CM1000 firmware upgrade - TDS telecom

Amdahl
Tutor
Feb 16, 2022
Hi,
Thanks, I've already asked my Provider and will go back again . What if my provider wont do this ? becuase it cost them money/huge support costs..., then what do customers do ?, they already told me this verbally so now i'm going back in writing.
There is a bigger story at play here, we already went through a BYOD for enterprises, now this is basically the same due to integration of Cable Modem/Router/Wireless integration in a box... if it's my cable/router box then i have to have the ability to manage that, the telco provides the physical termination to the CPE and stops there. Given this, IMHO I'd strongly advise Netgear to NOT go through the Telcos for this aspect as it puts them at an interesting point of being blocked through long cycles of validation to put products/fixes onto the said networks and bring new features. I've been through this with Cisco/Juniper when working there with Major Telcos, it can be a slippery and very expensive slope.
- plemans
  Guru - Experienced User
  Feb 17, 2022
  Amdahl wrote:
  
  Hi,
  
  Given this, IMHO I'd strongly advise Netgear to NOT go through the Telcos for this aspect as it puts them at an interesting point of being blocked through long cycles of validation to put products/fixes onto the said networks and bring new features.
  
  While we agree with this principle, the problem is that its part of the Docsis spec. So the modem side of it, the ISP is the only one who can push the firmware to it. The newer combo devices like the CAX30/80 have dual partitions. One for the modem side and one for the router side. so you can upgrade the router side but the modem side is still controlled by the ISP. Its not something a single provider can change. Again as its part of the docsis spec.
- FURRYe38
  Guru - Experienced User
  Feb 17, 2022
  As plemans mentioned, this has been the DOCSIS spec for years. Mainly came from historical problems when ISP pushed untested or bugged FW updates to user owned modems and there modems no longer worked or became bricked. This ISP incurred replacement expenses to replace the user owned modems. So the spec now calls for ISPs are resposible to test and certify ANY fw that comes from modem Mfrs prior to pushing to modems. They also have the ability to not push to user owned modems as well by choice. So users have the choice to use there own modems, if and where they are supported BY the ISP, or use the ISP modems they offer and ISPs have the choice to push FW updates to users owned modems or NOT. Policies regarding this varies per ISP. Some may, some may not. Again, been like this for years. Its not a modem MFrs choice, its the "Spec!"
  
  And not changing anytime soon I would presume.
  
  Good Luck.
  - Amdahl
    Tutor
    Feb 17, 2022
    5.2.3 Cable Modem Secure Software Download
    To download a CM software image securely, the CM vendor and/or MSO will digitally sign the image using the
    appropriate code verification certificate (CVC) and place the image on a Software Download server. A CM is
    enabled to download a software image when it receives a valid CVC in its configuration file. Triggering the
    download of the software image can be done using parameters in the CM configuration file, or SNMP commands.
    After a CM downloads a software image, it validates the image by verifying that the included CVC chains to the
    Root CA Certificate trust anchor, and by checking...
    https://www.cablelabs.com/specifications/CM-SP-SECv3.1
    
    The CM Vendor is Netgear here. So, DOCSIS3.1 and the Security spec. clearly allows the Vendor to provide this Software but ddoes not say Firmware(to split hares!!).
    
    While agreeing that Bricking my Device is a possibility, it is on the users, no harm and no foul in court. However folks like Netgear SHOULD or MUST valdate the software with the said provider would be a good option.
    
    Thanks, have re-pinged my provider again.

Forum Discussion

CM1000 firmware upgrade - TDS telecom