{"id":4119,"date":"2022-07-25T13:00:00","date_gmt":"2022-07-25T17:00:00","guid":{"rendered":"https:\/\/www.inmotionhosting.com\/support\/2017\/07\/10\/auto-ssl-guide\/"},"modified":"2026-04-22T12:36:29","modified_gmt":"2026-04-22T16:36:29","slug":"auto-ssl-guide","status":"publish","type":"post","link":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/","title":{"rendered":"How to Enable cPanel AutoSSL via Account Management Panel (AMP) and WHM"},"content":{"rendered":"<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"538\" src=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage-1024x538.png\" alt=\"The Complete Guide to cPanel's free AutoSSL title image. \" class=\"wp-image-69468\" srcset=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage-1024x538.png 1024w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage-300x158.png 300w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage-768x403.png 768w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage.png 1200w\" sizes=\"auto, (min-width: 1360px) 876px, (min-width: 960px) calc(61.58vw + 51px), calc(100vw - 80px)\" \/><\/figure>\n\n\n\n<p>cPanel AutoSSL installs and renews free Domain Validated SSL certificates for every eligible domain on your account, with no manual steps once it is turned on. This guide covers how AutoSSL works, how to enable it on shared, VPS, and dedicated hosting through your InMotion Hosting Account Management Panel (AMP), how to diagnose the issues that cause it to fail, and when a paid SSL certificate makes more sense.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is cPanel AutoSSL and How Does It Work?<\/h2>\n\n\n\n<p>AutoSSL is a built-in cPanel feature that issues and installs free <strong>Domain Validated (DV)<\/strong> SSL certificates for every qualifying domain on an account. It runs on a daily schedule in the background, checks which domains need a valid certificate, and requests one through a supported Certificate Authority using <a href=\"https:\/\/docs.cpanel.net\/whm\/ssl-tls\/manage-autossl\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">cPanel\u2019s AutoSSL system<\/a>.<\/p>\n\n\n\n<p>Each certificate is valid for 90 days, and AutoSSL attempts renewal roughly 30 days before expiry. That keeps your site continuously secured without anyone tracking expiration dates.<\/p>\n\n\n\n<p>Under the hood, AutoSSL proves domain ownership through <strong>Domain Control Validation (DCV)<\/strong>. The server places a verification file at either <code>\/.well-known\/acme-challenge\/<\/code> or <code>\/.well-known\/pki-validation\/<\/code>, and the Certificate Authority reads that file from your domain to confirm you control it. If the request succeeds, the CA issues the certificate and cPanel installs it automatically across the services that need it, including Apache, Dovecot, Exim, and cPanel itself.<\/p>\n\n\n\n<p>On cPanel servers, the available providers are typically cPanel-branded Sectigo (formerly Comodo) and <a href=\"https:\/\/letsencrypt.org\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Let\u2019s Encrypt<\/a>. Which CA actually issues your certificate depends on how the server\u2019s AutoSSL provider is configured in WHM.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"free-vs-paid\">Free vs. Paid SSL Certificates: Which Do You Need?<\/h2>\n\n\n\n<p>Both free AutoSSL and paid certificates use the same underlying encryption strength. The differences come down to validation level, warranty coverage, and use case.<\/p>\n\n\n\n<p>Free AutoSSL certificates are Domain Validated. The CA confirms you control the domain, nothing more. That is enough to remove browser security warnings, satisfy modern SEO requirements, and support PCI DSS when paired with current TLS settings.<\/p>\n\n\n\n<p><a href=\"https:\/\/www.inmotionhosting.com\/support\/amp\/how-do-i-obtain-an-ssl-certificate\/\">Paid certificates<\/a> add organizational validation, warranty coverage, and direct support from the Certificate Authority. Organization Validated (OV) certificates verify your business identity. Extended Validation (EV) certificates apply the highest level of background check. <a href=\"https:\/\/blog.chromium.org\/2019\/08\/upcoming-change-to-chromes-identity.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Chrome removed the green EV address bar in version 77 back in 2019<\/a>, and Firefox did the same in version 70, so EV no longer produces a distinctive visual in the browser. The underlying verification still carries weight in regulated industries and high-trust B2B contracts.<\/p>\n\n\n\n<p>A practical way to decide:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Content sites, blogs, marketing sites, SaaS landing pages, and most small e-commerce stores:<\/strong> Free AutoSSL covers your needs.