Certificados propios Windows Server

[DR XMARTEK]

Seguí la recomendación del foro, con un resultado no exitoso.

How do I install a new security certificate version 20, Windows, my own FQDN?

On version 18 I would go into C:\Program Files\3CX Phone System\Bin\nginx\conf\instance1 and update the acme.com-crt.pem and acme.com-key.pem files with the newly generate crt and key information and then restart the nginx server service. This seems to have changed with v20 as the above file...

www.3cx.com

Cuál es la forma correcta de actualizar los certificados.

 

[Alejandro_3CX]

The SSL authority needs to provide you with a public certificate and private key (PEM format).

You can then replace the old certificates with new ones as follow:

1/ Connect with a file transfer client such as FileZilla using SSH root credentials to the phone system host.

2/ Go to folder /var/lib/3cxpbx/Bin/nginx/conf/Instance1

3/ rename the existing certificate and key as follow to keep a copy just in case:
- YOURFQDN-crt.pem => YOURFQDN-crt.pem.OLD
- YOURFQDN-key.pem => YOURFQDN-key.pem.OLD

4/ upload the new ones and name them with the same original file names as the old ones.

5/ Connect with a SSH client such as PuTTY using SSH root credentials to the phone system host.

6/ Run commands:
cd /var/lib/3cxpbx/Bin/nginx/conf/Instance1
chown phonesystem: phonesystem YOURFQDN-crt.pem
chown phonesystem: phonesystem YOURFQDN-key.pem
service nginx restart

7/ Your web server has now been restarted with new certificate/key pair so you should already see the new expiry dates when browsing to your management console and checking the certificate properties.


Para windows debes hacerlo sobre la carpeta donde está la ruta Bin/nginx/conf/Instance1