Profile

Phil Whitener

☑ Fill Out Profile

Contact Details

My Content

1 to 20 of 50+ total

RE: BYOC Cloud Client Authentication EKU Removal Announcement - 2026

Posted By Phil Whitener 03-30-2026 15:05
Found In Egroup: Genesys Cloud - Main \ view thread
Sorry for the confusion. It was late in the process when we decided it was best to keep the client authentication EKU, mostly due to uncertainty for CUBE endpoints. The process to get the notifications updated and keep everyone on the same page on short notice likely lead to the confusion. The notification ...

RE: BYOC Cloud Client Authentication EKU Removal Announcement - 2026

Posted By Phil Whitener 03-30-2026 14:35
Found In Egroup: Genesys Cloud - Main \ view thread
There is a group of BYOC regions that are set to expire 4/14/2026 and will be replaced next week, but, similar to the adjusted announcement, those renewals WILL contain the Client Authentication EKU. We expect those certs will only have a 6 month expiration due to the push to shorten validitiy periods ...

RE: BYOC Cloud Client Authentication EKU Removal Announcement - 2026

Posted By Phil Whitener 03-25-2026 16:21
Found In Egroup: Genesys Cloud - Main \ view thread
We are targeting to do our March/April renewal and retain the Client Authentication EKU. Our next scheduled renewal is not until September 2026. Due to the shrinking renewal windows (12 months -> 6 months, ...), I expect almost all of our regions will be included in the September 2026 renewal and at ...

RE: BYOC Cloud Client Authentication EKU Removal Announcement - 2026

Posted By Phil Whitener 03-05-2026 23:23
Found In Egroup: Genesys Cloud - Main \ view thread
David, on another note I would be interested in finding a partner that can test this configuration with our Dynamic Cloud Voice Platform endpoints both prior to the Cisco fix and after. If you have an environment, I would like to get a test trunk setup to capture results. You can reach out to me at my ...

RE: BYOC Cloud Client Authentication EKU Removal Announcement - 2026

Posted By Phil Whitener 03-05-2026 23:16
Found In Egroup: Genesys Cloud - Main \ view thread
Thanks David for your response and details from Cisco. This is the type of engagement I hoped for with this thread. We do plan to renew our certs with the client authentication EKU in this cycle, the updated notification shoukd be published soon. We will update when the plan is final but the renewal, ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 02-23-2026 10:00
Found In Egroup: Genesys Cloud - Main \ view thread
The BYOC endpoints do not use TCP keep-alives and our model expects new connections for most transactions. However, it is possible that your endpoint is setup for perform TCP keep-alives to keep the connection up. If that is the case your endpoint likely has a way to see active connections and allows ...

RE: BYOC Cloud Client Authentication EKU Removal Announcement - 2026

Posted By Phil Whitener 01-07-2026 10:31
Found In Egroup: Genesys Cloud - Main \ view thread
@Alexandra Manea You can sign up for our Dynamic Cloud Voice Platform limited availability release by commenting on this idea page: https://genesyscloud.ideas.aha.io/ideas/TEL-I-392. This allows you to setup a new SIP trunk without interrupting your existing trunks. The new trunk needs to have the "Enable ...

BYOC Cloud Client Authentication EKU Removal Announcement - 2026

Posted By Phil Whitener 01-05-2026 09:23
Found In Egroup: Genesys Cloud - Main \ view thread
Genesys recently announced the removal of the Client Authentication Extended Key Usage (EKU) from BYOC Cloud SIP TLS X.509 certificates. This discussion will be for sharing more information and allowing users to ask questions regarding this announcement. Client authentication EKU support removed from ...

