Reminder: Ending of 3rd Party Authentication for STIR/SHAKEN - June 20th 2025

Just another reminder for US providers/resellers/wholesalers. Back in Nov 2024 the FCC released their Eighth Order for STIR/SHAKEN that ends 3rd party authentication for STIR/SHAKEN. The deadline for this is June 20th 2025.

The TL;DR is basically this:

  • The Provider must have an SPC token and their own certificate based on the token.
  • The Provider must determine and assign the Attestation of the outbound call.
  • The Provider must sign their own calls

This means that upstreams (such as Bandwidth and VoIP Innovations) can no longer sign calls on your behalf after June 20th 2025. Each VoIP provider will be 100% responsible for signing calls from their customers/network.

3 Likes

I have a FreePBX system hosted by CyberLink. Iā€™m not sure what if anything I need to do. Is there someone who can assist me for a reasonable charge?

Are you a VoIP provider or just using a PBX?

I use the PBX for my personal use. I own several LLCs that also use the PBX.

Then you have nothing to worry about.

We Small service provider Running through VoipInnovations and a 3r Party Sansay ā€¦
Does FREEPBX support SPC certificate ? version 16 ?

There is nothing currently available in FreePBX to support this. You can still use a 3rd party to sign your calls but you must send them the Attestation and they have to use a certificate you provided.

But to do this in FreePBX is going to require custom work.

1 Like