HID's Mercury Abruptly EOLs Widely Used "Red" Board Controllers
Confusion and panic are rising as HID's Mercury is abruptly end-of-life (EOLing) its widely used "red" boards or LP / "series 3" controllers later this year, with no public notice from them.
In this note, we examine this move, based on conversations with several of HID / Mercury's partners, its largest partner's messaging, and the potential impacts on the 20+ Partners who OEM Mercury controllers.
Also, we examine what this means for alternatives / competitors of HID And Mercury offering "Open / Non-proprietary Controllers" based on comments from Mercury partners and IPVM's investigation.
**** ** * ********** *****, *** we **** ******** ** ****** **** report ** **** ** ******* *** ones ** ** ****** **** *********** or ****** **** ******* ** *****. If *** **** *** ********** *********** or ***** **** ** *****, ****** email**********@****.***.
Executive *******
*** "***" ****** *** ***** ************ and ******** ** ******** "*****" ******. HID ** ***-**-****** ***** "****** *" *********** ** "*** boards"** *** *** ** ** ****, after ***** ************ *** **** *** ******** *********** * *** ****** ** controllers, ***** ***** ***** *** "*-******" and ****** (********* ******* *******) ***** to **** ** "*****" ****** (******* of ****** * ***** *** *****) or "** ******".
***** ******* ******** **** **** **** HID / ******* ************ ******* ********* reasons *** **** "** ******" *******, including ********** / ******** ** *** previous ******* *********, ******** ***************, *** firmware ********** ******, ** ** ***** that *** / *******'* ******* ********** team ** *** *********** ******** ** communicating *** ***** / ******** ** its ********. **** ******* ** ********* and ******** ******** *** *** ***** alike.
************, *** *********** ** *****'* ****** to *** **** (***** ******), *** lack ** ******** / ****** ******* from *** / *******, ***** ***-**-**** plans, *** *****'* ******* ********** **** systems (***** ** ****** ***** *******) will *** ******* *** *** ******, increases ******* ** ** ******* *** complexity / ********* **** **** ** partner *** **** ****** ***** ***** ****** *** ******.
***** *** ********** ********, *** ******** we **** *****, *** *** ******* of ********* **** *** / *******'* own ********, **** ********** ******* ** any ***** *********** ** ****** / *** ******, ************ *** ******* **** ******* / ********** / ****** *** *** on *** **** ******* ******** ******* and **** ******* **** ***** ******* the ****** "** ******" **** ******** and **** **** ************** ** ******** / *********** *** *** ********** / susceptible.
** ****** **** ******** / *** users ** **************** ** ******* / ***, ****** *** **** ******* / their ******** ******* ** **** ******* or *** ********** **** *** **** year ******* ** ** ****.
HID / ******* ********
*** ************ **** **** **** *** open ** ********** *** *** ******** when **** *** ******** *** *** not ******* ** ********* ***** ************* the "***" / ** ******.
*** / *******'* ***** *******, **** contacted ** ****, ***** ** ** but *** *** **** ************* ***** the ***** *** *** ****** *** LP ****** *** *********** * *** one ** * *********** *** **** said **** **** "*****" ** "*****" boards **** ***** ********** *** *** no ********** ***********. ********, **** ******** us ** * ***** ******** *** was *********** / *** *** ******* after ***** ********* ******* *****.
****** */**/****: *** ********* ** *** partner, ********** ******** ****** / *************** and ******* *** ****** / ***************.
Background / ******* ********
******* ******** ********* *** ****** **** be "** ******" *** **** ***-**-*** replacements, *.*., (****** -> "******") **** the ** ******, ***** ******** ********** and **** **** *** **** **** factor ** *** ******** ** ******. However, ******* ******** **** **** **** will **** ******* *** ** ****** in "****** ****" ** ****** ** they **** *** ***** ********* ***** code / **************, ****** ** ****** others ** ******** **** ***** ** the ****** (***** ** ******** ** be ** ***** *** ** **** months ****).
************, ******* ******** **** **** **** were *** ******** ** ******* / release *** ********* ** *** ***** releases ********* *** ******** / ******** products ** *** / ******* **** to ** *** ***** ** ******* / ******** *** *** ******* ******, which ** ******* ** **** ** the ****** ***** *** ******* *** link ** ***** ******* ** **** from *** ******** **** (***** *****).
