EDIT: I was able to make it work by upgrading ha-qolsys-panel to 1.4.0beta5. 1.3.0 does not work.
I’m running a Qolsys IQ Panel 4 through Surety and I’m trying to get local-only integration with Home Assistant via the ha-qolsys-panel custom integration (which emulates an IQ Remote to talk to the panel over its native protocol on the LAN).
The pair fails at what looks like an application-layer step after the TLS handshake and after HA sends its CSR to the panel: panel sends a very short response (~4 bytes of app data) and closes the connection. HA never receives a signed client certificate back from the panel. Panel-side UI shows “pairing timed out”.
Things that are already OK:
- Installer code entered on the panel to reach the Pair IQ Remote menu
- Panel and HA on the same subnet, same L2, no NAT/firewall between them, tcpdump confirms connectivity
- mDNS + TLS handshake succeed
- HA sends CSR successfully (verified with tcpdump)
- No stale pair state from previous attempts
Two things I’m not sure about:
- Panel firmware compatibility: which IQ4 firmware versions are known to be compatible with the local IQ Remote pair protocol as invoked by 3rd-party clients (specifically qolsys-controller ~1.5.x)?
Any firmware version that’s known to reject the pair mid-flow? - Panel-side pair logs: is there any way to see logs on the panel itself (Android logcat via ADB or similar) that would show WHY the panel is rejecting HA’s CSR? A single log line from the panel’s pair daemon would probably tell us if it’s a signature-algorithm issue, a CN mismatch, or something else.
I know Surety are more DIY-friendly than most Alarm.com resellers, so I’m hoping you might have insight or contacts who could help even if this isn’t officially supported. Happy to share the tcpdump and HA debug logs if useful.