How to Install an SSL Certificate in Plesk

This comprehensive guide outlines the process of installing SSL certificates and enabling Let's Encrypt certificates for domains managed within Plesk. It covers detailed instructions for both the Power-user and Service-provider interfaces, ensuring a secure browsing experience for your website visitors and enhancing the trustworthiness of your online presence.

Installing an SSL Certificate via the Power-user Interface

For users operating within the Power-user interface of Plesk, the following steps will guide you through the installation of an SSL certificate for your domains, enhancing the security and trustworthiness of your web presence.

Manual SSL Certificate Installation (Power-user Interface)

To manually install a pre-purchased SSL certificate using the Power-user interface, follow these detailed instructions:

1. From the left-hand navigation pane of your Plesk panel, access the Websites & Domains section. This is where you manage all your registered domains.
2. Navigate through the list of your domains to find the specific domain name for which you intend to install the SSL certificate. Once located, click on the SSL/TLS Certificates option associated with that domain.
3. Initiate the installation process by clicking the Add SSL/TLS Certificate button.
4. Provide a recognizable name for your new certificate in the designated field. This name will help you identify the certificate later, especially if you manage multiple domains.
5. Proceed down the page, where you will be presented with two primary methods for uploading your certificate: either by uploading your certificate files directly or by adding the certificate as text. For manual text input, continue with the following steps.
6. To add the certificate as text, you will need to paste the contents of three distinct files into their respective fields:
   • Open your private key file (typically ending in .key) using a text editor. Carefully copy the entire content and paste it into the Private key (*.key) * field. This key is crucial for decrypting data encrypted by your certificate.
   • Similarly, open your certificate file (often named domain-name.com.crt or similar) in a text editor. Copy its contents and paste them into the Certificate (*.crt) * field. This is your primary domain certificate.
   • Lastly, open the CA certificate file (frequently named ca.crt or *-ca.crt) in a text editor. Copy its contents and paste them into the CA certificate (*-ca.crt) field. This chain certificate helps browsers trust your primary certificate.
7. Once all required certificate information has been accurately entered, click Upload Certificate to finalize the installation of the certificate onto your server.

Enabling the Installed SSL Certificate (Power-user Interface)

After successfully installing your SSL certificate, the next crucial step is to activate it for your website. Follow these instructions to enable the SSL certificate:

1. Return to the Websites & Domains menu accessible from the left-hand navigation column of your Plesk panel.
2. Locate the domain for which you just installed the SSL certificate. Click on the Hosting Settings option associated with this particular site.
3. Within the Hosting Settings page, find the Security section. Here, you will see a drop-down menu labeled Certificate. Click on this menu and carefully select the correct certificate name that corresponds to the one you just installed for your site.
4. To apply these changes and enable the SSL certificate, click OK. Your website should now be secured with the newly installed SSL certificate, indicated by HTTPS in the browser.

Enabling a Let's Encrypt SSL Certificate (Power-user Interface)

Let's Encrypt provides free, automated, and open certificates. To enable a Let's Encrypt SSL certificate for your domains using the Power-user interface, proceed as follows:

1. Navigate back to the Websites & Domains menu located in the left column of your Plesk panel.
2. Identify the domain for which you wish to secure with a Let's Encrypt certificate. Below its entry, you will find and click the Let's Encrypt link.
3. A prompt will appear requiring you to enter an email address. This address will be used for all critical notifications and warnings related to your certificate, such as expiration reminders.
4. You will have the option to select tick-boxes to include the www and webmail prefixes of your domain within the certificate's coverage. It is generally recommended to select these options for comprehensive security.
5. To finalize the process and add the Let's Encrypt certificate to your domain, click Install. Plesk will then automate the certificate issuance and installation.

Important Note: For the Let's Encrypt certificate setup to complete successfully, it is imperative that your domain is correctly resolving to your server's IP address. If the domain is not resolving, the installation process will fail.

Installing an SSL Certificate via the Service-provider Interface

For administrators and service providers utilizing the Service-provider interface in Plesk, the following instructions detail how to effectively install and manage SSL certificates for your clients' domains, ensuring robust security measures.

Manual SSL Certificate Installation (Service-provider Interface)

To install an SSL certificate manually through the Service-provider interface, please follow these steps carefully:

1. From the left-hand menu of your Plesk panel, select the Domains option. This will present a list of all managed domains.
2. From the displayed list, click on the specific domain name for which the SSL certificate is intended. This action will lead you to the domain's control panel page.
3. On the domain's control panel page, locate and click the link for SSL/TLS. This section is dedicated to all certificate-related management.
4. Initiate the certificate addition process by clicking the Add SSL/TLS Certificate button.
5. Assign a descriptive name to your new certificate in the provided field. A clear name assists in easy identification among multiple certificates.
6. Scroll down the page. You will be given the choice to either upload your certificate files directly or to add the certificate as text. For text-based input, proceed with the following instructions.
7. To add the certificate as text, you will need to meticulously paste the content of your certificate files into their designated fields:
   • Using a text editor, open your private key file (e.g., yourdomain.key). Copy its entire content and paste it into the Private key (*.key) * field. This key is vital for cryptographic operations.
   • Next, open your primary certificate file (e.g., yourdomain.com.crt) in a text editor. Copy its contents and paste them into the Certificate (*.crt) * field.
   • Finally, open the CA certificate bundle file (e.g., ca.crt) with a text editor. Copy its content and paste it into the CA certificate (*-ca.crt) field. This completes the certificate chain.
8. Conclude the installation by clicking Upload Certificate. The certificate will then be installed on the server for the chosen domain.

Enabling the Installed SSL Certificate (Service-provider Interface)

Once the SSL certificate has been successfully installed, the next critical step is to enable it for the specific website. Follow these guidelines to activate your SSL certificate:

1. Access the Domains menu from the left-hand navigation pane of the Plesk panel.
2. Select the domain name from the list for which you have just installed the SSL certificate. This action will open the domain's management interface.
3. Locate and click on Hosting Settings for the site where the SSL certificate is to be enabled.
4. Within the Hosting Settings, navigate to the Security section. Here, you will find a drop-down menu labeled Certificate. From this menu, choose the exact certificate name that you installed earlier for your site.
5. To confirm your selection and activate the SSL certificate, click OK. Your website will now operate securely over HTTPS, benefiting from the cryptographic protection of the installed certificate.

Enabling a Let's Encrypt SSL Certificate (Service-provider Interface)

For those managing domains through the Service-provider interface, enabling a free Let's Encrypt SSL certificate is a straightforward process. Follow these instructions:

1. Begin by opening the Domains menu, located on the left side of your Plesk panel.
2. From the list presented, click on the domain name you wish to secure with a Let's Encrypt certificate. This will take you to its specific control panel.
3. On the domain's control panel page, click the Let's Encrypt link. This option is specifically designed for quick certificate provisioning.
4. You will be prompted to provide an email address. This contact information is crucial for receiving important notifications and warnings regarding your Let's Encrypt certificate, such as renewal reminders.
5. Review the available tick-boxes. It is generally advisable to select these options if you want the www and webmail subdomains (prefixes) of your primary domain to also be covered by the new certificate, ensuring broader security.
6. Finally, click Install to initiate the process of adding the Let's Encrypt certificate. Plesk will then handle the automatic generation, installation, and configuration of the certificate for your chosen domain.