LenelS2 ******** **** ************
** ***** ****, ****, ***** ****** on ******** ********** *** "******* ********** Transition" **** * **** ******** ** its **** **** *** **** ** its ********* (***** *****):
*******, ***** **** ***** *********, *** link *** ******* **** *********** ****.
Full **** ** ***** ****
*****, ** **** *********** **** **** ** *******'* ****:
Impact / ******* ** *** ****** **** **** ** ******
***** ** *******'* **** *** ******** we **** ******** **** ***** ********, the ********* ***** *** ****** ** dealers / ***-***** **** **** *************. First, ********* **** ***** ******* / partners **** **** *** ***** ********* their **** / ************** ** ******* the *** ****** **** **** ******* the ****** ** "****** ****" ***** each ******** ******* ********* ***** ************** and *** ******* **** *******.
*** *******, ** *******'* **** ** its ****, **** ****** ******* ******* on *.* (*** *****) *** ****** systems ** ******* *.**.** (** *****) that *** "*-******" (*****'* ******** **** for *** *** ******) **** *** be *********:
******* *** ****** ********* ** ***** systems **** ** ************* ******** ** this ******; ***** **** ******** *** customers ** ******* *.* ** *****, or ****** *.**.** ** *****. *** new *-****** *********** **** *** ** supported ** ***** ***** ******* *******.
***** ** ** *** **** ************ how **** ********* **** ** ******** by ****, ***** ** * ****** possibility **** ** *** **** ******** to *****, *** ***** *** ******** sets ** ***** ****** (****, ** not ***) ***** ******* **** ***** partners **** **** ** ******** *********. As ****, ** ********* ********* ***** out ** ******* ******** / **** dealers ** ****** **** ******* **** support *** *** ****** ** ** ask **** ***** *** **** **** to ****** *************.
** *** ***** ****, * ******** partner ***** ** ***** ************** / support ** *** *** ** ****** has **** ***** ********* *** *** support *** ** ****** ** ******:
** ** *** ****, *** ******* for *** ** ***** ** *****. We **** ********* *** **** ** early ** ** *****, ** **** it ** ********* ** *** ** support ** ** ** ** *****.
Quick *** **** ****** *******
** ******** ** *** ****** *******, the ***** *** ***** ***** ******** as, *********, ***-**-**** ***** *** ************ within * **** ** **** **** time, **** ***** ********* ***** ************. However, ** *******'* **** ** *** VARs, ***** *** **** ******** ** phasing *** *** ************ ** *** new ** ** ****:
******* ********’* ****-**** *** *****-*** ** X-Series *********** [** ******] **** ***** between ** *** ** ****. *** new ********** ** *********** (*-******) [***, MP ******] **** ** ********** ** Q3.
************, ******* ******* **** **** **** were *** ******** ** ** * release ****** *** / ******* ********* it *** **** **** *** *** fully ********* ****** ***** ** *******. Because ** ****, ** ****** ******** that *** / ******* **** **** the ******* ** ***** ** ******** the ******** ***** *** ************ ********** or **** **** ** ***** *** timeline, ***** *** **** ****** ***** are ****** / ******** **** *** product *** ************ / *********.
One ******* **** ******** / ******** ****** **** *** *******
**** ***** ***** *** ********* / what ***/******* *** ************ *** *** reason *** ********* *** *** ******, one ******* ********* ******** ****** *** firmware ****** ****** *** / ******* is ********** **** *** *** ******. They ******:
**** *** ****** ******** ****** **** they *** ********** **** ***** ***** boards.
**** *** ******* ******, ***** ** a ******* **** ** ******** ********. Mercury *** * ******* **** ***** partners ***** *** ** ******** ********. Obviously ** ****** **** ** ******** firmware, ******* ******* **** ******* *******, and **** ****** *** ***************.
**** ***** *** **** **********, ******* fixes ****, *** **** **** ******** a ******** ******. ** **** ** be **** ** **** * ******* from *** ******** ** ****** ********. We ***'* ** **** *******, ******* the ******** ***** **** ****** *** large ** **** **** ***** **** command.
