Knowledgebase: Web hosting
Installing a SSL certificate
Posted by Andy Williams, Last modified by Chris S. on 14 April 2011 02:28 AM

Question:
How to create a certificate signing request & install a SSL certificate on my domain?



Answer:
To install an SSL certificate for your website, you first need a dedicated IP address. Please submit a request to have one installed for your web hosting account. The SSL Certificate Generation process is a four-step process.

Part 1: Generate a private key for your domain.
-------------------------------------------------------
The first step in configuring a SSL certificate for your domain is to generate a private "key" for your domain in cPanel. The process is simple but it must be done in order for you to continue.

Step 1: Log into cPanel.
To log into cPanel, you should go to http://www.yourdomain.com/cpanel/ (where www.yourdomain.com is replaced by your account domain name).

Step 2: Locate and click on the SSL Manager link. This link is normally found towards the bottom of the screen.

Step 3: Click on the Private Keys link. This link is normally the first option available on the screen.

Step 4: Generate Key for your domain. This is an extremely simple procedure. Scroll down to the middle of the page and locate the section entitled Generate a New Key. In this section, select your domain name from the dropdown box pre-filled with (Select a Domain). Press the Generate button and you are done!
You now have a Private Key for your domain and can proceed to Part 2.

Part 2: Generate a CSR
---------------------------
Follow the steps below to generate the CSR:

Step 1: Log into cPanel. To log into cPanel, you should go to http://www.yourdomain.com/cpanel/ (where www.yourdomain.com is replaced by your account domain name). If you are already logged into cPanel, head back to the main screen (usually by clicking Home at the top of the page).

Step 2: Locate and click on the SSL Manager link. This link is normally found towards the bottom of the screen.

Step 3: Click on the Certificate Signing Requests (CSRs) link. This is normally the middle link in a set of three available options.

Step 4: Complete the CSR Generation form. You will be presented with a list of active CSRs (if you have performed these steps in the past to generate a CSR). If you do not have any pending CSRs, you will see the following message: No SSL CSRs Found You will also see a form with the heading Generate a New Certificate Signing Request.

Complete this form according to the guide below:

Country: In this field, enter the two-character abbreviation of the country of your company. For example, the Canada would be abbreviated as "CA".

State: In this field, put the unabbreviated form of the State of your company/organization. For example, Ontario could not be entered here is "ON".

City: In this field, enter your City.

Company: In this field, put the name of your company/organization. If you are single person, you do not have to put anything in this field.

Company Division: In this field, you may put a division related to the activities that this SSL-enabled website will be handling. Examples could be "Online / Ecommerce" or "Web Design / Development".

Email: In this field, put the email address of the administrator of the website.

This email address will show if anybody requests information about the certificate when browsing your SSL-enabled website. You can put your own email address here too if you would like to.

Pass Phrase: This is a special field that you should complete with a password for future management of the certificate. Please remember this password and type it carefully.

Step 5: Press the Generate button to generate the CSR.
After you've verified the details in the form and have clicked the Generate button, a CSR will be generated and displayed as well as sent to you by email.
You will see a page with the following heading:

Certificate Signing Request Generated! This will be followed by a text similar to the following:

-----BEGIN CERTIFICATE REQUEST-----
MIICFzCCAYACAQAwgZ8xCzAJBgNVBAYTAlVTMQ4wDAYDVQQIEwVUZXhhczETMBEG
A1UEBxMKU3VnYXIgTGFuZDEXMBUGA1UEChMOYnVuZ2VlQ29kZSBsbGMxEDAOBgNV
BAsTB1N1cHBvcnQxGjAYBgNVBAMTEW15ZmFzdHN1cHBvcnQuY29tMSQwIgYJKoZI
hvcNAQkBFhVuaXlvZ2lAYnVuZ2VlY29kZS5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD
gY0AMIGJAoGBANGAOSml+BjE2pXjQEZkq342W6+DkMLW/hp00SOF12oaUUHyvcH6
7B8glY2VfdgXrXMp4zm3DZw
lEYNIUwklAHngLl3BKun4y5Mmhd+/xE8c3+X0uNaP
0n7M0Npd+LjbfU45Rx1oNqGNOZTzmrOcqlbdKWm5X6q+AzPae85+jrglAgMBAAGg
NzAWBgkqhkiG9w0BCQcxCRMHamF5YW50aTAdBgkqhkiG9w0BCQIxEBMOYnVuZ2Vl
Q29kZSBsbGMwDQYJKoZIhvcNAQEEBQADgYEAFM4LyeWoY3qGMzpwR0APVnIsUI4o
nF3kGiem7Yw/oRXOrBi7lXs7oR6UVJQN5J/JuCzq6jHq6kE96aJ/vljWpE1CmQ4n
0I+NTPYLb+6jgtNDicos8vWxXb7kTGbipYllm0hGTSxwIGpxSzJgR/zu8hQJatpv
kd1aNWvM7/m1fck=
-----END CERTIFICATE REQUEST-----

Save this in a text file on your computer with the name csr.txt as you will need it in Part 3, when you request an SSL certificate with the CSR.

Part 3: Request the SSL Certificate
----------------------------------------
Now that you have the CSR, you can request an SSL Certificate from your preferred SSL certificate issuer. For validation/verification purposes, SSL issuers may ask for proof of personal or corporate identity (verify email address) before issuing the certificate.

Part 4: Install the SSL Certificate
The certificate file is usually in the format of yourdomain.com.crt. To install it on your domain follow the steps below:

Step 1: Log into cPanel.
To log into cPanel, you should go to http://www.yourdomain.com/cpanel/ (where www.yourdomain.com is replaced by your account domain name). If you are already logged into cPanel, head back to the main screen (usually by clicking Home at the top of the page).

Step 2: Locate and click on the SSL Manager link. This link is normally found towards the bottom of the screen.

Step 3: Click on the Certificates (CRT) link. This is normally the last link in a set of three available options.

Step 4: Cut and paste text from your certificate file (or upload crt file).
The crt file issued to you by your preferred SSL certificate issuer is really a text file that can be opened by Notepad or other plain text editors. Therefore, open the file in Notepad and cut and paste the contents into the large textbox with the heading Paste the crt below. You may also just select the crt file by pressing the Browse button underneath the textbox and selecting the certificate from your computer.

Step 5: Press the Upload button to generate the certificate.
You're done! If you navigate to https://yourdomain.com/, your website will show up and also be secure!
(1613 vote(s))
Helpful
Not helpful

Comments (0)
Post a new comment
 
 
Full Name:
Email:
Comments:
CAPTCHA Verification 
 
Please enter the text you see in the image into the textbox below (we use this to prevent automated submissions).