TS-RAS-GEN-0023 Expiration of Certificates

No further reproduction or networking is permitted. Distributed by Nokia.
Copyrighted material licensed to muhammad-adil.murad@450connect.de on 17-10-2023.

TS-RAS-GEN-0023: Expiration of
certicates
Radio Network
TS-RAS-GEN-0023
Issue 20.0
Approved on 2023-02-16
Single RAN Technical Support Notes Library
Maintenance Documentation, Issue 01
© 2023 Nokia. Nokia Condential Information. Use subject to agreed restrictions on disclosure and use.
Nokia is committed to diversity and inclusion. We are continuously reviewing our customer
documentation and consulting with standards bodies to ensure that terminology is inclusive
and aligned with the industry. Our future customer documentation will be updated
accordingly.
This document includes Nokia proprietary and condential information, which may not be
distributed or disclosed to any third parties without the prior written consent of Nokia. This
document is intended for use by Nokia’s customers (“You”/”Your”) in connection with a
product purchased or licensed from any company within Nokia Group of Companies. Use this
document as agreed. You agree to notify Nokia of any errors you may nd in this document;
however, should you elect to use this document for any purpose(s) for which it is not
intended, You understand and warrant that any determinations You may make or actions
You may take will be based upon Your independent judgment and analysis of the content of
this document.
Nokia reserves the right to make changes to this document without notice. At all times, the
controlling version is the one available on Nokia’s site.
No part of this document may be modied.
NO WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO
ANY WARRANTY OF AVAILABILITY, ACCURACY, RELIABILITY, TITLE, NON-INFRINGEMENT,
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, IS MADE IN RELATION TO THE
CONTENT OF THIS DOCUMENT. IN NO EVENT WILL NOKIA BE LIABLE FOR ANY DAMAGES,
INCLUDING BUT NOT LIMITED TO SPECIAL, DIRECT, INDIRECT, INCIDENTAL OR
CONSEQUENTIAL OR ANY LOSSES, SUCH AS BUT NOT LIMITED TO LOSS OF PROFIT,
REVENUE, BUSINESS INTERRUPTION, BUSINESS OPPORTUNITY OR DATA THAT MAY ARISE
FROM THE USE OF THIS DOCUMENT OR THE INFORMATION IN IT, EVEN IN THE CASE OF
ERRORS IN OR OMISSIONS FROM THIS DOCUMENT OR ITS CONTENT.
Copyright and trademark: Nokia is a registered trademark of Nokia Corporation. Other

product names mentioned in this document may be trademarks of their respective owners.
© 2023 Nokia.
2 © 2023 Nokia. Nokia confidential

Table of Contents
1 Technical Note Information ........................................................................................................ 5
Summary of changes .................................................................................................................... 7
Contact ........................................................................................................................................... 9
2 Purpose ........................................................................................................................................ 10
3 Validity ......................................................................................................................................... 11
3.1 Impacted technology ..................................................................................................... 11
3.2 Impacted system and SW releases .............................................................................. 11
3.3 Impacted products ......................................................................................................... 13
4 Keywords ..................................................................................................................................... 15
5 Executive summary .................................................................................................................... 16
6 Detailed description .................................................................................................................. 17

6.1 SRAN, LTE, 5G and 5G Cloud Products ........................................................................ 17
6.2 LTE Small Cell Cloud Controller .................................................................................... 21
6.3 WCDMA Macro NB with FSMv2, FSMv3 and AirScale HW ........................................... 22
6.4 WCDMA RNC2600, multicontroller RNC and AirScale RNC ....................................... 24
6.5 GSM BTS ........................................................................................................................... 26
6.6 GSM BSC ........................................................................................................................... 28
© 2023 Nokia. Nokia confidential 3

List of Tables
Table 1 Types of certificates used in SRAN, LTE, 5G and 5G Cloud ................................... 17
Table 2 Types of certificates used in LTE Small Cell Cloud Controller .............................. 21
Table 3 Types of certificates used in WCDMA Macro NB with FSMv2, FSMv3 and AirScale
HW .................................................................................................................................... 22
Table 4 Types of certificates used in WCDMA RNC2600, multicontroller RNC and AirScale
RNC .................................................................................................................................. 24
Table 5 Types of certificates used in GSM BTS .................................................................... 26
Table 6 Certificates types used in GSM BSC .......................................................................... 28