<\/li>\n\n\n\n<li><strong>Financial services, healthcare portals, and regulated enterprises that need verified business identity in the certificate details:<\/strong> a paid OV or EV certificate.<\/li>\n\n\n\n<li><strong>Sites that need a formal warranty from the CA or liability coverage:<\/strong> paid.<\/li>\n<\/ul>\n\n\n\n<p>One note on e-commerce. Major payment processors including Stripe, Square, PayPal, Braintree, and Authorize.net all accept valid DV certificates. The older idea that payment processors require premium SSL is no longer accurate.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Requirements to Enable AutoSSL on Your Domain<\/h2>\n\n\n\n<p>AutoSSL only succeeds when a few conditions line up:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The domain and every subdomain you want secured must resolve to your InMotion Hosting server\u2019s IP address. Verify with a tool like <a href=\"https:\/\/www.whatsmydns.net\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">whatsmydns.net<\/a> or by running <code>dig yourdomain.com<\/code> from a terminal.<\/li>\n\n\n\n<li>The domain must be present inside cPanel as the primary domain, an addon, a subdomain, or a parked domain.<\/li>\n\n\n\n<li>Any existing non-AutoSSL certificate (custom upload, self-signed, or expired) must be removed first. AutoSSL will not replace a non-AutoSSL certificate by default, even an expired one. This is one of the most common reasons installs fail silently.<\/li>\n\n\n\n<li>Your <code>.htaccess<\/code> file must allow requests to the two validation paths above without redirecting them.<\/li>\n\n\n\n<li>No IPv6 AAAA record should point the domain somewhere other than your server. If your A record points correctly but a stale AAAA record points elsewhere, validation will fail.<\/li>\n<\/ul>\n\n\n\n<p>On InMotion VPS and dedicated servers, AutoSSL also needs to be enabled inside the cPanel feature list assigned to the account.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to Enable Free AutoSSL on Shared Hosting at InMotion<\/h2>\n\n\n\n<p>InMotion shared hosting customers activate free AutoSSL from the Account Management Panel (AMP) rather than directly inside cPanel. The AMP tool handles provisioning and eligibility checking across every domain on the account.<\/p>\n\n\n<div class=\"imh-youtube-embed\">\n\t\t\t<iframe src=\"https:\/\/www.youtube.com\/embed\/-DgwbqbbkWY\" title=\"How to Enable an SSL on Shared Hosting\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n\t\t\t<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"VideoObject\",\"name\":\"How to Enable an SSL on Shared Hosting\",\"description\":\"\",\"uploadDate\":\"\",\"thumbnailUrl\":\"https:\/\/img.youtube.com\/vi\/-DgwbqbbkWY\/hqdefault.jpg\"}<\/script>\n\t\t<\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"activate\">Activate the Free AutoSSL Option<\/h3>\n\n\n\n<ol class=\"wp-block-list article_list\">\n<li><a aria-label=\"Login to your Account Management Panel (AMP)\" href=\"https:\/\/www.inmotionhosting.com\/support\/amp\/how-to-log-into-amp\/\">Login to your Account Management Panel (AMP)<\/a>.<\/li>\n\n\n\n<li>Click on the icon for <strong>Manage Free Basic SSL<\/strong>.<br><figure><img loading=\"lazy\" decoding=\"async\" width=\"72\" height=\"126\" class=\"wp-image-69474\" style=\"width: 72px;\" src=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/freeBasicSSLIcon.jpg\" alt=\"free AutoSSL icon in AMP\"><\/figure><\/li>\n\n\n\n<li>If the switch under <strong>Enable Free SSL<\/strong> is in the <strong>OFF<\/strong> position, click it so that it moves to the <strong>ON<\/strong> position. <br><figure><img decoding=\"async\" class=\"\" style=\"width: 750px;\" src=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2026\/04\/amp-manage-free-ssl-2026.png\" alt=\"switch to activate free AutoSSL within AMP\"><\/figure><\/li>\n\n\n\n<li>Go ahead and click the blue <strong>Run Check Now<\/strong> to automatically add SSLs to any valid cPanel account. <\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"eligibility\">Check Eligibility of Your Domains<\/h3>\n\n\n\n<p>When you enable free AutoSSL, your domains are automatically assigned an SSL if they are eligible. In the Account Management Panel (AMP) you can scan your domains to check for eligibility. Your domain(s) need to be pointed to us and added to WHM to be eligible for the free AutoSSL. Follow the steps below to check your domain(s) eligibility for the free AutoSSL.<\/p>\n\n\n\n<ol class=\"wp-block-list article_list\">\n<li><a href=\"https:\/\/www.inmotionhosting.com\/support\/amp\/how-to-log-into-amp\/\">Login to your Account Management Panel (AMP)<\/a>.<\/li>\n\n\n\n<li>Click on the icon for Manage Free Basic SSL.