topic Re: Plusnet Hub 2 new firmware forcing https in My Router

Plusnet Hub 2 new firmware forcing https

andyleonard — Thu, 04 Jun 2026 17:42:29 GMT

My Plusnet Hub 2 suddenly started forcing me to use https to access the web interface.
As I hadn't seen the message before, I did a little searching to check it was legit - I couldn't find anything here or on the Plusnet site, but I found that this is something that was introduced last year on BT hubs that the Hub 2 is based on.
It looks like the firmware is starting to roll out to us.

Unfortunately, the new firmware means that you need to sign in as admin for more screens and the whole web app appears to be much more sluggish 😣

It's a shame that there isn't any info or warning before the roll-out!

Even the sticky post with current firmware is out of date.

New Firmware: v0.11.01.11071-PN

Here's a screenshot from the web app Technical Log page:

Re: Plusnet Hub 2 new firmware forcing https

jab1 — Thu, 04 Jun 2026 18:56:21 GMT

@andyleonard Where are you being 'forced' to use HTTPS, which is designed as a security measure, and should be used in preference anyway, especially on sites involving potential leakage of personal data, anyway?

Re: Plusnet Hub 2 new firmware forcing https

mystreet1 — Thu, 04 Jun 2026 19:32:26 GMT

@jab1, I assume that the OP means when accessing the admin page of the router using 192.168.1.254.

They have added an image of the firmware which states a release of the 2nd June.

Re: Plusnet Hub 2 new firmware forcing https

jab1 — Thu, 04 Jun 2026 19:37:03 GMT

@mystreet1 I actually thought that was what they meant, but just wanted to make sure, as the question, or the use of 'forcing', didn't make much sense to me, and still doesn't.

Re: Plusnet Hub 2 new firmware forcing https

Baldrick1 — Thu, 04 Jun 2026 23:03:39 GMT

Duplicate posts removed

Re: Plusnet Hub 2 new firmware forcing https

andyleonard — Thu, 04 Jun 2026 23:19:10 GMT

Yeah, @mystreet1 and @jab1 you are both right.
Re-reading my post, it's not as clear as I thought (I knew what I meant) - if I could edit it I would change the title and try to explain better.

When I was referring to https, it is specifically for the Hub 2 web interface - and I agree websites should use https for security. It's maybe a little overkill for a local IP (192.168.1.254) and somewhat undermined by the Hub is using a self-signed certificate, meaning you have to specifically disregard the browser warnings.

There is a thread over on the BT Community forum from December last year that explains the behaviour seen when the changes were applied to the BT Hub firmware.

tldr: There is a new undocumented firmware that changes the behaviour of how you access the Hub 2 management console.

New firmware v0.11.01.11071-PN applied automatically on 2nd June (now showing in the sticky post PN Hub Latest Firmware Versions
You ~~are forced~~ now need to use https to access the web interface on your local network
More pages of the interface now need you to log in with your admin password
The interface feels more sluggish

Re: Plusnet Hub 2 new firmware forcing https

andyleonard — Thu, 11 Jun 2026 10:01:54 GMT

Yes, you are both right - my post wasn't as clear as I thought it was. The new firmware now requires https to access the Hub 2 web interface.
I wrote a longer post to try to explain but the spam filter doesn’t like it!

Moderator's note:
Longer post released from the automatic Spam Filter.

Re: Plusnet Hub 2 new firmware forcing https

jab1 — Fri, 05 Jun 2026 06:03:00 GMT

What is the problem, though - HTTPS is more secure and does not affect anything you do. Do you not see the same protocol being used on many other sites?

Re: Plusnet Hub 2 new firmware forcing https

dvorak — Fri, 05 Jun 2026 06:38:43 GMT

I suspect the issue is that it is a self signed certificate and requires an extra click or two and bypassing a warning to get to the router interface.

Re: Plusnet Hub 2 new firmware forcing https

jab1 — Fri, 05 Jun 2026 06:40:45 GMT

Thanks, @dvorak . Unfortunately, as I don't have Hub to test...

Re: Plusnet Hub 2 new firmware forcing https

bakerboy83 — Fri, 05 Jun 2026 07:41:22 GMT

Hi,

Plusnet have published some information regarding the new warning. See here https://www.plus.net/help/hubgui/hub-warning

Re: Plusnet Hub 2 new firmware forcing https

jab1 — Fri, 05 Jun 2026 07:48:04 GMT

Thanks, @bakerboy83 - I was unaware of that information as I don't use a Hub -I'm not even a PN subscriber any more.

