Securing an unmanaged server with a Let's Encrypt SSL certificate

This article describes how to use Let's Encrypt to automatically generate and install an SSL certificate on an unmanaged server.

About Let's Encrypt

Let's Encrypt is part of an initiative to encrypt as much World Wide Web traffic as possible. It is designed to make the creation and installation of SSL certificates a simple process that can be done with just a few commands.

Generating and installing an SSL certificate

On an unmanaged server, you generate and install SSL certificates at the command line. There are numerous client applications that enable you to do this for Let's Encrypt. However, Let's Encrypt recommends the Certbot client.

Certbot is easy to use, and supports a wide range of web servers and operating systems. You can install Certbot using your Linux distribution's package manager (for example,yum or apt ).

🚧

Important

The Certbot documentation at https://certbot.eff.org recommends using snapd for Certbot installation. However, snapd is incompatible with our VPS infrastructure, so you should use your Linux distribution's package manager to install Certbot directly. Alternatively, you can use one of the many other client applications available for managing Let's Encrypt certificates. For more information, please visit https://letsencrypt.org/docs/client-options.

More Information

For more information about Let's Encrypt, please visit https://letsencrypt.org.