InMotion Hosting Support Center

Note: This feature is only available root users on VPS or Dedicated servers.

What is AutoSSL?

cPanel has recently added a feature for VPS and Dedicated server users called AutoSSL. This interface allows you to install domain-validated SSL certificates on domains setup in cPanel accounts. It also allows you the ability to view the log files and select the users that you can secure with AutoSSL. In this article, we'll show you how you can use AutoSSL in WHM.

The AutoSSL feature has the following limitations:

  • Certificates that cPanel, Inc. provides through AutoSSL can secure a maximum of 200 domains per certificate (Apache virtual host).
  • AutoSSL will only include domains and subdomains that pass a Domain Control Validation (DCV) test, which proves ownership of the domain.
  • AutoSSL does not secure wildcard domains.
  • If the corresponding www. domain does not pass a DCV test, AutoSSL will not attempt to secure that www. domain.
  • AutoSSL will not attempt to replace pre-existing certificates that it did not issue.

The AutoSSL feature includes:

  • AutoSSL includes corresponding www. domains for each domain and subdomain in the certificate, and those www. domains count towards any domain or rate limits. For example, if your domain is example.com, AutoSSL will automatically include www.example.com in the certificate.
  • Each AutoSSL provider may wait for a specific amount of time to replace an AutoSSL-provided certificate before it expires. For example: AutoSSL will attempt to renew certificates that cPanel, Inc. provides when they expire within 15 days.
  • Due to rate limits, AutoSSL prioritizes new certificates over the renewal of existing certificates.
  • AutoSSL will replace certificates with overly-weak security settings (for example, RSA modulus of 512-bit or less).
  • AutoSSL uses a sort algorithm to determine the priority of domains to secure if a virtual host contains more than the provider's limit of domain names

The users used by AutoSSL are the cPanel users created within your VPS or Dedicated server account. AutoSSL will check ALL domains within the user account unless you make an exception for them within the Manage Users option of AutoSSL.


How to Run AutoSSL for All Users


Before you begin, you will need to be logged into the Web Host Manager as a root user. The button labeled Run AutoSSL for All Users runs the module based on the options selected in the tabs below.

Warning before using AutoSSL to replace all SSL certificates

NOTE: If you want the AutoSSL option to replace invalid or expiring non-AutoSSL certificates, then click on the Options tab and click on Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates. Make sure to read the warning. If you don't know if you should replace your EV/OV or DV certificate, then do not select this option until you have spoken with a knowledgeable Web developer, administrator, or support person.

  1. Verify the certificate provider

    Select the Certificate Provider (typically, the default certificate provider is Comodo, so you can skip this step)

  2. Manage Users for AutoSSL

    If necessary, click on the tab labeled Manage Users in order to disable AutoSSL for specific users. Make to click on Save button at the bottom of the screen if you have selected a user.

  3. Run SSL for all users

    Once you are sure of the users that you want to use AutoSSL with, click on the blue button labeled Run AutoSSL For All Users

  4. NGINX users only! If you are using NGINX you will need to rebuild the NGINX configuration after running AutoSSL buy running the following commands via SSH as root.

    ngxconf -u $user -rd
    service nginx restart
    service httpd restart

How to Run AutoSSL for Specific Users

  1. Verify the certificate provider

    Select the Certificate Provider (typically, the default certificate provider is Comodo, so you can skip this step)

  2. Manage Users for AutoSSL

    Click on the tab labeled Manage Users in order to select or disable AutoSSL for specific users. Make to click on Save button at the bottom of the screen if you make any changes. You can disable AutoSSL for all the users that you do not wish to use AutoSSL.

  3. Select Users

    Click on the blue button labeled Check "user" in order to apply an SSL from AutoSSL. Note that when you check it, it checks ALL of the domains for that particular user.

  4. NGINX users only! If you are using NGINX you will need to rebuild the NGINX configuration after running AutoSSL buy running the following commands via SSH as root.

    ngxconf -u $user -rd
    service nginx restart
    service httpd restart

Support Center Login

Our Login page has moved, Click the button below to be taken to the login page.

Social Media Login

   
Social Login Joomla

Related Questions

Here are a few questions related to this article that our customers have asked:
Ooops! It looks like there are no questions about this page.
Would you like to ask a question about this page? If so, click the button below!
Ask a Question
n/a Points
2017-11-03 8:14 pm

Hello I have a dedicated server where i have more then 600 a/c. Does this SSL free for all 600 a/c. or is their any limitation??

Staff
13,791 Points
2017-11-06 7:19 am
There is no limitation on the FREE SSL.
n/a Points
2017-10-10 6:33 am

Does auto SSL is considered self-signed? Will it show red mark not secure on browser?

Staff
13,791 Points
2017-10-10 7:04 am
Great question! Auto SSL certificates are not considering self-signed. They will display correctly.
n/a Points
2017-07-14 12:10 pm

What is the specification of this SSL? 

Staff
40,163 Points
2017-07-14 1:27 pm
Hello Alan,

The information for the SSL is in the article above. If you require more information, please indicate what you mean by "specification". It is a domain-validated certificate.

If you have any further questions or comments, please let us know.

Regards,
Arnel C.
n/a Points
2017-06-14 5:10 pm

Once you've changed your settings to enable AutoSSL how long does it typically take for the provider to issue the certificate?

Staff
40,163 Points
2017-06-15 7:08 am
Hello Travis,

It should not take longer than 24 hours. If you're seeing it take longer, then please contact your host technical support.

If you have any further questions, please let us know.

Kindest regards,
Arnel C.

Post a Comment

Name:
Email Address:
Phone Number:
Comment:
Submit

Please note: Your name and comment will be displayed, but we will not show your email address.

8 Questions & Comments

Post a comment

Back to first comment | top

Need more Help?

Search

Ask the Community!

Get help with your questions from our community of like-minded hosting users and InMotion Hosting Staff.

Current Customers

Chat: Click to Chat Now E-mail: support@InMotionHosting.com
Call: 888-321-HOST (4678) Ticket: Submit a Support Ticket

Not a Customer?

Get web hosting from a company that is here to help. Sign up today!