First of all one must understand if your website needs an SSL certificate installed. SSL is an abbreviation of Secure Socket Layer. It is used for transfer of data through a secure channel i.e. between computers and the servers in an encrypted format. A website that involves online transactions, or share sensitive data, then it is highly recommended to install an SSL certificate onto the domain. A web hosting provider does offer SSL certificates or one can even purchase an SSL directly from the manufacturers. One thing to be highlighted is that, SSL is a third party offering, so the web hosting provider has nothing to do with it. They would just get the SSL installed as a part of customer service. Inorder to have an SSL certificate installed onto the domain, you require a dedicated IP. Depending on the web hosting service provider, they would offer it for free alongwith the SSL certificate.
Prior to the installation of the SSL certificate, you are required to generate the key for SSL certificate and a CSR. If you haven’t done so, below are the steps for the same.
Procedure to Generate Private Key for SSL Certificate
You are required to have a Dedicated IP, inorder to generate a Key for SSL certificate. You cannot proceed further without the IP address known. Once you have it, below is the procedure to generate the key:
1. Log into your control panel
2. Click the SSL MANAGER Icon (or “SSL/TLS Manager”)
3. Click the Private Key icon (or “Generate, view, upload or delete your private keys”) Scroll down to Generate a New Key and select the domain you wish to use with the SSL certificate.
4. Make sure you enter “www” in the box preceding the domain name if you want the certificate to be on www.domainname.com, as a domain without www. is considered as a different domain altogether, and you would face errors.
5. If you want the SSL Certificate to be on a subdomain, you are required to create it in cpanel, then enter the subdomain when generating the key.
6. Once the selection of the domain you wish to use is done, click on “Generate” this would generate the public key file.
7. You are required to save this information for future use. Though you can retrieve the Key file from the server whenever required, but in case somehow due to an unexpected error the information on the server is lost or the key file is lost, you may need to purchase a new SSL Certificate. Hence, to be on the safer side, it is advisable to save the information.
The next stage is to generate the CSR. Below is the procedure for the same.
Procedure to Generate CSR
CSR is an abbreviation of Certificate Signing Request. Here again, a dedicated IP and the Key file is required.
1. Click “SSL Manager” (or “SSL/TLS Manager”) to generate the CSR
2. Click on Certificate Signing Requests (CSR) (or “Generate, view, or delete SSL certificate signing requests”)
3. For the HOST, choose the domain name that you’ve generated the KEY for. Make sure that you select the www version if you wish to install the certificate using www.
Note that, if you have made a key for www.domainname.com, you will need to include the www too. Its essential to enter the same domain name that was used for generation of the key file.
Incase you are unable to select www.domainname.com from the list, it might be possible that you probably did not add (www) to the key you generated. If you need www in the certificate and can’t select your www.domain.com from the list, you are required to repeat the procedure of key generation, make sure you include www.
4. Having done so, you are required to complete with filling the information in the form.
5. Click on Generate
Here again you must save this information.
Once you have your SSL certificate, get your generated Key, CA bundle & CRT files, follow the below steps to Install the SSL Certificate.
1. You must be logged in to your control panel of your domain.
2. Click SSL Installer OR
Click on SSL/TLS Manager icon (it various with the version of the control panel), then click Setup a SSL Certificate.
3. Choose the domain name from the drop down menu at the top
It is required to uninstall any previous certificate by clicking the Delete Host button for installing a new certificate.
4. Now, you need to paste the CRT file provided to you by the company from whom you’ve purchased the SSL Certificate.
5. The KEY file must have automatically appeared, incase its not, then click FETCH to import it. If it still does not appear, you should paste a copy of your KEY.
6. The Certificate Authority (CA) file is the last step. Some SSL Companies provide this. You will need to paste the contents of the CA file now
7. Now click the “Do It” button (or “Install Certificate”) and wait.
This ends the process of your SSL Certificate on your desired domain.
The web hosting provider can help you in the installation of the SSL certificate.