At Zoom, we are hard at work to provide you with the best 24x7 global support experience during this pandemic. As part of this ongoing commitment, please review our updated Support Guidelines.

BYOC BYOP Public CA Certificate and SIP proxy address change Follow

Overview

To maintain Zoom’s high security standards regarding Zoom applications, connectivity, and
media across the Zoom Phone platform, we are moving to the industry standard of using a
trusted Public Certificate Authority. With these upcoming changes, it is required that any Bring Your own Carrier (BYOC) or PBX (BYOP) Session Border Controllers (SBCs) provisioned for premise peering to Zoom Phone must perform the following manual changes on the device(s): 

  • Add public CA certificates from DigiCert, if needed
  • Change Zoom SIP Proxy and Outbound proxy address to New Addresses

This article covers:

 

Public CA DigiCert Certificate change

Zoom Phone infrastructure will be migrating to public CA DigiCert certificates early 2021.  DigiCert root certificates will need to be manually uploaded to SBCs, if need. If the SBCs already support public CA certificates including DigiCert, then no changes are needed.

Download the DigiCert public CA certificates here:

Customers can install DigiCert root certificate to the SBCs as soon as possible. The existing GoDaddy certificates will also need to remain on the SBCs until Zoom has updated to the new certificates. Links to guides for AudioCodes, Ribbon, and Oracle SBCs, can be found at the Certified Devices list.

 

SIP proxy address change

**Note: The new SIP Proxy Addresses take effect only after Zoom updates to new DigiCert certificates. Existing GoDaddy certificates support old SIP Proxy Addresses and will continue to support these addresses during certificate migration period. See certificate migration date.

Premise Peering SBCs may need manual changes to the SIP proxy address and Outbound proxy address. See manufacturer support guides or links to guides at the Certified Devices list article for steps on changing SIP Proxy and Outbound Proxy addresses.

If the Session Border Controller (SBC) SIP trunks were configured for Zoom SIP proxy address using IPv4, then no changes are needed. If Zoom SIP Proxy Address configurations used FQDN addresses, then changes are required.

To find the new Zoom SIP proxy server address needed on your SBC, please locate your SIP Zone / Datacenter on the chart below, along with the corresponding device type. The existing server names are also provided as a reference (to match against existing configurations) in case the SIP zone / datacenter is unknown.

 

SIP Zone (region)

Datacenter

Change SIP proxy / outbound proxy address(es) Certificate migration date

US West (N. California)

US01-SJ

Old

us01byocssf01.zoom.us

 

New

us01peer01.sc.zoom.us

3/27/21

US Central (Colorado)

US01-DV

Old

us01byocsdv01.zoom.us

 

New

us01peer01.dv.zoom.us

3/20/21

US East (New York)

US01-NY

Old

us01byocssj01.zoom.us

 

New

us01peer01.ny.zoom.us

4/3/21

Europe (Amsterdam)

US01-AM

Old

us01byocsam01.zoom.us

 

New

us01peer01.am.zoom.us

3/6/21

Europe (Frankfurt)

US01-FR

New

us01peer01.fr.zoom.us

3/6/21

Asia Pacific (Sydney)

US01-SY

Old

us01byocssy01.zoom.us

 

New

us01peer01.sy.zoom.us

3/13/21

Asia Pacific (Melbourne)

US01-ME

New

us01peer01.me.zoom.us

3/13/21

Asia Pacific (Hong Kong SAR)

US01-HK

Old

us01byocshk01.zoom.us

 

New

us01peer01.hk.zoom.us

2/27/21

Asia Pacific (Tokyo)

US01-TY

New

us01peer01.ty.zoom.us

2/27/21

South America (São Paulo)

US01-SP

New

us01peer01.sp.zoom.us

3/6/21