UIrgent! Which FQDN is better? 3CX FQDN and own FQDN,

Discussion in '3CX Phone System - General' started by Elvin Mammadov, Feb 3, 2017.

Tags:
Thread Status:
Not open for further replies.
  1. Elvin Mammadov

    Joined:
    Feb 3, 2017
    Messages:
    42
    Likes Received:
    1
    Hello,
    We want to upgrade to 3CX V15 at the moment. We want to know the difference between 3CX FQDN and our company FQDN? Is 3CX FQDN free for forever and which one is better for performance? And also can we use our self-signed certificate? Thanks in advance.
     
    #1 Elvin Mammadov, Feb 3, 2017
    Last edited: Feb 3, 2017
  2. eagle2

    eagle2 Well-Known Member

    Joined:
    Apr 27, 2011
    Messages:
    1,085
    Likes Received:
    11
    It's not free. It will be working while you have valid 3CX maintenance.
    You must have purchased a SSL certificate, validated by public certificate authority organization.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Elvin Mammadov

    Joined:
    Feb 3, 2017
    Messages:
    42
    Likes Received:
    1
    Thank you for your reply. Is there a performance difference between these FQDNs? We have 1 year valid 3CX maintenance. We have our own FQDN. What FQDN do you advice to use, 3CX or own FQDN? Recently for testing purposes, we used 3CX V15 with self-signed certificate, but it worked.
     
    #3 Elvin Mammadov, Feb 3, 2017
    Last edited: Feb 3, 2017
  4. GiannosC_3CX

    GiannosC_3CX Guest

    Hi Elvin,

    The 3CX FQDN is free of charge and is valid until your maintenance date. Noted this FQDN included with SSL certificates by Let’s Encrypt Cert. You can find your maintenance date on Dashboard - Maintenance.
    If you have an annual maintenance the 3CX FQDN is automatically renewed. If you do not have an annual maintenance with any product and if the maintenance date expires then the FQDN released on you Public IP and you can't re-use this FQDN, the system immediately block this FQDN for a certain amount of time.

    In case you use a customer owned domain ( also requires phone system Standard, Pro or Enterprise Edition) Let’s Encrypt Cert can't be issued by 3CX and you need to renew manually your FQDN and SSL.

    you can find more details here :
    https://www.3cx.com/docs/fqdn-management-allocation/
    https://www.3cx.com/docs/key-already-bound/#h.ls6x5hi0jy3g
    https://www.3cx.com/docs/fqdn-ssl-certificate-v15/
     
  5. Elvin Mammadov

    Joined:
    Feb 3, 2017
    Messages:
    42
    Likes Received:
    1
    If we use our self-signed certificate, it will not work properly?
     
  6. GiannosC_3CX

    GiannosC_3CX Guest

    Dear Elvin,

    There are some major differences between Publicly trusted certificates and self signed certificates but if you choice the self-signed CA possibly you will have issue with remote extension provisioning.

    For more details: https://www.3cx.com/blog/docs/ssl-crt-csr/
     
  7. Elvin Mammadov

    Joined:
    Feb 3, 2017
    Messages:
    42
    Likes Received:
    1
    I see 2 SSL brands "Godaddy and Start SSL" on 3cx.com.. What about Rapid SSL and Comodo PositiveSSL Certificate? If I order Rapid SSL certificate or Comodo PositiveSSL Certificate, which offer cheap SSL certificate, then they will work okay with 3CX?
     
    #7 Elvin Mammadov, Feb 3, 2017
    Last edited: Feb 3, 2017
    Uzzy likes this.
  8. GiannosC_3CX

    GiannosC_3CX Guest

    Dear elvin,

    Please note that any CA in the correct format (.crt, .pfx and .pem) will work with 3CX Phone System.
     
    Uzzy likes this.
  9. earthwing

    Joined:
    Sep 14, 2010
    Messages:
    20
    Likes Received:
    3
    While any valid SSL will work with 3CX, provisioning can be a challange. For example yealink phones prior to the S series have a limited number of CA's built in . The result is each phone needs to be uploaded a SSL that matches the 3CX server. Then again there are other problems that may be encountered depending the the vendor and if the intermediate cert is required or not.
    The counter risk of using a 3cx.com domain the the draconian way in which they will effectively disable your system if support lapses after 7 days. This is specially true if your system is purely internal and there is no value in using some of the added features like the web conferencing.
     
Thread Status:
Not open for further replies.