NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
I logged into my Orbi RBK50 today - long story short - the security certificate expired yesterday. I have the latest firmware posted (just udpated some days ago) v2.3.5.30.
Can someone from Netgear comment plesae - it's rather surprising that a simple security lapse like this should happen, particularly when the firmware is quite recent. Netgear includes these certificates for a reason, right?
84 Replies
Logged in how? Locally from a device on the Orbi network? Remotely using Orbi app? web interface?
- Locally web interface on same WiFi. Https
Thanks for noticing this. Most of us use "http" on the local network. I knew that https was supported when connecting from external networks. I (sincerely) thought that I had tried https locally before and got no response at all, which was strange since it did work remotely. As of today, of course, the https connection from remote is also "not private".
(And, on a weekend.)
The SSL certificate on the R9000 Wifi Router also expired on August 2, 2019, despite a recent firmware upgrade to 1.0.4.34
Not explicitly familiar with protocol around this community - does anyone know for sure if Netgear personnal monitor this board? I simply want to be sure that someone that can actually do something about this knows about it specifically and assumes ownership of this problem.
I'm having the same problem on my RBK50 indicating security certificate has expired.
Message I get on August 5 on a Chrome Browser is when trying to log into Orbi router .... This server could not prove that it is www.orbilogin.com; its security certificate expired 4 days ago. I rebooted orbi & still have the same problem.
Question - How do actually see the security certificate expiration date? Is it stored on Orbi? Sorry but I'm a newby.
Any help is appreciated.
The certificate expiration was literally August 2. Netgear was supposed to purchase an extension to the expiration date and failed to do so. We users can do nothing except override our browser warnings and "trust". (Some browsers make this very difficult.) Eventually, someone at Netgear will fix this, and the problem will go away. There is nothing a user can do.
I'm just bursting with confidence in Netgear security right now. Any other security features fall through the cracks?
It's August 7th and the expired certificate error is still happening.
Still waiting for a response on Netgear's expired security certificate. After 5 days starting to think we should start posting on websites like Amazon & Walmart that sell Orbi to let folks know the type of service they can expect to get from Netgear.
No response in several days is not acceptable.
- Same issue here...
I reset the orbi rbr50 and satellite to redolve wifi dis connections issue and got an other one with certificate expired
... too much issue in the last months for a 400€ solution....
It has worked fine between sept-dec 2018 but now .... dropping wifi , pages not loading correctly, expired certificate.... if I would know that in advance, i would have choose an other brand, reallyThe invalid Certificate won't be a cause of your wifi problems.
What Firmware is currently loaded?
What is the Mfr and model# of the ISP modem the NG router is connected too?
Is the Orbi system operating in Router or AP mode?
What is the size of your home? Sq Ft?
What is the distance between the router and satellite(s)? 30 feet is recommended in between them to begin with depending upon building materials when wirelessly connected.What channels are you using? Auto? Try setting manual channel 1, 6 or 11 on 2.4Ghz and any unused channel on 5Ghz.
Any Wifi Neighbors near by? If so, how many?Try enabling Beamforming and MIMO(MIMO may or maynot be needed) and WMM. Under Advanced Tab/Advanced Settings/Wireless Settings
Try disabling the following and see:
Armor, Circle, Daisy Chain, Fast Roaming, IPv6 and Set 20/40Mhz Coexistence to 40Mhz only. Save settings and reboot the router and satellite(s).
SergeD wrote:
Same issue here...
I reset the orbi rbr50 and satellite to redolve wifi dis connections issue and got an other one with certificate expired
... too much issue in the last months for a 400€ solution....
It has worked fine between sept-dec 2018 but now .... dropping wifi , pages not loading correctly, expired certificate.... if I would know that in advance, i would have choose an other brand, really
Over 10 days and still no valid security certificates.
I was curious how much it cost for a security certificate & checked. Now I'm even more annoyed. Starting to wonder how committed Netgear is to Orbi.
Any certificate upgrades will have to be in future FW updates. FW updates don't happen over nite.
It just gets "worser and worser". Push a firmware release rather than one file? The central fact remains that the certificate expiration date is known in advance. A new one could have been bundled into the last firmware release.
Two months and counting.
Still no fix as of 10/2/2019.
NETGEAR does not appear committed to strong security for their products.
Have you contacted NG support and files a support ticket?
BrianG_Simi wrote:Two months and counting.
Still no fix as of 10/2/2019.
NETGEAR does not appear committed to strong security for their products.
If NETGEAR made it easy (possible?) to create tickets for issues without paying them first, I wouldn't be posting in the forums.
The best I could find was the generic Contact Us page (which I used), but since I do not have paid support and I'm well out of 90 days since my purchase, I'm not able to directly contact Support to get a ticket created.
I'd certainly welcome someone with active support opening a ticket for this issue.
That said, a company like NETGEAR should be aware of how important valid certificates are to overall network security and should not rely on their customers to remind them of basic administrative tasks like certificate management.
I'm going to try signing up and reporting via bugcrowd, but again, I feel like I'm doing a lot of work to bring something to NETGEAR's attention that really shouldn't be their customers' problem.
I suspect they're already aware of the issue at some level in the company and just not prioritizing the fix for whatever internal reasons they might have. I'm just adding my voice here to hopefully bump up the priority.
