Page tree
Skip to end of metadata
Go to start of metadata

This document is for a previous release of cPanel & WHM. To view our latest documentation, visit our Home page.

For cPanel & WHM 11.48

 

(Home >> Security >> SSL/TLS Manager >> Manage SSL Hosts )

Overview

Note:

To view this interface, your domain must have a dedicated IP address, or your server must support SNI.

In WHM, system administrators can create and install SSL certificates for their users' cPanel accounts. cPanel users can manage the certificates that correspond to their domains. This interface allows you to perform the following actions:

  • Change the primary domain on a shared IP address.
  • Update a certificate.
  • Uninstall a certificate.
  • View a certificate's details.
  • Use a certificate for another site.
  • Enable Server Name Indication (SNI) for mail services.

The Manage Installed SSL Websites table

If you have already installed a certificate on a domain with a dedicated IP address, you will see the Manage Installed SSL Websites table below the introductory text.

ColumnDescription
DomainsThe website's domain name.
IP AddressThe website's IP address.
Is Primary Website on IP Address?

Indicates whether the website is the primary domain for its IP address. 

Note:

This column will not appear on systems that do not support SNI, unless the cPanel account has a dedicated IP address.

Is Web SNI Required?

Indicates whether you must assign an SNI to the certificate. Typically, you must have an SNI when there are multiple domains that share the same IP address. 

Note:

This column will not appear on systems that do not support SNI, unless the cPanel account has a dedicated IP address.

Is Mail SNI Enabled?

Indicates whether the certificate has Server Name Indication (SNI) enabled for mail services. Mail SNI allows you to configure the mail services to use the SSL certificate for your domain instead of the server's default certificate.

Note:

This column will not appear on systems that do not support SNI, unless the cPanel account has a dedicated IP address.

Certificate ExpirationThe date when the certificate will expire.
Document RootThe location of the domain's website files.
ActionsYou can perform the following actions: 
  • Make Primary – Make this website the main domain on the shared IP address. A success or failure message will appear above the table. 

    Note:

    This action only appears for non-primary websites.

  • Update Certificate—Update the SSL certificate. The Install an SSL Host section will appear below the table where you modify the form.
  • Uninstall—Uninstall the SSL certificate. A message will appear to confirm the action. Click Proceed to continue, or click Cancel to return to the Manage Installed SSL Hosts section.
  • Certificate Details—View additional information about the certificate.
  • Use Certificate for New Site—Use the certificate for another website, addon domain, or subdomain. The Install an SSL Host section will appear below the table where you can modify the form to change the Domain menu.

Install an SSL Website

Use the form in the Install an SSL Website section to install a certificate. There are three different methods that you can use to install a certificate:

  • Click Browse Certificates.
  • Search by domain.
  • Manually enter the information.

Browse Certificates

To use Browse Certificates to install a certificate, perform the following steps:

  1. Click Browse Certificates
  2. Click the button that corresponds to the desired certificate. 

    Note:

    Only certificates that correspond to a domain will appear in the list.

  3. Click Use Certificate to return to the Install an SSL Host section. The certificate's information will appear in the text boxes.
  4. (Optional) Enter the appropriate information in the Certificate Authority Bundle: (CABUNDLE) text box. 

  5. Select the checkbox to Enable SNI for Mail Services. Mail SNI allows you to configure the mail services to use the SSL certificate for your domain instead of the server's default certificate.
  6. Click Install Certificate. A success or failure message will appear.

Search by domain

To search by domain to install a certificate, perform the following steps: 

  1. Select the desired domain in the Domain menu.
  2. Click Autofill by Domain. The interface will attempt to retrieve and enter the certificate information.
    • If this step is successful, the available text boxes will contain the appropriate information.
    • If this step is unsuccessful, the text boxes will be empty.
  3. Select the checkbox to Enable SNI for Mail Services. Mail SNI allows you to configure the mail services to use the SSL certificate for your domain instead of the server's default certificate.
  4. Click Install Certificate. A success or failure message will appear.

Manually enter information

To manually enter the information to install a certificate, perform the following steps:

  1. Select the desired domain in the Domain menu.
  2. Enter the certificate information in the Certificate (CRT) text box.
  3. Enter the private key information in the Private Key (KEY) text box.
  4. (Optional) Enter the certificate authority information in the Certificate Authority Bundle (CABUNDLE) text box. 

  5. Select the checkbox to Enable SNI for Mail Services. Mail SNI allows you to configure the mail services to use the SSL certificate for your domain instead of the server's default certificate.
  6. Click Install Certificate. A success or failure message will appear.