...
Additionally the in-browser phone requires a secure connection with a valid certificate. There is currently no way around this. You can get a free certificate through Let's Encrypt with the Certification Manager module.
Ports
Summary of ports and services related to WebRTC. If the PBX is behind a router, set up port forwarding as appropriate. Use the PBX Firewall module to limit access to trusted hosts only where possible.
...
The UCP Phone can be enabled per user or per group in the User Management Module under the UCP > Phone tab.
...
If you have not previously correctly configured Certification Manager you will not be able to enable the phone in UCP
...