How to Install an SSL Certificate

  Print

How to install an SSL Certificate


Once you have ordered a certificate, you will need to install it.


Installing an SSL on CPanel

Step 1 - Once you've purchased a certificate, you will receive an email titled: Your SSL Certificate - Installation Instructions. Keep this open and take note of the Token, then move onto Step 2.

ordersslpic05.png


Note:
If you don't have access to this email, open your client area and click on Security Services on the Dashboard.

1b211ecef3116c6a62d4535d9a865a54bae28dda?t=cef1c6b7a47a57b6599dc848bd3abcf0


You can then click on the View Details option next to the certificate you would like to install:

a84ce08c213d99d4f9b59d55a6a00fc6c7f5a00b?t=21a0db1596c64b6b5a645723bec79fc9

Copy the token code that is displayed on the certificate details page.


Step 2 - Log into cPanel and click on AutoInstall SSL.

ordersslpic06.png



Step 3 -
Paste the token from the email and click Verify Token, which will log you into the AutoInstall management area.

ordersslpic07.png



Step 4 - Select your Domain. You can choose the primary domain, a subdomain or an addon domain to add the SSL to. You cannot add an SSL to an Alias/Parked domain. Also, make sure that the 2 check boxes are enabled.
Note: If you are installing this SSL on a subdomain like "example.yourdomain.net.au", do not check the box for "Would you like to use 'www'?".

ordersslpic08.png



Step 5 - Add your personal details. Make sure there are no spaces either to the left or right of each field. Click Submit once you're done.

ordersslpic09.png


Note: Occasionally, you may get this error. If you do, wait 30 minutes and click on the Click Here button.

ordersslpic10.png

If that fails, you may need to wait 1 hour and complete the steps in the Reinstalling an SSL tab below. Some SSL orders are randomly chosen to go through a manual verification process for security purposes, and this is the reason for this issue. In this case, the only option is to wait.

After all the processing steps are completed, your SSL should now be installed. In order to test this, you can use this external tool. If your site is still showing "Not Secure" or loads without a padlock, you may be serving Mixed Content.
eccb0de86efa4f12c50d9a920ef06bedf1f4815a?t=be7efcb799233868bf6cb59b8791547a
f329d42b8386307e5661d1c668f5e3463fefec47?t=576b538815b1015962a19753d637ad88

In order to check Mixed Content you can use this tool, but to resolve this you will need to contact your website developer.
Note: Installing an SSL certificate is not all that's needed to have your site load with the padlock icon. You will also need to force your site to use https/SSL.


Installing an SSL on Plesk

Step 1 -
Once you've purchased a certificate, you will receive an email titled: Your SSL Certificate - Installation Instructions. Keep this open and take note of the Token, then move onto Step 2.

00e72139c8e0aa8ee54d440a69ddf18d2e651837?t=1ec5ef80890fc77ab4dbc1e369b7b1f8

Note:
If you don't have access to this email, open your client area and click on Security Services on the Dashboard.

1b211ecef3116c6a62d4535d9a865a54bae28dda?t=cef1c6b7a47a57b6599dc848bd3abcf0


You can then click on the View Details option next to the certificate you would like to install:

a84ce08c213d99d4f9b59d55a6a00fc6c7f5a00b?t=21a0db1596c64b6b5a645723bec79fc9

Copy the token code that is displayed on the certificate details page.


Step 2 - Log into Plesk by following this guide, then click on AutoInstallSSL from the Websites & Domains page.

36e01e5da819fa060c691c219f0020bde4cac7a3?t=e14dbbdee35bdfac4476e620aee0c415


Step 3 - Paste the token from the email and click Verify Token.

e5a1610db9e8c4e48b332ac3b44269622259aee2?t=576134f70f66d2ccfceb5caa27bf4e01



Step 4 -
Select your Domain. You can choose the primary domain, a subdomain or an addon domain to add the SSL to. You cannot add an SSL to an Alias/Parked domain. Also, make sure that the 2 check boxes are enabled.
Note: If you are installing this SSL on a subdomain like "example.yourdomain.net.au", do not check the box for "Would you like to use 'www'?".

ordersslpic08.png


Step 5 - Add your personal details. Make sure there are no spaces either to the left or right of each field. Click Submit once you're done.

ordersslpic09.png


Note: Occasionally, you may get this error. If you do, wait 30 minutes and click on the Click Here button.

ordersslpic10.png

If that fails, you may need to wait 1 hour and complete the steps in the Reinstalling an SSL tab below. Some SSL orders are randomly chosen to go through a manual verification process for security purposes, and this is the reason for this issue. In this case, the only option is to wait.

