If you use the tunnel for the soft phone that will also encrypt it without having to select TLS. But that's only going to secure the softphone to PBX leg of the call.
Yes there is a TLS protocol but I asked wrongly. I mean something like TLS , because 3cx not supporting android 3cx app TLS calls.
And i need to encrypt/secure calls.
And is it possible to make a secure/crypted call with 3cx android app calls
Unless there's a third leg of the call somewhere you aren't describing but yes most calls will have 2 legs. Client to PBX, PBX to Dial Tone provider (VoIP in this case). If you encrypt both then yes
Is the root cert in the trusted roots on the mobile device? I.E. if you are using a cert from Globalsign, is the globalsign root cert in the CA on the device?