<br><figure><img loading=\"lazy\" decoding=\"async\" width=\"72\" height=\"126\" class=\"wp-image-69474\" style=\"width: 72px;\" src=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/freeBasicSSLIcon.jpg\" alt=\"free AutoSSL icon in AMP\"><\/figure><\/li>\n\n\n\n<li>In the box at right side of the screen you will see a box listing all of the domains on your account. You can click on <strong>Check All<\/strong> to select all of the domains, or you can click each check box in order to select only the domains that you want to check for eligibility.<br><figure><img decoding=\"async\" class=\"\" src=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2026\/04\/amp-free-ssl-eligible-domains-2026.png\" alt=\"Free SSL Eligible Domains Panel\"><\/figure><\/li>\n\n\n\n<li>Click on <strong>Check Eligibility<\/strong> in order to see if the domain can have the free AutoSSL enabled.<\/li>\n\n\n\n<li>When the check is completed you will either see a red X or a green check mark indicating the domain\u2019s eligibility. If you see a red X, then click on the link labelled \u2018<strong>Find out why<\/strong>\u2018 in order to determine the reason that the domain is ineligible.<\/li>\n\n\n\n<li>Go ahead and click the blue <strong>Run Check Now<\/strong> to automatically add SSLs to any valid cPanel account.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">How to Enable AutoSSL in WHM for VPS and Dedicated Servers<\/h2>\n\n\n\n<p>Customers on InMotion VPS or dedicated hosting with WHM access configure AutoSSL at the server level. This requires root and covers every cPanel account on the machine.<\/p>\n\n\n\n<ol class=\"wp-block-list article_list\">\n<li>Log in to Root WHM.<\/li>\n\n\n\n<li>Open <strong>SSL\/TLS<\/strong> then <strong>Manage AutoSSL<\/strong>.<\/li>\n\n\n\n<li>On the <strong>Providers<\/strong> tab, pick your CA. The options typically include <strong>Let\u2019s Encrypt\u2122<\/strong> and <strong>Sectigo<\/strong>. If Let\u2019s Encrypt is not listed, install it from <strong>Home &gt; Plugins &gt; Manage Plugins<\/strong> first.<\/li>\n\n\n\n<li>On the <strong>Options<\/strong> tab, decide whether AutoSSL should replace existing non-AutoSSL certificates. Leaving this off is safer because it prevents AutoSSL from overwriting a valid OV or EV certificate with a DV one.<\/li>\n\n\n\n<li>On the <strong>Manage Users<\/strong> tab, enable AutoSSL for the cPanel accounts you want covered.<\/li>\n\n\n\n<li>Click <strong>Run AutoSSL For All Users<\/strong> to trigger the first installation.<\/li>\n<\/ol>\n\n\n\n<p>From inside each cPanel account, users can also open <strong>SSL\/TLS Status<\/strong> and press <strong>Run AutoSSL<\/strong> to request a certificate on demand.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\">\n\n\n\n<h2 class=\"wp-block-heading\" id=\"troubleshooting\">Troubleshooting Your Free SSL<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Why is AutoSSL Failing to Install on my Domain?<\/h3>\n\n\n\n<p>Most AutoSSL failures come from a short list of causes. Diagnose in roughly this order:<\/p>\n\n\n\n<p><strong>The domain is not pointed to the server.<\/strong> If DNS is still at the old host, the CA cannot reach your validation file. Confirm the A record resolves to your InMotion Hosting IP and remove any stale AAAA records pointing elsewhere.<\/p>\n\n\n\n<p><strong>An existing certificate is still installed.<\/strong> AutoSSL refuses to overwrite non-AutoSSL certificates by default. Open <strong>SSL\/TLS &gt; Manage SSL Sites<\/strong>, uninstall any old, expired, or self-signed certificate, then rerun AutoSSL.<\/p>\n\n\n\n<p><strong><code>.htaccess<\/code> is blocking validation.<\/strong> Redirect rules that force HTTPS or route everything through a front controller often catch requests to <code>\/.well-known\/<\/code>. See the next section for the fix.<\/p>\n\n\n\n<p><strong>Security plugins are interfering.<\/strong> WordPress plugins including Wordfence, Solid Security (formerly iThemes), and All In One WP Security can block or reroute <code>.well-known<\/code> requests. Temporarily disable them, rerun AutoSSL, then re-enable them.<\/p>\n\n\n\n<p><strong>A CDN is in front of the origin.<\/strong> When Cloudflare or Sucuri is proxying traffic, validation requests may not reach your server at all. CDN handling is covered below.<\/p>\n\n\n\n<p><strong>Rate limits have been hit.<\/strong> Let\u2019s Encrypt limits certificates to 50 per registered domain per week. Repeated failed attempts during a migration can trigger a temporary lockout.<\/p>\n\n\n\n<p><strong>AutoSSL is not enabled on the account.<\/strong> On VPS and dedicated plans, AutoSSL is configured per-account by the root user in WHM. If the Run AutoSSL button is missing inside cPanel, the server administrator needs to add it to the feature list.