** *** **** *** ** ** firmware ********* ** ******* *** ******* web *******, *** **** ** ******* directly ** *** ***** ** ** that. ** **** *** *** ******, that ** *** ***** ** ** a *******. **** *** *** ******, you *** ** ******** ********* **** our ********.
****** */**: *** ********* ** *** security ****** / ******** ******, ******:
*** ************ ** *** ******* *********** is *** ******* ** ***** ******* security ****** ** ***************. *** ****-**-** launched ******, ** ********* **** *** product *******, ** ******** ** **** the ******** ***** ** *** *********. We **** ***** **** ******* ** available *** ***********.
*******, * ******** ******* **** **** have ** ****** ************ ********, *** this ******* ** **** ****** ** be ******** ** **** ******* ** implementation *****. **** ******:
** *** **** ** ** *** an ***** ******* ** ****** ******** with *** *** ****. ** ***'* leverage * **** **** *** / Mercury ** *** ***** ***** ***, but ** *** *** * ******* for ** ********* *****.
Partners ******* ******** ************, *** ******** ** ***************
***** ***** ******** *** *** ************ mention "******** ******," **** *** ******* HID / ******* *** ********** *** security **** *** *** ****** *** was *** ** ******** ** ******** issues / ***************:
** *** *********, ***** ** ** specific **** ** *************** *** ** you *** ********* ********* *** *** are ******** *** ****** ********* ***** involves ****** *******.
********* **** *** / ******* **** improvements ** ********** *** ********** ** firmware *** *** *** *** **** driver *** *** *** ****** *** not ******* **** *** ** ******* a ************* *****:
**** ****** * *** ********, **** improved ***** ********** *** **** *** validation ** ******** ** **** **. But ***** *** ****** ** *** in ****** *******, *** **** ***** told ** **** *** * ****** [for] ******** *** ********.
** **** **** **** ** ****** proofing *** *** *** **** **** be ********** *************** *** *** ******* they *** *** ************ **** **** had ** *********** *******.
************, *** ******** ***** **** **** are ******* "**** *********" ** *****, such ** ****** ********:
**** ** *** ****** **** *** putting ** ***** *** **** *********, but *** ******* **** **** ******* or ***** **** *** ***************. *** example ***** **** ** ******** **** your ******** ** ****** ** **** up.
*******, **** ** *** *****, ** many ******* ** *** ***** ***** signed ********.
Product ******** ******** / *** *********, *** ******
******* ****, **** ******** ** ***** to ********* *** / ******* *** improved ***** ****** ** ******** ** its**** *********, ****** *** ** **** ** do (*******)******** *******:
******* *** **** ******* ** ****** proofing, ********* ******* ** ********. ****** COVID, ***** **** ****** ******* *****, so **** *** ** ** ***** revision. ***** ******** *** ** ***** something **** ***** ***** **** ** more ******* ****** ********* ** **** second ******** ************.
**, ** * ********* ******** *********** from *** ******, **** ***** ****** replace ** **** ***** ********** ******* having ** ** * ***** ********.
************, *** ***** ******** ********* **** HID / ******* ************ ********* *******, saying ***** *** * "***** ********" to "****** *******" *** ******** ****** chain ******.
Separate ******* ******** ** *** / ******* ****** *****
***** *** / ******* *** **** significant ****** ***** ******, *** ******* says *********** **** ********, *** *** is *** "******* ***** **":
****** *** ****** ***** *****, ******* could *** ****** ******** *** **** two *****. **** ** ******* ***** were **** ********* **** **** ***** who **** ******** ***** ******. ** Mercury *** ** ***** ** ***** suppliers *** ******** **** ****** ** their ******.
***** *** ** **** ** ***** on, *********** *** ********* *** *** they [*** / *******] *** ********* playing ***** **.
** ****, *** *********** ******************* ************ **** ** **************** ** *** *** *******, *** ** ****** **** ********* to ******** ************ ** / **** the *** ****** *** ******** ** their ********* ***** *** ****** *******, complex, ** ***** ******* **** ***'* support *** *** ******.
Partner "********" ** *********** *** ***** **********
***** * ******* ************ *** / Mercury *** **** ******* ** "**** a ****," **** *** **** **** "surprised" **** *** *********** ** *** LP ****** *** *** ***** ********** from ****** ** ******:
** ** *** ********* **** ******* last *******, *** **** **** ****** to ****. ** ** ********* **** have **** ******* ** *** **** a ****.
