Security and SSL

SSL/TLS in cPanel: which tool you need

Reviewed on 2 min read ssl cpanel

cPanel has tools for checking automatic coverage and others for installing external certificates. Choose the right one before generating keys or buying a certificate.

Need Tool
See whether a name has a certificate and why AutoSSL fails SSL/TLS Status
Prepare a request for a certificate authority SSL/TLS > Certificate Signing Requests (CSR)
Manage the corresponding key SSL/TLS > Private Keys (KEY)
Upload a certificate you have received SSL/TLS > Certificates (CRT)
Associate it with the site so it is served Install and Manage SSL for your site (HTTPS)

From cPanel 134, the server may group these screens under SSL/TLS Certificates. Not all versions show the same AutoSSL run or exclude buttons. If you cannot find an action you need, tell us the affected name and the status shown. cPanel documentation.

Automatic or external certificate

Before ordering one, check whether the account's automatic coverage meets your needs. AutoSSL depends on names being eligible and passing validation; issuance is not guaranteed for every domain.

If you need a specific authority or type, follow the installation of an external certificate. Uploading a CRT is not the same as installing it, and ordering or renewing a product does not prove which certificate the website serves.

What you should keep

The private key is confidential and must match the certificate. Do not publish it on the website or paste it into external checkers. If you lose it, request a reissue with a new key. Also keep the certificate, its chain and a note of who must renew it.

After installing, test the names you need over HTTPS. Only then configure the application and the redirect from HTTP.

You may also find useful

Something wrong or out of date? Tell us and we will review it.