1. Technical Note Information
Technical Support Note
TS-RAS-GEN-0023
Expiration of certificates
Radio Network
Base Stations, Radio Controllers, Radio Network Solutions
AirScale BSC, AirScale BTS 5G, AirScale Cloud BTS - 5G, AirScale Indoor Radio - 5G, AirScale RNC,
Flexi Multiradio BTS EDGE, Flexi Multiradio BTS WCDMA, Flexi Zone BTS, Flexi Zone BTS TD-LTE,
Multicontroller BSC, Multicontroller RNC, Single RAN (AirScale BTS Single RAN), Single RAN (AirScale
Indoor Radio), Single RAN (SBTS), WCDMA OMS
Approval date: 2023-02-16
This document contains following type of information
Informative X
Preventive
Corrective
Additional categorization
Urgent
Security
Release Upgrade
SW Update
Parametrization

X
© 2023 Nokia. Nokia confidential

Information is classified as
Customer Specific
All Customers
Internal
6
Summary of changes
Date Version Change
2019-01-28 1.0
Approval date
2019-03-26 2.0 Validity Updated
2019-05-13 3.0 Validity Updated
2019-07-05 4.0 Validity Updated for Flexi MR

EX19
2019-07-18 5.0 Technical Support Note validity

has been updated.

has been updated.

has been updated.

has been updated.

has been updated.

has been updated.

has been updated.

has been updated.

has been updated.

has been updated.

has been updated.

Date Version Change

has been updated.

has been updated.

has been updated.

has been updated.

has been updated. Validity for
23R1-SR and 23R2-SR has
been added.

9
Contact your local Nokia support.
Contact
2. Purpose
This document contains generic information about products. These can be instructions that
explain problem situations in the field, instructions on how to prevent or how to recover from
problem situations, announcements about changes or preliminary information as requirements
for new features or releases.

3. Validity
3.1 Impacted technology
Technology Impact
GSM/EDGE X
WCDMA X
Small Cells
Single RAN X
Nokia Core
Nokia Public Sector
Data Center and Cloud Infrastructure
5G X
Wi-Fi
Factory Delivery SW
3.2 Impacted system and SW releases
Tip:
The presented validity information includes the currently active software. The section is re-
assessed prior to every new System Release availability.

System Release Product SW Release(s)
GSM20 Flexi MR EX20: all product SW releases

Flexi BSC20: all product SW releases
mcBSC20: all product SW releases
AirScale BSC20: all product SW releases
GSM20 FP20B Flexi MR EX FP20B: all product SW releases

Flexi BSC FP20B: all product SW releases
mcBSC FP20B: all product SW releases
AirScale BSC FP20B: all product SW releases
WCDMA21 FP21A WCDMA OMS FP21A: all product SW

releases
WBTS FP21A: all product SW releases
mcRNC FP21A: all product SW releases
WCDMA21 FP21B AirScale RNC FP21B: all product SW releases

WCDMA OMS FP21B: all product SW releases
mcRNC FP21B: all product SW releases
WCDMA21 FP21C AirScale RNC FP21C: all product SW releases

WCDMA OMS FP21C: all product SW releases
WBTS FP21C: all product SW releases
mcRNC FP21C: all product SW releases
22R1-SR ASIR_L22R1-SR: all product SW releases

22R1-SR (SBTS): all product SW releases
22R1-SR (AirScale): all product SW releases
22R2-SR 22R2-SR (ASIR-related): all product SW

releases

releases

releases

System Release Product SW Release(s)

releases

releases
22R1-5G 22R1-5G BTS (Classical): all product SW

releases
3.3 Impacted products
Product
AirScale BSC
AirScale BTS 5G
AirScale Cloud BTS - 5G
AirScale Indoor Radio - 5G
AirScale RNC
Flexi Multiradio BTS EDGE
Flexi Multiradio BTS WCDMA
Flexi Zone BTS
Flexi Zone BTS TD-LTE
Multicontroller BSC
Multicontroller RNC
Single RAN (AirScale BTS Single RAN)
Single RAN (AirScale Indoor Radio)


Single RAN (SBTS)
WCDMA OMS
Product
14
4. Keywords
Certificates | Alarms | FSMF | AirScale | WCDMA | Single RAN | GSM | BSC | WCDMA RNC |
Multicontroller RNC | 5G

5. Executive summary
Nokia Radio Products have multiple types of certificates. All certificates issued by Nokia have been
maintained throughout releases to ensure that they are still valid in the customer network.
Possible failure scenarios are mitigated with automatic recovery and fault detection using
operator visible alarms.

