> ## Documentation Index
> Fetch the complete documentation index at: https://kb.hosting.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Installing a third-party SSL certificate with cPanel

> Learn how to install a third-party SSL certificate using the cPanel SSL / TLS tool.

This article shows how to manually obtain and install an SSL certificate on cPanel.

## Step 1: Generate a private key and CSR

If you have not already purchased an SSL certificate from another provider, you must first generate a private key and Certificate Signing Request (CSR).

<Warning>
  **Important**

  If you have already purchased an SSL certificate from a provider and have the private key (.key) file and SSL certificate (.crt) file, do not follow this procedure. You do not need to generate a private key or CSR. Follow the **Install a private key** procedure below instead.
</Warning>

To generate a private key and CSR, follow these steps:

1. Log in to cPanel.
   > 📘 Note
   >
   > If you do not know how to log in to your cPanel account, please see [this article](/docs/accessing-cpanel).
2. On the **Tools** page, in the **Security** section, click **SSL/TLS**:\ <img src="https://static.hosting.com/kb/kb-cpanel-jupiter-ssltls.png" />
3. Under **Private Keys (KEY)**, click **Generate, view, upload, or delete your private keys**. The **Private Keys** page appears.
4. In the **Generate a New Private Key** section, confirm that the **Key Type** is set to **RSA, 2,048-bit**.
5. In the **Description** text box, type a descriptive name for the key, such as **SSL cert private key**.
6. Click **Generate**. cPanel generates and displays the private key. You are now ready to generate a Certificate Signing Request (CSR).
7. Click **Return to SSL/TLS**.
8. Under **Certificate Signing Requests (CSR)**, click **Generate, view, or delete SSL certificate signing requests**. The **SSL Certificate Signing Request** page appears.
9. In the **Generate a New Certificate Signing Request (CSR)** section, in the **Key** list box, select the description for the private key you generated in step 6.
10. In the **Domains** text box, type the domain that you want to secure with the certificate.
    > 🚧 Important
    >
    > Make sure that you specify the correct domain name that you want to secure. We recommend that you use the [*www.example.com*](http://www.example.com) domain form, because then the certificate works with both [*https://www.example.com*](https://www.example.com) and [*https://example.com*](https://example.com). (Do not add *https\://* to the domain name in the **Domains** text box.)
11. Complete the remaining fields for the CSR.
    > 🚧 Important
    >
    > * Make sure you use the correct two-letter country code (for example, US or FR). For a complete list of these codes, please visit [https://www.iso.org/obp/ui/#search](http://www.iso.org/obp/ui/#search).
    > * Make sure you use a passphrase that you will remember. We **cannot** recover the passphrase if you forget it!
12. To create the CSR, click **Generate**. cPanel generates and displays the CSR.
13. Copy the CSR text and submit it to the third-party SSL provider. When you receive the SSL certificate from the provider, you are ready to enable SSL for your web site. Go to the **Install the certificate and activate SSL** procedure below.

## Step 2: Install a private key

If you have already purchased an SSL certificate from another provider and you have the private key and certificate, you must first install the private key using cPanel.

<Warning>
  **Important**

  If you are purchasing a brand-new certificate and just completed the procedure above to generate a CSR, do not follow this procedure. Follow the **Install the certificate and activate SSL** procedure below after you receive the certificate from the provider.
</Warning>

To install a private key, follow these steps:

1. Log in to cPanel.
   > 📘 Note
   >
   > If you do not know how to log in to your cPanel account, please see [this article](/docs/accessing-cpanel).
2. On the **Tools** page, in the **Security** section, click **SSL/TLS**:\ <img src="https://static.hosting.com/kb/kb-cpanel-jupiter-ssltls.png" />
3. Under **Private Keys (KEY)**, click **Generate, view, upload, or delete your private keys**. The **Private Keys** page appears.
4. In the **Upload a New Private Key** section, upload the key using one of the following methods:
   * Paste the key text in the **Paste the key into the following text box** text box, type a description in the **Description** text box, and then click **Save**.
   * Alternatively, click **Browse**, select the *.key* file on your computer, type a description in the **Description** text box, and then click **Upload**.
5. Click **Go Back**.
6. Click **Return to SSL/TLS**.
7. You are now ready to install the certificate and enable SSL for your web site. Go to the **Install the certificate and activate SSL** procedure below.

## Step 3: Install the certificate and activate SSL

At this point, you should have a private key installed and a certificate from the third-party provider. (You may also optionally have a CA bundle.) If so, you are ready to install the certificate and activate SSL for your web site.

<Warning>
  **Important**

  If you have a multi-domain SSL certificate, you must follow the procedure below and install the certificate for  *each* domain that you want to secure.
</Warning>

To do this, follow these steps:

1. On the **SSL/TLS** page, under **Certificates (CRT)**, click **Generate, view, upload, or delete SSL certificates**. The **Certificates** page appears.
2. In the **Upload a New Certificate** section, upload the certificate using one of the following methods:
   * Paste the certificate text in the **Paste the certificate into the following text box** text box, type a description in the **Description** text box, and then click **Save Certificate**.
   * Alternatively, click **Browse**, select the *.crt* file on your computer, type a description in the **Description** text box, and then click **Upload Certificate**.
3. Click **Go Back**, and then click **Return to SSL/TLS**.
4. Under **Install and Manage SSL for your site (HTTPS)**, click **Manage SSL sites**.
5. Under **Install an SSL Website**, click **Browse Certificates**, select the certificate you want to use, and then click **Use Certificate**. cPanel fills in the **Certificate (CRT)** and **Private Key (KEY)** fields automatically.
6. In the **Domain** list box, select the domain you want to secure with the certificate.
7. If your SSL certificate requires a CA (Certificate Authority) bundle, paste it under **Certificate Authority Bundle (CABUNDLE)**. Otherwise, leave this field blank.
   > 📘 Note
   >
   > Not all SSL certificates require a CA bundle (which is also sometimes called an Intermediate Certificate). If you are unsure whether your certificate requires a CA bundle, contact the certificate provider.
8. Click **Install Certificate**. cPanel installs the certificate on the server and enables SSL. When the process is complete, you receive an **SSL Host Successfully Installed** message.
9. Click **OK**. You can now securely access the specified domain by using the *https\://* prefix in a web browser. If you need further assistance, please open a support ticket at [https://my.hosting.com](https://my.hosting.com).

## Related articles

* [Introduction to SSL](/docs/introduction-to-ssl)
* [Installing a third-party SSL certificate](/docs/installing-a-third-party-ssl-certificate)
* [Installing your Domain Verified SSL certificate](/docs/installing-your-domain-verified-ssl-certificate-x)
* [Installing your Organization Verified SSL certificate](/docs/installing-your-organization-verified-ssl-certificate-x)
* [Generating a CSR and installing an SSL certificate in Plesk](/docs/generating-a-csr-and-installing-an-ssl-certificate-in-plesk)
* [Generating and renewing Let’s Encrypt SSL certificates in Plesk](/docs/generating-and-renewing-lets-encrypt-ssl-certificates-in-plesk)
* [Accessing cPanel](/docs/accessing-cpanel)