iSTAR Ultra, iSTAR Ultra SE, and Ultra LT Firmware Version 6.6.

B
Build 6.6.B.21048
Firmware Version 6.6.B Upgrade Release Notes
September 2019
This Release Note file provides important information for installing firmware version 6.6.B (Build
6.6.B.21048) binary image files for iSTAR Ultra, iSTAR Ultra SE (Pro Mode and Ultra Mode), and Ultra LT
controllers.
(In case of discrepancy, the information in this document supersedes the information in any document
referenced herein.)

NOTE: Ensure that you have the latest firmware and release notes, go to
http://www.swhouse.com/Support/SoftwareDownloads.aspx , select Door Controllers +Modules>iSTAR
Controllers. The iSTAR Controller firmware releases are displayed in the right column

Read all the information in this file before you upgrade the iSTAR
controller.
Contents
1. New Features
2. Restrictions and Limitations
3. Important Upgrade Information
4. Upgrading the iSTAR Ultra Firmware
5. Upgrading the iSTAR Ultra and Ultra SE Firmware Using an Ethernet Connection
6. Upgrading the iSTAR Ultra SE Pro Mode Firmware Using Dialup
7. SPARs Fixed

1. New Features
• New Features
 SNMP can be enabled or disable on the iSTAR Ultra, Ultra SE, and Ultra LT panel web
page. (No longer supported in the ICU)
 Separate network domains are supported on each NIC (Ultra/Ultra SE).
 NVR extension for High Assurance
 Added OSDP Input/Output support: Secure and Alarm.
 Option to encrypt the SD card file system for enhanced security
• SNMP can be enabled or disabled from C•CURE (v2.80 or later) for ISTAR Ultra, Ultra SE and
Ultra LT panels
• Once you upgrade to firmware v6.6.B you cannot downgrade to a lower firmware version and you
cannot use the SD card in another controller.
• For enhanced security, this upgrade provides the ability to encrypt the panel’s SD card file system
partition. Read the “Restrictions and Limitations” section before you encrypt the SD card.
• For enhanced security:
 The first time you access the Ultra Web page, or the IP-ACM Configuration Web page,
you are prompted to change the password.
 The log in Username field is no longer required and was removed
 C•CURE 9000 versions prior to v2.80: When the panel connects to C•CURE 9000, the
password automatically changes to the password configured in C•CURE.
 C•CURE v2.80 and higher: When the panels connects to C•CURE 9000, the first time
you open the iSTAR editor, you are forced to change the password.
• ICU (iSTAR Configuration Utility) v6.6.B, and higher, are supported only for initial discovery of the
panel. Do not use older versions of ICU. Uninstall the older ICU versions. Configuration is

8200-1879-03 A0
 directed to the iSTAR Ultra web pages. See the iSTAR Configuration Utility v6.6.B Release Notes
for more information.
• You MUST refresh both the controller Ultra web page and the IP-ACM2 web page after you
upgrade.
• If a SD Card replacement is required, or a lower firmware revision is required, you must use a
firmware v6.6.9 SD card and perform a factory reset.
 iSTAR Ultra/Ultra SE firmware v6.6.9 SD card: order USTAR-SD
 iSTAR Ultra LT firmware v6.6.9 SD card: order USTAR-LT-SD (see the Ultra LT Quick
Start Guide for SD card replacement instructions)
2. Restrictions and Limitations
• SD Card Encryption:
o There is no way to downgrade the firmware once the firmware is updated - whether or not
the SD card is encrypted.
o You can use encrypted and unencrypted SD cards on panels in the same local network
and in the same cluster.
o After the upgrade is complete, go to the Ultra Web page “Advanced” tab to encrypt the
SD card on the controller. There can be variations in the time it takes to complete SD
card encryption once started. The minimum time is approximately 40 minutes and the
maximum time is 3.5 hours. The time depends on the type of SD card (supplier driven)
and content of the card drive.
 The green Kingston SD cards take up to 3 hours for the encryption process to
complete.
 The silver Kingston SD cards take up to 45 minutes for the encryption process to
complete.
 The black Panasonic SD cards take up to 40 minutes for the encryption process
to compete.
o Do not stop the SD card encryption process once it has been started. Stopping the
process will corrupt the SD card. The panel will be disabled until the SD card is replaced.
 There are indications in the panels, LCD or LEDs, that show the panel encryption
process is active, see the Controller Installation and Configuration guide for
details.
 You can verify SD card encryption in the C•CURE 9000 Administration Station by
adding SD Card Encryption Status to the Controller Dynamic View columns.
See the C•CURE 9000 Hardware Configuration Guide for more information.
 Software House recommends you have additional SD cards available to use if
the encryption fails and the SD card becomes corrupt.