Re: Plusnet Hub 2 new firmware forcing https

bakerboy83 — Fri, 05 Jun 2026 07:58:28 GMT

If the GUI is accessed over HTTP rather than HTTPS, the user should be presented with a warning along with a link to the support article I shared.

Similar to changes introduced in recent BT/EE firmware updates, this behaviour is intended to align with updated cybersecurity requirements associated with the Radio Equipment Directive (RED), as part of CE / UKCA compliance.

Re: Plusnet Hub 2 new firmware forcing https

Talldave — Sat, 06 Jun 2026 16:48:48 GMT

If I access from Firefox on http, I get the "Switch to HTTPS" message, I click the message and Firefox says "Performing a TLS handshake with 192.168.1.254.... and hangs up.

Edge also hangs.

After power cycling the Hub 2, I managed to get the Hub's home screen to show on my Samsung tablet, but selecting any option asks for the password - which I didn't have at the time, so I shut the browser tab and went on the PC. Is there a bug that if you've been asked for the admin password on one device it fails to serve any other device?

This is just unnecessary agro for zero reason.

Re: Plusnet Hub 2 new firmware forcing https

paul_blitz — Mon, 08 Jun 2026 16:59:06 GMT

On Friday in the early hours, my router was bouncing up and down, and resetting: I later realised it had updated, and I'm wondering if part of it was also a re-tuning of my VDSL link?

So, yes, need to access using HTTPS (makes sense), the bit that annoys me is that, to visit the status page now needs you to log in. Shame there's not an option to NOT need that.

Anyone happen to know what sort of stuff got upgraded in the code? I'll imagine improved TLS ciphers and similar stuff.

Re: Plusnet Hub 2 new firmware forcing https

bobpullen — Thu, 11 Jun 2026 08:05:53 GMT

@Talldave wrote:

If I access from Firefox on http, I get the "Switch to HTTPS" message, I click the message and Firefox says "Performing a TLS handshake with 192.168.1.254.... and hangs up.

Edge also hangs.

That shouldn't happen. Have you tried in a private browser window to rule out any issues with session data/browser extensions etc?

Is there a bug that if you've been asked for the admin password on one device it fails to serve any other device?

This is just unnecessary agro for zero reason.

Not that I'm aware. The reason for the changes is alluded to in @bakerboy83's reply earlier in this thread.

@paul_blitz wrote:

... I'm wondering if part of it was also a re-tuning of my VDSL link?

Outside of a single reboot to update the firmware, there should be no impact on the VDSL link.

Anyone happen to know what sort of stuff got upgraded in the code? I'll imagine improved TLS ciphers and similar stuff.

The link to the BT Speedtest and references to Plusnet Business have also been removed. Outside of that (and the HTTPS/login changes), it's largely housekeeping stuff.

Re: Plusnet Hub 2 new firmware forcing https

HPsauce — Thu, 11 Jun 2026 08:39:33 GMT

Hmm, just tripped over this today, mine seems to have updated 3 days ago. What a kludge!

Summary: Clunky, inelegant, confusing, ineffective and poorly implemented Tidy it up please. If I'd been responsible for this in my IT working life I'd have been mightily embarrassed! 🤢

Re: Plusnet Hub 2 new firmware forcing https

pvmb — Thu, 11 Jun 2026 08:48:29 GMT

@HPsauce

"Summary: Clunky, inelegant, confusing, ineffective and poorly implemented Tidy it up please."

Seemed to go smoothly enough to me! Only snag being the new security requirement to log in to Hub 2 to see or do anything.

If you have an existing browser shortcut to the Hub Manager, change the recorded shortcut link from http://192.168.1.254/ to https://192.168.1.254/

This means you now skip the "Secure Connection Required" warning page and go straight to the Hub 2 Home page as usual. If you then try to open any panel you are asked to log in. You only ever need to log in the once per browser session - presumably even from one session to another if you don't delete cookies on exit.

Re: Plusnet Hub 2 new firmware forcing https

HPsauce — Thu, 11 Jun 2026 08:54:58 GMT

@pvmb Maybe depends on your browser but Edge gives security warnings that you have to override initially and then displays a warning every time that it's insecure.

Re: Plusnet Hub 2 new firmware forcing https

pvmb — Thu, 11 Jun 2026 09:31:35 GMT

@HPsauce

"Edge gives security warnings that you have to override initially and then displays a warning every time that it's insecure."

I am using Edge and if you follow my previous post you will find, apart from needing to log in per new browser session, there are no warnings. Continuing warnings means you are accessing it via the old http link.