How to Activate and Install an SSL Certificate? Print

How to Activate and Install an SSL Certificate

At NixZoeHost, we provide Free Lets Encrypt SSL certificates for all hosting accounts. However, if you have purchased a Premium SSL (like a Sectigo or PositiveSSL) for higher insurance or business validation, you must manually activate and install it.

Phase 1: Activation & Validation

Before a certificate can be installed, the Certificate Authority (CA) must verify that you own the domain.

1. Generate a CSR: Inside your cPanel > SSL/TLS > CSR, generate a "Certificate Signing Request." You will need to paste this code into your NixZoeHost billing area to start the activation.

2. Choose a Validation Method: You will be asked to prove ownership via one of these three methods:

   • Email: An approval email is sent to admin@yourdomain.com.

   • HTTP File: You upload a small .txt file to your website's folder.

   • DNS: You add a specific CNAME record to your domain's DNS settings.

3. Receive Your Certificate: Once validated, the CA will email you your Certificate (CRT) and CA Bundle.

Phase 2: Installation in cPanel

Once you have your certificate files, follow these steps to secure your site:

1. Log in to your NixZoeHost Dashboard and enter your cPanel.

2. Scroll to the Security section and click on SSL/TLS.

3. Under the "Install and Manage SSL" section, click Manage SSL Sites.

4. Select Your Domain: Choose the domain you are securing from the dropdown menu.

5. Paste the Codes:

   • Paste your Certificate (CRT) into the first box.

   • Click Autofill by Certificate (this will usually find your Private Key automatically).

   • Paste the CA Bundle into the final box.

6. Click Install Certificate.

[Image: cPanel "Manage SSL Sites" screen showing where to paste the CRT, Key, and CABUNDLE]

Phase 3: The "Free SSL" Alternative

If you don't need a Paid SSL and just want the green padlock, our system does the work for you:

• Auto-Installation: Our servers automatically attempt to install a Free Lets Encrypt SSL within 24 hours of your domain pointing to us.

• Manual Trigger: If it hasn't appeared yet, go to cPanel > SSL/TLS Status, select your domain, and click Run AutoSSL.

Common Troubleshooting

• "Private Key Missing": If cPanel doesn't find the key, it means the SSL was activated using a CSR generated on a different server. You will need to find that key or "Reissue" the SSL using a new CSR from your current dashboard.

• Validation Delay: Email validation is the fastest (usually 5 minutes). DNS validation can take up to 24 hours depending on your domain's provider.