Step one: Copy your SSL certificate

Important Notes on Certificates:

• In order to use SSL certificates for a given domain, the domain MUST be set-up for IP-Based hosting.
• When an IP-based hosting account is created with SSL support, a default SSL certificate is uploaded automatically. However, this certificate will not be recognized by a browser as one that is signed by a certificate signing authority.
• You can generate a certificate with the SSLeay utility and submit it to any valid certificate authority. This can be done using the CSR option within PSA.
• If the given domain has the www prefix enabled, you must set-up your CSR or self-signed certificate with the www prefix included. If you do not, you will receive a warning message when trying to access the domain with the www prefix.
• Remember to enter your certificate information in PEM format. PEM format means that the RSA Private Key text must be followed by the Certificate text.
• All certificates are located in the ../vhosts/'domain name'/cert/httpsd.pem file. Where this directory reads "domain name", you must enter the domain name for which the certificate was created.

Upload Existing Certificate w/o Private Key
For instances where a CSR was generated inside PSA the system is designed to save the RSA Private Key for this specific CSR inside of the system database. This feature will allow a user to take the formally signed certificate from the Certificate Authority and upload it to the server without the private key. PSA will find the private key for the given certificate and install it properly on the server in PEM format. To do this operation follow the process below.

1. Access the domain management function by clicking on the Domains button at the top of the PSA interface. The Domain List page appears.
2. Click the domain name that you want to work with. The Domain Administration page appears.
3. Click the Certificate button. The SSL Certificate page appears.
4. If you wish to upload a Certificate File issued by InstantSSL, click the Browse: button under the Upload previously bought Certificate File (without private key) section to select the file (the file must be in .txt format)
5. Then, click Send File to copy the certificate to the server.

Upload a New Certificate w/ Private Key
For certificates purchased using a CSR not generated through the PSA interface it is imperative that you include both the RSA Private Key text block and the Certificate text block in one file before selecting to upload this to the PSA server. To do this operation follow the process below.

1. Access the domain management function by clicking on the Domains button at the top of the PSA interface. The Domain List page appears.
2. Click the domain name that you want to work with. The Domain Administration page appears.
3. Click the Certificate button. The SSL Certificate page appears.
4. If you wish to upload a file from a local computer, under the Uploading Certificate File section, click the Browse: button to select the file (the file must be in .txt format).
5. Then, click Send File to copy the certificate to the server. Or, if you want to type in the text of the certificate without downloading a specific file, click in the text box and enter and paste the certificate information.
6. Click Send Text to implement the text on the server.

   NOTE
   Ensure that the private key text block is included along with the SSL certificate text block when using the Send File or Send Text options.

   Example Format:

   -----BEGIN RSA PRIVATE KEY-----
   [[ENCRYPTED BLOCK OF TEXT]]
   -----END RSA PRIVATE KEY-----

   -----BEGIN CERTIFICATE-----
   [[ENCRYPTED BLOCK OF TEXT]]
   -----END CERTIFICATE-----

   When you download the certificate to the server, PSA checks for errors. If an error is detected, PSA restores the old version of the SSL certificate, and PSA warns you to update the certificate. At this point, you can try again to enter text or to download the certificate file.

   When you are satisfied that the SSL certificate is correctly implemented, click Up Level to return to the Domain Administration page.

Step 2: Uploading the Rootchain Certificate
To install a rootchain certificate for the domain:

1. Access the domain management function by clicking on the Domains button at the top of the PSA interface. The Domain List page appears.
2. Click the domain name that you want to work with. The Domain Administration page appears.
3. Click the Certificate button. The SSL Certificate setup page appears.
4. The icon next to Use rootchain certificate for this domain appears on this page.
5. If the icon is [ON] then the rootchain certificate will be enabled for this domain. If the icon is [X] this function will be disabled.
6. To change the status of the rootchain certificate, click the On/Off button.
7. To upload your rootchain certificate, first make sure that it has been saved on your local machine or network (save it to disk now by clicking here). Use the Browse button to search for and select the appropriate rootchain certificate file.
8. Then click the Send File button. This will upload your rootchain certificate to the server to assure proper authentication of the InstantSSL certificate authority.
9. When you are satisfied that the rootchain certificate is correctly implemented, click Up Level to return to the Domain Administration page.