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How to Fix .htaccess Conflicts That Block AutoSSL<\/h3>\n\n\n\n<p>The AutoSSL validation paths must bypass any redirect, authentication, or IP restriction rules in <code>.htaccess<\/code>. Add these conditions near the top of the file, above any <code>RewriteRule<\/code> that forces HTTPS or routes traffic to an application\u2019s front controller:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono-NL.ttf\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono-NL,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(26px, 1.625rem, 39px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><pre class=\"shiki github-dark\" style=\"background-color: #24292e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F97583\">RewriteEngine<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #B392F0\">On<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F97583\">RewriteCond<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #DBEDFF\">%{REQUEST_URI}<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #9ECBFF\">!^\/.well-known\/acme-challenge\/.+$<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F97583\">RewriteCond<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #DBEDFF\">%{REQUEST_URI}<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #9ECBFF\">!^\/.well-known\/pki-validation\/[A-F0-9]{32}.txt$<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>These rules tell Apache to skip your redirects whenever a Certificate Authority is checking for a validation file. Without them, a rule that forces <code>http:\/\/<\/code> to <code>https:\/\/<\/code> or routes everything through <code>index.php<\/code> can break AutoSSL silently.<\/p>\n\n\n\n<p>If the site already has a working SSL and you are troubleshooting a renewal failure, the same fix applies. Place the conditions before your HTTPS redirect block, save, and trigger AutoSSL again.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How to Handle AutoSSL When Using a CDN like Cloudflare<\/h3>\n\n\n\n<p>A CDN between your visitors and your server complicates AutoSSL because validation traffic may hit the CDN\u2019s edge, not your origin. There are two reliable approaches:<\/p>\n\n\n\n<p><strong>Option 1: Issue the certificate on your origin, then secure the edge separately.<\/strong> In Cloudflare\u2019s DNS tab, temporarily set the domain to DNS-only mode (gray cloud) long enough for AutoSSL to run and validate. Once the certificate installs, switch back to proxy mode. Cloudflare will issue its own edge certificate, and the AutoSSL on your origin handles server-to-Cloudflare encryption.<\/p>\n\n\n\n<p><strong>Option 2: Use the CDN\u2019s SSL and exclude the domain from AutoSSL.<\/strong> If Cloudflare is terminating SSL for the public, mark the domain as <strong>Exclude from AutoSSL<\/strong> in cPanel\u2019s SSL\/TLS Status so the system stops trying. You still want an origin certificate for end-to-end encryption, which Cloudflare provides free through their <a href=\"https:\/\/developers.cloudflare.com\/ssl\/origin-configuration\/origin-ca\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Origin CA<\/a>.<\/p>\n\n\n\n<p>Sucuri and other reverse proxy services behave the same way. The working pattern is always identical: validation requests must reach your actual server, either by routing them through the CDN or by temporarily bypassing it.<\/p>\n\n\n\n<p><strong>Further Reading:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a aria-label=\"How to Use AutoSSL with Cloudflare (opens in a new tab)\" href=\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/how-to-use-autossl-with-cloudflare\/\" rel=\"noreferrer noopener\">How to Use AutoSSL with Cloudflare<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/support.cloudflare.com\/hc\/en-us\/articles\/200169246-How-do-I-purge-my-cache-\" target=\"_blank\" rel=\"noreferrer noopener\">Purging CloudFlare Cache<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/kb.sucuri.net\/firewall\/Performance\/clearing-cache\" target=\"_blank\" rel=\"noreferrer noopener\">Clearing Sucuri Cache<\/a><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">What to Do When Your Site Still Shows \u201cNot Secure\u201d After AutoSSL Installs<\/h3>\n\n\n\n<p>A valid certificate alone does not make the browser happy. If the lock icon is missing, broken, or showing a warning after AutoSSL installed correctly, the most likely cause is <strong>mixed content<\/strong>: the page itself loads over HTTPS, but individual images, scripts, stylesheets, or iframes are still requested over HTTP.<\/p>\n\n\n\n<p>Fix mixed content in three steps:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open your browser\u2019s developer tools, go to the Console tab, and reload the page. Every mixed content error logs the specific HTTP URL causing the problem.