How to Manage SSL Hosts in cPanel
Posted by Allura on 26 01 2018.
The Manage SSL Hosts interface gives access to share and delete installed SSL (Secure Sockets Layer) certificates and to enable or disable SNI (Server Name Indication) for mail services.
Shared SSL Certificate
The section in the WHM interface enables you to share a SSL certificate. To access your website,a shared SSL certificate can be used by a consumer via the “mod_userdir” module. This section of WHM allows you to share an SSL certificate. To share a SSL certificate, the desired certificate has to be selected first and then you have to click on Share. You will be redirected to a new interface containing the confirmation message. A new SSL certificate has to be created and installed if no certificate is listed.
To create and install a new SSL certificate, WHM’s Generate an SSL Certificate and Signing Request interface (WHM>>Home>>SSL/TLS>>Generate an SSL Certificate and Signing Request)) has to be used first.
Next, WHM’s Install an SSL Certificate on a Domain interface (WHM>>Home>>SSL>>TLS>>Install a SSL Certificate on a Domain) has to be used.
How to Disable Shared SSL Certificates
Click on Disable next to the SSL certificate under the Share SSL Certificate heading in order to disable a shared SSL Certificate. The system will automatically redirect you to a new interface with a confirmation message.
Installed SSL Hosts
In order to open a secure website and to verify whether its SSL certificate works or not, click on the domain name under the Domain heading in the Installed SSL Hosts table. The domains with installed SSL certificates as well as the domains’ information are displayed in the Installed SSL Hosts table.
The Installed SSL Hosts section is described below:
- Domains : Displays the domain or domains that use the certificate.
- IP Address: The IP address of the Domain or domains is displayed.
- IP Address Type: Displays the type of the IP address.
- Is Primary Website on IP Address?: Tells if the listed website is the primary domain for the listed IP address. Unless the cPanel account has a dedicated IP address, it is not displayed on systems that do not support SNI.
Image source: https://www.google.co.in/search?q=SSL+hosts+in+cPanel&dcr=0&source=lnms&tbm=isch&sa=X&ved=0ahUKEwi-vr3ltrfYAhXKsI8KHWSpAvQQ_AUIDCgD&biw=1366&bih=613#imgrc=Vl3XKnrTyQkzrM:
- Is Web SNI Required?: Tells if there is any requirement of Server Name Indication, in short SNI. Generally SNI is required by a domain when there are multiple domains that share the same IP address. This column never appears on systems if they do not support SNI unless the cPanel account possesses a dedicated IP address. SNI is not updated by the system without a corresponding email address.
- Document Root: That directory is displayed which contains the site’s content.
- Owner: Displays the account for which the key has been installed.
- Issuer: Displays the name of the organization which created the certificate. If the certificate is self-signed, this column will display “Self-Signed”.
- Expires: The expiry date of the certificate is displayed.
- Key size: in bits, it displays the length of the key’s modulus.
- Is Mail SNI Enabled?: It indicates whether the certificate has Server Name Indication(SNI) enabled for mail services or not. To use the SSL certificate for your domain, the mail SNI configures the mail services so that the server’s default certificate is not used. This column won’t appear if SNI is not supported by the system. Only if the cPanel account has a dedicated IP address this column will appear on that system.
- Actions: to make the website the main domain on the shared IP address, click on the link named ‘make Primary’. To delete a certificate, click the link ‘delete’.
Before installing an SSL certificate for a website you should keep in mind SSL certificates are issued on an Annual Basis. SSL requires a dedicated IP address, only one SSL Certificate per Plesk Control Panel and you can have more than one domain or subdomain on an SSL Certificate.