Softphone and chat with tls?

[Ranac]

Running v16

We purchased a comodo positive ssl for the host name and used that for the install.

Is this cert sufficient or did I need something more specific? Will this cover the phones as well? I cant really seem to find a guide that details out using a purchased SSL. Do I paste the info from this SSL into the secure sip area or is that just for trunking?

The goal is TLS running so the calls and the chat in the web client are encrypted.

It would be great if the cert was trusted for hard phones too.

Any insight here would be great!

 

[JohnS_3CX]

If you are using a custom FQDN then you need to manage this separately and you need to ensure that you buy a cert from a CA that your desk phones already trust.

For 3CX FQDNs we do it via Let's Encrypt which comes included in the firmware of all our currently supported phones. If your phones do not include comodo, then you are out of luck and will have to manage them separately and find a way to upload it (phone manufacturers can give you more details on what certs specific models support)

This guide here explains how to use a custom cert and FWND, and also links to an example of how to set it up (based on GoDaddy) https://www.3cx.com/docs/fqdn-ssl-certificate-v15/