The Expert Center for Your Website Encryption
The SSL/TLS Manager in cPanel allows you to control all aspects of your SSL encryption in detail. This is particularly important if you use certified Business Certificates (OV/EV) from external providers or need to create manual CSR requests for your organization.
Note: For most standard websites, our AutoSSL handles the work fully automatically. Only use this manager if you wish to perform specific manual configurations.
The Four Core Components
The interface is divided into four logical areas, which are typically processed in sequence:
1. Private Keys (KEY)
The foundation. Before you apply for a certificate, you must generate a private key. It remains securely on the server.
The foundation. Before you apply for a certificate, you must generate a private key. It remains securely on the server.
2. Certificate Signing Requests (CSR)
The "application". Use this to generate a file that you send to a Certificate Authority (CA) to purchase a certificate.
The "application". Use this to generate a file that you send to a Certificate Authority (CA) to purchase a certificate.
3. Certificates (CRT)
The actual document. This is where you upload the files you received from your SSL provider.
The actual document. This is where you upload the files you received from your SSL provider.
4. Install SSL (HTTPS)
The activation. In this area, you link the Key and CRT to your domain to enable HTTPS.
The activation. In this area, you link the Key and CRT to your domain to enable HTTPS.
Step-by-Step: Installing an External Certificate
- Generate Key: Go to "Private Keys", select "RSA 2048-bit" as the type, and click Generate.
- Create CSR: Go to "Certificate Signing Requests", select the new key, and enter your company details. Send the generated code to your SSL provider.
- Upload Certificate: Once you have received the .crt file, upload it under "Certificates (CRT)".
- Activation: Go to "Install and Manage SSL for your site", select the domain, and click "Autofill by Domain". Confirm by clicking "Install Certificate".
Security Warning: Never share your Private Key (KEY) with third parties. It is the digital seal of your encryption. If you lose the key, the certificate must be reissued.
Supported Protocols
Our servers support TLS 1.2 and TLS 1.3 by default. Older, insecure protocols (SSL 2.0/3.0, TLS 1.0/1.1) are disabled to protect your data.
Need help creating a CSR for an organization?
Our support team will be happy to assist you with providing the correct company information.
