Skip to main content
🚀 Update October 2026: Centro Business 2.0 Firmware "9.52.26" (B20) replaces 9.52.24 (PPP-Passthrough fix) — further details in the Release Note.

Firmware Release Notes

The Release Note Page documents the ongoing development of the Centro Business Router. It provides an overview of all technical and functional modifications implemented as part of software updates.

Entries are classified by their origin and impact:

  • New Features: Documentation of newly added functions.
  • System Optimizations: Adjustments to existing functions to increase stability or efficiency.
  • Bug Fixes: Documentation of corrected software anomalies.
  • Removed Features: Features that have been removed from the router.
info

Centro Business Firmware Newsletter​

We will inform you early via email about upcoming firmware updates and important technical news regarding the Centro Business Firmware.

Sign up using the form to be added to the mailing list.

Register now


warning

Firmware files no longer publicly available​

For security reasons, Swisscom no longer makes the firmware files publicly available for download.

Firmware updates are distributed automatically via Device Management. A manual update is only possible in the router portal via the update button – and only when a newer version has already been released for the router. The procedure is described under Manual firmware update procedures.

warning

SSH access disabled (all firmware versions)​

As a security measure against known vulnerabilities, SSH access (shell access) over the LAN has been disabled on the Centro Business 2.0 and Centro Business 3.0. This applies to all devices regardless of the installed firmware version.

Centro Business 3.0​

Pre-announcement Router Firmware 10.06.02 (B42) - November/December 2026

Publication/Introduction: coming soon (November/December 2026)


danger

Swisscom recommends not downgrading to an older firmware. Earlier versions contain significant security vulnerabilities that were closed with this firmware version.


Fixed Bugs​

VoIP – UPDATE method (SIP-TA)​

With registered end devices (e.g. DX800), a call could drop after about 3 minutes. The cause was that the Centro Business 3.0 did not correctly handle the SIP UPDATE method during the session refresh and did not forward the end device's response to the telephony platform. A generic solution was implemented. (CB-11690)

VoIP – as-feature-event SUBSCRIBE​

For the customer, this meant that the settings in the customer center were no longer in sync with the settings on the router or IP phone. The cause was that the re-sending of the SIP SUBSCRIBE for as-feature-event occurred too late or at incorrect intervals. The re-SUBSCRIBE is now correctly sent after 90% of the validity period specified by the platform, so the settings stay in sync. (CB-12132)

VoIP – DTMF with intercom systems​

With Passotel intercom systems, triggering the door opener failed (error message "Invalid SSRC or Payload"). The voice connection worked, but the DTMF tones for opening the door were discarded. The error in processing the RTP stream for DTMF events was fixed. (CB-12306)

VoIP – lost registration after IMS maintenance​

After certain maintenance activities on the telephony platform, individual devices could fail to re-register automatically. Telephony was then limited (incoming calls did not work, while outgoing calls remained possible), even though the VoIP LED and the router portal incorrectly showed the lines as registered. The re-registration and the correct status display were improved. (CB-12500)

Port forwarding via static routes​

After migrating from CB 2.0 to CB 3.0, port forwardings to targets reachable via a static route no longer worked (rule status "Error"). Forwarding to such targets was corrected and now behaves as it did on the CB 2.0. (CB-11879)

Firewall rules after backup & restore​

When restoring a configuration via backup & restore, the custom DMZ firewall rules were not applied. The rules are now correctly applied. (CB-11924)

Security​

Several critical security vulnerabilities were closed.


