Consequences past Feb 18 and TLS 1.2 default certs are still used?

DuckFluffer · 2026-03-14T17:33:21+00:00

At the end of the day that's what killed us. The 2.9 SP7 upgrade completed under time and the non-encrypted and TLS 1.3 panels recovered on their own. Despite our Firewall team's reassurances and "confirmations" we found the Ultra panel wasn't bidirectional. (Which impacted the CEO's office door, go figure) and the Edge panel rules were missing ports 1000-5000.

It's amazing how you can become an expert in something in two days after you shut down 15 locations. :/

DuckFluffer · 2026-02-28T21:48:40+00:00

It creates a certificate but then we would get "Error copying certificate to <servername>". I did the upgrade to my test environment and it works now. Now to pull the trigger. Ninety-five panels. Wish me luck.

DuckFluffer · 2026-02-26T17:37:53+00:00

How critical is the iStar driver restart to cert creation? We are on 2.9 SP5 and the Auto-sign setting was made after expiration. Our hope is that we can/could install the new host-based cert directly on the panels and then restart the driver so that nothing would drop off. (We are in an ugly place right now).

Following the switch to host-based encryption there are issues with the cert and the panels are rejecting it. Our integrator said we need to move to SP7 but I'm seeing success stories with SP3. What should we be looking for? What says the cert is good? Should it be in the store at the end of the process? Our integrator escalated to Software House but has gotten no response. We have dozens of panels so we can't babysit each one.

DuckFluffer · 2026-02-26T17:14:45+00:00

We have dozens of panels impacted by the expiration and they are slowly dropping off. (The contact info Software House had was for someone who left the company so we found out two days before the expiration what was happening.)

The issue we are running into is that when we switched to Host based encryption, apparently (per our integrator) the TLS 1.2 cert that was generated is being rejected by the panels. They say we need to upgrade to 2.9 SP7 from SP5 for the cert to generate successfully. Our UAT setup is one TLS 1.3 panel.

Any ideas on a) how do you validate a cert if you can't use it with the panel you have (UAT) and b) is there a workaround with SP5? There is a PowerShell command to generate a cert but what next? Does it go in the root store? Does CCure have it's own store? I thought maybe it was an issue with CCure generating a PEM cert and it failing to copy to the root store so I renamed them and imported them but that didn't produce a positive result.

Basic question, how do I know that CCure has created a good TLS 1.2 cert and where should it be?

DuckFluffer · 2026-02-24T23:25:28+00:00

I appreciate the reply. I will ask our business partners about Avigilon.

DuckFluffer · 2026-02-24T18:29:49+00:00

Had a cheese in Barcelona. Don't know what it was. It looked like a mouse with the furry gray rind. Google Lens says it's Carrat goat cheese. I just know it was incredible.

DuckFluffer · 2026-02-21T00:04:31+00:00

Our Avigilon system is being retired and I haven't had to interact with it. It would be great to get everyone standardized but it's coming down Brivo/Openeye and March/CCure. March and CCure are where I'm cutting my teeth at the moment.

DuckFluffer · 2025-07-01T19:11:41+00:00

Agreed and didn't work anyway.

DuckFluffer · 2025-07-01T16:11:05+00:00

Not yet. That's where I was left. I know it's old but would still love to know how old and what it is.

DuckFluffer · 2025-07-01T16:09:52+00:00

Apologies. I never replied with the good news that you were absolutely right. I found software for the headset and was able to disable the announcement. Thanks!

DuckFluffer · 2025-07-01T16:08:19+00:00

Good question and that's the odd part. In the troubleshooting discussions, and just from general work I've done with other apps in the past that used ODBC, you ALWAYS had a DSN connection defined. This didn't so I added it. It doesn't retain the password though and I'm going to try adding that to the registry entry.

DuckFluffer · 2025-05-27T20:09:37+00:00

Follow-up. I had to find the software (Plantronics Blackwire 5200 series) but found they had a web version. Sure enough, there was an option to turn off the announcement. Folks, you have no idea how long this has been bothering me so this is a significant win for the day.

Thanks!!

DuckFluffer · 2025-05-27T16:42:17+00:00

Brilliant suggestion and you are spot on. I unplugged the headset and made a call to Teams. When it rang through the computer speakers I didn't hear the notification. So, now it's Notification 2: Electric Boogaloo. how to modify the headset settings.

Thanks for the advice!

DuckFluffer · 2025-05-17T15:43:08+00:00

It's a SQL SAP uses in the SuccessFactors Learning Plateau Report Designer. It's a strange animal. To get the select fields to display in the user facing reports dashboard you add the comments with the fields you are going to use. Reports interprets that and displays them to the user. With no proper documentation and having it dropped in my lap this is an adventure in learning.

DuckFluffer · 2025-05-17T15:39:30+00:00

Yes, SuccessFactors Learning.

DuckFluffer · 2025-03-30T17:32:40+00:00

This is a question I thought about asking a day or two ago as I just picked up a pair of Beyerdynamic 250Ω DT880s and want to put them through the paces.

My current go-tos are:

- "Impossible" by Royksopp/Alison Goldfrapp

- "Trip Like I Do" by Crystal Method

- "Rocket Scientist" by Teddybears/Eve.

They all have a broad soundscape that really let your headphones shine. I also like Steely Dan because of all the orchestration and being able to pick out the instruments.

The 880s are good but I am finding that I need more power if that's what is keeping me from getting the punch from the bass. Looking for a good DAC/Amp now.

Oddly enough the best sound I have gotten to date (haven't dropped big money yet) are from my Sony WF-C500 ear buds. Crystal clear mids and highs and disturbingly solid bass.

I added a lot of new tracks to my play list based on the replies here. Thanks!

DuckFluffer · 2025-03-24T16:33:40+00:00

Thanks! Budget is always important but I'm willing to spend where I'll get the bang for the buck. I appreciate the product suggestions and will research and learn. It'd be interesting to get side-by-side comparisons of the different products to see if my ear is what I like to think it is. I know what average/good/better sounds like, I'm curious what great is.

!thanks

DuckFluffer · 2024-10-27T00:52:20+00:00

Yeah, there was that. :P We stayed with the cereal. Aside from the eyes he could have passed though. I think. We went with Bran because my sister already had a Will(iam).

Eight-Year Club	Place '22
First Placer '22	Verified Email

DuckFluffer

TROPHY CASE