Creating and Installing an SSL Certificate on a Hosted Domain with CPanel WHM
NOTE: The domain on which the SSL certificate is installed must be set up in a cPanel account.
The cPanel client application's SSL Manager utility can create SSL keys, Certificate Signing Requests (CSRs), and self-signed CRTs. It does not allow you to install them on your domain, however. For that reason, this process uses cPanel's WebHost Manager (WHM).
To Create an SSL Certificate with cPanel WHM
- Open a Web browser and navigate to:
https://[[ipaddress]]:2087/where [[ipaddress]] is the IP address for your dedicated server.
- Enter root as your user name and the password you specified when you set up your dedicated server account.
- Click OK.
- Under the Web SSL/TLS menu, click Generate a SSL Certificate and Signing Request.
- Enter the following information:
- Email address (where cert is sent)
- Host name
- Country
- State
- City
- Company Name
- Company Division
- Email address (displayed in cert)
- Password
- Click Create. Your certificate information will display. Copy the RSA private key output into a text file and save in a secure location. If this information is lost, you will not be able to use your certificate.
- Under the SSL/TLS menu, click SSL Manager.
- In the CSRS column, click the floppy drive icon of the appropriate certificate signing request. Your certificate request information will display.
- Through your SSL signing authority, get your cert signed using the certificate request information. The signing authority will send a signed CRT and CA file. This file is sometimes referred to as an intermediate certificate or chaining file.
To Install an SSL Certificate with cPanel WHM
- Open a Web browser and navigate to:
https://[[ipaddress]]:2087/where [[ipaddress]] is the IP address for your dedicated server.
- Enter root as your user name and the password you specified when you set up your dedicated server account.
- Click OK.
- Under the Web SSL/TLS menu, click Install a SSL Certificate and Setup the Domain.
- Paste your signed SSL certificate from the signing authority into the crt text box.
- Paste your RSA private key info saved from the previous procedure into the key text box.
- If received from the signing authority, paste the CA bundle (or intermediate certificate) into the ca text box.
- Confirm the domain, user, and IP address, and then click Do it.