What should I do if my Private Key was lost or deleted? Print

Your Private Key is a unique, mathematically generated file that acts as the "secret password" for your SSL certificate. For security reasons, the Certificate Authority (CA) and Nixzoehost do not store a backup of this key. It exists only on the server where you generated the CSR.

If this key is accidentally deleted, overwritten, or lost, your SSL certificate will no longer function, and you cannot install it.

Step 1: Double-Check the Server (The "Search" Phase)

Before panicking, check if the key is still on your server but just hidden.

• In cPanel: Go to Security > SSL/TLS > Private Keys (KEY). Look for a key that matches the date or the name of the CSR you created.

• Via File Manager: Check the /ssl/keys folder (outside of public_html).

• Check Your Downloads: If you used an online CSR generator, check your browser's download folder for a .key file.

Step 2: The Only Solution Reissue the Certificate

Because the Private Key is designed to be unrecoverable for security reasons, if it is truly gone, you must Reissue your certificate. At Nixzoehost, we allow you to do this for free as many times as needed during your certificate's lifespan.

1. Generate a New CSR: Go back to your cPanel or server and create a new Certificate Signing Request. This will generate a new Private Key.

2. Access Your Nixzoehost Dashboard: Log in to your Client Area and go to SSL Certificates.

3. Click Reissue: Select your certificate and click the Reissue button.

4. Paste the New CSR: Paste the code from the new CSR you just created.

5. Re-Validate: You will need to complete the domain validation (Email, DNS, or HTTP) again.

6. Re-Install: Once the CA sends you the new certificate files, install them alongside the new Private Key.

Why Can't Nixzoehost Just Give Me My Key?

The entire security of the internet relies on the fact that only you have the Private Key. If a hosting provider or a CA had access to your private key, your encryption would technically be "breakable." By not storing it, we ensure that you are the only person who can decrypt the traffic sent to your site.

Pro-Tips for the Future

• Backup Immediately: Whenever you generate a CSR, immediately copy the Private Key into a password-protected text file or a secure vault (like 1Password or Bitwarden).

• Naming Conventions: In cPanel, give your Private Keys clear descriptions (e.g., Nixzoehost_SSL_2026) so you don't accidentally delete the wrong one later.

• Avoid Deleting Old Keys: Keep old keys until you are 100% sure the new SSL is installed and working correctly.