configuration pages for Automation features now load correctly even when the device is offline (without an active internet connection).
• Eliminated occasional audio distortions on IP Uni and IP Audio Kit devices.
• Fixed an intermittent issue where audio inputs could become swapped on IP Uni and IP Audio Kit devices.
• Devices no longer crash when a user with a limited validity period presents their card, provided the associated RFID reader extension module has `Door` set to `Not used`.
• Cached DNS entries for SIP registrars now expire immediately and correctly when the registrar IP address changes, preventing registration failures.
• Fixed an issue where devices could lose and reacquire their IP address via DHCP twice after a factory reset and subsequent reboots.
• Resolved a device crash that could occur when sending emails using specific SMTP server configurations.
• The `snmpget` function now works correctly on devices using SNMPv3.
• Devices now correctly process `Too Brief` SIP responses during registration and immediately apply the updated expiry period.
• Fixed device crashes caused by specific malformed or non-standard ONVIF requests.
• Corrected an issue where video resolution could be incorrectly limited when selecting lower bitrate settings for the H.265 codec.
• Added a limited-range mode to the WaveKey opening algorithm to prevent unintended door openings from excessive distance.
• PEAP MSCHAPv2 authentication is now fully functional and reliable across all supported models.
• Eliminated a condition that could cause SIP registration to become permanently stuck in the unregistered state.
• Other corrections and fixes.

b080eef21ac4dab1a1b20a429a04551d222fe4a66faebf0f1079ab711986c206

2N OS version 2.50.0 for 2N Intercoms includes the following changes

Precautions to be taken during update to FW version 2.50.x

• Devices no longer emit audible beeps during boot or network state changes by default. If required, this behavior can be enabled under `Hardware > Audio > Startup and Network States Signalization`.
• For security reasons, network settings can no longer be modified using 2N Network Scanner.
• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.

New Functions and Improvements

• Reception of `In-Band (Audio)` DTMF is now disabled by default to improve resilience against malicious attacks.
• STUN support has been added and can be configured under `Calling > SIP # > Configuration`.
• Added support for the Japanese language in the display UI of Answering Units and IP Style.
• Support for 2N Electronic Locks is now included as part of the standard firmware release.

Essential Corrections

• Improved compatibility of outgoing H.264 and H.265 video streams.
• Private keys are no longer exposed via `GET /api/mobilekey/config`.
• Updated several internal libraries.
• Web configuration pages for Automation features now load correctly even when the device is offline (without an active internet connection).
• Eliminated occasional audio distortions on IP Uni and IP Audio Kit devices.
• Fixed an intermittent issue where audio inputs could become swapped on IP Uni and IP Audio Kit devices.
• Devices no longer crash when a user with a limited validity period presents their card, provided the associated RFID reader extension module has `Door` set to `Not used`.
• Cached DNS entries for SIP registrars now expire immediately and correctly when the registrar IP address changes, preventing registration failures.
• Fixed an issue where devices could lose and reacquire their IP address via DHCP twice after a factory reset and subsequent reboots.
• Resolved a device crash that could occur when sending emails using specific SMTP server configurations.
• The `snmpget` function now works correctly on devices using SNMPv3.
• Devices now correctly process `Too Brief` SIP responses during registration and immediately apply the updated expiry period.
• Fixed device crashes caused by specific malformed or non-standard ONVIF requests.
• Corrected an issue where video resolution could be incorrectly limited when selecting lower bitrate settings for the H.265 codec.
• Added a limited-range mode to the WaveKey opening algorithm to prevent unintended door openings from excessive distance.
• PEAP MSCHAPv2 authentication is now fully functional and reliable across all supported models.
• Eliminated a condition that could cause SIP registration to become permanently stuck in the unregistered state.
• Other corrections and fixes.

da3486e9ba234377ce512cbf6d2e46f33f2540040aad0d0d78a49fafb0ca08d1

2N OS version 2.49.1 for 2N Intercoms includes the following changes

Essential Corrections

• Updated an internal library containing critical vulnerabilities.
• Fixed a critical issue with DNS which caused the device to, e.g., become unable to re-register to a SIP server after its IP address changes. This also solved other DNS-related issues.
• Important bug fixes.

2N OS version 2.49.0 for 2N Intercoms includes the following changes

Precautions to be taken during update to FW version 2.49.x

• Empty device names are no longer supported. Set the name via Services > Web Server > Device Name. If left blank, the device may fail to update.
• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.

