Yealink T23G, Autoprovision andTrusted Certificates hell

[itgs]

I buyed from GoDaddy a trusted certificate and installed on my 3cx.
I have remote extensions that register via stun to 3cx.
I was unabled to autoprovision the phones and I did not understood the reason why.
After googling I tried to disable on the phone the "Accept only trusted certificates" option in "Security / Trusted Certificates" section.
After that change, autoprovision worked.
Unfortunately, I noticed that (after provisioning) the option was modified on default value (enabled).

This is the questions:

1) Why the certificate is not recognized from the phone ?
2) What can I do to leave the option in "disabled" mode after provisioning ?

Thank you for support

 

[eddv123]

The phones have lists of supported certificates I believe this is the one from Yealink: http://support.yealink.com/faq/faqInfo?id=691

If you opt for 3CX's in-built SSL certificate they use Let's Encypt in-built which is supported .

Double check yours is on the list.

 

[YiannisH_3CX]

Hello @itgs

Your certificate is probably not trusted by the phones that is why provisioning fails when the option is on. You can however import your certificate into the phone to have it trusted while the option is on or use a 3CX FQDN with a Let's Encrypt certificate so that it is trusted out of the box.

 

[itgs]

Thank you all for your reply.
First of all, I noticed that in compatibility list there is GoDaddy, so I don't understand why don't work.
Secondary, how can I replace the GoDaddy Certificate with 3CX built'in certificate ?

Thank you

 

[YiannisH_3CX]

To get a 3CX certificate you need a 3CX FQDN so you will need to re-install the system and opt for a 3CX FQDN. The certificate will be automatically generated for the chosen FQDN.

Make sure that the GoDaddy certificate you are using is the same type as the one in the list. If it is and it still doesn't work then i would recommend contacting Yealink regarding this.