<\/li>\n\n\n\n<li>Update hardcoded <code>http:\/\/<\/code> references in your theme, plugins, and content to <code>https:\/\/<\/code> or protocol-relative <code>\/\/<\/code> URLs. For WordPress, the <a href=\"https:\/\/wordpress.org\/plugins\/better-search-replace\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Better Search Replace plugin<\/a> handles database-level replacements safely.<\/li>\n\n\n\n<li>In WordPress, update <strong>Site URL<\/strong> and <strong>Home URL<\/strong> under <strong>Settings &gt; General<\/strong> to use <code>https:\/\/<\/code>.<\/li>\n<\/ol>\n\n\n\n<p>If the site is a headless or custom application, the same principle applies: every asset reference must use HTTPS or a protocol-relative path.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How to Force HTTPS Site-Wide After Installing AutoSSL<\/h3>\n\n\n\n<p>Once AutoSSL is working, redirect every request to HTTPS so visitors cannot accidentally use the insecure version. Add these lines to <code>.htaccess<\/code>, after the AutoSSL whitelist rules:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono-NL.ttf\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono-NL,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(26px, 1.625rem, 39px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><pre class=\"shiki github-dark\" style=\"background-color: #24292e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F97583\">RewriteCond<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #DBEDFF\">%{HTTPS}<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #9ECBFF\">off<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F97583\">RewriteRule<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #DBEDFF\">^(.*)$<\/span><span style=\"color: #E1E4E8\"> <\/span><span style=\"color: #9ECBFF\">https:\/\/%{HTTP_HOST}%{REQUEST_URI}<\/span><span style=\"color: #E1E4E8\"> [L,R=<\/span><span style=\"color: #79B8FF\">301<\/span><span style=\"color: #E1E4E8\">]<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>For WordPress sites, plugins like <a href=\"https:\/\/wordpress.org\/plugins\/really-simple-ssl\/\">Really Simple SSL<\/a> perform this redirect along with mixed-content cleanup and are lower-risk if you are uncomfortable editing <code>.htaccess<\/code> directly.<\/p>\n\n\n\n<p>HTTPS redirects also matter for SEO. Google treats <code>http:\/\/example.com<\/code> and <code>https:\/\/example.com<\/code> as two separate URLs, and split signals dilute ranking authority.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">When Should You Upgrade to a Paid SSL Certificate?<\/h2>\n\n\n\n<p>Free AutoSSL works for most websites. A paid certificate earns its cost in a few specific cases:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You need a warranty from the Certificate Authority to cover damages in the event of a mis-issuance.<\/li>\n\n\n\n<li>Your business operates in a regulated industry where verified organizational identity in the certificate is an audit requirement.<\/li>\n\n\n\n<li>You want visible business identity in the certificate details shown to technical buyers and procurement teams.<\/li>\n\n\n\n<li>You run a high-trust B2B service where enterprise customers expect OV or EV validation in security questionnaires.<\/li>\n\n\n\n<li>You need a specific certificate type that AutoSSL does not issue, such as a wildcard across many unrelated subdomains on a non-cPanel setup.<\/li>\n<\/ul>\n\n\n\n<p>If none of those apply, the free AutoSSL certificate on your cPanel account is doing the same encryption job as a paid certificate at a fraction of the cost.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Getting Help from InMotion Support<\/h2>\n\n\n\n<p>If AutoSSL is still failing after working through the steps above, <a href=\"https:\/\/www.inmotionhosting.com\/contact\">InMotion Hosting Support<\/a> can investigate server-side logs that are not accessible from inside cPanel. Contact Support through your Account Management Panel with the domain name and a short summary of what you have tried.<\/p>\n\n\n\n<p>Customers on a Premier Care plan have access to Advanced Product Support, which handles more involved troubleshooting including <code>.htaccess<\/code> edits, plugin testing, and CDN coordination. For root-level VPS and dedicated server tuning that falls outside standard support, Premier Care also includes one hour of InMotion Solutions consulting per month.