How to Renew Custom SSL

[T2G]

Hello 3CX Team

One of our system is using their own FQDN and their SSL certificate is about to expire. Now, we have the necessary pfx file. Is there any guide or documentation to do the renewal correctly?
Having access to this would be a significant help, provided we account for any potential downtime during the activity.

Thank you in advance.

 

[KyriacosS_3CX]

Hi,

This thread should give you the necessary info:

Post in thread 'How to update SSL certificate on Linux on-prime'

Sep 15, 2025

The information can be found in various postings - including the ones you found, but the general steps to replace a custom SSL certificate on a 3CX server running on Linux are as follows - please do take backups of everything, if a VM the whole server before you begin editing anything on the filesystem directly -:
1. Prepare the Certificate Files:
- Ensure you have the necessary certificate files:
- The certificate itself (e.g., `mypbx.example.com.crt`).
- The private key file (e.g., `mypbx.example.com.key`).
- The Certificate Authority (CA) bundle (e.g., `mypbx.example.com.ca`).
- Make...

• KyriacosS_3CX

• 

 

[T2G]

Hi @KyriacosS_3CX

Thank you so much.

As I reviewed the system, there's the Secure SIP section and you can upload the necessary files.
Based from the thread, there's a step provided that you will upload the files on the server via ssh/scp and replace the existing certificates. Do I still need to do that part? Or I only need to upload it via the Secure Sip section of the console?

 

[KyriacosS_3CX]

secureSIP if enabled used the page you linked. For the web interface and anything that connects over HTTPS you need the steps in the post.

 

[T2G]

Yes, secureSIP is enabled on the system. Does it mean I need to do both?

 

[T2G]

I overlooked the full content of the post. Confirmed that it is needed to do both.