Have you tried upgrading the firmware on the phones to one that is "recommended" by 3CX - I had a problem with needing to disable "only accept trusted certificates" to get them to remote provision, but, once provisioned, if upgraded to the preferred firmware that function could be re-enabled. My...