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>cPanel AutoSSL installs and renews free Domain Validated SSL certificates for every eligible domain on your account, with no manual steps once it is turned on. This guide covers how AutoSSL works, how to enable it on shared, VPS, and dedicated hosting through your InMotion Hosting Account Management Panel (AMP), how to diagnose the issues<a class=\"moretag\" href=\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/\"> Read More ><\/a><\/p>\n","protected":false},"author":57014,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4312],"tags":[],"class_list":["post-4119","post","type-post","status-publish","format-standard","hentry","category-ssl"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Enable cPanel AutoSSL via AMP &amp; WHM | InMotion Hosting<\/title>\n<meta name=\"description\" content=\"How to enable cPanel AutoSSL on InMotion Hosting, verify the install, and fix common validation errors with CDNs, .htaccess, and mixed content.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Enable cPanel AutoSSL via AMP &amp; WHM | InMotion Hosting\" \/>\n<meta property=\"og:description\" content=\"How to enable cPanel AutoSSL on InMotion Hosting, verify the install, and fix common validation errors with CDNs, .htaccess, and mixed content.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/\" \/>\n<meta property=\"og:site_name\" content=\"InMotion Hosting Support Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/inmotionhosting\/\" \/>\n<meta property=\"article:published_time\" content=\"2022-07-25T17:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-22T16:36:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"InMotion Hosting Contributor\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/InMotionHosting\" \/>\n<meta name=\"twitter:site\" content=\"@InMotionHosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"InMotion Hosting Contributor\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/\"},\"author\":{\"name\":\"InMotion Hosting Contributor\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644\"},\"headline\":\"How to Enable cPanel AutoSSL via Account Management Panel (AMP) and WHM\",\"datePublished\":\"2022-07-25T17:00:00+00:00\",\"dateModified\":\"2026-04-22T16:36:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/\"},\"wordCount\":2212,\"publisher\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage-1024x538.png\",\"articleSection\":[\"Secure Socket Layer (SSL)\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/\",\"name\":\"How to Enable cPanel AutoSSL via AMP & WHM | InMotion Hosting\",\"isPartOf\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage-1024x538.png\",\"datePublished\":\"2022-07-25T17:00:00+00:00\",\"dateModified\":\"2026-04-22T16:36:29+00:00\",\"description\":\"How to enable cPanel AutoSSL on InMotion Hosting, verify the install, and fix common validation errors with CDNs, .htaccess, and mixed content.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#primaryimage\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage.png\",\"contentUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage.png\",\"width\":1200,\"height\":630,\"caption\":\"Title image for cPanel's Free AutoSSL Guide.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.inmotionhosting.com\/support\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Enable cPanel AutoSSL via Account Management Panel (AMP) and WHM\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#website\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/\",\"name\":\"InMotion Hosting Support Center\",\"description\":\"Web Hosting Support &amp; Tutorials\",\"publisher\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\",\"name\":\"InMotion Hosting\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg\",\"contentUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg\",\"width\":696,\"height\":696,\"caption\":\"InMotion Hosting\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/inmotionhosting\/\",\"https:\/\/x.com\/InMotionHosting\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644\",\"name\":\"InMotion Hosting Contributor\",\"description\":\"InMotion Hosting contributors are highly knowledgeable individuals who create relevant content on new trends and troubleshooting techniques to help you achieve your online goals!\",\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/inmotion-hosting\/\",\"https:\/\/x.com\/https:\/\/twitter.com\/InMotionHosting\"],\"url\":\"https:\/\/www.inmotionhosting.com\/support\/author\/inmotion-hosting-contributor\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Enable cPanel AutoSSL via AMP & WHM | InMotion Hosting","description":"How to enable cPanel AutoSSL on InMotion Hosting, verify the install, and fix common validation errors with CDNs, .htaccess, and mixed content.