> For the complete documentation index, see [llms.txt](https://prosbcdocs.telcobridges.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://prosbcdocs.telcobridges.com/tmedia-documentation/server-and-os-administration/configuring-certificates.md).

# Configuring Certificates

> **Applies to:** SBC 3.1, 3.3

Certificates are used to provide secure connections, such as HTTPs (secure connection to the web portal) or [FreeSBC](https://github.com/telcobridges-main/tmedia-wiki/tree/main/_excluded/sbc/freesbc-and-prosbc/README.md) secure SIP calls (SIP over TLS).

This article describes how to import certificates. These certificates are later grouped into [TLS Profiles](https://github.com/telcobridges-main/tmedia-wiki/tree/main/tmedia/configuration/configuring-tls-profiles/README.md), which is the first step in configuring secure SIP on [FreeSBC](https://github.com/telcobridges-main/tmedia-wiki/tree/main/_excluded/sbc/freesbc-and-prosbc/README.md).

### Upload Local Certificates

Toolpack already contains, by default, a unique self-signed certificate (unique for each Toolpack system, shared for 1+1 hosts). This certificate is used for HTTPs, and can also be used for TLS. Note:If you want create your own local certificate, [Youcan use openssl to create a self-signed certificate.](https://github.com/telcobridges-main/tmedia-wiki/tree/main/tmedia/configuration/certificates/README.md)

In case you want to use a custom local certificate, proceed as follows:

1. Select **Certificates** from the navigation panel:

![ConfigureCertificates 0](https://docs.telcobridges.com/w/images/0/00/ConfigureCertificates_0.png)

2. Click \*\* Create New Certificate \*\* ===

![ConfigureCertificates 1](https://docs.telcobridges.com/w/images/0/0d/ConfigureCertificates_1.png)

3. Enters (but using "Local" certificate type) to import the local certificate.

* Provide a name that is meaningful to you.
* Select "Local" certificate.
* Drag-and-drop (or copy-paste) the certificate's text content into the appropriate text box
* Click "Create"

![ConfigureCertificates 3](https://docs.telcobridges.com/w/images/2/2b/ConfigureCertificates_3.png)

4. Make sure to copy the private key in the following directory: /lib/tb/toolpack/pkg/ssl\_certificate/

You can use ssh (command-line or using a tool like Filezilla) to upload the private key to the unit on the following path. We recommend to use the same name for the key and certificate (except the extension of course): Example: scp my\_local\_cert.key root\@MyFreeSbcHostName:/lib/tb/toolpack/pkg/ssl\_certificate/

### Upload Trusted Certificate

1. Select **Certificates** from the navigation panel:

![ConfigureCertificates 0](https://docs.telcobridges.com/w/images/0/00/ConfigureCertificates_0.png)

2. Click \*\* Create New Certificate \*\* ===

![ConfigureCertificates 1](https://docs.telcobridges.com/w/images/0/0d/ConfigureCertificates_1.png)

3. Configure the certificate parameters:

* Provide a name that is meaningful to you.
* Select "Trusted" certificate to import a remote party's certificate to trust.
* Drag-and-drop (or copy-paste) the certificate's text content into the appropriate text box
* Click "Create"

![ConfigureCertificates 2](https://docs.telcobridges.com/w/images/b/be/ConfigureCertificates_2.png)

### List of Parameters

* [Name](https://github.com/telcobridges-main/tmedia-wiki/tree/main/reference/parameters/name/README.md)
* [Certificate Type](https://github.com/telcobridges-main/tmedia-wiki/tree/main/reference/parameters/certificate-type/README.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://prosbcdocs.telcobridges.com/tmedia-documentation/server-and-os-administration/configuring-certificates.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.