Application scenarios of SCST:
You can use SCST for the following purposes:
1) Obtain TLS certificate from Let's Encrypt (automatic certificate mode)
In this case SCST determines the currently used public IP address of SwyxServer and registers an FQDN within the SwyxON DNS service.
SCST requests for this FQDN a TLS server certificate free of charge from the service provider Let's Encrypt (letsencypt.org) and installs the certificate in the SwyxWare, see Use TLS certificate from Let's Encrypt
The prerequisite for this is that online licensing is used, see Online Licensing
Certified SIP phones (Yealink) support the TLS certificate from Let's Encrypt and do not require additional TLS configuration.
2) Use your own TLS certificate (manual certificate mode)
If you prefer to use your own TLS certificate or one purchased from a commercial certificate authority (CA), SCST will help you to install it, see Use own TLS certificate
When selecting this option, note that you must be in charge of your own DNS zone and the public IP address of your network must be resolved by a unique registered FQDN.
Certified SIP phones (Yealink) support TLS certificates from recognized certificate authorities (CA): https://support.yealink.com/en/portal/docDetail?documentCode=90ef402d65392bc5
If you use a certificate from the listed certificate authority, no additional TLS configuration is required on Yealink devices.
If you use a certificate from the listed certificate authority, no additional TLS configuration is required on Yealink devices.
If your TLS certificate is not supported by Yealink, you need to install the corresponding root certificate on each SIP phone, see Install TLS root certificate on Certified SIP phones
3) Configure RemoteConnector only
If you want to continue using the SelfSigned certificate, or if you already have a TLS certificate installed, you can also use SCST to set only the RemoteConnector parameters.
Last modified date: 01/25/2024