6. Detailed description
The table shows the definition and expiration date of certificates of Radio Products. Nokia Radio
Products have multiple types of certificates and maintain them throughout the releases to ensure
these certificates are still valid in the customer network.
Possible failure scenarios are mitigated with automatic recovery and fault detection using alarms
visible to the operator.
Radio Products:
GSM: GSM BSC, Flexi BSC, GSM BTS, mcBSC
WCDMA: WBTS, RNC, mcRNC, ASRNC, WCDMA OMS
LTE: FLF, TLF
Single RAN: SRAN
5G: 5G, VRAN1.0, VRAN2.0
Note:
None of the listed products are shipped with the third party SW components controlled by
SW license certificates which are not under control of Nokia or the operator itself.
6.1 SRAN, LTE, 5G and 5G Cloud Products
Table 1: Types of certificates used in SRAN, LTE, 5G and 5G Cloud

Certificate Provide Expiration Date Used on Renew Alarm
type on d by external Method
BTS interface
Operator Controlled by customer Yes BTS renews BTS raises alarm

Operator Public Key Infrastructure it when it fails to
Certificate (PKI) automatical renew Operator
ly from Certificate from
customer operator`s PKI
PKI, manual
trigger of
key update
possible
Citizen`s Nokia on Controlled by Winn Forum: Yes Manually BTS raises alarm
Broadband behalf of the ”Domain Proxy” type of from a when the CBRS
Radio operator certificate deployed to a CBSD “Domain Proxy”
Service bare metal BTS has a Vendor CA certificate is
Device lifetime of 15 months authorized close to expire
Certificate** by
WinnForum
and
contracted
by Nokia

BTS interface
Vendor Nokia Nokia Corporate PKI CA yes In BTS raises alarm

Certificate** Certificates signing Nokia exceptional when it request
HW Certificate: cases: an Operator
2029 for board produced return Certificate from
before April, 2016 system operator PKI and
2034 for board produced module to Vendor
after April, 2016 Nokia; Certificate gets
2067 for board produced Repair for expired
after 2021 renewal
Vendor Certificate for
Nokia HW: for system
modules only; 12-year life-
time starting from HW
module production. If
these modules are used
after expiration, alternative
methods are available for
operator certificate
enrollment
Note:
even in case of
expiration the HW is
genuine Nokia HW, safe
to be used in all kind of
radio networks
Module/Devi Nokia Expiration dates are the No No need to No alarm

ce same as for Vendor renew
Certificate*, Certificate above, but not
** exposed on external
interfaces. BTS silently
ignores the end of life date
and the expired certificates
are continued without any
impact

BTS interface
Nokia Nokia SW Certificate: No No need to No alarm is

Corporate 2034 Software signing renew raised, the BTS
PKI CA certificate downloads any
Certificates 10 years after software Nokia SW build
** production. accompanied by
a valid Nokia SW
Note: signing certificate
For VNF CU from VRAN even when the
1.0, Nokia PKI CA certificate or
certificates are trust chain has
embedded into SW expired because
image of CU, which is the SW build is
used to verify the Nokia still a genuine
vendor certificate Nokia one
during TLS connection
setup between gNB-DU
and VNF CU for m-
Plane connection.
BTS Default Nokia 2127 for software package No Renewed No alarm

Certificate** in SRAN18A / LTE18A and with
later software
upgrade
NE3S Nokia 2068 for software package Yes renewed No alarm

Vendor in SRAN and 5G CU (CNF with
Certificate and VNF) software
(cOAM and upgrade
MegaZone)*
Trust Operator Controlled by customer Yes Manually BTS raises alarm

Anchor Public Key Infrastructure from to indicate that
certificate (PKI) customer Trust anchor
for PKI certificate is
Operator about to expire
Trust Operator Controlled by WinnForum Yes Manually BTS raises alarm

Anchor Public Key Infrastructure from to indicate that
certificate (PKI) customer Trust anchor
for CBRS** PKI certificate is
about to expire
`

BTS interface
RCP default Nokia 50 years Yes renewed `

certificate with BTS raises alarm
software when certificate
upgrade is close to expire
Note:
* Not applicable in case of LTE Small cell eNodeB.
Note:
** Not applicable in case of 5G cloud
6.2 LTE Small Cell Cloud Controller
Table 2: Types of certificates used in LTE Small Cell Cloud Controller

type on FZN d by external Method
Cloud interface
Controller
Operator Controlled by Yes FZC FZC raises