**** ****** ** ** ******** ** we **** **** * *** ******* of * ***** ***** ********** **** in, *** *** *********** ** * replacement [** ** ******] **** * short ********** ******* *** ******** ****** and *** *** ******.
****** **** ** *** *** *** they "***********" **** ***** *** *********:
*** ********** *****, *** *** ************* is *** *** *** ** ***** communicate ******** ** *** *********.
Partner **** *** / ******* *** ******** ** ***** **** *****
***** ***** ***** *** ****, ******* partner **** **** **** *** ******** to:
*** ************* ** * ******* ** we **** *** ******** ** ** the *** ******** *** **** ** the ******. ** **** ******** ** wait *** *** [/*******] ** ******** it **** **** **** ***** *** we ******** *******.
****** **** ***** *** ********* ****** have **** ***** **** *** ****** in ***** *** *******:
***** *** **** ****** **** *** not *********** ********* [** *****'* ****] and ********* ****** **** **** **** not ********* ** **** *************.
LenelS2's ******* **** "********" ** ***
********* **** **** **** ******** ** HID / ******* ** *******, ***** is * ******* ** ***** *** believe ** ****. **** ******:
**** ** ********* ***** ** **** HID ** ******* *** **** ******* their ****** ***** ** *** ***** for * *******. **** **** ** make **** ********** *** **** ******** documentated, ****** **** **** *******, *** rollout ** ***** *** *** ***** is *****. **** *** *** ******** on *** ** ******* ***** ** not *****.
Partners ******* **** *** "** ******," ***-**-*** *********** *** "** ******"
**** ***** ** ***** ***** ** a ***-**-*** ***********, * ******* **** there **** ** *** *** "** Series," *** ***** ** ** ****** (as ** ***) ** *** ** Series:
***** **** ** * *** ** one ***********. ** ** **** ******* the **********. ** *****'* ** ****** on *** ** ****. *** ** this ***** ** ** ******** *** months ****** *** *******, ** ****** could ******.
Partner **** ******* ** *** ********, *** ********* *********
**** ***** ***** *******, **** ******** declined ** *****, *** *** ******* told ** *** ******* ** *** official *** ** ********* ********* **** the ******** ** ******. *******, ******* essentially *** ***** *** ******* *** their *** ********* / ********, ***.
Updates ** ******
**** ***** ** ****** *** ********* as ** **** *** ***********.
****** */**: *** ******** ** *** partners ****** ******** ********, ******* ****:
*** ************ ** *** ******* *********** is *** ******* ** ***** ******* security ****** ** ***************. *** ****-**-** launched ******, ** ********* **** *** product *******, ** ******** ** **** the ******** ***** ***** *********.** **** ***** **** ******* ** available *** ***********.
** ****, **** ***** ** ****** our ********* ** ** **** *** information.
******* *** ****** *** ********* ******** post **** ** ***** **** * LenelS2 **** *** ******* ******* ****:
******* ********’* ****-**** *** *****-*** ** X-Series *********** **** ***** ******* ** and ** ****. *** *** ********** of *********** (*-******) **** ** ********** in **.
*** ******** / *********** * **** is ****, ** ***** ** ** experience **** ********** ***** ************ (****, Avigilon, ***.), ************* ******** ** ******* and ******* "******" / "*****" ******** for ***** **** ****, ************* **** large ************* *********** ** ******* ****** and **** ** ****** ** ******** on *** ******** *** ***, ** the **** ** * ******, ********** change ** * *** ******. ** I ***** ** ** * ******* something?
***, * ******** ******. ** *** that *** ** ***** ** ****** to *********** ******. *** **** * credible **** ****** **** **** *** have ** **** ****** ******* ** retractions ** ***** *******. * *** quote ****** ******* ******* **** **** is **** ** *****. *** *** fact * *** **** * ***** source **** *** **** ** ******** enough ** ** ** *****. (******* or ***) ** **** **********.
******** **** ****** **** **** *** have ** **** ****** ******* ** retractions ** ***** *******
****** *** *** ******** *** **** first *******! ** **** ******* ******* we *** ********* ** ********* ******. We *** *** ******* *** **********. A ******** ******* **** ** ****, and *** **** ** *** ********. We'll ****** **** *** ******** ** report ** ** ******** ****.
