# Cloud Voice 84.21.0.117 (V22.3)

Firmware 84.21.0.117 has worked its way through beta testing and is now generally available. This page records what changed on the way to the final release.

To pick up these updates:

1. Open the PBX (Private Branch Exchange, your hosted phone system) admin portal.
2. Check for a firmware update.
3. Upgrade your phone system.

:::note
This page covers changes to the phone system firmware only. Changes to the Cloud Voice App clients and the browser extension are tracked in the Cloud Voice App release notes. If something does not work as expected after upgrading, report it to your service provider.
:::

## Firmware 84.21.0.117

- **Release date:** January 29, 2026
- **Release version:** V22.3-GA
- **Base version:** 84.21.0.117-beta2

With this build, the firmware moves from **Beta** to **General Availability (GA)** and is ready for production use.

The promotion to GA also introduces one feature improvement.

### Enable Call Encryption Tunnel

A new setting, **Enable Call Encryption Tunnel**, has been added under **Security > Security Settings > Security Options > Call Encryption Tunnel**. It switches the encrypted tunnel for Cloud Voice App mobile communication on or off. The tunnel itself first shipped in [84.21.0.117-beta1](/pbx/release-notes/v84-21-0-117-beta1/#encrypted-tunnel-for-the-mobile-app).

When the setting is turned on, both parts of a Cloud Voice App mobile call reach the PBX through the encrypted tunnel:

- **SIP signaling** (Session Initiation Protocol), the messages that set up, ring, and end a call.
- **RTP media** (Real-time Transport Protocol), the live audio of the call.

:::note
This setting only appears after your service provider has prepared the PBX for it on the management platform by:

1. Opening the required tunnel port.
2. Enabling the Call Encryption Tunnel feature.

If you do not see the setting, the provider-side setup is not finished yet.
:::

![Enable Call Encryption Tunnel toggle in the PBX Security Options](/images/pbx/enable-tunnel.png)

:::tip
Turn this on for mobile users who connect over networks that block or throttle SIP traffic (for example, some mobile carriers). Routing signaling and audio through the dedicated tunnel port helps extensions stay registered and keeps calls stable on those restricted networks.
:::

For configuration steps, refer to the administrator guidance on enabling the encryption tunnel for Cloud Voice App mobile calls.