Install SSL certificate in cPanel


EXPERIENCING PROBLEMS WITH OUR SERVICES? RUN A DIAGNOSE FIRST TO SAVE YOURS AND OUR TIME

Added: 10.03.2014 23:26:29     Last updated: 16.01.2017 23:27:12

This guide shows how to install a SSL certificate in cPanel.

The guide should only be followed if you order a SSL certificate via external supplier. Installing of such SSL certificate in cPanel is done in the following way:

Step 1:
Log in to your cPanel account and find SSL/TLS, under the tab "Security".

Find SSL/TLS icon in cPanel

Step 2:
Click on "Private keys (KEY)".

Go to private keys in cPanel

  1. Choose "Key size" - The size of the key to the certificate. The bigger it is, the more difficult it is to break it for intruders, but we recommend that you choose 2048-bit.
  2. Type a description of the key if you want. This will not be visible anywhere else than in cPanel.
  3. Then you click on "Generate" to create the private key.

Generate private keys in cPanel for your SSL certificate

You will then see the following:

Completed creating private key for your SSL certificate


Step 3:
Then click on "Requests of certificate signing (CSR)". You must then specify the following:

  • Key
    The size of the key to the certificate. The bigger it is, the more difficult it is to break it for intruders. The suppliers require minimum a 2048-bit key. Bigger keys does so that it takes longer to communicate safe, but increases the security.
  • Domains
    The domains the SSL certificate shall apply for. Specify more domains only if you are ordering a multi domain SSL certificate.
  • City
    The city where the entity using the certificate is located in.
  • County (current translation of cPanel shows wrong title here)
    The county where the entity using the certificate is located in.
  • Country
    The country where the entity using the certificate is located in.
  • Company
    The company new of the entity using the certificate. Avoid special characters, since they can lead to problems when you order from suppliers.
  • Business department (optional)
    The company's department for the entity using the certificate. Avoid special characters, since they can lead to problems when you order from suppliers.
  • Email (optional)
    Email that you want to confirm the certificate through. This is usually ignored by suppliers, but we recommend that you type an email associated with the company anyway.
  • Password (optional)
    Password used for generating CSR. Since the password is stored in CSR in clear text, you should not type a password you do not want other people to know.
  • Description (optional)
    Description of CSR for yourself, which is only visible in cPanel.

When the information above has been specifies, click on "Generate"

Create CSR for your SSL certificate

You will then see the following:

Completed generation of CSR in cPanel


Save Encoded CSR as this must be supplied when ordering a SSL certificate.

Step 4:
Order the SSL certificate from external supplier with CSR from step 3.

Step 5:
When your SSL certificate has been issued from the supplier, you can install it via cPanel. You should now have the certificate in PEM (Privacy Enhanced Mail) format, as well as one or more CA (Certificate Authority) certificates in PEM format. Example of PEM format:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


You must go to "Install and treat SSL for your area (HTTPS)" to install the SSL certificate:

  1. Choose the domain you want to install SSL on
  2. Add the certificate in PEM format in the CRT field that you have received from your supplier
  3. Add the Private Key from step 2
  4. Add the CA scertificated in the CABUNDLE field that you have received from your supplier
  5. When all the information has been added, you can click on "Install certificate"

Install SSL certificate in cPanel

After completed installation you will find the certificate in the overview under "Certificates".

Done
We have now been through how to install a SSL certificate via cPanel.