AutoSSL: Difference between revisions
Docs admin (talk | contribs) No edit summary |
Docs admin (talk | contribs) No edit summary |
||
Line 8: | Line 8: | ||
In WHM, navigate to SSL/TLS -> Manage AutoSSL. Select a SSL Provider, check mark any additional checkboxes offered, and click Save. | In WHM, navigate to SSL/TLS -> Manage AutoSSL. Select a SSL Provider, check mark any additional checkboxes offered, and click Save. | ||
Once saved, click the "Run AutoSSL for All Users" button. This will run the initial run to identify domains resolving to the server that do not have an SSL (or have an expired SSL Certificate), or have a valid certificate about to expire. The script will | Once saved, click the "Run AutoSSL for All Users" button. This will run the initial run to identify domains resolving to the server that do not have an SSL (or have an expired SSL Certificate), or have a valid certificate about to expire. The script will generate and install the SSL certificate for all valid domains. | ||
[[File:autossl.png]] | [[File:autossl.png]] |
Revision as of 09:40, 25 August 2016
AutoSSL is the solution to one of the biggest headaches that exists for every cPanel & WHM user: SSL installation and renewal. AutoSSL installs FREE signed SSL certificates that are automatically generated and installed on the server. There is no need for you to generate a certificate signing request (CSR), pay a Certificate Authority (CA) for each certificate, or renew certificates when they expire. cPanel takes care of everything for you.
How to Enable AutoSSL
By default, only cPanel is listed as a SSL provider. There is a plugin available for Let's Encrypt. It can be installed by logging into SSH on your cPanel server as root, and running the following command:
<syntaxhighlight lang="bash">/scripts/install_lets_encrypt_autossl_provider</syntaxhighlight>
In WHM, navigate to SSL/TLS -> Manage AutoSSL. Select a SSL Provider, check mark any additional checkboxes offered, and click Save.
Once saved, click the "Run AutoSSL for All Users" button. This will run the initial run to identify domains resolving to the server that do not have an SSL (or have an expired SSL Certificate), or have a valid certificate about to expire. The script will generate and install the SSL certificate for all valid domains.