Securing a Web site using a Free LetsEncrypt TLS Certificate in Plesk
Since we've upgraded your VPS to Plesk Obsidian all our domains are secured with a free LetsEncrypt certificate.
These certificates are automatically renewed every 3 month by Plesk, but occasionally one need to change to add one component, for example when adding aliases or subdomains.
Customers can manage their own LetsEncrypt TLS Certificate in Plesk:
-
Login with your Plesk Admin username at the Plesk Admin page for your domain. it looks like : https://psa1234.his.com:8443/
(This information has been provided when the account was created.) -
Under Websites & Domains
-
if you have multiple domains, Select the domain Subscription you want to work with.
Step 1: Generate the Secure Certificate
-
In the Domain Dashboard:
-
Scroll down to Security
-
Click on SSL/TLS Certificates
it will display the current LetsEncrypt certificate used by the domain and the components it secures.
-- Make sure the correct contact email address is listed- by default it is the subscription’s owner’s. -
Click on the button Reissue Certificate
-
Under Install a free basic certificate provided by Let's Encrypt: Click Install
-
Fill-in the required fields:
-- Secure the domain name
-- if hosting a web site in Plesk: Include www as the alternative domain name for the SSL certificate if this is the preferred domain you are using for the web site.
-- If hosting Mailboxes for the Domain in Plesk, also add webmail. -
Assign the certificate to the mail domain.
-
Click on Get It free to generate the new Certificate.
-
Click Install.
When the certificate is generated, you will see a banner on top of the page saying “Information: Let's Encrypt SSL certificate was successfully installed on the domain.com.
Step 2: Configure the Domain to use the Secure Certificate
This part should already be done. Review the Hosting settings:
- Under Website&Domain > Hosting and DNS > Hosting
- Scroll down to the Security part.
- Make sure the “SSL support” is checked and shows the Lets Encrypt certificate for the domain in the Certificate field.
If this is not the case:
Check “SSL support” and select the correct certificate if needed and scroll down to click OK.
Important: At this point you can test your web site pages and make sure they work in https.
If you are using Wordpress, see this article: Switching a WordPress site to HTTPS
Step3: Redirect all web traffic for the domain to HTTPS
- Under Hosting Settings > Under Security section click on Permanent SEO-safe 301 redirect from HTTP to HTTPS.
- Click OK to apply any changes to the domain Hosting & SSL settings.