How to purchase and install an SSL Certificate

Security is of the utmost concern to both computer and Internet users today. Having an SSL (Secure Sockets Layer) secured web site can make all the difference to your customers, assuring them that their transactions can't be seen by anyone not authorized to do so.

Contrary to popular belief, SSL certificates are quite straightforward and can even be fun! In this tutorial you'll learn how to set up SSL on your domain from start to finish.

Step 1 - Choose your SSL domain

If you are purchasing a basic "single root" SSL certificate (usually the cheapest), make sure you choose a domain that will cover all types of secure transactions that you will perform on your site. Once you have purchased the certificate, the domain can't be changed.

You may need to secure your login system, and choose login.mydomain.com, but you may later open an eCommerce store where the domain may not be appropriate or could be confusing to your customers. Often, choosing secure.mydomain.com is the best option that covers everything.

Step 2 - Generate your CSR and Private Key

Thankfully, the latest version of WHM makes this a lot easier than it used to be. Log in, and select "SSL/TLS" from the menu. Then select "Generate a SSL Certificate & Signing Request".

On the next screen, enter the relevant information that will be used to create your certificate. Make sure that the email address you use at the bottom is one that will still be available a year or two down the line. For "Company Division" you may want to enter "Sales" or "Customer Service", depending on your company. Finally, the password will be needed should you wish to reinstall the certificate on another server, so don't forget it!

Now go and check your email for the 2 pieces of information you'll need in Step 3.

Step 3 - Choose an SSL Provider and buy your certificate

Important: Protect your Private Key and do not give it to anyone! This is what keeps your website secure.

There are many certificate providers to choose from, and in this example we will be using RapidSSL.

Select the "Buy Now" link next to the certificate you require. Normally you shouldn't need the extra "support" options, but I guess it's there if you need it!

On the next page you can change how many years you wish to pay for, if you want any kind of insurances (I'm choosing none), and how many servers (in this case, 1).

Click "Continue" and on the next page, copy-and-paste the "Certificate Signing Request" from your email, into the space provided. Be sure to include the top and bottom "BEGIN" and "END" lines. The next page will confirm your details, and domain name (check for typos!)

Step 4 - Authorize your certificate via email and phone

In the next step of the purchase process, you will be presented with a list of email addresses suitable to authorize your certificate. These will include the domain's admin and technical contacts, as well as various addresses @yourdomain.com.

Choose one that either you or your client has access to, and click Continue.

Now the fun part! Enter your phone number, and the certificate provider's automated system will call you and ask for the number on screen. When you click "Call Now", you know they're calling, but remember to say "Hello" when you answer!

After the telephone process is over, an email will be sent to the address you chose earlier in this step. All that needs to be done now is the link in the email has to be clicked and "Approved" by you or the client.

Step 5 - Install your new Certificate on the server

Once you have paid for the certificate online, you will receive yet another email that will contain the SSL Certificate itself.

Back in WHM, select the "Install" option from the "SSL/TLS" menu this time. Paste in the SSL Certificate in the top box, and the Private Key from Step 2 in the bottom box.

"User" is the username of the account on your server that will be hosting the domain. You will also need the IP address of the domain, which can be found on the "List Accounts" page.

Note: You can only have 1 certificate per IP address, so if you need to have more than one secure domain and your hosting is shared, you'll need to get an extra IP address. These are usually available from your hosting provider or datacenter.

Step 6 - Test your new SSL secured domain

Remember to use https:// when accessing your secure domain. If all has gone to plan, you should see the little yellow padlock icon in the address bar or bottom right hand corner of your browser.