Manage HTTPS Certificates on the PBX

Yeastar P-Series PBX System supports HTTPS protocol to secure SIP messaging when you access the PBX from web browser. Before using HTTPS protocol, you need to upload or apply for a PBX certificate.

Background information

When you access PBX from web browser, the PBX acts as a server and the web browser acts as a client. A certificate helps verify your PBX's IP address and secures your data transmission.

Upload an HTTPS certificate

Prerequisites
You have prepared a server certificate in .pem format.
Procedure
  1. Log in to PBX web portal, go to Security > Security Settings > Certificates, click Add.

    A window pops up, which requires you to select certificate type and upload a certificate.

    Note: You can ONLY upload or apply for 3 PBX certificates in total.
  2. In the Certificate Type drop-down list, choose PBX Certificate.
  3. Select Upload certificate file, and complete the following settings.

    1. In the Please choose a certificate section, click Browse to select the desired certificate.
    2. If you want the PBX to automatically renew the certificate, select the checkbox of Automatic certificate renewal, and provide the DNS provider information.
      Note: Only Let's Encrypt certificates can be automatically renewed. If the certificate is a non-Let's Encrypt certificate, the PBX will directly apply for a new Let's Encrypt certificate.
      • DNS Provider: Search and select your desired DNS provider from a list of LEGO's DNS providers.
      • Authentication Information: Add one or more required authentication parameters, and enter the corresponding value.
        Note: The authentication information varies for different DNS providers, you should confirm the specific parameter names before filling in.
  4. Click Save.
Result
  • The certificate is uploaded successfully, and is displayed on Certificates list.
  • If you enable automatic certificate renewal, the system will automatically renew the certificate through the configured DNS provider 7 days before it expires.

Apply for an HTTPS certificate

You can directly apply for a HTTPS certificate on the PBX.
Procedure
  1. Log in to PBX web portal, go to Security > Security Settings > Certificates, click Add.

    A window pops up, which requires you to select certificate type and upload a certificate.

    Note: You can ONLY upload or apply for 3 PBX certificates in total.
  2. In the Certificate Type drop-down list, choose PBX Certificate.
  3. Select Apply for certificate, and complete the following settings.

    • Issued To:: Enter the domain name for which you want to apply for the certificate.
    • DNS Provider: Search and select your desired DNS provider from a list of LEGO's DNS providers.
    • Authentication Information: Add one or more required authentication parameters, and enter the corresponding value.
      Note: The authentication information varies for different DNS providers, you should confirm the specific parameter names before filling in.
  4. Click Save.
Result
  • PBX will request a domain certificate from Let's Encrypt through the configured DNS provider. The obtained certificate files are named after the domain name.
  • If the certificate is applied successfully, the Application status displays "-".