How to Use Your Own SSL & FQDN Certificate

How to Use Your Own SSL & FQDN Certificate


Introduction

3CX can be installed on 3CX-provided FQDN and SSL certificates at no extra charge. For companies that prefer to manage their PBX via their own Domain Server and Domain, an FQDN certificate needs to be provided during 3CX installation for the PBX.

Prerequisites

  • Your own public domain name, e.g. mycompany.com.
  • Your own public and manageable DNS, e.g. Google Cloud DNS.
  • An FQDN certificate for the 3CX PBX, e.g. 3cx.mycompany.com.

Publicly Trusted Certificates

These are automatically issued by 3CX for your installation when using the 3CX top-level domains. They are widely accepted by endpoints such as browsers and IP phones. The Certificate Authority (CA), i.e. the certificate issuing provider, ensures the validity of the FQDN ownership before the certificate is handed to the administrator of the domain and against the endpoints. In most cases, this comes with a fee for “out of the box” trust that removes possible warnings and simplifies remote provisioning. Major players in the trusted certificate market include GoDaddy, Thawte, GeoTrust, and VeriSign.

We recommend that you check your IP phones first to make sure that the root CA, i.e. the certificate that removes the warning messages, is built into each device by default. IP device vendors may change the root CAs they support at any time without warning.

Getting Started With Your Own Certificate

You must first decide which certification authority to use and verify that it is supported by your IP phones by default. Once you have verified this, follow the procedures in the documents provided by your chosen authority.

📄 Note: If using a custom FQDN and signed certificate, the CA and its intermediate certificates may need to be imported at the OS level to be trusted.​

    • Related Articles

    • PBX Dial Codes - How to use them directly from your phone

      Introduction Dial codes are key/number combinations used to access functions within the phone system directly from your phone. The administrator can change these from the Management Console > “Settings” > “System” > Dial codes”. This section will ...

    • How to Migrate to 3CX Hosted

      Introduction Customers running 3CX on-premise or in the cloud (e.g Google or Amazon etc) can switch to 3CX Hosted and have us host your installation. Why should you do this: We deploy your instance and automatically configure the firewall rules. We ...

    • Connecting 3CX Phone Systems (Bridges)

      Introduction You can connect two remote 3CX Systems together, enabling calls between branch offices for free just by utilizing your existing internet connection. Assign a prefix to the “Bridge”, which you will dial to access the other 3CX Phone ...

    • Variables used Phone Provisioning Templates

      The 3CX Phone Provisioning Templates make use of a set of variables which are replaced by the extension’s details when an extension is provisioned. There are situations where you might need to customize the Phone Provisioning Templates as explained ...

    • Configuring IP Phones

      Introduction 3CX enables easy deskphone configuration with Supported IP Phones being tested and auto-configured. Once provisioned, you can manage the phones from the 3CX Admin Console. To provision a phone, it needs to be told to connect to 3CX via a ...