Check out the PanelFi demo — sign in to both panels, nothing to install
PanelFivs cPanel
Documentation · Server panel: web, SSL and PHP

Custom and hostname certificates

Install a certificate you bought (EV, wildcard or any CA) on a website, and secure the panel and hostname on ports 2083 and 2087 with a trusted certificate.

Where to find itServer panel › SSL/TLS › Install an SSL Certificate ; Server panel › SSL/TLS › Manage Service SSL Certificates

Install a purchased certificate

Use this when you were given a certificate instead of using the free automatic one.

Install an SSL certificate form
Install an SSL Certificate: paste the CRT, KEY and CA bundle.
  1. Open SSL/TLS > Install an SSL Certificate.
  2. Choose the Website.
  3. Paste the Certificate (CRT), the Private key (KEY) and, if your authority sent one, the Certificate authority bundle (CABUNDLE). Without the bundle some browsers do not trust the site.
  4. Click Install certificate.

PanelFi checks that the key matches the certificate, that the certificate covers the website and that it has not expired. Installed certificates are listed on the same page, each with a Remove button.

Three days before an installed certificate expires, AutoSSL secures the site again so visitors never see a warning. The private key is stored on the server, readable by root only. Never send it by email.

Panel and hostname certificate

The panels (ports 2083 and 2087) use a self-signed certificate until a trusted one is issued for the server hostname, so browsers warn.

  1. Make sure the hostname (shown on the page) resolves to this server.
  2. Open SSL/TLS > Manage Service SSL Certificates. It opens the Service certificate for the panel card on Manage AutoSSL.
  3. Click Get a certificate for <hostname>. When one is installed the card reads Trusted certificate installed. Renews automatically. and the button becomes Renew now.
Service certificate for the panel
The service certificate card for the panel hostname.

Notes and limits

  • Installing certificates and the service certificate are root-only actions.
  • To go back to the free certificate, remove the custom certificate; AutoSSL then issues one.
  • Changing the hostname is covered in Server settings.