After all the processing steps are completed, your SSL should now be installed. In order to test this, you can use this external tool. If your site is still showing "Not Secure" or loads without a padlock, you may be serving Mixed Content.
eccb0de86efa4f12c50d9a920ef06bedf1f4815a?t=be7efcb799233868bf6cb59b8791547a
f329d42b8386307e5661d1c668f5e3463fefec47?t=576b538815b1015962a19753d637ad88

In order to check Mixed Content you can use this tool, but to resolve this you will need to contact your website developer.
Note: Installing an SSL certificate is not all that's needed to have your site load with the padlock icon. You will also need to force your site to use https/SSL.


Reissuing or Reinstalling
In certain cases, you may need to Reissue or Reinstall an SSL. If this is needed, you can follow these additional steps:

How to reissue an SSL Certificate
Note: You would usually not need to reissue a certificate once issued, but if you want to update any SSL information or if an SSL signing authority changes, this may become necessary.

Step 1 - Follow steps 1 - 3 in the Installing an SSL section to log into the AutoInstall SSL tool. Once logged in, you should see options to manage your active certificate:

59447889b246c661752634f6468b8b9cf0a0c93b?t=63622dada9340ada3c783fa18ed2b124


Step 2 - Select the Re-issue certificate option. You will then need to enter in SSL details again, and select Submit. The certificate will go through the reissuing process, and once complete you can use this tool to confirm it has been reissued successfully.

ordersslpic09.png


Note: Similar to issuing a certificate, you may get this error in some cases. If you do, wait 30 minutes and click on the Click Here button.

ordersslpic10.png

If that also fails, you may need to wait 1 hour and complete the steps in the Reinstalling an SSL tab below.

How to reinstall an SSL Certificate
Step 1 - Follow steps 1 - 3 in the Installing an SSL section to log into the AutoInstall SSL tool. Once logged in, you should see a page like this:

040b4d40ed2959c705a89b15b9a66154888c960c?t=bd5b8c14d4966a653a157fb27b7ac493


Step 2 - Check if the certificate status is ACTIVE. If so, click Re-install certificate, and you will be done.


Troubleshooting:
If the status is PENDING or otherwise, the SSL validation has not yet completed.

Step 3 - Make sure the website is loading from our server. Use a DNS checker like whatsmydns.net to make sure the IP address of the A record is the same as your server IP. You can find your server IP in the "Hosting Account Information" email we sent when you set up the account. If the IPs don't match, it means your site isn't loading from our server and you'll need to contact your website hosts to install an SSL instead.

Note: If you are trying to set up an SSL before the site is live, you can contact our support team to change the validation method to Email Authentication. This requires access to any of the following email addresses:
admin@yourdomain.net.au
administrator@yourdomain.net.au
webmaster@yourdomain.net.au
hostmaster@yourdomain.net.au
postmaster@yourdomain.net.au


Step 4 - Sometimes code in your site causes unusual redirects that interfere with the validation steps. Adding this code to the top of your .htaccess file should resolve this, but you may need to speak to your developer to confirm:

RewriteCond %{REQUEST_URI} !^/[0-9]+\..+\.cpaneldcv$
RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/.+$
RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/[A-F0-9]{32}\.txt(?:\ Comodo\ DCV)?$


After all the processing steps are completed, your SSL should now be installed. In order to test this, you can use this external tool. If your site is still showing "Not Secure" or loads without a padlock, you may be serving Mixed Content.
eccb0de86efa4f12c50d9a920ef06bedf1f4815a?t=be7efcb799233868bf6cb59b8791547a
f329d42b8386307e5661d1c668f5e3463fefec47?t=576b538815b1015962a19753d637ad88

In order to check Mixed Content you can use this tool, but to resolve this you will need to contact your website developer.
Note: Installing an SSL certificate is not all that's needed to have your site load with the padlock icon. You will also need to force your site to use https/SSL.

For more information and tutorials on SSL Certificates, see our SSL Guide Repository.


Thank you for your feedback on this article.

Related Articles

© Crucial