Page tree
Skip to end of metadata
Go to start of metadata

For cPanel & WHM version 58 

(Home >> Security >> SSL/TLS Manager >> Manage SSL Hosts )

Overview

In WHM, system administrators can create and install SSL certificates for their users' cPanel accounts. cPanel users can manage the certificates that correspond to their domains. This interface allows you to perform the following actions:

  • Change the primary domain on a shared IP address.
  • Update a certificate.
  • Uninstall a certificate.
  • View a certificate's details.
  • Use a certificate for another site.
  • Enable Server Name Indication (SNI) for mail services.

    Warning:

    Mail SNI is not compatible with Webmail and will not function for any Webmail connection. Webmail connections use the cPanel service SSL certificate. 

     

The Manage Installed SSL Websites table

If a SSL certificate already exists on a domain with a dedicated IP address, the interface displays the Manage Installed SSL Websites table below the introductory text.

ColumnDescription
DomainsThe website's domain name.
IP AddressThe website's IP address.
Is Primary Website on IP Address?

Indicates whether the website is the primary domain for its IP address. 

Note:

This column does not appear on systems that do not support SNI, unless a dedicated IP address exists on the cPanel account.

Is Web SNI Required?

Indicates whether you must assign an SNI to the certificate. Typically, you must have an SNI when there are multiple domains that share the same IP address. 

Note:

This column does not appear on systems that do not support SNI, unless a dedicated IP address exists on the cPanel account.

Is Mail SNI Enabled?

Indicates whether the certificate has SNI enabled for mail services. Mail SNI allows you to configure the mail services to use the SSL certificate for your domain instead of the server's default certificate.

Note:

This column does not appear on systems that do not support SNI, unless a dedicated IP address exists on the cPanel account.

Certificate ExpirationThe date when the certificate expires.
Document RootThe location of the domain's website files.
ActionsYou can perform the following actions: 
  • Make Primary – Make this website the main domain on the shared IP address. A success or failure message will appear above the table. 

    Note:

    This action only appears for non-primary websites.

  • Update Certificate—Update the SSL certificate. The Install an SSL Host section will appear below the table where you modify the form.
  • Uninstall—Uninstall the SSL certificate. A message will appear to confirm the action. Click Proceed to continue, or click Cancel to return to the Manage Installed SSL Hosts section.
  • Certificate Details—View additional information about the certificate.
  • Use Certificate for New Site—Use the certificate for another website, addon domain, or subdomain. The Install an SSL Host section will appear below the table where you can modify the form to change the Domain menu.

Install an SSL Website

Use the form in the Install an SSL Website section to install a certificate. You can use three different methods to install a certificate:

  • Click Browse Certificates.
  • Search by domain.
  • Manually enter the information.

Browse Certificates

To use Browse Certificates to install a certificate, perform the following steps:

  1. Click Browse Certificates
  2. Click the button that corresponds to the desired certificate. 

    Note:

    Only certificates that correspond to a domain appear in the list.

  3. Click Use Certificate to return to the Install an SSL Host section. The certificate's information will appear in the text boxes.
  4. Enter the appropriate information in the Certificate Authority Bundle: (CABUNDLE) text box. 

    Note:

    $body

  5. Select the checkbox to Enable SNI for Mail Services. Mail SNI allows you to configure the mail services to use the SSL certificate for your domain instead of the server's default certificate.
  6. Click Install Certificate. A success or failure message will appear.

Search by domain

To search by domain to install a certificate, perform the following steps: 

  1. Select the desired domain in the Domain menu.
  2. Click Autofill by Domain. The interface will attempt to retrieve and enter the certificate information.
    • If this step succeeds, the available text boxes will contain the appropriate information.
    • If this step does not succeed, the text boxes will remain empty.
  3. Select the checkbox to Enable SNI for Mail Services. Mail SNI allows you to configure the mail services to use the SSL certificate for your domain instead of the server's default certificate.
  4. Click Install Certificate. A success or failure message will appear.

Manually enter information

To manually enter the information to install a certificate, perform the following steps:

  1. Select the desired domain in the Domain menu.
  2. Enter the certificate information in the Certificate (CRT) text box.
  3. Enter the private key information in the Private Key (KEY) text box.
  4. Enter the certificate authority information in the Certificate Authority Bundle (CABUNDLE) text box. 

    Note:

    $body

  5. Select the checkbox to Enable SNI for Mail Services. Mail SNI allows you to configure the mail services to use the SSL certificate for your domain instead of the server's default certificate.
  6. Click Install Certificate. A success or failure message will appear.