Overview
To maintain Zoom’s high security standards regarding Zoom applications, connectivity, and
media across the Zoom Phone platform, we are moving to the industry standard of using a
trusted Public Certificate Authority. With these upcoming changes, it is required that any Algo, Cyberdata, or generic devices provisioned to Zoom Phone must perform the following manual changes on the device(s):
- Add public CA certificates from DigiCert, if needed
- Change Zoom SIP Proxy and Outbound Proxy Address to New Addresses
See the following sections for information on changes needed. For reference, a generic device on your account would be any device that is not on our Certified Devices list.
For phones that have been provisioned using Zero Touch Provisioning or assisted provisioning (these are typically devices found on our on our Certified Devices list), the new certificates and SIP Proxy address names will automatically be updated and pushed down by Zoom. These will not require manual updates.
This article covers:
Public CA DigiCert Certificate change
Zoom Phone infrastructure will be migrating to public CA DigiCert certificates early 2021. Algo, Cyberdata, or generic devices provisioned to Zoom Phone may need manual updates to the public CA certificates. If the devices already support public CA certificates including DigiCert, then no changes are needed.
Download the DigiCert public CA certificates here:
- DigiCert Global Root CA: https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem
- DigiCert Global Root G2: https://cacerts.digicert.com/DigiCertGlobalRootG2.crt.pem
- DigiCert Global Root G3: https://cacerts.digicert.com/DigiCertGlobalRootG3.crt.pem
Add the new certificates to Algo, Cyberdata, or generic devices using manufacturer support guides. Links to guides for Algo and Cyberdata, can be found at the Certified Devices list.
SIP Proxy Address Change
To find the new Zoom SIP proxy server address needed on your devices, please locate your SIP Zone / Datacenter on the chart below, along with the corresponding device type. The existing server names are also provided as a reference (to match against existing configurations) in case the SIP zone / datacenter is unknown.
Algo, CyberData, and generic devices
Algo, CyberData, and generic devices will need manual changes to the SIP Proxy Address and Outbound Proxy Address. See manufacturer support guides or links to guides for Algo and Cyberdata, at the Certified Devices list article for steps on changing SIP Proxy and Outbound Proxy addresses.
SIP Zone (Region) |
Datacenter |
Change | SIP Proxy / Outbound Proxy Address(es) |
US West (N. California) |
US01-SJ |
Old |
|
New |
|||
US Central (Colorado) |
US01-DV |
Old |
|
New |
|||
US East (New York) |
US01-NY |
Old |
|
New |
|||
Europe (Amsterdam) |
US01-AM |
Old |
|
New |
|||
Europe (Frankfurt) |
US01-FR |
Old |
|
New |
|||
Asia Pacific (Sydney) |
US01-SY |
Old |
|
New |
|||
Asia Pacific (Melbourne) |
US01-ME |
Old |
|
New |
|||
Asia Pacific (Hong Kong SAR) |
US01-HK |
Old |
|
New |
|||
Asia Pacific (Tokyo) |
US01-TY |
Old |
|
New |
|||
South America (São Paulo) |
US01-SP |
Old |
|
New |
Cisco/Polycom Rooms
If your account has the Zoom Phone Cisco/Polycom Rooms feature enabled by Zoom, change SIP Proxy and Outbound Proxy addresses based on the table below. See manufacturer support guides for the supported devices for steps on changing SIP Proxy and Outbound Proxy addresses.
SIP Zone (Region) |
Datacenter |
Change |
SIP Proxy / Outbound Proxy Address(es) |
US West (N. California) |
US01-SJ |
Old |
|
New |
|||
US Central (Colorado) |
US01-DV |
Old |
|
New |
|||
US East (New York) |
US01-NY |
Old |
|
New |
|||
Europe (Amsterdam) |
US01-AM |
Old |
|
New |
|||
Europe (Frankfurt) |
US01-FR |
Old |
|
New |
|||
Asia Pacific (Sydney) |
US01-SY |
Old |
|
New |
|||
Asia Pacific (Melbourne) |
US01-ME |
Old |
|
New |
|||
Asia Pacific (Hong Kong SAR) |
US01-HK |
Old |
|
New |
|||
Asia Pacific (Tokyo) |
US01-TY |
Old |
|
New |
|||
South America (São Paulo) |
US01-SP |
Old |
|
New |