Page Comparison

...

1. Get certificate from CA (or create self-signed certificate and proceed with step 2)

   1. Select one of Certificate Providers that will suits you requirements. For instance SSL.com, Namecheap, TheSSLStore, GoDaddy, GlobalSign, DigiCert, Thawte, GeoTrust, Entrust, Network Solutions, etc...

   2. Create a CSR (Certificate Signing Request) either using a Linux shell (PBX shell preferred) or Certificate Provider tools.
      

      Code Block
      language bash title Linux shell command to create CSR
      openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr

      CSR configuration require the details as follows below:

      • Common Name (the domain name of PBX). It is highly recommended to use sub-domain wildcard ( *.<yourdomain>.<com> )
        
      • Country (two-letter code)
      • State (or province)
      • Locality (or city)
      • Organization
      • Organizational Unit (Department)

      • E-mail address

   3. Keep resulting key and csr files. It content should include encrypted data and headers :

      -----BEGIN CERTIFICATE REQUEST-----

      ...some data...

      -----END CERTIFICATE REQUEST-----

      and

      -----BEGIN PRIVATE KEY-----

      ....some data...

      -----END PRIVATE KEY-----

      
      

   4. Order a certificate from one of Certificate Providers and provide them CSR file.
   5. Validate domain ownership with CA using one of three validation types: Domain Validated (DV), Organization Validated (OV), Extended Validation (EV). Please note that some sub-types require internet connection.

2. Configure internal DNS. PBX domain name should correspond IP of PBX.

3. Import certificate (click pic below)

   1. Login PBX web interface with administrative account
   2. Open Settings >> PBX >> SIP-RTP
   3. Upload certificate files
   4. Save

...