RE: Using Genesys Cloud In Citrix VDI

Posted By Phil Whitener 01-05-2026 08:47
Found In Egroup: Genesys Cloud - Main \ view thread
@Robert Wakefield-Carl My understanding is that it is recommended to use BCR and Media Helper together, as referenced by the Resource Center link Cordell shared. Although it seems odd to open both Genesys Cloud and Media Helper independently "in" a Citrix based web browser tabs - with the BCR configuration ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 12-16-2025 13:16
Found In Egroup: Genesys Cloud - Main \ view thread
@Amalric Villain sorry for the delay, if you reach out to me we can discuss the individual customers and track down which calls are using the ciphers we want to deprecate. phil.whitener genesys.com. Note that the ciphers are not managed by Genesys Cloud config as detailed above - rather on the customer's ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 09-12-2025 11:20
Found In Egroup: Genesys Cloud - Main \ view thread
@William Sparapani leaving the custom properties will not cause any issue, but I confirmed that they are not used for BYOC Cloud trunks (but they are vital for BYOC Premise trunks). It seems at some point we populated that value on BYOC Cloud trunks with default values as I confirmed my trunks that have ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 09-11-2025 10:37
Found In Egroup: Genesys Cloud - Main \ view thread
@LAURA MARIA LAFUENTE VALLE all of our trunk configuration has the same schema, some properties are used for all trunks, some is just used for premise trunks, and others are just used for cloud trunks. In almost all cases, the items that are expected to be configured for a particular trunk show up as ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 09-09-2025 10:42
Found In Egroup: Genesys Cloud - Main \ view thread
@LAURA MARIA LAFUENTE VALLE we are monitoring the cipher usage and are aware of the Ribbon compatibility issues. We will not eliminate the ciphers that are in use prior to a solution that allows for a transition for these trunks. Although Genesys and Ribbon have a common TLS cipher, currently Genesys ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 09-02-2025 23:04
Found In Egroup: Genesys Cloud - Main \ view thread
I assume that is a BYOC Premise property and we hide the UI configuration because it is not valid for BYOC Cloud but we don't prohibit setting the value based on the trunk type. But it is not valid for BYOC Cloud and presumably ignored. If it is rejecting that value it might not be an available cipher ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 09-02-2025 22:34
Found In Egroup: Genesys Cloud - Main \ view thread
Is this for BYOC Cloud or BYOC Premise? For BYOC Cloud there is no option to choose the ciphers that are offered by tge GenesysCloud endpoint. This page details what is offered https://help.mypurecloud.com/articles/tls-trunk-transport-protocol-specification/ Each connection can be controlled by the remote ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 09-02-2025 22:14
Found In Egroup: Genesys Cloud - Main \ view thread
Hello @Pablo Barnech What is "trunk_transport_tls_ciphers"? That looks like a Custom trunk property name for configuring Genesys Cloud external trunks; however, tgere is no Genesys Cloud configuration needed for this deprecation. Can you help me understand what you are trying to configure? The change ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 07-27-2025 21:41
Found In Egroup: Genesys Cloud - Main \ view thread
@Brad Harper Yes, we are aware of the compatibility issues with Ribbon and are not going to proceed without an available workaround. We are watching the cipher usage and do not intend to introduce anything that will cause a disruption. The end-state Genesys solution that is actually requiring these cipher ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 07-15-2025 10:41
Found In Egroup: Genesys Cloud - Main \ view thread
@Rashid Adat It appears prior to SBC Core 09.02.05R008 the Ribbon SBC might not accept P-384 / secp384r1 as an elliptical curve. See "SBX-118425 | SBX-118930" fixes listed in https://publicdoc.rbbn.com/spaces/SBXDOC92/pages/394218084/SBC+Core+09.02.05R008+Release+Notes ------------------------------ ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 07-15-2025 10:29
Found In Egroup: Genesys Cloud - Main \ view thread
@Rashid Adat I have not personally heard any concerns from other Ribbon users. I did look at this page, https://publicdoc.rbbn.com/spaces/UXDOC122/pages/451249486/Creating+and+Modifying+TLS+Profiles, which lists the following supported ciphers on Ribbon 12.2.x, of those, two are supported by both Ribbon ...

RE: BYOC Cloud TLS Cipher Deprecation - 2025

Posted By Phil Whitener 04-08-2025 10:33
Found In Egroup: Genesys Cloud - Main \ view thread
We are monitoring cipher usage and want to get to a place where we have reduced or eliminated the dependency on these two ciphers before we remove them. Currently they are used by too many calls and the usage patterns look like removing them would cause significant impact. Our hope is that BYOC Cloud ...