New Functions and Improvements

• The administrator account now accepts "root" as a valid username as well.
• AXIS Camera Station integration has been significantly improved:
• The ACS tab in the web interface is now renamed to AXIS.
• AXIS Camera Station integration is now always enabled and accessible using the device's administrator account.
• After the initial login to the web interface, the "root" username can also be used for ACS access.
• An optional dedicated ACS account is now available.
• If ACS was previously enabled with both username and password configured, the dedicated account can still be used.
• If your dedicated ACS account used "admin" or "root" as the username and had the same password as the administrator account, it will be merged with the administrator account and you can continue using the same credentials.
• If your dedicated ACS account used "admin" or "root" but had a different password from the administrator account, it will be migrated to a temporary administrator account. You can continue using the same credentials, and the account will be merged with the administrator account after its password is updated.
• 2N IP Utility can now also be used to configure IP settings after the default password has been changed.
• The `Enter PIN` button on the IP Style home screen is now blue to help distinguish it from call-related buttons.
• Separate parameters are now available to independently enable and select modes for both License Plate Recognition and Character Trimming.
• 2N OS is now fully compatible with and certified for Lenel OnGuard 8.3.
• Native integration with Microsoft Teams has been added, allowing bidirectional calling with our devices and enabling door unlocking directly from the Teams client. Configuration is available via Services > Integration > MS Teams.

Essential Corrections

• Updated several internal libraries.
• Improved precision of WaveKey-based door unlocking.
• Enhanced SMTP reliability.
• Syslog now correctly logs initial packets after reboot.
• Improved overall SIP performance and stability.
• `/api/accesspoint/grantaccess` now activates the configured Door Switch instead of always triggering Switch 1.
• Valid credentials are now correctly logged as `valid=true` even when an extender (e.g., RFID) is not set as Door Entry.
• Improved access signalization for invalid Access Validity periods.
• Automation now supports the newly added SIP accounts 3 and 4.
• Auto Provisioning now runs at the configured time, using the correct timezone offset.
• QR codes are now transmitted correctly to Genetec Synergis as cards.
• Important bug fixes.

e09dae49d2373e488c7eff192a11362fb53c55df0d692eefb37779e93db7bda2

2N OS version 2.49.1 for 2N Intercoms includes the following changes

Essential Corrections

• Updated an internal library containing critical vulnerabilities.
• Fixed a critical issue with DNS which caused the device to, e.g., become unable to re-register to a SIP server after its IP address changes. This also solved other DNS-related issues.
• Important bug fixes.

2N OS version 2.49.0 for 2N Intercoms includes the following changes

Precautions to be taken during update to FW version 2.49.x

• Empty device names are no longer supported. Set the name via Services > Web Server > Device Name. If left blank, the device may fail to update.
• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.

New Functions and Improvements

• The administrator account now accepts "root" as a valid username as well.
• AXIS Camera Station integration has been significantly improved:
• The ACS tab in the web interface is now renamed to AXIS.
• AXIS Camera Station integration is now always enabled and accessible using the device's administrator account.
• After the initial login to the web interface, the "root" username can also be used for ACS access.
• An optional dedicated ACS account is now available.
• If ACS was previously enabled with both username and password configured, the dedicated account can still be used.
• If your dedicated ACS account used "admin" or "root" as the username and had the same password as the administrator account, it will be merged with the administrator account and you can continue using the same credentials.
• If your dedicated ACS account used "admin" or "root" but had a different password from the administrator account, it will be migrated to a temporary administrator account. You can continue using the same credentials, and the account will be merged with the administrator account after its password is updated.
• 2N IP Utility can now also be used to configure IP settings after the default password has been changed.
• The `Enter PIN` button on the IP Style home screen is now blue to help distinguish it from call-related buttons.
• Separate parameters are now available to independently enable and select modes for both License Plate Recognition and Character Trimming.
• 2N OS is now fully compatible with and certified for Lenel OnGuard 8.3.
• Native integration with Microsoft Teams has been added, allowing bidirectional calling with our devices and enabling door unlocking directly from the Teams client. Configuration is available via Services > Integration > MS Teams.

Essential Corrections

• Updated several internal libraries.
• Improved precision of WaveKey-based door unlocking.
• Enhanced SMTP reliability.
• Syslog now correctly logs initial packets after reboot.
• Improved overall SIP performance and stability.
• `/api/accesspoint/grantaccess` now activates the configured Door Switch instead of always triggering Switch 1.
• Valid credentials are now correctly logged as `valid=true` even when an extender (e.g., RFID) is not set as Door Entry.
• Improved access signalization for invalid Access Validity periods.
• Automation now supports the newly added SIP accounts 3 and 4.
• Auto Provisioning now runs at the configured time, using the correct timezone offset.
• QR codes are now transmitted correctly to Genetec Synergis as cards.
• Important bug fixes.

