(WHM >> Home >> SSL/TLS >> Manage AutoSSL)
This interface allows you to manage the AutoSSL feature, which automatically installs domain-validated SSL certificates for the Apache®, Dovecot®, Exim, Web Disk, and cPanel Server services for users' domains. It also allows you to review the feature's log files and select which users receive AutoSSL certificates.
Click Run AutoSSL for All Users at the top of the interface to run the AutoSSL feature for all users for whom you enabled the feature.
The system automatically polls the cPanel AutoSSL certificate provider to determine each pending certificate's status:
The cPanel (powered by Comodo®) provider does not request additional certificates for a web virtual host if the provider already possesses a pending certificate request for that web virtual host.
|Age of certificate request||Polling frequency|
|Less than one day.||Once per five minutes.|
|Between one and two days.||Once per hour.|
|More than two days.||Once per day.|
When AutoSSL runs, the system performs a preflight check. This check adds a Certificate Authority Authentication (CAA) record in the domain's zone file before AutoSSL orders a new certificate for that domain.
The AutoSSL Providers tab allows you to select which provider you want to handle your AutoSSL management. For more information about each provider, their services, and general usability, click Show/Hide Details. This action displays a table that scores each provider by their AutoSSL services and capabilities. These usability scores are measured with a star () icon. Certain provider capabilities and features affect and contribute to their overall usability score.
For example, an AutoSSL provider with an six-star score may look like the following:
The system calculates the cPanel (powered by Comodo) provider's usability score by its ability to:
The provider details table contains the following information:
|Provider||The AutoSSL provider. Select Disabled to disable the AutoSSL feature.|
The total score of a provider, which its AutoSSL capabilities determine. This score is the sum of each provider's DCV Methods, Ancestor DCV Support, Domains per Certificate, Average Delivery Time, Maximum Number of Redirects, and Rate Limit capabilities. A provider can attain a rating up to eight stars.
|DCV Methods||The DCV methods that the provider offers. A provider can receive a total of two stars per DCV method if they support Ancestor DCV. If they do not support Ancestor DCV, the provider receives one star per DCV method.|
|Ancestor DCV Support|
Whether the successful DCV of a parent domain implies success of a subdomain. For example, if the
|Domains per Certificate||The number of unique domains per certificate. A provider can receive a total of one star.|
|Delivery Method||The means through which the provider issues a certificate, via the api, queue, or Unspecified method.|
|Average Delivery Time||The amount of time the provider requires to issue a certificate, if specified. A provider can receive a total of one star.|
|Validity Period||The period of time before the certificate expires, or Unspecified.|
|Maximum Number of Redirects||The maximum number of redirects a domain can use and still pass an HTTP-based DCV. A provider can receive a total of one star.|
The number of certificates the provider registers per domain per week, or Unspecified. A provider can receive a total of one star.
If the AutoSSL provider requires a Terms of Service or other similar agreement, review it and select the appropriate checkbox to agree to those terms.
If a provider updates their Terms of Service, you may need to return to this interface to agree to them.
The Options tab allows you to configure various options for AutoSSL.
The notification options allow you to select the frequency at which your users receive AutoSSL-related notifications.
You can select from the following notification options for your cPanel users:
This setting defaults to
You can select from the following notification options for your reseller and WHM users:
This setting defaults to
This option allows AutoSSL to replace certificates that the AutoSSL system did not issue. When you enable this option, AutoSSL will install certificates that replace users’ non-AutoSSL certificates if they are invalid or expire within 3 days.
Use the Logs tab to review the system's AutoSSL log files. To view a specific log, select it from the menu and click View Log to display the its information.
The system stores the log files in both text and JSON format in the
The Manage Users tab allows you to override your server's feature list settings and control whether AutoSSL is enabled for your users. Use the search text box to locate specific users, or use the check box and menu to select all users or clear your current selections.
User feature lists may differ, based on the user's assigned package. For more information, read our Feature Manager documentation.
You can select from the following Toggle AutoSSL options for individual users and select users:
You can use the Check button to perform a domain check for a specific user.
The Pending Queue section of the interface lists the status and the details of the pending AutoSSL jobs on your server.
Use the navigation controls at the top of the table to sort and search through the list.