SSL/TLS

cPanel Version: 118

This tool lets you create and handle SSL certificates, requests for signing, and keys to make your website safer. It's great for websites that deal with private info like login details and credit card numbers often. Well, actually, it's great for any website. This way, it keeps the information shared by visitors safe from hackers.

Accessing the SSL/TLS Manager

Once you've logged into cPanel, follow these steps to access the SSL/TLS Manager:

1. Log into your cPanel account
2. From the cPanel dashboard, scroll down to the Security section.
3. Click on the SSL/TLS icon.

Available Features

This interface contains the following features:

• Default SSL/TLS Key Type — Select the type of key the system uses by default for SSL/TLS certificates and certificate signing requests.
• Private Keys (KEY) — Generate, view, upload, or delete private keys.
• Certificate Signing Requests (CSR) — Generate, view, or delete SSL certificate signing requests.
• Certificates (CRT) — Set up an SSL certificate for the site.
• Install and Manage SSL for your site (HTTPS) — Generate, view, upload, or delete SSL certificates.

Default SSL/TLS Key Type

In this section, you can choose the main type of SSL/TLS key you want to use. The system will use your chosen key for setting up all new SSL/TLS certificates and requests. If you choose a new main key, it will replace the one the server was using before. To learn more about the types of keys you can choose, check the SSL/TLS Key Types guide from cPanel documentation.

1. After choosing the key type you like, click Save to update your choices.

Private Keys (KEY)

To set up an SSL certificate for your site, you need a private key first. You can generate, view, upload, or delete your private keys here.

You can create a new key or add one you already have with a *.key file.

Keys on Server

The Keys on Server table shows details about your private keys:

• Description: What the key is for.
• ID: The key's unique ID.
• Key Type: The kind of private key.
• Actions: You can edit or delete the key.

Generate a New Private Key

1. Choose a key type and, if you want, add a description.
2. Click Generate. You'll see the key. You can copy it.
3. Go back to Private Keys to see your new key listed.
4. Upload it to the server.

Upload a New Private Key

You can upload a key by pasting it or by finding a file on your computer.

Paste a Private Key

1. Paste your key into the box.
2. Add a description (optional).
3. Click Save. You'll see a message telling you if it worked.

Browse for a Private Key

1. Click to choose a *.key file.
2. Add a description (optional).
3. Click Upload. A message will tell you if it was successful.

Delete a Private Key

1. Find the key you want to delete in the list.
2. Click Delete next to it.
3. Confirm by clicking Delete Key. You'll get a message about it.

Edit and View Details About a Private Key

1. Find the key you want to edit or view.
2. Click View & Edit.
3. You can change the description and see the key.
4. Click Update to save changes. A message will show up.

Certificate Signing Requests (CSR)

This area lets you make, see, or remove a certificate signing request (CSR). You can also look at and change the details of your CSRs, including both the encoded and decoded private keys.

Certificate Signing Requests on Server

The table here shows you information about each CSR:

• Domains: The website domain for the CSR.
• Created: When you made the CSR, shown in Universal Time (UTC).
• Description: What the CSR is for.
• Actions: You can edit or delete the CSR.

Generate a New CSR

1. Go to the section for creating a new CSR and pick a key from the menu.
2. If you want to use a different key, select the type you want to create from the menu. You can also add a new key in the Private Key section.
3. Fill in all the needed information below the key selection.
4. Click Generate.

Delete a CSR

1. Find the CSR you want to remove in the list.
2. Press Delete next to it. You'll see a new page.
3. Confirm by clicking Delete CSR. You'll see a message telling you if it worked.
4. If you changed your mind, click Cancel.

Edit and View Details About a CSR

1. Find the CSR you want to change or see more about.
2. Click Edit. You'll see a page with the CSR details.
3. Change the description if you want.
4. Press Update Name to save. You'll see a message about the change.

Certificates (CRT)

This section lets you create, see, add, or remove SSL certificates.

Certificates on Server

The table here shows details about each certificate:

• Domains: What the certificate is used for.
• Issuer: The organization that gave out the certificate.
• Expiration: When the certificate will stop working, shown in Universal Time (UTC).
• Key Type: The kind of private key used.
• Description: Information about the certificate.
• Actions: You can change, remove, or install the certificate.

Upload a New Certificate

To add a new certificate:

1. Paste the certificate text or choose a certificate file.
2. Add a description (optional).
3. Click to save or upload the certificate. You'll see a message telling you if it worked.

Generate a New Certificate

To make a new self-signed certificate:

1. Pick a private key. If you need a new one, go to the Private Keys section.
2. Fill in all the required fields, like Domains and Company details.
3. Click Generate.

Delete a Certificate

1. Find the certificate you want to delete.
2. Click Delete, then confirm by clicking Delete Certificates. You'll get a message about it.

Edit and View Details About a Certificate

1. Find the certificate you want to change or view more about.
2. Click Edit to see the certificate details.
3. Make any changes to the description, then click Update Description. You'll see a message about the change.

Install a Certificate

To install a certificate, just click Install next to the one you want to use.

Install and Manage SSL for Your Site (HTTPS)

If you're a system administrator in WHM, you can add SSL certificates to cPanel accounts for your users. cPanel users can then handle these certificates for their websites.

The Manage Installed SSL Websites Table

This table shows up if a domain with a dedicated IP address already has an SSL certificate. It tells you about:

• FQDN: The domain name of the website.
• Certificate Expiration: When the certificate will expire.
• Document Root: Where the website's files are located.
• Actions: What you can do, like make a website the main one on a shared IP, uninstall or update a certificate, look at certificate details, or use the certificate for a new site.

Install an SSL Website

To add an SSL certificate to a website, you can:

1. Browse certificates already available.
2. Search by domain.
3. Manually type in the certificate details.

Browse Certificates

1. Click to see available certificates.
2. Choose the one you want and click Use Certificate to fill in the details automatically.
3. Click Install Certificate when you're done. You'll get a message about whether it worked or not.

Search by Domain

1. Choose the domain from the menu.
2. Click Autofill by Domain to fill in details automatically. If it works, the text boxes will fill in. If not, they'll stay empty.
3. Click Install Certificate. You'll see a message telling you if it was successful.

Manually Enter Information

1. Choose the domain.
2. Type in the certificate, private key, and CA bundle details.
3. Click Install Certificate. You'll get a message about the installation's success or failure.

---

External links

SSL/TLS - cPanel Documentation