New Features​

Software acceleration (SW-Accel) for VPN traffic​

The Centro Business 3.0 now has a software accelerator. This allows VPN traffic terminated behind the Centro Business (e.g. on a firewall/appliance in the DMZ) to be accelerated, significantly increasing throughput performance. (CB-12181)

DynDNS – token-based authentication​

DynDNS now supports token-based authentication with the preconfigured providers as well as – where possible – with custom update URLs. (CB-11762)

Password strength assistance​

The indicator that rates password strength (from weak to strong) was extended to further areas: now also for the router password and for the pre-shared key for P2P VPN. (CB-11912, CB-11920)

DHCPv6 – new DUID types​

The Centro Business 3.0 now additionally supports DHCPv6 DUID type 4. This ensures IPv6 compatibility with modern networks. (CB-11921, CB-12199)


Removed Features​

SSH access for techadmin removed​

For security reasons, SSH access (shell access) via remote access was disabled for the techadmin user. This account is now managed exclusively via the WebUI. (CB-11891)

SSH disabled in general​

As a general security measure, SSH access (shell access) on the Centro Business 3.0 was fully disabled. (CB-11891)

VoIP – T.38 disabled by default​

The T.38 fax mode is now disabled by default in the factory state. (CB-12353)


Known Bugs​

The following points are known and will be addressed in a future firmware:

techadmin – no redirect to the login page​

If techadmin is activated in the router portal while logged in as superadmin, superadmin is automatically deactivated and logged out. However, the expected automatic redirect to the login page does not happen, and the router is then no longer reachable via the WAN IP. (CB-12508)

Deleting a firewall rule without confirmation​

When deleting a firewall rule, no confirmation prompt currently appears. The rule is removed immediately, which means it can be deleted by mistake. (CB-11706)

DMZ firewall migration OFF → Custom​

When the firewall is switched from "OFF" to "Custom", the router only allows outgoing traffic (DMZ → WAN). Incoming traffic (WAN → DMZ) is blocked – as a result, e.g. VPN connections to a firewall in the DMZ can no longer be established. Workaround: manually create an additional rule for the reverse direction (WAN → DMZ). (CB-12401)

Internet Backup – wrong access technology​

In the Internet Backup GUI, "GSM (2G)" is incorrectly shown as the default access technology, even though the 2G service has been switched off. (CB-12505)


note

The codes shown in brackets (e.g. CB-12505) are internal Swisscom reference IDs and serve internal purposes only, such as traceability.

Router Firmware 10.04.14 (B41++) — July 2026

Release Date: July 2026

Rollout Restriction

This firmware is currently only being deployed on the Centro Business 3.0 in combination with the Alcatel/TCL Internet Backup Stick (black dongle).

Fixed Issues​

Mobile Failover with Alcatel/TCL USB Dongles (Published via ComHub)​

After repeated WAN failover cycles, the Alcatel/TCL USB dongle remained stuck in the "Initialization / Waiting for Authentication" status. As a result, the router failed to establish a mobile backup internet connection. This issue has been resolved with this release.

Router Firmware 10.04.12 (B41+) - March 2026

Announcement​

caution

Action Required for PPP-Passthrough​

In the router portal, a notification has been added regarding the future decommissioning of PPP-Passthrough. Customers are informed that switching to one of the recommended alternative solutions such as DMZ or
IP-Passthrough is mandatory.

New Features​

New Telephony Platform​

This firmware ensures that technical migrations to the new telephony platform in the beem Office / beem Office environment are enabled. (No customer impact)


Optimizations to LAN & DMZ Firewall​

The firewall on the Centro Business 3.0 has been completely redesigned. The goal of these adjustments is to prevent unprotected router configurations while further increasing the security and stability of the Centro Business 3.0.

  • The firewall now only offers the operating modes Strict (default) or Custom.

  • The previous OFF mode is now intentionally only available as a Custom configuration to be performed by users (expert function).

  • For each "firewall rule", the protocol can now be defined between Any or ICMP, GRE, AH, ESP.

warning

Important:​

A firmware update or a backup & restore (CB 2.0 → CB 3.0 or CB 3.0 → CB 3.0) does not change the existing firewall behavior or the configured firewall rules. However, with the B41 release (version 10.04.07.0006 and later), previous operating modes such as "Balanced", "OFF", or "CUSTOM" are automatically assigned to the "Custom" mode. Further details can be found under "CB3.0 New Firewall Behavior". Additionally, the display of firewall settings has been redesigned and optimized.


