How-to Configure Linphone for Encrypted Communication

Problem

You need to configure the Linphone softphone app to access your ClusterPBX SIP account over a secure TLS channel.

Intended Audience

User

Step-by-Step Guide

1. Download Linphone for the desired platform from the official web site

   Direct links for Windows

   Windows 32-bit Linphone 4.11

   Windows 32-bit Linphone 3.11

   Other versions and Operating Systems

   https://www.linphone.org/

2. Install the application
   • Windows: run the setup
   • Mac OS X: Open the .dmg file and drag the file to the Applications folder
   • Smartphones/Tablets: User their respective appstore
3. Open the Linphone application
4. Click the ASSISTANT button to start the configuration assistant

   

5. Click the FETCH REMOTE CONFIGURATION button

   

6. Enter the URL provided below under FETCH REMOTE CONFIGURATION

   URL

   https://www.clusterpbx.cloud/assets/linphone_srtp_base.xml

7. Click the FETCH button to download the security certificate

   

8. Click Confirm when asked if you want to reboot now to apply the change
9. Click the ASSISTANT button on the application’s main screen
10. Click the USE A SIP ACCOUNT button on the WELCOME screen

    

11. Enter the information of your SIP account as found on your ClusterPBX account’s My Softphone page (available only to User accounts)

    

    • Username: User Name on the My softphone page (your extension)
    • Display name (optional): you may want to type your name there
    • SIP Domain: the Server on the My Softphone page – also your ClusterPBX realm – add port :8061 to the server name

      Example

      xxx.yyy.clusterpbx.zzz:8061

    • Password: your softphone password – Secret on the My softphone page
    • Transport: pick TLS
12. Click the Use button when all the information is entered
13. Click the Active account button at the top right to switch to the account you just created

    

14. Select the account under the Active account drop down menu

    

15. Click OK to connect to it – You are done, unless you are on an encrypted VoIP system
16. Go the application’s Preferences

    Windows

    

    Mac OS X

    

17. Under the SIP Accounts tab, Edit your account by pressing the edit button () beside the sip account

    

18. Change the Registration duration (sec) value to 600
19. Click Publish presence information

    

20. Click the Confirm button
21. Click the Calls and Chat tab

    

22. Select SRTP encryption – that will work only if you are on a connection encrypted with TLS
23. Pick your desired Language from the dropdown menu under the User Interface tab (the default is your system language)

    

24. (Optional) Click the Advanced tab and activate the Logs enabled option

    

Your communications are now secure.