Operator customer Public Key automatic alarm when it
Certificate Infrastructure (PKI) renews it fails to renew
from Operator
customer PKI, Certificate
manual from
trigger of key operator’s PKI
update
possible

type on FZN d by external Method
Cloud interface
Controller
BTS default Nokia 2099 Yes No need to No need to

certificate renew renew
LPKI Nokia 20 years since LPKI Yes No need to No need to

certificate server is deployed renew renew
in FZC
Radio Cloud Nokia 2036 No No need to Alarm is

Platform renew, if any raised, when
(RCP) Default security the default
Certificate compliance certificate is
update about to
needed then expire
it will be done
through build
installation
6.3 WCDMA Macro NB with FSMv2, FSMv3 and AirScale HW
Table 3: Types of certificates used in WCDMA Macro NB with FSMv2, FSMv3 and AirScale HW
Certificate Provided Expiration Date Used on Renew Alarm

type on by external Method
BTS interfac
e

BTS interfac
e
Operator Decided by customer Yes BTS BTS raises alarm

Operator PKI automatically when it fails to
Certificate renews it renew Operator
from Certificate from
customer PKI, operator’s PKI
manual
trigger of Key
update
possible
Vendor Nokia Nokia Corporate PKI Yes In exceptional BTS raises alarm
Certificate CA Certificates cases: return when it request
signing Nokia HW system an Operator
Certificate module to Certificate and
2029 for board Nokia Repair from operator
produced before for renewal PKI and Vendor
April, 2016 Certificate got
2034 for board expired
produced after April,
2016
2067 for board
produced after 2021
Vendor Certificate for
Nokia HW: for system
modules only, 12-year
life-time starting
from HW module
production; if these
modules are used
after expiration date,
alternative methods
are available

BTS interfac
e
Module/Devic Nokia Expiration dates are No No need to No alarm

e Certificate* the same as for renew
Vendor Certificate
above, but not
exposed on external
interfaces. BTS silently
ignores the end of life
date and the expired
certificates are
continued without
any impact
BTS Default Nokia 2108 No Renew with No alarm

Certificate software
upgrade
Note:
* Not applicable in case of FSMv2 HW version
6.4 WCDMA RNC2600, multicontroller RNC and AirScale RNC
Table 4: Types of certificates used in WCDMA RNC2600, multicontroller RNC and AirScale RNC

Certificate Provided Expiration Used on Renew Method Alarm
type on by Date external
RNC interface
Operator Decided by Yes Manually An alarm is

Operator customer PKI triggered renewal raised when
Certificate with customer an EE/CA
PKI using CMP or certificate is
manual transfer about to
of key/certificate expire
files to the NE
Software Nokia 2029 No No need to An alarm is

license renew raised if the
verification RNC is not
Certificate able to verify
software
licenses
RNC Default Nokia 2036 No No need to An alarm is

Certificate* renew; if any raised when
security the default
compliance certificate is
update needed about to
then it will be expire
done through
build installation.
AirScale RNC Nokia Yes No need to No alarm

AirFrame renew; If any
Default update needed,
Certificate* then it will be
done through
build installation.
Expiration does
not impact
availability of
services

Certificate Provided Expiration Used on Renew Method Alarm
type on by Date external
RNC interface
AirScale RNC Nokia 2029 (10 Yes No need to No alarm

NCIR Default years life- renew; if any
Certificate* cycle by security
default) compliance
update needed
then it will be
done through
build installation
Note:
* Not applicable in case of RNC2600 version.
6.5 GSM BTS
Table 5: Types of certificates used in GSM BTS

BTS interface
Operator Decided by customer Yes BTS BTS raises alarm

Operator PKI automatic when it fails to
Certificate renew it renew Operator
(only for from Certificate from
FSMF system customer operator’s PKI
modules) PKI, manual
trigger of
Key update
possible

BTS interface
Vendor Nokia CA Certificates signing Yes In BTS raises alarm

Certificate Vendor Certificate exceptional when it request
(only for 2029 for board cases: an Operator
FSMF produced before April, return Certificate and
modules) 2016 system from operator
2034 for board module to PKI and Vendor
produced after April, Nokia Repair Certificate got
2016 for renewal expired
2067 for board
produced after around
2020
Vendor Certificate:
only for FSMF system
modules, 12-year life-
time starting from HW
module production; if
these modules are
used after expiration,
alternative methods
are available
Module/Devi Nokia Expiration dates as the No No need to No alarm

ce Certificate same as for Vendor renew
(only for Certificate, but not
FSMr3 exposed on external
Modules) interfaces. BTS silently
ignores the end of life
date and expired
certificates are
continued without any
impact
BTS/BTSSM Nokia 2108 No Renew with No alarm