Increased Cybersecurity Requirements via EU Regulation "RED-DA"​

The regulation in force since 01.08.2025 has led to the following measures:

  • Increased password complexity requirements for
    • WLAN (16 instead of 10 characters)
    • VPN (12 instead of 10 characters)
    • Router portal "admin" (12 instead of 10 characters)
  • Removal of the "Central USB Storage Device" function
  • Implementation of further security improvements

→ → The user will only be prompted to change the password length in the router portal if the previous configuration is modified. This can be canceled, but it is not recommended.


For illustration: Theoretical duration of a brute-force attack to crack the password: - 8 characters with 4 types = 30 min

  • 10 characters with 4 types = 5 months
  • 16 characters with 4 types = 92 billion years

Assistance for Password Strength​

To improve general security, a display has been integrated into the password fields that evaluates the complexity of the chosen password (from weak to strong).

tip

Use a password that meets at least the following criteria:​

  • min. 12 characters (for WLAN min. 16 characters)
  • at least one uppercase letter
  • at least one lowercase letter
  • at least one number
  • at least one special character

Removed Features​

danger

Removal of the "Central USB Storage Device" function​

For security and compatibility reasons, this obsolete function is being removed from the router portal.
Details can be found under Central USB Storage Device


Fixed Bugs​

Firewall ## Firewall & Port Configuration: Port Configuration:​

An issue was fixed where port 443 was incorrectly blocked by the firewall after a firmware update. Manual adjustment of firewall rules to restore functionality is no longer required after this patch.

System Identification:​

A bug was corrected that caused the router's serial number to be incorrectly reset to the default value "SN1" under certain conditions. Correct hardware identification is now permanently guaranteed.

Port Forwarding:​

Occasionally, port forwardings did not work when the router switched to Internet Backup mode. (CB-11016)

TV Host:​

In certain cases, a freeze of the image occurred after changing channels. (CB-11291)

Security:​

Various security vulnerabilities have been closed.

Router Firmware 10.04.10 (B41) - January 2026
caution

Important Information​

This version is replaced by firmware 10.04.12. All updates from version 10.04.10 are included in the 10.04.12 release notes.

Router Firmware 10.04.04 (B40)

Publication/Introduction: May 2025

Preparation​

New Telephony Platform**​

The firmware ensures that test phases and technical migrations with a new telephony platform in the InONE SME environment are made possible. (No customer impact)


New Functions​

beemNet​

With the introduction of the new security offering at Swisscom B2B, the router portal indicates that DynDNS and Port Forwarding cannot be used, or can only be used after prior definition of corresponding security rules, when beemNet is activated, depending on the selected Security Edition. Further information can be found at: www.swisscom.ch/beem

Switching the Entire Mesh WLAN On and Off​

(only in combination with Business WLAN Box) The firmware now supports central control of the Mesh WLAN via the WLAN button on the Centro Business 3.0. This allows the visible WLAN in the entire Mesh network (incl. Business WLAN Box) to be switched off or back on.

DynDNS​

The option for the custom DynDNS URL now also supports HTTPS. (CB-10790)


Fixed Bugs​

GRE Tunnel​

GRE Tunnel: When a GRE tunnel was used with a security gateway/firewall behind the Centro Business 3.0, this traffic showed poor performance. (CB-9699)

IPSec VPN​

When an IPSec VPN tunnel was used with a security gateway/firewall behind the Centro Business 3.0, this traffic showed poor performance (approx. 500MB). (CB-10403)

QoS​

With XGS-PON, an error in QoS handling was resolved. (CB-9712)

Business WLAN Box:​

Various improvements in the wizard and Mesh technology. (CB-9624, CB-9978, CB-10000, CB-10319, CB-10418)

