Manage Service SSL Certificates

Using this interface in WHM, you are able to access a number of features to install new certificates to your web server or reset your server’s certifications (clear the certificates).

TLS/SSL certificates allow your web server to identify itself to the computers that access it.

When generating an SSL certificate, you are able to self-sign the certificate. However, these self-generated, self-signed certificates are not recommended. They are, generally, not secure — any server can claim to be your server because no third-party verification system is used. To remedy this, you need to register with a certificate authority (CA). The CA is responsible for verifying, absolutely, that users encounter your server.

Your certificates are able to apply to Exim (SMTP), POP3 and IMAP, the cPanel Services, and your FTP server. To learn how to generate a certificate or purchase a certificate, please view our documentation here.

Install a New Certificate

To apply a certificate:

1. Click the Install new Certificate link to the right of the service for which you would like to install the certificate.
2. Paste the CRT (.crt) file into the first text box.
   • If your .crt file is already on your server, click the appropriate Fetch button to find and install the file.
   • Alternatively, you may enter your domain name in the appropriate text box or press the Browse button, which will cause WHM to display your domain name(s). Select the appropriate domain and click Use Cert to use the domain’s existing .crt and .key files.
3. Paste the Key file (.key) in the second text box.
4. If your .key file is already on your server, click the Fetch button to find and install the file.
5. Alternatively, you may enter your domain name in the appropriate text box or press the Browse button, which will cause WHM to display your domain name(s). Select the appropriate domain and click Use Cert to use the domain’s existing .crt and .key files.
6. Paste the ca bundle in the third box.
7. This is an optional field.
8. Click Submit at the top of the page.

Note: You may click Reset at the top of the page to clear all of the fields simultaneously.

Reset a Certificate

This set of links will uninstall the current certificate and replace it with a new self-signed certificate.

To reset a certificate:

1. Click the Reset Certificate link to the right of the service for which you would like to reset the certificate.
   • Warning: Clicking this option will automatically erase an existing certifcate. If you replace a purchased certificate with a self-signed one, it may result in users seeing warnings, as their client applications may not trust a self-signed certificate.
2. Click Generate a New Certificate to continue.
   • A page will appear showing the processes behind replacing and verifying your new certificate.

Note: Your certificate will automatically be installed.