• By default, iSTAR Ultra/Ultra SE masters allows most version of SSL/TLS to be used for member
panel connections and can connect to any encrypted iSTAR member panels including iSTAR
Edge/eX running FW (5.x.x).
To use TLS1.2 only (stronger security) for the connection between the iSTAR Ultra master and
other encrypted iSTARs, there is a new check box on the iSTAR Ultra Web General page which
takes effect after panel reboot. However, if the member panels are iSTAR Edge/eX running
firmware v5.x.x, the master to member connection will fail because Edge/eX firmware v5.x.x
doesn’t support TLS1.2. The solution is to upgrade iSTAR Edge/eX to latest firmware v6.x.x, if not
then uncheck the check box on the iSTAR Ultra/Ultra SE master.
To access the iSTAR Ultra/Ultra SE General page with the new check box:
1. Open the iSTAR Ultra Web page of the Ultra/Ultra SE Master controller. (Enter the IP
address in a browser using the format https://10.10.10.10.)
2. Enter the username and password.
3. Click Configure.
4. Select Settings and click General.
5. Select the TLSv1.2 for Cluster Encryption (Edge/eX member must be running
6.x.x or newer FW) check box to enable TLS1.2.

2
 • If an Ethernet port is configured for static IP and there is no Ethernet signal, (for example, the
network cable is unplugged) the IP address will appear on the LCD as 0.0.0.0. Once an Ethernet
signal is present, the configured static IP address will appear.
• iSTAR Ultra Web Utility:
• Supported on Microsoft® Internet Explorer 10, Internet Explorer 11, and Google Chrome.
Not supported on Microsoft Edge.
• To log into the iSTAR Ultra Web Utility:
1. Enter the controller IP address in the browser using the following format:
https://10.10.10.10
2. Enter the password.
During log in:
 If using Internet Explorer and you receive a Certificate Error indicating "There is a
problem with this website's security certificate", click Continue to this website
(not recommended).
 If using Google Chrome and you receive an error indicating “Your connection is
not private”, click ADVANCED and then click Proceed to x.x.x.x (unsafe).
• After a firmware upgrade, or if the log in page is left idle, you may need to close and then
access the login page again.
• If you access the iSTAR Ultra Web Utility in Internet Explorer and want to upgrade
firmware, all iSTAR controller firmware files will be visible. Be sure to select the correct
iSTAR controller firmware file.
• When Dynamic Area Manager is enabled for an Area that includes a Master controller and
Member controller, a special situation arises if the Master controller experiences Comm Fail. If
Personnel swipe out of the Area during Comm Fail using Member controller Doors, the Area
Manager Count and Managed Personnel Count will be incorrect when the Master controller
restores communications with C•CURE 9000.
• IP-ACM Configuration web page:
• Recommended browsers: Internet Explorer 10, Internet Explorer 11, Firefox, or Chrome.
• There is limited access to the IP-ACM v2 Configuration web page on a system with a
Windows 8 or Windows 10 operating system using Internet Explorer 11 or the Edge
browser on IPv4 and IPv6 networks.
• If you are using Internet Explorer 9, and the web page does not display properly or if the
session page expires and was not directed to the log in page, relaunch the web page.
• The iSTAR Ultra SE, operating in Pro Mode, cannot establish connection with the host when
encryption is turned ON. Do not enable any type of encryption, including the “Message
Encryption” system variable in the C•CURE 9000 or the CCURE.INI directive “Encrypt
apC/iSTAR Messages” on the C•CURE 800/8000.

3. Important Upgrade Information

CAUTION:
• Read the Restrictions and Limitations section before you upgrade the firmware, or
optionally encrypt the SD card.
• You cannot use the ICU to download and upgrade firmware.
• For the iSTAR Ultra (in Pro Mode), refer to the following documentation for upgrade
information:
 C•CURE 800/8000: iSTAR Ultra SE Controller Installation and Configuration Guide.
 C•CURE 9000: C•CURE 9000 Hardware Configuration Guide.
Determining iSTAR Controller Types
NOTE: The iSTAR Ultra SE in Pro Mode is displayed and configured the same as an iSTAR Pro
controller.
There are two ways to determine the iSTAR controller type:

