Difference between revisions of "Secure Your Sites"

From XMission Wiki
Jump to: navigation, search
(5 intermediate revisions by 3 users not shown)
Line 1: Line 1:
=How to create a CSR=
+
==Plesk Shared Hosting: Securing Your Sites==
  
If you want to secure your site you will first need a CSR (Certificate Signing Request) - so how do you create one?
+
=== Creating CSR ===
Below are the instructions for our Cloud and Unlimited Hosting customers - if you do not have a Cloud or Unlimited Hosting package with us and will require a CSR please give us a call and we can help you out.  
+
SSL certificates secure transfer of sensitive data from visitors to your website, and also verify the site identity. Below you can find two lists of SSL certificates: the first one showing certificates that you use for securing your websites and the other one showing certificates that you purchased.
  
  
:First log into your account at [http://hosting.xmission.com http://hosting.xmission.com]
+
* From the Hosting control panel Click on Websites and Domains - if you just logged in you are already there.
[[File:Csr-0.png]]
+
[[File:Plesk_tabs_new.png]]
  
  
:Next Choose '''Secure your site with SSL Certificate''' you will find this under Websites & Domains
+
* Find the domain you wish to use your SSL Certificate for and click on the little down arrow to see more options.
[[File:Csr-1.png]]
+
* Next choose '''Secure Your Sites'''
 +
[[File:SharedHosting-SSL-00.png]]
  
 +
* Next choose '''Add SSL Certificate'''
 +
[[File:SharedHosting-SSL-02.png]]
  
:From the next page choose the domain you will be adding your SSL Certificate to and then click on manage
 
[[File:Csr-2.png]]
 
  
 +
* Next fill in the form to generate a CSR then hit Request
 +
[[File:SharedHosting-SSL-03.png]]
 +
* Certificate Name: ''This will help you identify this certificate in the repository.''
 +
* Country: ''This is defaulted to United States''
 +
* State or province: ''The state in which your company resides''
 +
* Location(city): ''The city in which your company resides''
 +
* Organization Name: ''This can be your company name''
 +
* Organization Department: ''Website, IT or variations, should not exceed 64 characters''
 +
* Domain name: '' The domain name for which you want to purchase an SSL certificate. This should be a fully qualified domain name. Example: your-domain.com or www.your-domain.com''
 +
* Email: ''The website administrator's email address''
  
:Next click on the '''Add SSL Certificate''' button
 
[[File:Csr-3.png]]
 
  
  
:Finally fill in the required fields
+
* After you fill out the above form it will generate a '''CSR''' this is what you need to purchase a SSL Certificate.
[[File:Csr-4.png]]
+
* Confirmation that your CSR was created
::'''Certificate name''' - be sure to add a name for this CSR so you can recognize it later.
+
[[File:SharedHosting-SSL-04.png]]
::'''State or province''' - the state in which your business is located
 
::'''Location(city)''' - the city in which your business is located
 
::'''Domain name''' - this is important if you want your site to use '''www''' then make sure to include this in the domain name field - if your site will not use '''www''' then just put the domain name.  
 
::'''E-mail''' - the email address associated with your domain name
 
  
  
Next you will choose Request or Self-Signed
 
  
'''Request''' will be used if you plan on purchasing a SSL Certificate from us - we can then use the CSR you just created to create your SSL Certificate - these two pieces of information go hand in hand to create your SSL Certificate and your Private Key.
+
* Click on the Certificate name to view your CSR
 +
[[File:SharedHosting-SSL-05.png]]
  
'''Self-Signed''' will be used if you are not going to purchase a SSL but want your site to be secure - although Self-Signed certificates let you use SSL, they are trusted less, and considered as less secure.
 
  
  
Now you can take this CSR and place your order for an SSL Certificate at [https://store.xmission.com https://store.xmission.com]
 
  
{{:Unlimited_Hosting}}
+
* Locate the CSR section on the page, and copy the text that starts with the line -----BEGIN CERTIFICATE REQUEST----- and ends with the line -----END CERTIFICATE REQUEST----- to the clipboard.
[[Category:Unlimited Hosting|CSR]]
+
[[File:SharedHosting-SSL-06.png]]
 +
 
 +
 
 +
* '''NOTE''' when ordering an SSL Certificate the validation email must match your domain with the following conditions
 +
**admin@<domain.tld>
 +
**administrator@<domain.tld>
 +
**hostmaster@<domain.tld>
 +
**webmaster@<domain.tld>
 +
**postmaster@<domain.tld>
 +
 
