4.3.2.6. SSL connection in ISPmanager 5 Lite

To install an SSL certificate in ISPmanager 5, you need:

1. Provide user access to SSL certificates.
2. Install the required certificate:
   • Certificate issued certification center.
   • Free certificate from Let's Encrypt.
3. Enable SSL Online.

To allow the created user access to SSL certificates, do the following:

1. Log in as root.
2. Open the section "Users", Select the user under whom the site is hosted, and click"Rights»:
3. In the window that opens, select "SSLcertificates" and press "Incl.»:

To install your own certificate, do the following:

1. Log in as a user who has been granted access to SSL certificates.
2. Open the section "WWW → SSLcertificates" and press "Create a »:
   1. Opposite "SSL certificate type"Set the switch next to"Existing»:
   2. Fill in the fields and click "Complete»:
      • «SSL certificate name"- specify an arbitrary name (for convenience, you can specify the name of the site for which the certificate is intended).
      • «SSLcertificate"- paste the contents of the file name_site.crtprovided by the certificate provider.
      • «SSL certificate key"- insert the contents of the Private key.
      • «SSL certificate chain"- insert the content of additional chains (usually this is a file with the extension .ca-bundle). If there are several chains, the order of their installation should be checked with the certificate provider.
3. Customize the site to work with SSL.

To install Let's Encrypt certificate, you need to install its module:

1. Open the section "Integration → Modules».
2. Find the module “Let's Encrypt”And install it.
3. Log in as the user who was granted access to the certificates.
4. Open the section "WWW → SSLcertificates" and press "Let's Encrypt»:
5. Specify the details for creating a certificate and click "OK»:
   • «Enable SSL Certificate"- check the box for this parameter.
   • «Wildcard certificate"- if you want the certificate to apply to all subdomains of the selected domain, check the box, if not, leave it unchecked.
   • «Check through DNS"- checking the existence of a confirmation record using DNS... If opposite "Wildcard certificateThe checkbox was set, it will be checked here as well.
   • «Domain»- select the domain for which the certificate is being created.
   • «SSL certificate name"- specify an arbitrary name (for convenience, you can specify the name of the site for which the certificate is intended).
   • «Domain name»- select the domains for which the main name (CN) and alternatives will be indicated in the certificate.
   • «Key length"- select"2048».
6. Customize the site to work with SSL.

Include the certificate for the required domain. To do this, in the section "WWWdomains"Select the required domain, click the button"Edit", Enable the option"SSL»And select the required certificate from the list: If the domain has not been added yet, click “Create a "And when adding a domain, enable the"SSL».

After all actions, the status of the certificate should change to "Used»: