Firmware 2N Access Unit

SHA-256: a0c950c96b61b83e2eb69e2f29ef58dcadeb5d3560b8225f4d0820be92a26ef8
Fișier: firmware_2_50_1_2n_access_unit.zip
2N OS version 2.50.1 for 2N IP Access Control Systems includes the following changes
Essential Corrections
Fixed an issue with 2N Electronic Locks that limited the device directory to 2000 users.
Fixed an issue where the ProfileStateChanged block in Automation functions caused an error after reboot.
Fixed an issue where Access Unit 1.0 was unable to boot for an extended period after power loss.
Updated several internal libraries.
Important bug fixes.
2N OS version 2.50.0 for 2N IP Access Control Systems includes the following changes
Precautions to be taken during update to FW version 2.50.x
For security reasons, network settings can no longer be modified using 2N Network Scanner.
All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.
New Functions and Improvements
Support for 2N Electronic Locks is now included as part of the standard firmware release.
Essential Corrections
Private keys are no longer exposed via `GET /api/mobilekey/config`.
Updated several internal libraries.
Web configuration pages for Automation features now load correctly even when the device is offline (without an active internet connection).
Devices no longer crash when a user with a limited validity period presents their card, provided the associated RFID reader extension module has `Door` set to `Not used`.
The `snmpget` function now works correctly on devices using SNMPv3.
Fixed device crashes caused by specific malformed or non-standard ONVIF requests.
Corrected an issue where video resolution could be incorrectly limited when selecting lower bitrate settings for the H.265 codec.
Added a limited-range mode to the WaveKey opening algorithm to prevent unintended door openings from excessive distance.
Other corrections and fixes.

SHA-256: 2ceb66a096f64f11a9e75b04030428149d1415534597d6f6b38b76a10ef9969a
Fișier: firmware_2_50_0_2n_access_unit.zip
2N OS version 2.50.0 for 2N IP Access Control Systems includes the following changes
Precautions to be taken during update to FW version 2.50.x
Devices no longer emit audible beeps during boot or network state changes by default. If required, this behavior can be enabled under `Hardware > Audio > Startup and Network States Signalization`.
For security reasons, network settings can no longer be modified using 2N Network Scanner.
All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.
New Functions and Improvements
Support for 2N Electronic Locks is now included as part of the standard firmware release.
Essential Corrections
Private keys are no longer exposed via `GET /api/mobilekey/config`.
Updated several internal libraries.
Web configuration pages for Automation features now load correctly even when the device is offline (without an active internet connection).
Devices no longer crash when a user with a limited validity period presents their card, provided the associated RFID reader extension module has `Door` set to `Not used`.
The `snmpget` function now works correctly on devices using SNMPv3.
Fixed device crashes caused by specific malformed or non-standard ONVIF requests.
Corrected an issue where video resolution could be incorrectly limited when selecting lower bitrate settings for the H.265 codec.
Added a limited-range mode to the WaveKey opening algorithm to prevent unintended door openings from excessive distance.
Other corrections and fixes.

SHA-256: d4dc42391352c4f71b35655cc61d25515ec1190fafb865e9e95ff0834008f296
Fișier: firmware_2_49_1_80_2n_access_unit.zip
2N OS version 2.49.1 for 2N IP Access Control Systems includes the following changes
Essential Corrections
Updated an internal library containing critical vulnerabilities.
Fixed a critical issue with DNS which caused the device to, e.g., become unable to re-register to a SIP server after its IP address changes. This also solved other DNS-related issues.
Important bug fixes.
2N OS version 2.49.0 for 2N IP Access Control Systems includes the following changes
Precautions to be taken during update to FW version 2.49.x
Empty device names are no longer supported. Set the name via Services > Web Server > Device Name. If left blank, the device may fail to update.
All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.
New Functions and Improvements
The administrator account now accepts "root" as a valid username as well.
AXIS Camera Station integration has been significantly improved:
The ACS tab in the web interface is now renamed to AXIS.
AXIS Camera Station integration is now always enabled and accessible using the device's administrator account.
After the initial login to the web interface, the "root" username can also be used for ACS access.
An optional dedicated ACS account is now available.
If ACS was previously enabled with both username and password configured, the dedicated account can still be used.
If your dedicated ACS account used "admin" or "root" as the username and had the same password as the administrator account, it will be merged with the administrator account and you can continue using the same credentials.
If your dedicated ACS account used "admin" or "root" but had a different password from the administrator account, it will be migrated to a temporary administrator account. You can continue using the same credentials, and the account will be merged with the administrator account after its password is updated.
2N IP Utility can now also be used to configure IP settings after the default password has been changed.
Separate parameters are now available to independently enable and select modes for both License Plate R

SHA-256: 41515690156c292f3e7a70c1f1751bb7b043e03de5b307075b96c83f10d2901c
Fișier: firmware_2_49_1_2n_access_unit.zip
2N OS version 2.49.1 for 2N IP Access Control Systems includes the following changes
Essential Corrections
Updated an internal library containing critical vulnerabilities.
Fixed a critical issue with DNS which caused the device to, e.g., become unable to re-register to a SIP server after its IP address changes. This also solved other DNS-related issues.
Important bug fixes.
2N OS version 2.49.0 for 2N IP Access Control Systems includes the following changes
Precautions to be taken during update to FW version 2.49.x
Empty device names are no longer supported. Set the name via Services > Web Server > Device Name. If left blank, the device may fail to update.
All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.
New Functions and Improvements
The administrator account now accepts "root" as a valid username as well.
AXIS Camera Station integration has been significantly improved:
The ACS tab in the web interface is now renamed to AXIS.
AXIS Camera Station integration is now always enabled and accessible using the device's administrator account.
After the initial login to the web interface, the "root" username can also be used for ACS access.
An optional dedicated ACS account is now available.
If ACS was previously enabled with both username and password configured, the dedicated account can still be used.
If your dedicated ACS account used "admin" or "root" as the username and had the same password as the administrator account, it will be merged with the administrator account and you can continue using the same credentials.
If your dedicated ACS account used "admin" or "root" but had a different password from the administrator account, it will be migrated to a temporary administrator account. You can continue using the same credentials, and the account will be merged with the administrator account after its password is updated.
2N IP Utility can now also be used to configure IP settings after the default password has been changed.
Separate parameters are now available to independently enable and select modes for both License Plate Reco

SHA-256: e86a2b57af62b8595cc65a42f93334f22457505de6464422b2804127d0190c70
Fișier: firmware_2_48_1_2n_access_unit.zip
2N OS version 2.48.1 for 2N IP Access Control Systems includes the following changes
Precautions to be taken during update to FW version 2.48.x
All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.
New Functions and Improvements
Devices can now generate Certificate Signing Requests (CSR) directly from the web interface under System > Certificates > CSR.
Changing the web interface password now requires entering the current password. As a result, restoring a configuration will no longer change the password. Auto Provisioning can change the password only if the current one is still set to default.
A firewall has been added to ARTPEC-based devices: IP Style, IP Verso 2.0, IP One, Access Unit QR, and IP Force 2.0.
Essential Corrections
Improved certificate handling.
Prevented some certificates from reverting to factory defaults after a software factory reset (without selecting Network Settings), avoiding potential network disconnection.
Removed certain unnecessary syslog messages.
Improved formatting of exported Directory CSV files.
The `UserAuthorized` Automation block now behaves correctly even for failed authorizations.
DNS request lengths can now be up to 255 characters.
RADIUS certificates are now validated properly in EAP-TLS/MSCHAPv2 scenarios.
Commas in the Subject field of the `SendEmail` Automation block no longer cause the subject line to be truncated.
Improved SMTP reliability.
Enhanced handling of large-scale user directory operations.
Important bug fixes.

SHA-256: 21a9330cb6044c8f84a8fd7e3353f9ecf64c610c1621b3a98d4e2f891434f4de
Fișier: firmware_2_48_0_2n_access_unit.zip
2N OS version 2.48.0 for 2N IP Access Control Systems includes the following changes
Precautions to be taken during update to FW version 2.48.x
All 2N OS devices (except those on the original platform: IP Vario, IP Force, IP Safety, IP Solo, IP/LTE Verso, IP Base, IP Uni, IP Audio Kit, IP Video Kit, Access Unit, SIP Speaker) can no longer be downgraded below version 2.47.0 after updating.
Devices no longer accept certificates signed with 1024-bit RSA keys. These certificates are removed during the update and must be replaced with certificates using at least 2048-bit RSA or ECC keys. Services relying on weaker certificates will stop functioning, and a warning will appear next to the certificate selection parameter in the web interface.
In EAP-TLS mode, 802.1x no longer supports RADIUS certificates containing the `id-kp-clientAuth` Extended Key Usage. If such certificates are used, they will be rejected after the update, resulting in the device being unable to authenticate and connect to the network.
New Functions and Improvements
Support for 2N Electronic Locks with Secure Cards added.
Devices can now generate Certificate Signing Requests (CSR) directly from the web interface under System > Certificates > CSR.
Changing the web interface password now requires entering the current password. As a result, restoring a configuration will no longer change the password. Auto Provisioning can change the password only if the current one is still set to default.
A firewall has been added to ARTPEC-based devices: IP Style, IP Verso 2.0, IP One, Access Unit QR, and IP Force 2.0.
Essential Corrections
Improved certificate handling.
Prevented some certificates from reverting to factory defaults after a software factory reset (without selecting Network Settings), avoiding potential network disconnection.
Removed certain unnecessary syslog messages.
Improved formatting of exported Directory CSV files.
The `UserAuthorized` Automation block now behaves correctly even for failed authorizations.
DNS request lengths can now be up to 255 characters.
RADIUS certificates are now validated properly in EAP-TLS/MSCHAPv2 scenarios.
Commas in the Subject field of the `SendEmail` Automation block no longer cause the subject line to be truncated.
Improved SMTP reliability.
Enhanced handling of large-scale user directory operations.
Important bug fixes.

Fișier: 2n_os_access_unit_fw_2_34_0_43_6.bin
2N OS version 2.34.0 for IP access units includes the following changes
Warning
The value list for the buildType key has been changed in /api/system/info HTTP API endpoint.  The officially released versions will not include an empty string any more, the word ‘release’ will be used.
New Functions
New Automation blocks for switches: “SwitchChanged” and “SwitchStatus”. OSDP “Peripheral Device” support – new external VBUS module for communication with access system drivers via OSDP.
Innovations
The “UserAuthorized” Automation block now provides a new output that carries the authorized user name (this is especially useful when the user authorization e-mail is sent). The door open too long detection is now evaluated even in case the switch does not activate before the door is opened (i.e. where the door is opened using a handle on one side, for example). The visual keypress feedback (flashing) on capacitive keypads has been improved.
Recommended firmware/software versions for other 2N products
2N Access Commander 2.2.
Warning about Upgrade
If emergency lockdown is active while the 2N IP device is upgraded, the setting will not be preserved and the emergency lockdown will be deactivated upon transition from version 2.31 and lower.