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/","og_locale":"en_US","og_type":"article","og_title":"How to Enable cPanel AutoSSL via AMP & WHM | InMotion Hosting","og_description":"How to enable cPanel AutoSSL on InMotion Hosting, verify the install, and fix common validation errors with CDNs, .htaccess, and mixed content.","og_url":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/","og_site_name":"InMotion Hosting Support Center","article_publisher":"https:\/\/www.facebook.com\/inmotionhosting\/","article_published_time":"2022-07-25T17:00:00+00:00","article_modified_time":"2026-04-22T16:36:29+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage.png","type":"image\/png"}],"author":"InMotion Hosting Contributor","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/InMotionHosting","twitter_site":"@InMotionHosting","twitter_misc":{"Written by":"InMotion Hosting Contributor","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#article","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/"},"author":{"name":"InMotion Hosting Contributor","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644"},"headline":"How to Enable cPanel AutoSSL via Account Management Panel (AMP) and WHM","datePublished":"2022-07-25T17:00:00+00:00","dateModified":"2026-04-22T16:36:29+00:00","mainEntityOfPage":{"@id":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/"},"wordCount":2212,"publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#primaryimage"},"thumbnailUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage-1024x538.png","articleSection":["Secure Socket Layer (SSL)"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/","url":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/","name":"How to Enable cPanel AutoSSL via AMP & WHM | InMotion Hosting","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#primaryimage"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#primaryimage"},"thumbnailUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage-1024x538.png","datePublished":"2022-07-25T17:00:00+00:00","dateModified":"2026-04-22T16:36:29+00:00","description":"How to enable cPanel AutoSSL on InMotion Hosting, verify the install, and fix common validation errors with CDNs, .htaccess, and mixed content.","breadcrumb":{"@id":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#primaryimage","url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage.png","contentUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2021\/03\/cPanelFreeAutoSSLTitleImage.png","width":1200,"height":630,"caption":"Title image for cPanel's Free AutoSSL Guide."},{"@type":"BreadcrumbList","@id":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/auto-ssl-guide\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.inmotionhosting.com\/support\/"},{"@type":"ListItem","position":2,"name":"How to Enable cPanel AutoSSL via Account Management Panel (AMP) and WHM"}]},{"@type":"WebSite","@id":"https:\/\/www.inmotionhosting.com\/support\/#website","url":"https:\/\/www.inmotionhosting.com\/support\/","name":"InMotion Hosting Support Center","description":"Web Hosting Support &amp; Tutorials","publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.inmotionhosting.com\/support\/#organization","name":"InMotion Hosting","url":"https:\/\/www.inmotionhosting.com\/support\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/","url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","contentUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","width":696,"height":696,"caption":"InMotion Hosting"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/inmotionhosting\/","https:\/\/x.com\/InMotionHosting"]},{"@type":"Person","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644","name":"InMotion Hosting Contributor","description":"InMotion Hosting contributors are highly knowledgeable individuals who create relevant content on new trends and troubleshooting techniques to help you achieve your online goals!","sameAs":["https:\/\/www.linkedin.com\/company\/inmotion-hosting\/","https:\/\/x.com\/https:\/\/twitter.com\/InMotionHosting"],"url":"https:\/\/www.inmotionhosting.com\/support\/author\/inmotion-hosting-contributor\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"primary_category":{"id":4312,"name":"Secure Socket Layer (SSL)","slug":"ssl","link":"https:\/\/www.inmotionhosting.com\/support\/website\/ssl\/"},"_links":{"self":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/4119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/users\/57014"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/comments?post=4119"}],"version-history":[{"count":29,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/4119\/revisions"}],"predecessor-version":[{"id":131964,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/4119\/revisions\/131964"}],"wp:attachment":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/media?parent=4119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/categories?post=4119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/tags?post=4119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}