5d2d4f61abd64369717be422cfd572b3889c259d08bab64a0d0ba0ef404d83b3

2N OS version 2.48.1 for 2N Intercoms includes the following changes

Precautions to be taken during update to FW version 2.48.x

• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.

New Functions and Improvements

• IP Style now turns off the display backlight when idle to improve power efficiency. This setting can be adjusted via Hardware > Backlight > Backlight in Power Saving Mode.
• Devices can now generate Certificate Signing Requests (CSR) directly from the web interface under System > Certificates > CSR.
• All SIP accounts now support additional backup proxy and registrar servers.
• Accessibility features added to IP Style include Blind Assistance Mode and support for quick dial button modules. These can be configured under Calling > Dialing.
• The Bluetooth button on IP Style has been enlarged and centered in the navigation bar, which now shares a consistent design across both the standard and custom GUI interfaces.
• Changing the web interface password now requires entering the current password. As a result, restoring a configuration will no longer change the password. Auto Provisioning can change the password only if the current one is still set to default.
• A firewall has been added to ARTPEC-based devices: IP Style, IP Verso 2.0, IP One, Access Unit QR, and IP Force 2.0.

Essential Corrections

• Improved certificate handling.
• The visitor message on IP Style is now shown only when access is granted during a call.
• Fixed occasional camera preview outages after reboot.
• Prevented some certificates from reverting to factory defaults after a software factory reset (without selecting Network Settings), avoiding potential network disconnection.
• Enhanced stability of IP Style when streaming and displaying multiple video feeds.
• SIP unregistration now works correctly with non-RFC-compliant User Agent Servers.
• Removed certain unnecessary syslog messages.
• Improved stability of the Custom GUI on IP Style.
• Improved formatting of exported Directory CSV files.
• `/api/camera/snapshot` now properly applies the `quality` parameter when supported.
• SIP authentication passwords can now be up to 255 characters in length.
• The `UserAuthorized` Automation block now behaves correctly even for failed authorizations.
• DNS request lengths can now be up to 255 characters.
• Devices can now be integrated with Ateas VMS.
• RADIUS certificates are now validated properly in EAP-TLS/MSCHAPv2 scenarios.
• Commas in the Subject field of the `SendEmail` Automation block no longer cause the subject line to be truncated.
• Fixed device crashes caused by missing Origin fields in SDP offers.
• SRTP media is now correctly offered in the ACK response when using delayed SDP negotiation enforced via options.
• When SRTP is re-negotiated during a RE-INVITE, the newly established encryption key is now properly applied to outgoing media streams.
• Improved stability of the G.729 codec.
• Improved SMTP reliability.
• Enhanced handling of large-scale user directory operations.
• Important bug fixes.

f627daf4de88144a0d4d9ba01bfeb075ed1f426be4ed803f285d0bbecd8542f7

2N OS version 2.48.0 for 2N IP Access Control Systems includes the following changes

Precautions to be taken during update to FW version 2.48.x

• All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
• Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
• In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.
  
  

New Functions and Improvements

• Support for 2N Electronic Locks with Secure Cards added.
• Devices can now generate Certificate Signing Requests (CSR) directly from the web interface under System > Certificates > CSR.
• Changing the web interface password now requires entering the current password. As a result, restoring a configuration will no longer change the password. Auto Provisioning can change the password only if the current one is still set to default.
• A firewall has been added to ARTPEC-based devices: IP Style, IP Verso 2.0, IP One, Access Unit QR, and IP Force 2.0.
  
  

Essential Corrections

• Improved certificate handling.
• Prevented some certificates from reverting to factory defaults after a software factory reset (without selecting Network Settings), avoiding potential network disconnection.
• Removed certain unnecessary syslog messages.
• Improved formatting of exported Directory CSV files.
• The `UserAuthorized` Automation block now behaves correctly even for failed authorizations.
• DNS request lengths can now be up to 255 characters.
• RADIUS certificates are now validated properly in EAP-TLS/MSCHAPv2 scenarios.
• Commas in the Subject field of the `SendEmail` Automation block no longer cause the subject line to be truncated.
• Improved SMTP reliability.
• Enhanced handling of large-scale user directory operations.
• Important bug fixes.

eb32f5d74156cbc84be659ce13ed58298b62f4e7eda1aed348a09dd3b6347b08