3
1. From the C•CURE 9000 Monitoring Station, select Hardware Status and then Controllers from the
context menu to access the iSTAR Controllers Status dialog box. In the status box, scroll to the
Controller Type column.
2. From the ICU, select Tools and then Controller Status from the context menu to access the Ultra
Web Utility log in page. Enter the password to access the Diagnostics>Status page.
NOTE: The Board Type field displays iSTAR Ultra and iSTAR Pro for an Ultra SE in Pro Mode.
Determining the Firmware Image for the Controllers
Table 1: Determining the Correct Firmware Image for the Controller
iSTAR Type Main Firmware Image Version
6.6.B.x folder
iSTAR Ultra, iSTAR Ultra SE xi5 is the Ultra and Ultra SE firmware file
Ultra LT xi6 is the Ultra LT firmware file
x is the firmware build number. Firmware build numbers can be different between two controller types.

4. Upgrading the iSTAR Ultra and Ultra SE Firmware

Before you upgrade the firmware:
1. For C•CURE 9000, verify that the C•CURE 9000 iSTAR Driver System Variable 'Allow Web
Server for Ultra Firmware Download' is set to “True” before upgrading. In the C•CURE 9000
Administration Station, click the Options & Tools pane, and then click on iSTAR Driver to
access the 'Allow Web Server for Ultra Firmware Download' variable.
2. Copy the firmware file to the following location:

C:\Program Files(x86)\Tyco\CrossFire\ServerComponents\istar\ICU\firmware\6.6.B.x

NOTE: Be sure to place the new firmware file in the proper directory as listed above. If the firmware file is
located in another directory, the download process will return with an error: wget_returns 0.

3. Go to “Upgrading the iSTAR Ultra and Ultra SE Firmware Using an Ethernet Connection”.

Or, if using the iSTAR Ultra SE in Pro Mode and are using dialup, go to “Upgrading the iSTAR
Ultra SE Pro Mode Firmware Using Dialup”.

Upgrading the iSTAR Ultra and Ultra SE Firmware Using an Ethernet Connection

To upgrade the iSTAR firmware:

1. Initiate firmware download from the iSTAR Controller Ultra Web “Advanced tab page.
CAUTION: Internet Explorer displays both firmware files. Be sure to select the correct
firmware file.
o Select the xi5 firmware file for iSTAR Ultra and iSTAR Ultra SE
o Select the xi6 firmware file for the iSTAR Ultra LT
2. Optional. You can manually encrypt the SD card after the firmware download is complete in
the iSTAR Controller Ultra Web “Advanced” tab page.

5. Upgrading the iSTAR Ultra SE Pro Mode Firmware Using Dialup

To download firmware using dialup on an iSTAR Ultra SE (Pro Mode) follow the special instructions in the
following guides.

• C•CURE 800/8000: iSTAR Ultra SE Controller Installation and Configuration Guide.

• C•CURE 9000: C•CURE 9000 Hardware Configuration Guide.

4
6. SPARs Fixed
572186 – Resolved an issue that caused the Save button to become grayed out when trying to save a
Host name containing more than two periods.
597873 – Resolved a case where the iSTAR Ultra primary port routing configuration fails over to the
secondary port when communication was lost on primary port.
606382 – Resolved a scan inconsistency on the IP-ACM v2.
606511 – Resolved a case that cause high CPU usage with no controller activity.
608206 – Inputs and outputs now work correctly when in OSDP mode on Innometriks Cheetah SE
readers
611180 – Resolved a keypad format inconsistency when switching from the iSTAR Pro to the iSTAR Ultra
in Pro Mode.
612829 – Resolved a case that caused a Card Pending state.
612831 – Resolved a case that caused Passback errors when Global Anto-passback and Occupancy
were setup.
619009 – Resolved a case that allowed Double Swipe with an unrecognized card.
623464 – Resolved a case that caused an OSDP reader not to beep on card read when set to
Continuously Active.
627981 – Resolved a case that caused the Schlagle PIM not to respond to manual unlock after a power
interruption.
645374 – Resolved a caused delays in input reporting when a single I8 and a single R/8 are the only
devices on an iSTAR Ultra SE 485 port.

End of Release Notes

©2019 Johnson Controls. All rights reserved. JOHNSON CONTROLS, TYCO and C•CURE 9000 are trademarks and/or registered
trademarks. Unauthorized use is strictly prohibited. Product offerings and specifications are subject to change without notice. Actual
products may vary from photos. Not all products include all features. Availability varies by region; contact your regional sales
representative.