How to enable SSL automation with CDN? Print

  • 0

Setting up SSL automation with a Content Delivery Network (CDN) is one of the best ways to ensure your site stays fast and secure without you ever having to manually renew a certificate.

In 2026, this process is largely handled by the "handshake" between your CDN provider and your Nixzoehost server. Here is how to set it up correctly.


Step 1: Choose Your Encryption Mode

Before enabling automation, you must decide how the CDN should talk to your Nixzoehost server. Inside your CDN dashboard (like Cloudflare or Nixzoe-Edge), look for the SSL/TLS settings:

  • Full (Strict) Recommended: This is the best setting for Nixzoehost users. It requires a valid certificate on your Nixzoehost server (which our AutoSSL provides automatically). This ensures end-to-end encryption.

  • Full: Encrypts the entire path but doesn't check if the certificate on your server is "official."

  • Flexible: Only encrypts the path from the visitor to the CDN. The path to Nixzoehost remains unencrypted. Avoid this for e-commerce or login pages.


Step 2: Enable "Universal SSL" Automation

Most CDNs provide a free, automated certificate that covers your main domain and subdomains.

  1. Log in to your CDN dashboard.

  2. Navigate to the SSL/TLS section.

  3. Ensure Universal SSL (or "Edge Certificates") is toggled to On.

  4. The CDN will now automatically communicate with Certificate Authorities to issue and renew your "Edge" certificate every 90 days.


Step 3: Align with Nixzoehost AutoSSL

For the "Strict" mode to work, your Nixzoehost server needs its own certificate. Our systems handle this via cPanel AutoSSL:

  1. Log in to your Nixzoehost cPanel.

  2. Go to SSL/TLS Status.

  3. Ensure your domains have a Green Padlock. If not, click "Run AutoSSL."

  4. Note: If your CDN is active, cPanel might struggle to "see" your server. If AutoSSL fails, temporarily "Pause" your CDN for 5 minutes, run AutoSSL, and then turn the CDN back on.


Step 4: Enable "Always Use HTTPS"

To make the automation useful, you must force all visitors to use the secure connection.

  • In the CDN: Toggle "Always Use HTTPS" to On.

  • In WordPress: Ensure your Site URL and Home URL both start with https://.


Troubleshooting "Validation Loops"

Problem Cause Solution
Error 526 Your Nixzoehost server's SSL has expired. Log in to cPanel and click "Run AutoSSL" to refresh the origin.
Redirect Loop CDN is forcing HTTPS, but WordPress is trying to load HTTP. Set CDN to Full (Strict) and update WordPress settings to https.
SSL Not Pending DNS hasn't propagated yet. Wait up to 24 hours after changing nameservers for the CDN SSL to activate.

Pro-Tip for 2026: If you use Nixzoehost Global CDN, this entire process is "Zero-Touch." We automatically sync the certificates between the edge and your hosting account, so you don't have to manage two different dashboards.


Was this answer helpful?

« Back