Default software
Certificate upgrade

6.6 GSM BSC
Table 6: Certificates types used in GSM BSC

BSC interface
Operator Decided by Yes Manually By default, an

Operator customer PKI triggered alarm is not
Certificate renewal with raised when
customer PKI an EE/CA
using CMP or certificate is
manual about to
transfer of expire; the
key/certificate optional IPSec
files to the feature
NE enables
raising an
alarm for
EE/CA
certificate
expiration
date
Software Nokia 2029 No No need to An alarm is

license renew raised, if the
verification BSC is not
Certificate able to verify
software
licenses

TS-RAS-GEN-0023 Expiration of Certificates

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

TS-RAS-GEN-0023 Expiration of Certificates

Uploaded by

Copyright:

Available Formats

No further reproduction or networking is permitted. Distributed by Nokia.

Copyrighted material licensed to muhammad-adil.murad@450connect.de on 17-10-2023.

Single RAN Technical Support Notes Library

Maintenance Documentation, Issue 01

No part of this document may be modied.

Copyright and trademark: Nokia is a registered trademark of Nokia Corporation. Other

2 © 2023 Nokia. Nokia confidential

1 Technical Note Information ........................................................................................................ 5

Summary of changes .................................................................................................................... 7

5 Executive summary .................................................................................................................... 16

6 Detailed description .................................................................................................................. 17

© 2023 Nokia. Nokia confidential 3

4 © 2023 Nokia. Nokia confidential

Technical Support Note

Base Stations, Radio Controllers, Radio Network Solutions

Approval date: 2023-02-16

This document contains following type of information

© 2023 Nokia. Nokia confidential 5

© 2023 Nokia. Nokia confidential

Date Version Change

2019-03-26 2.0 Validity Updated

2019-05-13 3.0 Validity Updated

2019-07-05 4.0 Validity Updated for Flexi MR

2019-07-18 5.0 Technical Support Note validity

2019-07-18 6.0 Technical Support Note validity

2019-07-18 7.0 Technical Support Note validity

2019-07-18 8.0 Technical Support Note validity

2019-07-18 9.0 Technical Support Note validity

2019-10-02 10.0 Technical Support Note validity

2020-07-09 11.0 Technical Support Note validity

2020-09-16 12.0 Technical Support Note validity

2020-10-30 13.0 Technical Support Note validity

2020-10-30 14.0 Technical Support Note validity

2021-01-18 15.0 Technical Support Note validity

© 2023 Nokia. Nokia confidential 7

2021-01-18 16.0 Technical Support Note validity

2021-09-03 17.0 Technical Support Note validity

2021-10-01 18.0 Technical Support Note validity

2022-07-14 19.0 Technical Support Note validity

2023-02-16 20.0 Technical Support Note validity

8 © 2023 Nokia. Nokia confidential

10 © 2023 Nokia. Nokia confidential

3.1 Impacted technology

Nokia Public Sector

Data Center and Cloud Infrastructure

3.2 Impacted system and SW releases

© 2023 Nokia. Nokia confidential 11

GSM20 Flexi MR EX20: all product SW releases

GSM20 FP20B Flexi MR EX FP20B: all product SW releases

WCDMA21 FP21A WCDMA OMS FP21A: all product SW

WCDMA21 FP21B AirScale RNC FP21B: all product SW releases

WCDMA21 FP21C AirScale RNC FP21C: all product SW releases

22R1-SR ASIR_L22R1-SR: all product SW releases

22R2-SR 22R2-SR (ASIR-related): all product SW

22R3-SR 22R3-SR (ASIR-related): all product SW

22R4-SR 22R4-SR (ASIR-related): all product SW

12 © 2023 Nokia. Nokia confidential

23R1-SR 23R1-SR (ASIR-related): all product SW

23R2-SR 23R2-SR (ASIR-related): all product SW

22R1-5G 22R1-5G BTS (Classical): all product SW

3.3 Impacted products

AirScale Cloud BTS - 5G

AirScale Indoor Radio - 5G