- Background Information
- Microsoft M365 no longer supporting TLS1.1 and is moving to TLS1.2
- What if my exchange and S4B servers aren’t on M365 and are on-prem?
- Ignite 2018 announcement of upgrade from RL2 to RL3
- Will Microsoft be disabling TLSv1.1 on my M365 tenant on the exact day that is published?
- What if I have an RL2 and I want to update to the new SRSv2 software?
- What if I don’t want to update and I want a new solution?
- What is the upgrade procedure for moving from RL2 to RL3 running SRSv2 software?
Around 2012 Microsoft made an announcement of what was then the Lync Room Systems or LRS which Microsoft would be making software to run on many partner devices. At the time there were 4 partners that were supposed to come to market with devices running the LRS software. Those partners were Smart, Crestron, Polycom and Lifesize. Smart came to market first with the Smart Room Systems and shortly thereafter Crestron entered the market with the Crestron RL1 system. Polycom then came to market with their CX8000 system which was a branded Crestron RL1 system. Crestron then released an upgraded room system with new hardware named Crestron RL2.
All of these systems are running Windows 7 and the software running is what Microsoft refers to as SRSV1 software. In the background was a Lync client which was upgraded to have a Skype UI through Microsoft updates. These updates came down with Windows update and also had update options for customers whom needed an on-prem update solution.
There are lots of articles that I have written on Crestron’s online help about how to configure and tips and tricks for even programming the systems with Crestron control processors. I will link to a few below in case people want to reference those as well.
Microsoft then at Ignite 2017 introduced a new line of products for meeting rooms that ran on Microsoft’s Surface units and allowed flexibility to IT departments looking for solutions that were familiar to them that could go into conference rooms. These solutions run on what Microsoft now calls SRSv2. The partners introduced were Crestron, Polycom and Logitech. All solutions were required to run a Microsoft Surface device and would allow customers a lower cost room solution for their conference rooms. Later Microsoft added partners Lenovo and HP that did not have the need for the Microsoft Surface.
At Ignite 2018 Crestron introduced the Crestron Flex product line that also does not have the need for a Microsoft surface and utilizes many of the Crestron products that enterprises have been deploying for years including Crestron Mercury and Crestron’s TSW touchpanel solutions.
Microsoft M365 no longer supporting TLS1.1 and is moving to TLS1.2
Microsoft has recently announced that their previously referenced O365 and now branded as M365 will be moving to only allowing TLS1.2. This is very important because it affects all of the customers that have any of the systems above running SRSv1 software as they are all dependent on TLS1.1. In the post found here Microsoft says:
“In support of our promise to provide best-in-class encryption to our customers, we are planning to discontinue support for Transport Layer Security (TLS) versions 1.0 and 1.1 soon in Microsoft Office 365.”
Because of this M365 change in support, any customers using SRSv1 solutions with an M365 tenant that they use for Skype for Business or Teams, that customer will need to come up with a plan for how they will move forward to stay compliant with Microsoft’s M365 service.
What if my exchange and S4B servers aren’t on M365 and are on-prem?
Microsoft and Crestron both anticipate that there will be no more firmware updates to SRSv1 software. This includes all the above packages from all Microsoft partners. The RL2 units running SRSv1 can continue to run without issue in the current version of firmware as it has been for as long as the customer keeps their on-prem servers at TLS1.1 compliance. The requirement for TLS1.2 is for Microsoft’s M365 service and is not specific to SRSv1 or SRSv2.
Ignite 2018 announcement of upgrade from RL2 to RL3
At Ignite 2018 Ilya Bukshteyn outlined in session BRK3168 (Intelligent communications across devices in Microsoft Teams) a lot of how these upgrades will be handled by all of the partners above and how Crestron will be allowing customers some options for going from SRSv1 to SRSv2 software on the RL2 devices specifically. Those customers whom have other systems listed above can work with Crestron by contacting them and providing details on what equipment is currently installed in their solution so Crestron can provide guidance on their upgrade paths. There is more information below about the specifics for each system and how to go through the update. Here is the link to Crestron’s site which has more information about their guidance as well.
Will Microsoft be disabling TLSv1.1 on my tenant on the date that is published?
The short answer is that Microsoft has published a date that TLSv1.1 will no longer be supported, but that does not mean that you are immediately in jeopardy of having your systems become disabled on that exact date. Microsoft will take time to enable this through all of the existing M365 tenants and will give priority to those whom do not have an SRSv1 solution. Microsoft would like all M365 customers whom have a system with SRSv1 software to come up with a plan immediately for how they will address their conference room solutions as this move to TLSv1.2 is not something that will not happen. All customers will eventually need to become compliant and have a solution in place for how they will handle this.
What if I have an RL2 and I want to update to the new SRSv2 software?
As of this writing, the upgrade package is still being finalized by both Crestron and Microsoft, but it will be available by the time that Microsoft disables TLS1.1 on your M365 tenant. This upgrade package will include a small cost as there is hardware that is needed to finalize the upgrade. The hardware is a Crestron product that takes an HDMI input and outputs it as USB into the Teams of Skype for Business meeting. The previous connections on the rear of the RL2 for content (HDMI, VGA, DM) will no longer work once you have completed your upgrade. There are many more details below on this upgrade procedure and how it works.
What if I don’t want to update and I want a new solution?
Microsoft has a full line of partners that make room systems and they are all published here and are also listed above in the Background section under the SRSv2 solutions.
What is the update procedure for moving the RL2 units to RL3 running SRSv2?
The update procedure will include an administrator going to the location of the RL2 hardware and then inserting a USB drive and initiating the upgrade. Previous upgrades on RL2 had been automatic and were network based. This one will not be automatic and will need physical access to the units. Your previous information will all be gone and you will need to reconfigure all aspects of the device including usernames and passwords as this update will be installing a new Windows 10 image on the RL2 hardware and thus turning it into RL3 which is Windows 10 based running the SRSv2 software.