The private 3CX MCU (Multipoint Control Unit) video conferencing feature was introduced in V20 Update 2 by 3CX. This feature enables enterprises to host and manage video conferencing servers internally, ensuring that all voice and video communications remain within the organization’s infrastructure. By reducing reliance on external meeting providers, companies can protect sensitive information and comply with industry regulations. When configuring a private 3CX MCU server, you have the option to use either a 3CX domain or your own domain. If using a 3CX domain, 3CX will automatically update the SSL certificate; however, if using your own domain, you must renew the certificate before it expires to avoid disruptions in service. Below are the steps to replace the SSL certificate for the 3CX video conferencing server.

Step 1: Access the Server via SSH

To ensure the certificate files have appropriate user permissions, access the server as root. The default location of the certificate files is /opt/3cxwm/cert/. Use the following command to navigate to the directory:

cd /opt/3cxwm/cert/

Then, list the current certificate files in the folder using the ls command.

Step 2: Prepare and Upload New Certificate Files

Convert the new certificate file into the format used in Step 1 and rename them, for example, to server.crt and server.key. You can upload the new certificate files to the /opt/3cxwm/cert/ folder either through the command line or an FTP/SFTP client. Verify that the current certificate files have read-write permissions for the owner and read-only for others (rw-r–r–) using the ls -l command.

Step 3: Restart the 3CX Video Server

After replacing the certificate files, restart the 3CX video server using the following command:

systemctl restart 3CXWMMcu

This completes the replacement process. You can create a 3CX video conference to test whether everything is functioning correctly.

Additional Notes

Permissions Setting: Ensure that after uploading the new certificates, you set the correct permissions to maintain security.

Testing: After the replacement, always test the setup to ensure the new certificate works properly.

By following these steps, you should be able to successfully replace the SSL certificate for your 3CX MCU video conferencing service. If you encounter any issues during this process, refer to the official documentation or seek professional support.