xxx.3cx.com.au SSL Expired and not renewing

[lagomtech]

I've run into the SSL renewal error i've seen a couple mentions of. None of those fixes seem to work.

Version: 20.0 Update 6 (Build 724 Release)
License: Enterprise Annual / 32 Simultaneous Calls / Expires on Jun 18, 2026
Environment: Dedicated Azure VM setup per the documentation

License refreshes successfully.

I've set

TEMPORARY_SELF_SIGNED_CERTIFICATE_GENERATED to 1

When I run the manual renewal command

sudo -u phonesystem /usr/lib/3cxpbx/PbxConfigTool -renew-certificates

I get this error

3cxpbx.sync is locked

Same error as root with "sudo -i" or as phonesystem with "sudo su phonesystem"

There is no IPv6 address allocated

activate.3cx.com resolves to 172.64.152.237 and can ping successfully <2ms
downloads-global.3cx.com resolved to 172.64.152.237 and can ping successfully <2ms

Running

echo -e "\n\n$(for ip in v4 v6; do curl -s https://discover$ip.3cx.com/getip; echo; done)\n\n"

shows only the ipv4 address, no ipv6 addresses and matches the dashboard correctly.

I've tried restarting the VM and all services with

sudo 3CXStopServices && sudo 3CXStartServices

I've left it 24 hours overnight but still no renewal

I'm out of troubleshooting steps, any other ideas?

 

[lagomtech]

So i've found 3cxpbx.sync in ./tmp - I renamed it as follows

mv ./tmp/3cxpbx.sync ./tmp/3cxpbx_old.sync

now I can run the certificate refresh command without the error. But i've still got the old cert even after running the services restart command and restarting nginx

sudo -i
service nginx restart
sudo 3CXStopServices && sudo 3CXStartServices

 

[lagomtech]

My error. Not thinking clearly.