How to Enable and Manage AutoSSL in WHM/cPanel?
AutoSSL is a boon to WHM and cPanel users who earlier faced several issues with SSL installation and renewal. With AutoSSL enabled, there are no forms to fill out or certificates to copy. You automatically get an SSL certificate for the selected domain after enabling AutoSSL. One of the biggest advantages of AutoSSL, you do not have to generate a Certificate Signing Request to order an SSL certificate. At the time of SSL expiration, the system automatically generates CSR and installs new SSL certificate.
Steps to enable AutoSSL in WHM
- Launch browser and type https://192.168.0.1:2087
- Type your WHM username and password in relative text boxes
- Click Log In
- Go to AutoSSL interface
- Under the Choose an AutoSSL provider, click cPanel(powered by Comodo)
- Click Save
Now that you have enabled AutoSSL in WHM, you can either choose to activate it for all users or specific users.
Steps to run AutoSSL for all users
Note- this option is used to change Feature list”default” where AutoSSL is enabled for all users. When you use this option, AutoSSL will be run for all users for whom you have chosen to run AutoSSL.
- Log in Web Host Manager as a root user
- If you want AutoSSL to replace expiring, invalid SSL certificates automatically, click Options tab
- Check the box – Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates
- Click Save
- Click Manage Users tab
- Click on Disable AutoSSL for specific users for whom you want to disable AutoSSL. Do not change option for users for whom you want AutoSSL.
- Click Save
- Once you are sure you have selected the user for whom you want AutoSSL functionality, click on Providers tab
- Click the blue button labeled as Run AutoSSL For All Users
Steps to run AutoSSL for specific users
Note- this option is used to enable AutoSSL for selected users overriding Feature list “default” settings
- Log in Web Host Manager as a root user
- If you want AutoSSL to replace expiring, invalid SSL certificates automatically, click Options tab
- Check the box – Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates
- Click Save
- Click Manage Users tab
- Go to individual users in the list and click the blue button “checkuser<n>” where n is the user number.
Note– when you enable AutoSSL for a specific user, it automatically activates AutoSSL for all domains related to specific user
Though AutoSSL is a useful feature in cPanel, it does have some limitations such as
- AutoSSL can only secure 200 domains per certificate
- The domains and subdomains need to pass the Domain Control Validation (DCV) test which determines and confirms the ownership of domain
- AutoSSL does not secure wildcard domains
- Due to rate limits, AutoSSL will give preference to installing new certificates over the renewal of certificates.
In some cases, you will be required to add a certificate that can be done by following steps given below
Steps to install SSL certificate manually
- Login into cPanel
- Scroll downwards to find SSL/TLS icon
- Under Certificate(CRT) click the link “Generate, view, upload or delete SSL certificates”
- Scroll down the list to find the domain for which you want to install the SSL certificate
- Click the Install link
- Once the installation process is complete, scroll downwards to find SSL manager link and click on it