How to install SSL Certificate on WHM with root access

So, you’ve purchased your first SSL certificate, received an email from Certificate Authority but have no idea where to head next?

  • First of all log in as root to WHM panel at http://yourdomain.com:2086
  • Go to SSL/TLS in the Main screen
  • Click  Generate SSL Certificate and Signing Request icon
  • On the Create a New Cert form enter all corresponding and actual information. Make sure to enter the exact domain name that you are going to secure. In most cases cpanel.yourdomain.com will not be covered by certificate issued to yourdomain.com
  • Click the Create button
  • Copy your certificate information to safe location
  • At your SSL certificate provider’s website, find instructions on how  to complete the SSL certificate signing process (this process is different for different providers and certificate types)
  • Follow your SSL certificate provider’s instructions on how to retrieve your signed SSL certificate information
  • In order to assign an SSL certificate to your WHM/CPanel/WebMail, return to your WHM as root and go to:

Main >> Service Configuration >> Manage Service SSL Certificates

Locate:

cPanel/WHM/Webmail Service 

section and click corresponding link “Install new Certificate”. Keep in mind that this is NOT the way to install SSL certificates for your customers but to install on your own WHM/CPanel.

Then:

  1. Remove the text from the first textbox on the form and replace them with the .crt file (SSL certificate) received from your SSL provider.  You want to double-check that the certificate you are pasting is the one provided by your Certificate Authority and not your own self signed certificate.
  2. Paste the .key file into the second text box. (If your .key file is already on your server, click the Fetch button to find and install the file. Alternatively, you may enter your domain name in the appropriate text box or press the Browse button, which will cause WHM to display your domain name(s). Select the appropriate domain and click Use Cert to use the domain’s existing .crt and .key files.)
  3. Paste the ca bundle in the third box. (This is an optional field.)
  4. Click Submit at the top of the page.
  5. Return to Main >> Service Configuration >> Manage Service SSL Certificates and make sure that “Self Signed: NO” for the section that you were installing SSL certificate. If it reads as “yes” you will still get a crossed lock sign in your browser. Return to your certificate authority, copy the SSL certificate including BEGIN and END lines and paste it to the first text-area again. Repeat step 4.
  6. If you still can not handle the installation, please, contact our support team and we will help you with it straight away.

Do you wonder how to choose a right SSL certificate for you? Check out this guide: SSL Certificate: do you need it and which one to choose?