TLS Setup

 		Top  Previous  Next
Solution Integration > PBXs > BT Call Server > Web UI > System

 

TLS Setup for Web UI

 

TableCornerTopLeftB

IPT_Empty

IPT_Empty

TableCornerTopRightB

IPT_Empty

Important_icon

It is strongly recommended to enable TLS to secure the Web UI and ensure encrypted communication.

IPT_Empty

TableCornerBottomLeftB

IPT_Empty

IPT_Empty

TableCornerBottomRightB

 

TableCornerTopLeftA

IPT_Empty

IPT_Empty

TableCornerTopRightA

IPT_Empty

ImportantNote_Icon

The same active TLS certificates applied to the Web UI can be used for Asterisk secure calling.
The correct certificate paths are provided in the "Configuration > Transport" section.
(See the commented example for "transport-tls")

IPT_Empty

TableCornerBottomLeftA

IPT_Empty

IPT_Empty

TableCornerBottomRightA

 

•From the navigation menu, go to System > TLS Setup.

 

System-TLS_01

 

 

•The first step is to upload the CA certificate, from the navigation tabs, select "CA Certificate".

•Click "Choose File" and browse to the CA certificate on your local machine.

•Click "Upload CA Certificate" to complete the upload.

 

System-TLS_02

 

•A confirmation notification will appear at the top, it will also display details of the applied CA certificate.

•An option to delete the CA certificate is available, allowing renewal or replacement in the future if required.

 

System-TLS_03

 

•The next step is to generate a CSR (Certificate Signing Request), from the navigation tabs, select the "Generate CSR" tab.

•Click "Generate New CSR"

 

System-TLS_04

 

•Fill in all the fields. Those marked with an asterisk (*) are required, while the others are optional.

 

TableCornerTopLeftA

IPT_Empty

IPT_Empty

TableCornerTopRightA

IPT_Empty

ImportantNote_Icon

The Country (C) field requires the proper ISO 3166-1 alpha-2 code for your country (e.g., AU for Australia, US for United States, GB for United Kingdom).

IPT_Empty

TableCornerBottomLeftA

IPT_Empty

IPT_Empty

TableCornerBottomRightA

 

System-TLS_05

 

 

•After the CSR is generated, a notification will display the status along with the full CSR.

•Copy the entire text, including the lines -----BEGIN CERTIFICATE REQUEST----- and -----END CERTIFICATE REQUEST----- , and provide it to your Certificate Authority (CA) for certificate issuance.
(The certificate issuance process is outside the scope of this guide.)

 

System-TLS_06

 

 

•Once you have received a valid certificate from the Certificate Authority (CA)

•From the navigation tabs, select "Server Certificate".

•Click "Choose File" and browse to the Server Certificate on your local machine.

•Click "Upload Server Certificate" to complete the upload.

 

System-TLS_07

 

•A notification will briefly display the status, and the system will then attempt to automatically redirect you to the secured address.

•If the redirect does not succeed, close the browser tab and open a new one, then navigate to the secured address using HTTPS.

 

System-TLS_08

 

•The Server Certificate tab will now display useful details about the applied certificate.

 

TableCornerTopLeftC

IPT_Empty

IPT_Empty

TableCornerTopRightC

IPT_Empty

Info_icon

At this stage, the "Upload Server Certificate" button is disabled.
To update the certificate, you must first generate a new CSR.
The button remains disabled if no CSR is pending. Alternatively, you can use Remove TLS (covered below).

IPT_Empty

TableCornerBottomLeftC

IPT_Empty

IPT_Empty

TableCornerBottomRightC

 

System-TLS_09

 

Remove TLS

 

This option allows you to remove all active certificates and restore the system to a non-TLS (HTTP) state.
This does not affect the CA certificate, which is managed separately under the CA Certificate tab.

 

•From the navigation tabs, select Remove TLS.

•Then click "Remove TLS" to completely disable TLS and revert the UI to HTTP.

•You may need to clear your browser history and cache to successfully access the system over HTTP again.

 

System-TLS_10