Page tree
For cPanel & WHM version 84
Skip to end of metadata
Go to start of metadata

(cPanel >> Home >> Security >> SSL/TLS)

Overview

This document describes the Install and Manage SSL for your site interface in cPanel's SSL/TLS interface (cPanel >> Home >> Security >> SSL/TLS). To access this interface, click Manage SSL sites.

In WHM, system administrators can create and install SSL certificates for their users' cPanel accounts. cPanel users can manage the certificates that correspond to their domains. This interface allows you to perform the following actions:

  • Change the primary domain on a shared IP address.
  • Update a certificate.
  • Uninstall a certificate.
  • View a certificate's details.
  • Use a certificate for another site.

Warnings:

  • Mail SNI is  not  compatible with Webmail and will  not  function for any Webmail connection. Webmail connections use the cPanel service SSL certificate.
  • As of cPanel & WHM version 68, we only support Transport Layer Security (TLS) protocol version 1.2
    • We will only support applications that use TLSv1.2
    • We strongly recommend that your hosting provider enable TLSv1.2 for your account. 

The Manage Installed SSL Websites table

If a SSL certificate already exists on a domain with a dedicated IP address, the interface displays the Manage Installed SSL Websites table below the introductory text.

ColumnDescription
FQDNThe website's domain name.
Certificate ExpirationThe date when the certificate expires.
Document RootThe location of the domain's website files.
Actions
You can perform the following actions: 
  • Make Primary Make this website the main domain on the shared IP address. A success or failure message will appear above the table. 

    Note:

    This action only appears for non-primary websites.

  • Uninstall — Uninstall the SSL certificate. A message will appear to confirm the action. Click Proceed to continue, or click Cancel to return to the Manage Installed SSL Hosts section.
  • Update Certificate — Update the SSL certificate. The Install an SSL Host section will appear below the table where you modify the form.
  • Certificate Details — View additional information about the certificate.
  • Use Certificate for New Site — Use the certificate for another website, addon domain, or subdomain. The Install an SSL Host section will appear below the table where you can modify the form to change the Domain menu.

Install an SSL Website

Use the form in the Install an SSL Website section to install a certificate. You can use three different methods to install a certificate:

  • Click Browse Certificates.
  • Search by domain.
  • Manually enter the information.

Browse Certificates

To use Browse Certificates to install a certificate, perform the following steps:

  1. Click Browse Certificates
  2. Click the button that corresponds to the desired certificate. 

    Note:

    Only certificates that correspond to a domain appear in the list.

  3. Click Use Certificate to return to the Install an SSL Host section. The certificate's information will appear in the text boxes.
  4. Enter the appropriate information in the Certificate Authority Bundle: (CABUNDLE) text box. 

    Note:

    This step is optional.

  5. Click Install Certificate. A success or failure message will appear.

Search by domain

To search by domain to install a certificate, perform the following steps: 

  1. Select the desired domain in the Domain menu.
  2. Click Autofill by Domain. The interface will attempt to retrieve and enter the certificate information.
    • If this step succeeds, the available text boxes will contain the appropriate information.
    • If this step does not succeed, the text boxes will remain empty.
  3. Click Install Certificate. A success or failure message will appear.

Manually enter information

To manually enter the information to install a certificate, perform the following steps:

  1. Select the desired domain in the Domain menu.
  2. Enter the certificate information in the Certificate (CRT) text box.
  3. Enter the private key information in the Private Key (KEY) text box.
  4. Enter the certificate authority information in the Certificate Authority Bundle (CABUNDLE) text box. 

    Note:

    This step is optional.

  5. Click Install Certificate. A success or failure message will appear.