How can I have my site use HTTPS (SSL)?


Overview

  • Applies to: Grid
    • Difficulty: Easy
    • Time Needed: 20
    • Tools Required: Account Center access
  • Applies to: DV
    • Difficulty: Easy
    • Time Needed: 20
    • Tools Required: Account Center access
  • Applies to: Managed WordPress Hosting
    • Difficulty: Easy
    • Time Needed: 20
    • Tools Required: Account Center access

What is HTTPS?
Hypertext Transfer Protocol Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP) for secure communication over a computer network.

Why do people use HTTPS?
Because HTTPS allows users to encrypt data over an SSL, it's a more secure method of communicating and transferring data. Typically users who use HTTPS are those with e-commerce sites or other sites that require credit card, login information, etc.

Does my site need HTTPS?
Using HTTPS is not required for every site. Some payment gateways though do require the use of an SSL/HTTPS in order to work properly. To confirm the need for HTTPS on a site, it's best to contact the site's developer.

Instructions

1. The first thing required is to acquire an SSL certificate.
(If a site is visited over https without a properly installed SSL, it will result in a security warning on the users end).

2. SSLs are available for purchase at Media Temple: https://mediatemple.net/services/ssl/
(Media Temple SSL’s are a great option, as there are built-in tools to help make the installation as easy as possible)

Note:
For Grid and VPS servers it is possible to install third-party SSLs, but keep in mind those are not supported by Media Temple, so the installation, configuration, and maintenance would need to be managed by the customer. Managed WordPress Hosting can only use Media Temple or GoDaddy SSLs.

3. Once an SSL is acquired, it can be installed to the site. Feel free to review our guide on SSL Installation for more details and information if needed:

4. After the SSL has been successfully installed, the site will be able to be accessed over https://example.com (replacing example.com with your domain name).

Forcing SSL

Some users may wish to force visitors to use HTTPS/SSL automatically when accessing your site. This can be accomplished through the website's .htaccess file using mod_rewrite. We have an additional article guide to assist with that if needed: