# Adding TLS to ECC / CURRI Endpoint
Call Telemetry supports TLS on ECC / CURRI Endpoint.
You need to generate a public and private certificate file. You will need to make your own certificate request. Generating the actual certificate is beyond the scope of this tech article. I assume you will come back with .PEM files of a public and private key.
Once created, you need 2 files
# Copy the Cert
Copy them to /home/calltelemetry/cert/ folder on the Call Telemetry server. The easiest and most secure way is to use SFTP on port 2222 to upload the file to the server. Create the folder "cert" under /home/calltelemetry
# Add to Docker, under web:
Add this line to the docker-compose.yml. It will mount the "cert" folder into the docker container, allowing your cert to be used.
web: image: "calltelemetry/web:0.6.9" environment: (...skipped...) (add these line below) - CERT_PUBLIC=/home/app/cert/appliance.pem - CERT_KEY=/home/app/cert/appliance_key.pem volumes: - .cert:/home/app/cert
# Restart Docker Service
systemctl restart docker-compose-app.service
# Test with Browser
Open https://calltelemetry-server:8443 (which is the CURRI API) and confirm the certificate is presented correctly with your browser.
# Add the Certificate to Cisco Callmanager Service
- Add the CA Root so that your certifiate is trusted.
# Restart Callmanager Service
# Change ECC Service to HTTPS
Within Callmanager, Change the ECC profile to https://calltelemetry-server:8443 and save