How to Install an SSL Certificate in Plesk

Plesk makes SSL certificate management straightforward with its intuitive interface. This guide walks you through the complete process of installing an SSL certificate in Plesk, including generating a CSR, installing the certificate, and configuring HTTPS redirection.

Prerequisites

Before installing your SSL certificate, ensure you have:

1. Access to Plesk control panel for your hosting account
2. An SSL certificate (.crt or .pem file) from your certificate authority
3. The private key (.key file) generated with your CSR
4. The CA certificate (intermediate/chain certificate) from your CA
5. Domain pointed to your server via DNS

Tip: {{COMPANY_NAME}} Plesk hosting plans include SSL management tools. You can manage certificates directly from your Plesk dashboard.

Step 1: Generate a CSR in Plesk

If you already have your SSL certificate, skip to Step 2.

1. Log in to your Plesk control panel
2. Go to Websites & Domains
3. Click on SSL/TLS Certificates for your domain
4. Click Add SSL/TLS Certificate
5. Enter a name for the certificate (for your reference, e.g., "example-com-2026")
6. Fill in the certificate details:

- Bits: 2048 or higher

- Country, State, Location: Your geographic details

- Organization, Department: Your business information

- Domain Name: Your domain (e.g., example.com)

- Email: Your contact email address

1. Click Request
2. Plesk generates your CSR and Private Key
3. Copy the CSR and submit it to your certificate authority

Step 2: Install the SSL Certificate

Once you receive your SSL certificate from the CA:

Method 1: Upload Certificate Files

1. Go to Websites & Domains > SSL/TLS Certificates
2. Click on the certificate name you created in Step 1
3. Scroll to the Upload the certificate as text section
4. Paste your Certificate (.crt content) in the Certificate field
5. Paste the CA Certificate (intermediate chain) in the CA Certificate field
6. The Private Key should already be present from CSR generation
7. Click Upload Certificate

Method 2: Upload Certificate Files Directly

1. Go to Websites & Domains > SSL/TLS Certificates
2. Click on the certificate name
3. Use the Upload certificate files section
4. Browse and select your .crt file, .key file, and .ca-bundle file
5. Click Send Files

Step 3: Assign the Certificate to Your Domain

After uploading, you must assign the certificate to your domain:

1. Go to Websites & Domains
2. Click Hosting & DNS (or Hosting Settings) for your domain
3. In the Security section, check SSL/TLS support
4. From the Certificate dropdown, select the certificate you just installed
5. Click OK or Apply

Your domain will now serve content over HTTPS.

Step 4: Enable HTTPS Redirect

To force all traffic through HTTPS:

Method 1: Plesk Settings

1. Go to Websites & Domains
2. Click on your domain
3. Find the SSL/TLS or Hosting Settings section
4. Enable Permanent SEO-safe 301 redirect from HTTP to HTTPS
5. If available, also enable HSTS (HTTP Strict Transport Security) for enhanced security
6. Click OK

Method 2: .htaccess (Apache/Nginx)

For more control, add to your .htaccess:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Step 5: Verify the Installation

1. Visit https://yourdomain.com in your browser
2. Click the padlock icon to verify certificate details
3. Check that the certificate chain is complete
4. Test with an online SSL verification tool
5. Verify both www and non-www versions work with HTTPS

Using Let's Encrypt in Plesk

Plesk includes a Let's Encrypt extension for free SSL certificates:

1. Go to Websites & Domains
2. Click SSL/TLS Certificates
3. Click Install next to Let's Encrypt (or Get it free button)
4. Select the components to secure:

- Secure the domain

- Include www subdomain

- Secure webmail

- Wildcard domain (if available)

1. Click Install (or Get it free)

Let's Encrypt certificates auto-renew every 90 days in Plesk.

Troubleshooting Common Issues

Certificate Not Showing in Dropdown

• Ensure the certificate was successfully uploaded (no error messages)
• Verify both the certificate and private key are present
• Try re-uploading the certificate files
• Check that the certificate format is correct (PEM/X.509)

Certificate Mismatch Error

• The private key must match the CSR used to obtain the certificate
• Generate a new CSR in Plesk, reissue the certificate, and reinstall

Chain Certificate Error

• Download the correct CA bundle from your certificate provider
• Paste it in the CA Certificate field
• Some providers offer a "full chain" file that includes all intermediates

HTTPS Redirect Loop

• Check for conflicting redirect rules in .htaccess
• If behind a proxy (e.g., Cloudflare), configure SSL mode to "Full" or "Full (Strict)"
• Verify Plesk's redirect settings are not duplicating .htaccess rules

Mixed Content After SSL Installation

• Update your CMS settings to use https:// URLs
• Search and replace http:// references in your database
• Check theme files and plugins for hardcoded HTTP URLs
• Use browser developer tools (F12 > Console) to identify mixed content sources

Managing Multiple SSL Certificates

In Plesk, each domain can have its own SSL certificate:

1. Navigate to the specific domain under Websites & Domains
2. Access SSL/TLS Certificates for that domain
3. Each subscription and domain maintains separate certificate storage
4. Wildcard certificates can be shared across subdomains of the same domain

SSL Certificate Renewal

When your certificate approaches expiration:

1. Obtain the renewed certificate from your CA (you may reuse the existing CSR)
2. Go to SSL/TLS Certificates in Plesk
3. Upload the new certificate following Step 2
4. Reassign it to your domain if it is stored as a new certificate entry
5. Verify the new expiration date

Tip: Let's Encrypt certificates renew automatically in Plesk. For paid certificates, set a reminder 30 days before expiration.

Related Articles

• Managing SSL Certificates in Plesk
• Understanding SSL Certificate Types
• Troubleshooting SSL Certificate Errors

Need help with SSL installation in Plesk? Contact our support team at {{SUPPORT_EMAIL}} or open a ticket at {{SUPPORT_URL}}.