* ******* **** ***** *** **** intentionally **** ***** ** ********* **** information ** ***** **** ******* ***/******* was ******** ***** ****. ** *** Q3 ******** *** ****** ** ** Mercury *** **** **** ******* *** their ******** ** “**** ***** ***** we *** ********* *****,” * ***** see ***** (*** **, ** *** their ******* ********) ******* ******* ** release *** *********** ******. *** ** Mercury *** ******** ***** **** ** the **** *******, ***** *** **** made *** ******** ** **** *** information *** ** ******* ***** **** and *** *****. ** ****** *** dealt **** ***/******* ********, **** *** know **** *** ** **** **** even **** ********** **** ** ********* situation.
**** ** ************* **** ******** **** many ********, *** / ******* *** only ********* ** **** ******** ** the **** ******* ****** (****** ***** were ******** *****, *** * ********** heard ** *** "********" ***** * year ***).
*******, **** ******** ****** **** **** expecting ** **** **** **** ** implement ***** ******* / ***** ***** boards ** ** *** ******** **** (including *** ******* ** **** ** the ****** ** ****).
* ***'* **** ** ********* **********, but **** ***** ***** *** ** their ******* ********* *** ********* *** information, **** ******** ***** **** *** and **** ****** ******** **** *** / ******* **** *** ** **** the ******* / ******* *** *** are ********** ** * ******** **** all ****** ** "**** ****" **** room ** *****, *** **** *** not ** *** ****.
********?
******, *** ******* ** *** **** was “** *** ****” **** ******* and ***** ** **** ******** ***** know **:
- ***** *** **** ******* ******* *** delaying ***** ********** *** *** *** dates **** ***** ** ** ******* delaying ** ***** **** **** *****’* customer **** **** **** ** *** giving **** **** ** ******* **********.
**
- ***** *** **** ** ***** ******* to ******* *** ****** ** ********* because **** ******* **.
**
- ***** **** **** * *******.
****'* *********** ** **** * ***** about **** **** **** * ********* partner ***** * ***** *** ****** a ************. *** ** ** ********** had ***** ********* ******* ***** ** that, ** *****'* **** ********* ***** this *** * ***** ** ***** like.
** *** **** ** *** ************ I ***, ** *** ********* ***-******** as * **** ** * ********* and **** ***** **** **** ** quickly ******* **** ***********. *** **** said ** ****** ***** ** ***-**-**** (presumably ** */* *** * ***'* think **** **** *****) *** ****'* be ********* *** **** *** ***** own ******* **** ***** ** *** MP ******.
* *** **** ***** *** ***** out (*** ** ******** ********) ** the ******* **** ** ** ******** event ** ********. ***** **** *****'* completely ****** **** **** ****'* **** to ** ****** *** ****** ** replace ***
*** ****** ******* **** **** ** quoting **** ****** **** ******* **** were ** *** *** ****, ********* some ** *** *******. ***** ** the **** ***** **** ******** ** sell *** ** ****** ****** ********* on ************ ***** *** *** ** Q4.
* ******* **** **** *** *** letter *** **** **** *** (******* the *** ** ** *****) ** allow *** ***** **** *** ********* to **** ***** ** *** ** series ****** ************ ******* ** *****.
** ** *******, ** ***** **** the ******* **** ******* *.* ******* end ** ******* ** *** ****, so **'* ************ ** ****** ******* for * *********** ******* ** ******** that ***. **** *** *** *** letter, *** ** ****** ******** **** continue ** *** ******** ******* ***** 2028.
**** **** ****: “*** ** ****** hardware **** ******** ** *** ******** support ***** ****,” ** * ******* because ********* **** ***** ****** * year ** *** ***** **** ***** won’t ******* ** *** ******* ** their *** ********. * ***’* ***** Lenel *** **** **** ********* ***** the **** *****. ** **** * customer **** *** **** * ******* dollars ******** ** *** ***-****** ****** their ********** *********. *** ******* ******* to *** **********, “*** ****** ***** budgeting *** *********** ** *** ***** boards.” ********** *** *** **** **** when ***** ******* ** ***** ******* for *** ******** ** ***** ******** and ** *** **** ** ******* to * *** ******* *** *******, integration, ** *** ********** *** ***’* except * ***** ******** ** ****** that *** ** ****. ** *** planning ****** ***.
