encryption

  1. 3CX Database Encryption

    Hi, we are undergoing a security audit, and they wanted to know what type of database encryption is being used by 3CX. Does anyone know about this? We are running in 3CX V20 hosted in Digital Ocean using Debian 12.
  2. Force phone template SRTP settings

    Hello all, We have SRTP Mode Enforced on our users. And this works perfectly for all phones. The only issue we encounter is when we log on an hotdesk. In our hotdesk template we have the SRTP mode set to enable, but when users logs on the hotdesk this settings get changed to enforced (due by...
  3. Backup not being encrypted

    We seem to have a bug with backup encryption. When creating a backup, a password is set; the backup task runs; we then download the backup, the zip is accessible without need to enter a password - all data is available to anyone with access to the backup zip file. Have run several tests with...
  4. SteveITS

    Encryption on legacy Windows Client

    I found https://www.3cx.com/docs/secure-sip/#h.o0mhxbtegc1n which mentions the legacy app has options to set: "In Management Console, go to the extension's “Phone Provisioning” tab > “Network” section to set the options “SIP Transport” to “TLS” and optionally “RTP Mode” to “Only Secure”. Just...
  5. Backup Encryption type

    Hi, Does anyone know what type of encryption is used for the backups? Because I guess we have some servers(180+) that has the wrong passwords in the automatic backups. So i want to brute force the passwords of the backups so i can check which server has the wrong password.
  6. Updated: Template Support for Yealink T4x SIP over TLS & SRTP using Remote STUN

    Previous Thread: https://www.3cx.com/community/threads/template-support-for-yealink-t4x-sip-over-tls-srtp-using-remote-stun.74747/ Update: Due to COVID-19 many of our employees are working from their home offices where it'd be impractical to deploy an SBC. The best solution is "Direct SIP (STUN...
  7. Mayank143

    AES, RSA & VPN on 3CX PBX System

    Dear Friends, Started trial (installed on AZURE) of 3CX phone system (PBX) only for internal calls/msg/chat/video/audio calls (NO OUTER SERVICE). 1. Need to know what kind of AES-256/512 & 2048-RSA they are using for internal communications 3cx to 3cx? 2. As they are using FREE Lets Encrypt...
  8. Solved Message Encryption

    Hi All, I was wondering if someone may be able to shed some light on the encryption used for messaging in 3CX. I have searched the forum and found a lot of information for SRTP and encrypted calls but nothing for the messaging function. I found this KB article...
  9. Template Support for Yealink T4x SIP over TLS & SRTP using Remote STUN

    Due to COVID-19 many of our employees are working from their home offices where it'd be impractical to deploy an SBC. The best solution is "Direct SIP (STUN Remote)". The catch is that all SIP signaling and RTP audio is sent in the clear for anyone to intercept. It's trivial to create a custom...
  10. 3CX IOS TLS "Service Unavailable"

    Client ------------------------------------------------------- Phone: iPhone X iOS Version: 12.4.1 Jailbreak: NO Connection: WiFi / LTE 3CX iOS App Build: 16.0.1.606 Server ------------------------------------------------------- Server: On premise accessed over internet 3CX Server Build...
  11. SBC tunnel encryption vs softphone tunnel?

    Hi, I was reading the SBC documentation and it specifically states that encryption can be enabled. Is this true? I was under the impression that the tunnel didn't actually do any encryption, though I really wish it did.
  12. Solved Backup encryption algorithm

    Hello everyone ! I've looked for the information in the documentation and the forum but didn't find it. Does anyone know which algoritm is used to encrypt the 3cx backups, when specifying a password ? Thanks in advance,
  13. Multiple 3cx android app 'Only Secure' doesn't work

    I have set up certificate for secure encrypted calls.My aim is secure encrypted calls between bunch of extensions.The 3cx android if set to only secure in one end and allow secure in other it works fine but if I set allow secure in both the android clients call fails,as I wanted a bunch of...
  14. Implemented Security / Encryption Required - Backup

    Will there be any encryption of backups or ability to sftp ? Currently we support clients with on premise setups that could do with automated remote backups of their configs. Internal hosted clients isn’t such an issue as its private network ftp, however considering the root xml file has every...