 +
=== Installing SSL Certificate ===
 +
* Once you have ordered your SSL Certificate, you should receive an email to approve the creating of the certificate. Once you approve the process, another email will be sent to you with your Certificate.
 +
 
 +
* Log in to your Control Panel
 +
* Find the domain you wish to secure and click on the little down arrow to expand the options
 +
* Choose '''Secure Your Sites'''
 +
* Click on the Certificate Name that you created earlier
 +
* After you have copied the Certificate from the email you received past it in the box for Certificate
 +
** Be sure to include -----Begin Certificate----- and -----End Certificate-----
 +
[[File:SharedHosting-SSL-07.png]]
 +
 
 +
 
 +
* Now you need to assign the certificate to your site. To do that, from the menu choose'''Websites and Domains'''
 +
* Find the domain you are add the SSL Certificate for and choose '''Hosting Settings'''
 +
[[File:SharedHosting-SSL-08.png]]
 +
 
 +
 
 +
* Then check the box for SSL Support and select your certificate
 +
[[File:SharedHosting-SSL-09.png]]
 +
 
 +
 
 +
* Click '''OK''' at the bottom and that is it.
 +
 
 +
{{:Shared_Hosting}}
 +
[[Category:Shared Hosting|Secure Your Sites]]

Revision as of 09:11, 22 June 2018

Plesk Shared Hosting: Securing Your Sites

Creating CSR

SSL certificates secure transfer of sensitive data from visitors to your website, and also verify the site identity. Below you can find two lists of SSL certificates: the first one showing certificates that you use for securing your websites and the other one showing certificates that you purchased.


  • From the Hosting control panel Click on Websites and Domains - if you just logged in you are already there.

Plesk tabs new.png


  • Find the domain you wish to use your SSL Certificate for and click on the little down arrow to see more options.
  • Next choose Secure Your Sites

SharedHosting-SSL-00.png

  • Next choose Add SSL Certificate

SharedHosting-SSL-02.png


  • Next fill in the form to generate a CSR then hit Request

SharedHosting-SSL-03.png

  • Certificate Name: This will help you identify this certificate in the repository.
  • Country: This is defaulted to United States
  • State or province: The state in which your company resides
  • Location(city): The city in which your company resides
  • Organization Name: This can be your company name
  • Organization Department: Website, IT or variations, should not exceed 64 characters
  • Domain name: The domain name for which you want to purchase an SSL certificate. This should be a fully qualified domain name. Example: your-domain.com or www.your-domain.com
  • Email: The website administrator's email address


  • After you fill out the above form it will generate a CSR this is what you need to purchase a SSL Certificate.
  • Confirmation that your CSR was created

SharedHosting-SSL-04.png


  • Click on the Certificate name to view your CSR

SharedHosting-SSL-05.png



  • Locate the CSR section on the page, and copy the text that starts with the line -----BEGIN CERTIFICATE REQUEST----- and ends with the line -----END CERTIFICATE REQUEST----- to the clipboard.

SharedHosting-SSL-06.png


  • NOTE when ordering an SSL Certificate the validation email must match your domain with the following conditions
    • admin@<domain.tld>
    • administrator@<domain.tld>
    • hostmaster@<domain.tld>
    • webmaster@<domain.tld>
    • postmaster@<domain.tld>

Installing SSL Certificate

  • Once you have ordered your SSL Certificate, you should receive an email to approve the creating of the certificate. Once you approve the process, another email will be sent to you with your Certificate.
  • Log in to your Control Panel
  • Find the domain you wish to secure and click on the little down arrow to expand the options
  • Choose Secure Your Sites
  • Click on the Certificate Name that you created earlier
  • After you have copied the Certificate from the email you received past it in the box for Certificate
    • Be sure to include -----Begin Certificate----- and -----End Certificate-----

SharedHosting-SSL-07.png


  • Now you need to assign the certificate to your site. To do that, from the menu chooseWebsites and Domains
  • Find the domain you are add the SSL Certificate for and choose Hosting Settings

SharedHosting-SSL-08.png


  • Then check the box for SSL Support and select your certificate

SharedHosting-SSL-09.png


  • Click OK at the bottom and that is it.


Additional Development Help

Applications

Domain Management