Firmware Encryption in Zyxel APs: A Major Security Upgrade

Zyxel_Claudia

With the firmware 7.10 update, Zyxel is implementing firmware encryption to enhance security, data integrity, and protection against unauthorized modifications. This update introduces RSA encryption and digital signatures to ensure that only authentic and untampered firmware can be installed on Zyxel access points (APs).

With firmware 7.10, Zyxel is now encrypting and digitally signing firmware files to prevent these risks.

2. Which AP Models Will Use Encrypted Firmware?

• WiFi 7 Band Flex APs (NWA 110BE, WBE 510D, NWA 210BE, WBE 630S) already use encrypted firmware.
• Older AP models will not use encrypted firmware immediately but will gradually transition in future updates.

For Older AP Models:

• Firmware 7.10 introduces the decryption tool needed for future encrypted firmware.
• However, older APs will continue using unencrypted firmware for now to avoid compatibility issues.
• Encrypted firmware for older APs will be introduced in a later firmware update.