This tutorial will guide you through the steps of obtaining a Free SSL certificate via Let’s Encrypt and use that SSL certificate to secure the FreePBX web interface.

There are a couple of pre-requisites that you must have:

  • You must be running FreePBX 13 or higher
  • Make sure that all module and distribution updates have been applied
  • A valid DNS “A” record that resolves to your PBX’s IP.
  • The Let’s Encrypt service running on port 80.

The DNS entry needs to be set up with the DNS provider for your domain. An example DNS record would be: –

Next you will need to move your Admin Web Interface to a separate port, and move the Let’s Encrypt service to port 80. This is done via Admin > System Admin > Port Management and should look something like this:

Set port for LE

Once you have that completed, we can request the SSL certificate from Let’s Encrypt. From your FreePBX admin web interface, Choose Admin, Certificate Management:

Freepbx ssl

Next we will Choose “New Certificate”, “Generate Let’s Encrypt Certificate”:

Freepbx ssl

Next, if you have the FreePBX firewall enabled (which we recommend) you will need to allow Let’s Encrypt and access to your PBX. This only allows Let’s Encrypt and access to the web URL for your PBX so they can verify that there is a web server on the IP. They do not have access to actually log into your PBX.

Freepbx ssl

Click “Update Firewall” to allow the access. Next, you will need to fill in the following:

  • Host Name – This is a valid DNS entry (like
  • Description – We suggest that you use the same name as “Host Name”.
  • Country – The country that your business is located in.
  • State/Province – The state/province your business is located in

An example screen is shown here:

Freepbx ssl

Click “Generate Certificate” to submit the SSL certificate request to Let’s Encrypt. The SSL certificate should now show in your list of SSL certificates:

Freepbx ssl

We can now use this SSL certificate to secure the web interface the PBX. From the PBX admin choose Admin, System Admin. In the right-hand menu, choose HTTP Setup:

Freepbx ssl

Click on Settings:

Freepbx ssl

Choose the SSL certificate that you created above and click ‘Install”

Your PBX now has a valid SSL certificate installed and you can access it via the https:// protocol!