How to Configure SSL Certificates in cPanel Print

SSL (Secure Socket Layer) certificates are essential for securing data between your website and its visitors. Configuring SSL ensures that your website appears trustworthy to visitors and enhances SEO rankings. This guide will walk you through the process of installing and managing SSL certificates in cPanel.

1. Installing a Free SSL Certificate via AutoSSL

cPanel offers a convenient way to install SSL certificates for free via AutoSSL. AutoSSL automatically provides SSL certificates for your domains and installs them, ensuring your website is secured.

Steps to Install an AutoSSL Certificate:

1. Log in to your cPanel account.
2. In the "Security" section, click on "SSL/TLS".
3. Scroll down to the "AutoSSL" section.
4. Click on "Run AutoSSL" to start the process. cPanel will automatically generate and install SSL certificates for all eligible domains on your account.

After installation, you will see the SSL status for each domain under the "SSL/TLS" section in cPanel. If AutoSSL cannot install SSL for any domain, you will be notified with an error message.

2. Installing a Paid SSL Certificate

If you've purchased a premium SSL certificate from a third-party provider, you can manually install it through cPanel.

Steps to Install a Paid SSL Certificate:

1. Log in to your cPanel account.
2. Navigate to the "Security" section and click on "SSL/TLS".
3. Under the "Install and Manage SSL for your site" section, click on "Manage SSL sites".
4. In the "Install an SSL Website" section, select the domain you want to secure from the drop-down menu.
5. Copy and paste the following information into the corresponding fields:
• Certificate (CRT): Paste the SSL certificate you received from the provider.
• Private Key (KEY): Paste the private key associated with your SSL certificate.
• Certificate Authority Bundle (CABUNDLE): Paste the CA Bundle provided by your SSL certificate provider (if applicable).
6. Click "Install Certificate" to complete the installation process.

Once the SSL certificate is installed, your domain will be secured, and visitors will see the HTTPS protocol in their browsers, indicating that the site is secure.

3. Enabling HTTPS for Your Website

After installing the SSL certificate, you'll want to ensure that your website loads securely over HTTPS rather than HTTP. This will prevent any warnings in visitors' browsers and provide a more secure browsing experience.

Steps to Force HTTPS on Your Website:

1. In cPanel, go to the "Domains" section and click on "Redirects".
2. In the "Type" field, select "Permanent (301)" to set up a permanent redirect from HTTP to HTTPS.
3. In the "https?://(www.)" field, choose the domain you want to redirect from.
4. In the "Redirects to" field, enter the URL with HTTPS (e.g., https://www.yourdomain.com).
5. Check the box for "Wild Card Redirect" if you want to force HTTPS on all subdomains.
6. Click "Add" to save the redirect.

This will ensure that all visitors to your website are automatically redirected to the secure version of your site (HTTPS).

4. Troubleshooting SSL Issues

If you encounter any issues with your SSL certificate, such as security warnings or errors in the browser, here are some common troubleshooting steps:

• Check Certificate Installation: Ensure the SSL certificate is correctly installed in the cPanel "SSL/TLS" section under "Manage SSL sites."
• Clear Your Browser Cache: Sometimes, browsers may cache outdated SSL information. Try clearing your browser cache or accessing the site in an incognito window.
• Mixed Content Issues: If your website contains links to resources (images, scripts, etc.) using HTTP instead of HTTPS, you may encounter "mixed content" warnings. Update the links to HTTPS or use relative URLs.
• Check Domain Name Matching: Ensure that the domain name in the SSL certificate matches the domain you are securing. If not, you may need to reissue the certificate for the correct domain.

5. Renewing Your SSL Certificate

SSL certificates are typically valid for one year, after which they need to be renewed. If you're using AutoSSL, the renewal process will be handled automatically. However, for third-party certificates, you will need to manually renew them before they expire.

Steps to Renew Your SSL Certificate:

1. Contact your SSL certificate provider to renew your certificate.
2. Once you receive the renewed certificate, log in to cPanel and go to "SSL/TLS".
3. Under the "Manage SSL sites" section, select the domain and click "Update Certificate".
4. Paste the new certificate, private key, and CA Bundle into the appropriate fields and click "Install Certificate" to complete the renewal process.

6. Important Notes on SSL Certificates

• AutoSSL is available for all cPanel accounts and automatically installs SSL certificates for all your domains, ensuring they are secure.
• For third-party SSL certificates, always keep your private key safe and secure, as it is essential for your site's security.
• For best security practices, ensure that your website is configured to load exclusively over HTTPS, and use strong ciphers for your SSL/TLS connections.

Summary: Key SSL Certificate Actions

Securing your website with an SSL certificate is a crucial step in maintaining trust and privacy for your visitors. By following this guide, you can ensure your site is properly secured and accessible over HTTPS.