ToolBox -

Securing Connections to Websites with SSL

For every e-commerce website hosted on the server, you should purchase and install an authentic digital SSL certificate.

SSL certificates are used for establishing secure communication channels on the Internet and for verifying website identity: When users visit your secure online store, they are notified that your website is really what it claims to be and that all sensitive data, such as credit card numbers, will be transferred over a secure channel.

You can choose any of the following ways for purchasing and installing SSL certificates:

· Use a link in the Panel for purchasing SSL certificates. The link in the Panel, by default, refers to the MyPlesk.com online store which simplifies purchasing SSL certificates from Comodo, GeoTrust, Inc, and GoDaddy. This link can be modified by your provider to refer you to their own site.

· Create a certificate signing request (CSR) from the Panel and submit it to the certification authority of your choice, which will create an SSL certificate for you.

To purchase an SSL certificate using the links in the Panel, and secure a site:

  1. If you are subscribed to several hosting packages and have access to several webspaces associated with your account, in the Subscription menu at the top of the screen, select the required webspace.
  2. Click the Websites & Domains tab.
  3. Click Secure Your Sites. A list of SSL certificates that you have in your repository will be displayed.
    clip_image001[33]
  4. Click Add SSL Certificate.
    clip_image002[22]
  5. Specify the following:
    1. Certificate name. This will help you identify this certificate in the repository.
    2. Encryption level. Choose the encryption level of your SSL certificate. We recommend that you choose a value more than 1024 bit.
    3. Your location and organization name. The values you enter should not exceed the length of 64 symbols.
    4. The domain name for which you want to purchase an SSL certificate. This should be a fully qualified domain name. Example: your-domain.com.
    5. The website administrator’s e-mail address.
  6. Make sure that all the provided information is correct and accurate, as it will be used to generate your private key.
  7. Click Buy SSL Certificate.

a. Your private key and certificate signing request will be generated. Do not delete them. MyPlesk.com or another online store configured by the provider will open in a new browser window or tab.
clip_image003[13]

  1. Register or log in to an existing account and you will be taken step by step through the certificate purchase procedure.
  2. Choose the type of certificate that you wish to purchase.
  3. Click Proceed to Buy and order the certificate. In the Approver E-Mail drop-down box, select the correct approver e-mail.

a. The approver e-mail is an e-mail address that can confirm that certificate for specific domain name was requested by an authorized person. This is the e-mail address listed in the domain owner or domain administrator’s contact information in the WHOIS database.

  1. Once your certificate request is processed, you will be sent a confirmation e-mail. After you confirm, the SSL certificate will be sent to your e-mail.
  2. When you receive your SSL certificate, save it on your computer.
  3. Return to the SSL certificates repository (Websites & Domains tab > Secure Your Sites).
  1. Upload the SSL certificate: Click Browse in the middle of the screen and navigate to the location of the saved certificate. Select it, and then click Send File.

a. This will upload and install the certificate against the corresponding private key.

  1. To install the certificate on a site, return to the Websites & Domains tab, and click the domain name of the website that you want to to secure.
    clip_image004[13]
  2. To switch on SSL protection, select the Enable SSL support checkbox.
    clip_image005[13]
  3. From the SSL certificate menu, select your SSL certificate and click OK.

To obtain an SSL certificate from any certificate authority of your choice, and secure a site:

  1. If you are subscribed to several hosting packages and have access to several webspaces associated with your account, in the Subscription menu at the top of the screen, select the required webspace.
  2. Click the Websites & Domains tab.
  3. Click SSL Certificates. A list of SSL certificates that you have in your repository will be displayed.
    clip_image001[34]
  4. Click Add SSL Certificate.
    clip_image002[23]
  5. Specify the certificate properties:
    1. Certificate name. This will help you identify this certificate in the repository.
    2. Encryption level. Choose the encryption level of your SSL certificate. We recommend that you choose a value more than 1024 bit.
    3. Your location and organization name. The values you enter should not exceed the length of 64 symbols.
    4. The domain name for which you want to purchase an SSL certificate. This should be a fully qualified domain name. Example: your-domain.com.
    5. The website administrator’s e-mail address.
  6. Make sure that all the provided information is correct and accurate, as it will be used to generate your private key.
  7. Click Request. Your private key and certificate signing request will be generated and stored in the repository.
    clip_image006[13]
  8. In the list of certificates, click the name of the certificate you need. A page showing the certificate properties opens.
  9. Locate the CSR section on the page, and copy the text that starts with the line —–BEGIN CERTIFICATE REQUEST—– and ends with the line —–END CERTIFICATE REQUEST—– to the clipboard.
  10. Visit the website of the certification authority from which you want to purchase an SSL certificate, and follow the links on their site to start a certificate ordering procedure. When you are prompted to specify CSR text, paste the data from the clipboard into the online form and click Continue. The certification authority will create an SSL certificate in accordance with the information you supplied.
  11. When you receive your SSL certificate, save it on your local machine or network.
  12. Return to the SSL certificates repository (Websites & Domains tab > Secure Your Sites).
  1. Upload the SSL certificate:
    1. Click Browse in the middle of the page and navigate to the location of the saved certificate. Select it, and then click Send File.

i. This will upload and install the certificate against the corresponding private key.

b. Copy the text that starts with the line —–BEGIN CERTIFICATE—– and ends with the line —–END CERTIFICATE—– to the clipboard. Right Click in the Certificate section and Paste as plain text, then click Send Text.
clip_image008

  1. To install the certificate on a site, return to the Websites & Domains tab, and click the domain name of the website that you want to to secure.
    clip_image009[13]
  2. To switch on SSL protection, select the Enable SSL support checkbox.
    clip_image010[13]
  3. From the SSL certificate menu, select your SSL certificate and click OK.

Renew then SSL certificate from any certificate authority of your choice

This is for the renewing an SSL certificate IF none of the details have changed and the renewal has been purchased from the same provider. If any details have changed please follow the above steps in “To obtain an SSL certificate from any certificate authority of your choice….”

  1. If you are subscribed to several hosting packages and have access to several webspaces associated with your account, in the Subscription menu at the top of the screen, select the required webspace.
  2. Click the Websites & Domains tab.
  3. Click Secure Your Sites. A list of SSL certificates that you have in your repository will be displayed.
    clip_image001[35]
  4. Select the Certificate that you wish to renew
    clip_image011
  5. When you receive your SSL certificate, save it on your local machine or network.
  6. Upload the SSL certificate:
    1. Click Browse in the middle of the page and navigate to the location of the saved certificate. Select it, and then click Send File.

i. This will upload and install the certificate against the corresponding private key.

b. Copy the text that starts with the line —–BEGIN CERTIFICATE—– and ends with the line —–END CERTIFICATE—– to the clipboard. Right Click in the Certificate section and Paste as plain text, then click Send Text.
clip_image012

7. Click on Set. To complete the renewal. Ensure to test the website by opening a web browser and going to https://www.domain.com.au