********** *** *****. *** *** ******** using * ******* ********, **** **** start ******** *'* ** ******* ** getting *** *** ****** ******* *** cyber ******** ******* ** **** **** can ** **** ** *** *** projects ** * ** ******* *****, as **** ** ***** ** *** them *** ************ ** *** ***** of ********. ******* ***** ** *** actual ******* ***** ***.
***********, *** *** ****** *** *** same **** ****** *** **** **** I've **** * ******* **** **** the **** ********* ******* ** * migration ***** ** ** **** ** it ***** **.
**********, * ** ****** **** *** new ****** **** **** ******* ****** like ******* ***** **** ** ****** reader ****** *** **** ******* ******** via *** ****.
** **** ** * ***** ******* Verkada, *** *** **** ****** ****** changes *** *** ***** ********* *** push *** ** ** **** ******* as *** **** ** ***** **** your ****.
***********, *** *** ****** *** *** same **** ****** *** **** **** I've **** * ******* **** **** the **** ********* ******* ** * migration ***** ** ** **** ** it ***** **.
**** ** ******* **** **** *'** heard *** ********** **** * *** series ***** ****** ** ******** *********** from ******* ***, **** ******** ** change.
****** **** ******* **** **** ** the *** ****, ********* **** ** the *******.
** *** **** ******* ******* **** has **** **** *** / ************, feel **** ** **** ** ** me *** ***** (********@****.***), *** * *** ****** ** accordingly (**** * ******, ***.). ************, the ******* ** ******** ******* ***** 2028 ** ********** *** *********** ** me.
**** *** *** *** ******, *** LP ****** ******** **** ******** ** get ******** ******* ***** ****.
** ** *************, *****'* ******** ******* is (******* ********) ** * *-* year ****** ****** ****** *******. **, firmware ******* ***** **** ***** * bit ****** ****, *** ***** *** circumstances, ** ** ******** / ****** (example ** ******* ******** *****):
**** **** ***** ****** ** / when ***** ** *** ** ******* and ********* **** * *********** ****** of ****** **** *** ** ****** supported ***, ********** ****** ** ******* them ** **** *****.
* ******* **** **** *** *** letter *** **** **** *** (******* the *** ** ** *****) ** allow *** ***** **** *** ********* to **** ***** ** *** ** series ****** ************ ******* ** *****.
**** ** * ***** ***** *** will ****** ****** ** ***** *** many ******** **** *** ** **** stock *** ************. ** **** ******* track *** ****** *** ********* *** update ** **** ** ***** / hear *** ********.
********, * ***** *** *** **#* hit ** *********. ***** ***** **** continue ** ******* ******** ******* (***** I ****** **** ** ******* ** patching ***************), **** ******* * *** update *** ******** ** *** ***** doesn't **** *** ***** **** ******** to ** ********* ** * ******* my ******** ********.
*********** *** ************* ******* ******* ********** "security ******," *** ************* ****** ******** post ***** *** **** ****** ****, it ***** **** *** **** **** theadvantages of using a "non proprietary" control board may not necessarily be so advantageous after all..............
**** *** *********** ******** ******* *** supply ******, ******** ****** *** ** the **** ** *** ****** *** recently ****** *** **** *** ********, stability ****** **** **** **** *** customers ***** * *** ** ***** of ****, ***** *** *** **** trust.
*** ****** ** ***** * ***-*********** board ***** *** ** ** ********** if ***** *** **** **** *** dominant ***-*********** ************ *** *****.
** *** **** ** *** ****** who ******** ****** *** **** *** hardware, ********* ****** **** **** **** our ********* ***** * *** ** terms ** ****, ***** *** *** user *****.
**#* * ** ********** ** ******* more. ** *** *** **** / willing ** *****, ****** **** ** an ***** **********@****.***
******* *******, ** ** ****** ** integrators ** ** ****** *********** ************* ***** ******** ****** ** *** vendors ** ************* ** ******** *** software; ** *********** *** ** ********* from ****** ****** **** ** ***** vulnerabilities, ***.
** ** ******** ** ** *******, yet ***********?