Overview
You may be asked to generate a Certificate Signing Request, or CSR, if you are purchasing an SSL certificate through a third party certifying authority. Once generated, you will need to submit that CSR to your third party provider, who will then create an SSL certificate for you.
TIP:
Already have an SSL certificate? You may be able to skip generating a CSR and simply import your certificate and private key.
See Installing an SSL Certificate for details.
See Installing an SSL Certificate for details.
See Installing an SSL Certificate for details.
Instructions
- Sign into the Account Center.
- Click on your primary domain.
- Select the SSL Certificate icon.
- Click on the Generate New CSR button.
- Note: If you are ordering a certificate from (mt) Media Temple, a CSR is automatically generated for you during the ordering process, and you can proceed with the Grid automatic SSL certificate installation.
- Fill out the required fields with details about your organization and domain. Click the Generate button when you are finished.
- The page will reload when your CSR is finished generating. Submit it to the Certificate Authority (CA) and they will sign a certificate for you.
- Note: Make sure to copy the text that starts with the line -----BEGIN CERTIFICATE REQUEST----- and ends with the line -----END CERTIFICATE REQUEST----- to capture the entire CSR.
- Once you receive the certificate from your signing authority, follow this guide to install your SSL certificate.
Instructions
- Log into your Plesk Control Panel.
- If you are using the Service Provider view, navigate to the Control Panel or Open in Power User View option for the domain you are looking to secure. If you are already using Power User mode, proceed to the next step.
- Click on the Websites & Domains tab. You may need to select the downward-facing arrow to expand the available menu options for your site.
- From the expanded menu, select Secure Your Sites.
- Select Add New Certificate. You will be taken to the Certificate Request Page.
- Fill out the Certificate Request form with all relevant data for your website, then click Request to continue.
- An entry for your SSL certificate will be created in Plesk and a CSR generated. You will see this new entry on the SSL Certificates page. Click on the certificate name to continue.
- You will be taken to the Change Properties page. To view the CSR, scroll down to the CSR and Private Key sections.
Instructions
Plesk 10.3.1 and newer, with SNI support enabled
If you are using the Power User Panel, you can get to the SSL certificate section of your webspace by following the instructions below:
- Log into the Plesk Control Panel for your domain.
- From the row of tabs at the top, select Websites & Domains.
- Click on Secure Your Sites.
If you are using the Service Provider Panel, you can get to the SSL certificate section of your subscription by following the instructions below:
- Log into the Plesk Server Administrator Panel.
- From the left-menu, click on Domains from the Hosting Services section.
- Click on Manage Hosting or Open in Control Panel for the domain you are installing the SSL certificate.
- From the row of tabs at the top, select Websites and Domains..
- Click on Secure Your Sites.
Plesk 10.2 and older
If you are using the Power User Panel, you can get to the SSL certificate section of your server by following the instructions below:
- Log into the Plesk Control Panel for your domain.
- From the row of tabs at the top, select the Server tab.
- Under Tools & Resources, click on SSL Certificates.
If you are using the Service Provider Panel, you can get to the SSL certificate section of your subscription by following the instructions below:
- Log into the Plesk Server Administrator Panel.
- From the left-menu, click on Tools & Settings.
- Under Tools & Resources, click on SSL Certificates.
Generating the CSR
Once you are at the SSL Certificates screen, continue with generating the Certificate Signing Request by following the instructions below.
- Click on the Add SSL Certificate icon.
- Specify the certificate properties:
- Certificate name. This will help you identify this certificate in the repository.
- Your location and organization name. The values you enter should not exceed the length of 64 symbols.
- Domain name. The domain name for which you want to purchase an SSL certificate. This should be a fully qualified domain name. For this example, we use: dv-example.com.
- Email. The website administrator's e-mail address.
- Double-check to ensure that all the provided information is correct and accurate, as it will be used to generate your private key.
- Click the Request button. Your private key and certificate signing request will be generated and stored in the repository.
- In the list of certificates, click the name of the certificate you just created. A page showing the certificate properties opens.
- Locate the CSR section on the page, and copy the text that starts with the line -----BEGIN CERTIFICATE REQUEST----- and ends with the line -----END CERTIFICATE REQUEST----- to the clipboard.
- Submit your CSR to your third-party certifying authority. Fill out any information they require. When you fill in the server type, select Apache or Apache OpenSSL, whichever is available.
- Verisign - choose Apache
- Thawte - choose Apache_OpenSSL
- GeoTrust - choose Apache + Open SSL
- It may take a few days for the certifying authority to process your request. If you have questions about the status of your request, please contact your third-party vendor.
- Obtain your certificate, and any required chain certificates, from your certifying authority. You may be prompted to download something called a bundle. Do so, unzip it if necessary, and open it. You will likely have one certificate and up to three chain certificates inside. You can open these files in a plain text editor, such as Notepad or TextEdit, for easy copying and pasting. Chain certificates are also called CA certificates. Import your certificate and any chain certificates using the instructions found here: Manually installing an SSL certificate