SSL certificate icssues ocaurs

[Noeem]

Dear Concern,

We have purchased a license key: (xxxx xxx xxx xx) (4SC) .
This license key was running with FQDN:xy.com. Today we can't reach PBX by this FQDN but can reach by Public IP.
And in PBX it shows "3CX Version 20 requires a secure connection to use the Web Client. You are not using an FQDN or HTTPS to connect to 3CX."

What can I do now to resolve this?
I'm looking forward to your urgent response please.

 

[paulodagraca]

Hi Noeem,

Could this be a problem with the SSL certificate?
Please try to read this post in forum:
https://www.3cx.com/community/threads/force-renewal-of-lets-encrypt-ssl-certificate.134084

Paulo

 

[KyriacosS_3CX]

Hi @Noeem ,

As Paulo mentioned, from what we see here the SSL certificate did not renew automatically for some reason.

The next step would be for you to try and force the renewal, here you can find steps for windows as well:

Solved Post in thread 'CERTIFICATE EXPIRY'

Feb 27, 2025

under Settings -> Parameters

TEMPORARY_SELF_SIGNED_CERTIFICATE_GENERATED set the value to 1

If Windows:

Use CMD (administrator)

Run the following command:

"C:\Program Files\3CX Phone System\Bin\PbxConfigTool.exe" -renew-certificates

If Linux:

Login SSH as root

- su phonesystem
- sr/lib/3cxpbx/PbxConfigTool -renew-certificates

Wait about 5 minutes.

You may need to restart nginx.

service nginx restart

• bitn2

• 

 

[Noeem]

backend is windows,
when i press double click in "PBXConfigTool.exe" then showing setup

 

[KyriacosS_3CX]

You must run it from command line, not double-click, with the parameters shown:

PbxConfigTool.exe -renew-certificates

 

[Noeem]

After change Temporary self file value 1 its showing https and opened for 10 to 20 min,then sometime leter again fqdn failed

 

[paulodagraca]

Hello Noeem,

Can you check if there is a firewall that does block port 443 (for https)?
Is there anything in the 3CX "Event LOG" about the SSL renew?
Did you receive an email (send to owner), about the SSL renew?
Can you Click on the Lock icon in front of the URL in the browser, and check the status of the Certificate?
Do you have the correct FQDN there, is the certificate still valid or old?

Paulo

 

[Noeem]

Firewall checked- there is no port block
Enent LOG = no any SSL renew msg coming
No any recive email to=owner
After changes value(Tempoo value1)= showned https success
yes=fqdn is correct

 

[Noeem]

waiting for answer....

 

[jlmoreno_Xmartek]

@Noeem, If you are unable to access via FQDN, you must verify your split DNS configuration.

 

[paulodagraca]

Hi Noeem,

This is not normall so I am not sure what is wrong.
When the 3CX does a renew of SSL then it should send an email good/failed... no email means, the 3CX did not try ???

But again, you should make sure the option "TEMPORARY_SELF_SIGNED_CERTIFICATE_GENERATED" in the 3CX should still be set to 1.
And activate the SSL renew by enter the command in the CMD of windows -> "C:\Program Files\3CX Phone System\Bin\PbxConfigTool.exe" -renew-certificates

Strange this does all not work ????

Paulo

 

[Noeem]

Finally we setup new one from fqdn release

 

[paulodagraca]

Hello,

So you did:
Backup 3CX server
FQDN release from 3CX Portal
Restore backup creating 'new' FQDN with same License.

Something like this?

Paulo

 

[Noeem]

@

paulodagraca Yes. same​

 

[Noeem]

@paulodagraca ,,
paulodagraca , updated backup did not storage, so creating new conf from existing fqdn.​