Older Firmware Versions

Centro Business 2.0​

Router Firmware 9.52.26 (B20) - October 2026

Publication/Introduction: October 2026


caution

Replaces firmware 9.52.24​

This firmware replaces version 9.52.24. In 9.52.24, the PPPoE connection no longer worked when PPP-Passthrough was enabled (see "Fixed Bugs"). Version 9.52.26 fixes this issue and contains all other changes from 9.52.24.


danger

Swisscom recommends not downgrading to an older firmware. Earlier versions contain significant security vulnerabilities that were closed with this firmware version.


Fixed Bugs​

PPP-Passthrough after firmware update​

After updating to firmware 9.52.24, the PPPoE connection no longer worked on routers with PPP-Passthrough enabled – the internet was no longer reachable, while the management connection (DHCP) kept working. Only devices with PPP-Passthrough enabled were affected. The issue has been fixed; PPP-Passthrough works again as before after the update. (CB-12543)

VoIP – UPDATE method (SIP-TA)​

With registered end devices, a call could drop after a short time because the Centro Business 2.0 did not correctly handle the SIP UPDATE method during the session refresh. A generic solution was implemented. (CB-11689)

VoIP – DTMF with intercom systems​

With Passotel intercom systems, triggering the door opener failed (error message "Invalid SSRC or Payload"). The voice connection worked, but the DTMF tones for opening the door were discarded. The error in processing the RTP stream for DTMF events was fixed. (CB-12136)

VoIP – lost registration after IMS maintenance​

After certain maintenance activities on the telephony platform, individual devices could fail to re-register automatically. Telephony was then limited (incoming calls did not work, while outgoing calls remained possible), even though the VoIP LED and the router portal incorrectly showed the lines as registered. The re-registration and the correct status display were improved. (CB-12507)

Security​

Several critical security vulnerabilities were closed. (CB-11971)


Removed Features​

SSH access for techadmin removed​

For security reasons, SSH access (shell access) for the techadmin user was removed. This account is now managed exclusively via the WebUI. (CB-11892)

WPS trigger via the hardware button disabled​

For security reasons, WPS can no longer be started via the WLAN hardware button on the device. This prevents potential access by unauthorized persons who have physical access to the WLAN button. WPS can now only be triggered via the router portal (WebUI); the WLAN button is still used to turn the WLAN on and off. (CB-12535)


note

The codes shown in brackets (e.g. CB-12535) are internal Swisscom reference IDs and serve internal purposes only, such as traceability.

Router Firmware 9.52.22 (B19+) - July 2026

Publication/Introduction: July 2026

info

This firmware is currently only installed on Centro Business 2.0 in combination with the Alcatel/TCL Internet Backup Stick (black stick).


New Features​

Increased Cybersecurity Requirements through EU Regulation "RED-DA"​

The regulation, which came into force on 01.08.2025, has led to the following measures:

  • Increased password complexity requirements for
    • WLAN (16 instead of 10 characters)
    • VPN (12 instead of 10 characters)
    • Router Portal "admin" (12 instead of 10 characters)
  • Implementation of further security improvements

→ → The user is only prompted in the router portal to change the password length when modifying existing configurations. This can be cancelled, but is not recommended.

tip

Use a password that meets at least the following criteria:​

  • min. 12 characters (for WLAN min. 16 characters)
  • min. one uppercase letter
  • min. one lowercase letter
  • min. one number
  • min. one special character

Fixed Bugs​

Mobile Failover with Alcatel/TCL USB Dongles (Published via ComHub)​

After repeated WAN failover cycles, the Alcatel/TCL USB dongle remained stuck in the "Initialization / Waiting for Authentication" state — The router was unable to establish an internet connection via mobile. (CB-12144)

Router Firmware 9.52.20 (B19)

Publication/Introduction: November 2025 / Q1-2026


Announcement:​

caution

Action required for PPP Passthrough​

The router portal now draws attention to the future discontinuation of PPP Passthrough. Customers are informed that switching to one of the recommended alternative solutions such as DMZ or IP Passthrough is mandatory.

