Old Encryption Error

[nenaang]

Hello all,

I had a family member connect today and they told me that their ASUS gave them a warning about old encryption. I’ve searched everywhere and do not see this mentioned. Any idea what’s causing this? Firmware is updated. Any help would be appreciated.

[FURRYe38 · Accepted solution]

You should be able to update to v2.5.1.8 directly on the RBS first then RBR lastly. 

https://www.netgear.com/support/product/RBK50.aspx#download

Download the .zip files for each RBS and RBR. Unpack the .zip file to reveal the .img files. Use IE11, Firefox or Opera web browser on a wire connected PC to send the .img files manually. 

Once you get the RBS and RBR updated, factory reset both units and setup from scratch. 

---

@nenaang wrote:
Firmware version: v2.3.5.30
Asus T100 (tablet)
WPA2-PSK

---

[FURRYe38]

What Firmware is currently loaded? Be sepecific please...

What ASUS device is this? Wireless device?

What security modes are you using on your Orbi system? WPA or WPA2? 

[nenaang]

Firmware version: v2.3.5.30
Asus T100 (tablet)
WPA2-PSK

[FURRYe38]

This the only device that shows this? 

Ensure the Asus devices firmware or software is updated as well. 

[tomschmidt]

Are you referring to the https SSL certificate being expired? V2.3.5.30 firmware SSL certificate expired August 2019, and there was a patch v2.3.5.34 that fixed it.  I do not see v2.3.5.34 listed any more from NG site, so I would upgrade to v2.5.1.8 to be current with your firmware.  However the links below from the .34 release notes appear to still work.

Here is the V2.3.5.34 release notes:

Note:If your firmware version is 2.2.1.210 or lower, you cannot update the firmware directly to v2.3 or higher. You must first update the firmware to v2.2.1.212 using the manual firmware update feature in the router web interface.  After updating the firmware to v2.2.1.212, your Orbi router reboots, and then you can update to higher versions.

Security Fixes:

• Updates the https certificate

Download Link:.

RBR50 - https://www.downloads.netgear.com/files/GDC/RBK50/RBR50-V2.3.5.34.zip

RBS50 - https://www.downloads.netgear.com/files/GDC/RBK50/RBS50-V2.3.5.34.zip

Firmware Update Instructions:

To update your product’s firmware, follow the instructions in your product’s user manual. To find your user manual, visit https://www.netgear.com/support/, enter your model number in the search box, and click the Documentation button on the product page.

---

@nenaang wrote:
Firmware version: v2.3.5.30
Asus T100 (tablet)
WPA2-PSK

---

[CrimpOn]

Unless I am seriously mistaken, the SSL Certificate "issue" remains to this day on the Orbi RBR50 (and I would expect on other models).  After the fiasco when the SSL Cert expired, Netgear put a "self-signed" Cert in 2.5.1.8.  My Chrome, Edge, Firefox, and Opera browsers ALL complain that the Orbi https web page is "not secure."  (4 for 4 = 100%)

My guess is the Asus has a practice of checking that an SSL version of a web site exists and tries to open it instead of the http version.

[tomschmidt]

@CrimpOn, you are correct, the self-signed certificate is still an issue that it appears NG does not want to fix.  They instead point their users to a KB article for the R8900 and R9000 Nighthawk routers at https://kb.netgear.com/000061586/I-get-a-security-warning-in-my-browser-when-I-try-to-log-in-to-my-N... which suggest adding their cert to your trusted certs on EVERY system you own for every browser you use!  This is unacceptable!  They need to get into the 21st century for security.

[CrimpOn]

I do not recall anyone posting a link on this forum to an article about how to "fix" the Cert for "orbilogin.net".  Is it too much to ask for someone to "cut and paste" the Nighthawk article into one for Orbi?

I no longer have other brands of router, so I have no idea what other manufacturers are doing now that web browsers are getting snippy about non-SSL web sites.  My memory is that everybody used plain http for access by sources internal to the network.  I hear that a lot of the new systems do not provide browser interfaces.  It's "app" or nothing.

[nenaang]

Ok. I’ll report back.

[nenaang]

I’ll try this.

I’m curious now as to why I never received an email with the ‘4’ version update, but did receive the email to update to ‘3’ versions.

[nenaang]

Oh my!!! This is insanity. Thanks for the info.

[nenaang]

Confirmed software on T100 is updated.

[nenaang]

Attempted to update...am getting a  "disc image file is corrupted" error...

[FURRYe38 · Accepted solution]

You should be able to update to v2.5.1.8 directly on the RBS first then RBR lastly. 

https://www.netgear.com/support/product/RBK50.aspx#download

Download the .zip files for each RBS and RBR. Unpack the .zip file to reveal the .img files. Use IE11, Firefox or Opera web browser on a wire connected PC to send the .img files manually. 

Once you get the RBS and RBR updated, factory reset both units and setup from scratch. 

---

@nenaang wrote:
Firmware version: v2.3.5.30
Asus T100 (tablet)
WPA2-PSK

---

[nenaang]

ok. thanks. I'll have to find my cables. In the meantime I've switched all devices back to the original router and upgraded that to WPA2 (which it wasn't on...welp!)...

[FURRYe38]

[nenaang]

SUCCESS!!! I didn't even need to use the image files. I clicked into the Orbi on my network (via ethernet) and was able to login and update all 3 through there. After resetting it sill brought up the name of the router so was happy to not have to set that up again. I did make the mistake of trying to add the system as a new setup and it kept trying to connect into a nonexisten wifi network. I finally decided to (after removing and installing the app a couple of times) to just click no to the new setup and was able to go on with my day. 

Thanks to you and everyone for their help!

[FURRYe38]

Glad you got it working. Be sure to save off a backup configuration to file for safe keeping later on. Saves time if you need to reset later on down the road.

Please mark your thread and solved. 

Enjoy. 

[nenaang]

Thanks for the tip! How do I save a backup configuration?!

Noted with thanks: I’m not sure if marking it solved will close the thread so I’ll wait for a response on how to save before marking resolved..! 🙂

[FURRYe38]

Log into the RBRs web page and under Advanced Tab/Administration/Backup I believe is the place.

[nenaang]

Ok. Thank you!

[FURRYe38]