TLS Settings Overview

Transport Layer Security (TLS) is the industry-standard protocol used to secure communication across networks.
Within Mobius, TLS Settings act as a unified security layer that protects all communication, including SIP traffic and signaling, through strong encryption.

Core TLS Components

TLS configuration is based on three essential elements that together define the identity of your system:

Private Key

• Secret cryptographic file
• Used to decrypt data and prove ownership
• Must be kept secure and never exposed

Identity Certificate

• Digital identity of the system
• Used during TLS handshake to establish trust
• Confirms that the server is legitimate

Certificate Chain

• Includes intermediate and root certificates
• Establishes a trusted path to a Certificate Authority (CA)
• Ensures external systems can verify your identity

Important:
All components (Key, Certificate, Chain) must be in PEM format for compatibility.

TLS Version

Selecting the correct TLS version ensures:

• Compliance with modern security standards
• Compatibility with external systems
• Protection against outdated and vulnerable protocols

Global vs Custom TLS Configuration

By default, TLS Settings act as a global security baseline:

• Applied across:
  • Management Interface
  • Communication Protocols
  • All TLS-enabled modules

This ensures consistent security across the entire platform.

Custom Configuration (Override)

The platform also allows flexibility:

• Modules can override global TLS settings
• Custom certificates and configurations can be applied
• Enables service-specific security logic

👉 This is useful when different services require different security levels or identities.

Advanced Security Features

Client Certificate Verification

• Enables mutual TLS authentication (mTLS)
• Both client and server verify each other
• Only trusted endpoints can connect

Result

Once configured, TLS Settings:

• Secure all communication channels
• Protect data from interception
• Ensure trusted connections across the system

 The gateway becomes a fully hardened and secure access point, ready for production environments.