Summary
SSL/TLS Certificate Installation Guide: cPanel
Purpose:
SSL/TLS Certificate Installation Guide
For cPanel
Skip to Installation
Need Certificate Signing Request (CSR) help? Please see our technote on how to generate a CSR in cPanel
here
.
NOTE:
As of November 12, 2024, Entrust introduced a new TLS certificate hierarchy as part of the deployment. The TLS certificate delivery now includes two certificate chains. The delivery of these certificate chains can be in the form of:
- Individual files. Intermediate 1 (filename: intermediate1.crt ) and Intermediate 2 (filename: intermediate2.crt ) or
- Concatenate PEM file (filename: CertificateBundle1.pem ) or
- P7B format file (filename: Certificatebundle.p7b )
Both intermediate/chain certificates must be installed in your environment.
Before you begin...
- Never share private keys files.
- If you plan on using the same certificate on multiple servers always transfer the private key using a secure method ( e-mail is not considered a secure method of transfer ).
- It is best practice to ensure that you have current and up to date Ciphers and Protocols to ensure the best security when deploying a new Private key and Server Certificate.
- Make sure you run the SSL Server Test at the end of the installation process to check your certificate configuration against SSL/TLS Best Practices.
-
For more information on SSL/TLS Best Practices, click here .
Installing your Entrust SSL/TLS Certificate on CPanel
1. Click the Download button in the pickup wizard to download your certificate files. Clicking the download button will produce a a zip file that contains the following files:
- ServerCertificate.crt : Your signed SSL/TLS certificate
- ChainBundle1.crt : The Entrust Certificate chain bundled in a single file
2. Log into your cPanel control panel and locate the SSL/TLS Manager.
3. Click on Generate, view, upload, or delete SSL certificates .
4. In the Upload a New Certificate section , click on the Browse button under the "Paste crt below" box and point to your Server Certificate file (ServerCertificate.crt) that you downloaded in the first step. Alternatively, you can also paste the server certificate into the box. To obtain your server certificate in a raw format, rename the ServerCertificate.crt file to ServerCertificate. txt , open the file in notepad, and copy and paste the certificate into the input box.
5. Click the Upload button.
6. Click Go Back and click Return to SSL Manager .
7. Click on Setup a SSL certificate to work with your site . If this option is not available, please contact your web hosting provider as this option may have been disabled.
8. Select the domain in question from the Domain drop down menu. If this option is not available or does not work, please contact your web hosting provider.
9. Under the C A Bundle box, click the browse button and point to the Chain Bundle file downloaded in step 1. If your CPanel interface does not display a browse button, you can paste the Chain Bundle into the input box. To obtain your server certificate in a raw format, rename the ChainBundle1.crt file to ChainBundle1. txt , open the file in notepad, and copy and paste the certificate into the box.
10. Click
Install Certificate
to complete the SSL installation and configuration process. You may need to contact your web hosting providing to restart the Apache services to complete the installation process. Double check your website to see if the new certificate is being presented.
Your SSL/TLS certificate installation is complete.
If you have any questions or concerns please contact the
Entrust Certificate Services Support
department for further assistance:
Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE:
It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.
Country | Number |
Australia |
0011 - 800-3687-7863
1-800-767-513 |
Austria | 00 - 800-3687-7863 |
Belgium | 00 - 800-3687-7863 |
Denmark | 00 - 800-3687-7863 |
Finland |
990 - 800-3687-7863 (Telecom Finland)
00 - 800-3687-7863 (Finnet) |
France | 00 - 800-3687-7863 |
Germany | 00 - 800-3687-7863 |
Hong Kong |
001 - 800-3687-7863 (Voice)
002 - 800-3687-7863 (Fax) |
Ireland | 00 - 800-3687-7863 |
Israel | 014 - 800-3687-7863 |
Italy | 00 - 800-3687-7863 |
Japan |
001 - 800-3687-7863 (KDD)
004 - 800-3687-7863 (ITJ) 0061 - 800-3687-7863 (IDC) |
Korea |
001 - 800-3687-7863 (Korea Telecom)
002 - 800-3687-7863 (Dacom) |
Malaysia | 00 - 800-3687-7863 |
Netherlands | 00 - 800-3687-7863 |
New Zealand |
00 - 800-3687-7863
0800-4413101 |
Norway | 00 - 800-3687-7863 |
Singapore | 001 - 800-3687-7863 |
Spain | 00 - 800-3687-7863 |
Sweden |
00 - 800-3687-7863 (Telia)
00 - 800-3687-7863 (Tele2) |
Switzerland | 00 - 800-3687-7863 |
Taiwan | 00 - 800-3687-7863 |
United Kingdom |
00 - 800-3687-7863
0800 121 6078 +44 (0) 118 953 3088 |