New Functions​

New Telephony Platform​

This firmware ensures that technical migrations to the new telephony platform in the InOne SME / beem Office environment are made possible. (No customer impact)

DynDNS​

The option for the custom DynDNS URL now also supports HTTPS. (CB-10790)

Assistance with Password Strength​

To improve general security, a display has been integrated into the password fields that evaluates the complexity of the selected password (from weak to strong).

tip

Use a password that meets at least the following criteria:​

  • min. 12 characters
  • min. one uppercase letter
  • min. one lowercase letter
  • min. one number
  • min. one special character

Fixed Bugs​

VoIP​

In rare cases, the INVITE was not answered by the router, leading to call termination. (CB-11227)

TV Host​

In certain situations, an image freeze occurred after changing channels. (CB-11479)

Internet Backup: When WAN ETH failover was activated and the Internet Backup stick was subsequently plugged in, a faulty state occurred: Failover no longer worked and the WAN ETH failover option could not be deactivated. (CB-10969)

Security​

Various security gaps were closed.

Router Firmware 9.52.18 (B18)

Publication/Introduction: May 2025

Preparation​

New Telephony Platform​

The firmware ensures that test phases and technical migrations with a new telephony platform in the InONE SME environment are made possible. (No customer impact)

New Functions​

beemNet​

With the introduction of the new security offering at Swisscom B2B, the router portal indicates that DynDNS and Port Forwarding cannot be used, or can only be used after prior definition of corresponding security rules, when beemNet is activated, depending on the selected Security Edition. Further information can be found at: www.swisscom.ch/beem

Fixed Bugs​

  • Backup/Restore: Firewall rules are restored. (CB-10163)
  • Missing notification when replacing the SFP module added. (CB-9145)
  • DECT: Optimization of the display of missed calls on DECT handsets (CB-6280)
Router Firmware 9.52.14 (B17)

Publication/Introduction: November 2023

New Functions​

  • Internet Backup: The firmware supports the replacement product for the USB failover Internet Backup stick (Alcatel IK41VE1).

Fixed Bugs​

  • WAN IP: In rare cases, the router does not obtain a WAN IP address after a restart. (CB-8145)
  • ATA: When the Centro Business 2 switches to Internet Backup, incoming calls to the analog telephone interface do not work. (CB-8801)
  • Backup & Restore: Certain settings are not saved in the backup file. (CB-8742)
  • USB Internet Backup: On the local web portal, the timestamp for Internet Backup is incorrectly indicated in UTC instead of local time. (CB-8406)
  • Change Web Portal Password: The local web portal password cannot be changed if the new password contains a "0". (CB-9133)
  • LAN Port 1: When the DMZ option is deactivated, Swisscom TV on LAN Port 1 does not work. (CB-8925)
  • Smart Business Connect Telephony: One channel per number via SIP-TA: The number of simultaneous calls (incoming or outgoing) was corrected to 1 active call per configured telephone number. (CB-8737)
  • Security: Various security gaps were resolved. (CB-8448, CB-7551, CB-8414, CB-8556)
  • General: Various stability problems resolved
Older Firmware Versions

FAQ - Firmware Release-Note​

Where can I see the current schedule during a firmware rollout phase??

Depending on the router model, Swisscom plans 1-2 rollouts per year. Routers are usually updated in tranches Tuesday through Thursday during the night (between 2:00 - 6:00) via "Device Management". This leads to a connection interruption of approx. 10 minutes. The Centro Business 2.0 / 3.0 Rollout Plan img is published accordingly.

info

Is something missing here? Give us your feedback!

Help us improve the CB-Guide. Let us know what content you are missing or how we can improve.

Send feedback

Last updated on