Important Notice – Expiration of Security Certificates for Alcatel IP Touch 40x8 Phones
We would like to inform you of a security-related change affecting older Alcatel IP Touch 40x8 phones (models 4018, 4028, 4038, and 4068) that may impact operations in your network environment.
What is happening?
On September 28, 2025, the X.509 root certificate used by older IP Touch 40x8 phones (e.g., 4008EE, 4018EE, 4028EE, 4038EE, 4068EE) for 802.1X network authentication.
What does this mean in practice?
- After this date, these phones will no longer function on networks with 802.1X access control.
- Logging into the network will fail—the devices will be rejected.
- This may result in operational disruptions and phone outages.
Devices on simple networks without 802.1X access control are not affected.
Why is this happening?
- The devices use a root certificate that was issued about 20 years ago.
- Even with an internal certificate, the device is no longer considered trustworthy once the root certificate has expired.
- The affected models have been discontinued for years and are no longer supported.
Recommended Actions
- Identify affected phones in your environment.
- Check whether your network uses 802.1X.
If so, options:
- Disable 802.1X access control (not recommended for security reasons), or
- Replace phone models with modern ALE DeskPhones.
Recommended replacement models
- Alcatel 4008EE → ALE-20 (base unit with USB ports)
- Alcatel 4018EE → ALE-20 (base unit with USB ports)
- Alcatel 4028EE → ALE-30 (graphical display, expandable)
- Alcatel 4038EE → ALE-300 (color display, USB, modules, optional Wi-Fi)
- Alcatel 4068EE → ALE-400 or ALE-500 (touchscreen, USB-C, Bluetooth, optional Wi-Fi)
We’d be happy to advise you on suitable alternatives from the current Alcatel-Lucent product portfolio and assist you with the transition. Contact us if you have any questions or to schedule an appointment.
INTERTRADE GROUP
Industrial Park, Schafhohle 4, DE-74226 NORDHEIM
Phone: +49 (0) 7131 / 390978-0 | Fax: +49 (0) 7131 / 390978-11
