Overview
This interface allows you to manage the AutoSSL feature, which automatically installs domain-validated SSL certificates for the Apache®, Dovecot®, Exim, Web Disk, and cPanel Server services for users' domains. It also allows you to review the feature's log files and select which users receive AutoSSL certificates.
- Run AutoSSL for All Users
- cPanel AutoSSL certificates
- Providers
- Options
- Notifications
- Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates.
- Logs
- Manage Users
- Run AutoSSL Check
- Pending Queue
Run AutoSSL for All Users
Click Run AutoSSL for All Users at the top of the interface to run the AutoSSL feature for all users for whom you enabled the feature.
Notes:
- The system runs the AutoSSL feature for all users when it performs nightly system updates via the
/usr/local/cpanel/scripts/upcp
script. AutoSSL examines the system's SSL coverage and requests certificates from the configured provider to improve the system's SSL coverage. - To run the AutoSSL feature for all users via the command line, run the
/usr/local/cpanel/bin/autossl_check --all
command.
cPanel AutoSSL certificates
The system automatically polls the cPanel AutoSSL certificate provider to determine each pending certificate's status:
Age of certificate request
|
Polling frequency
|
---|---|
Less than one day. | Once per five minutes. |
Between one and two days. | Once per hour. |
More than two days. | Once per day. |
Providers
To select an AutoSSL provider, perform the following steps:
-
Select the desired AutoSSL provider or select Disabled to disable this feature.
-
If the AutoSSL provider requires a Terms of Service or other similar agreement, review it and select the appropriate checkbox to agree to those terms.
- Click Save.
Options
The Options tab allows you to configure various options for AutoSSL.
Notifications
The notification options allow you to select the frequency at which your users receive AutoSSL-related notifications.
User Notifications
You can select from the following notification options for your cPanel users:
- Notify the user for all AutoSSL events and normal successes.
- Notify the user for AutoSSL certificate request failures, warnings, and deferrals.
- Notify the user for AutoSSL certificate request failures only.
- Disable AutoSSL user notifications.
This setting defaults to Notify the user for AutoSSL certificate request failures, warnings, and deferrals.
Administrator Notifications
You can select from the following notification options for your reseller and WHM users:
- Notify the administrator for all AutoSSL events and normal successes.
- Notify the administrator for AutoSSL certificate request failures, warnings, and deferrals.
- Notify the administrator for AutoSSL certificate request failures only.
- Disable AutoSSL administrator notifications.
This setting defaults to Notify the user for AutoSSL certificate request failures, warnings, and deferrals.
Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates.
This option allows AutoSSL to replace certificates that the AutoSSL system did not issue. When you enable this option, AutoSSL will install certificates that replace users’ non-AutoSSL certificates if they are invalid or expire within 3 days.
Important:
- Unless you fully understand this option, do not enable it, because the system may unexpectedly replace an expiring or invalid Extended Validation (EV) or Organization Validated (OV) certificate with a Domain Validated (DV) certificate.
- Users' non-AutoSSL certificates are paid, and should be replaced by another paid certificate.
Logs
Use the Logs tab to review the system's AutoSSL log files. To view a specific log, select it from the menu and click View Log to display the its information.
Note:
The system stores the log files in both text and JSON format in the /var/cpanel/logs/autossl
directory.
Manage Users
The Manage Users tab allows you to override your server's feature list settings and control whether AutoSSL is enabled for your users. Use the search text box to locate specific users, or use the check box and menu to select all users or clear your current selections.
You can select from the following Toggle AutoSSL options for individual users and select users:
- Enable AutoSSL on selected users — Override the feature list setting and force AutoSSL to be enabled.
- Disable AutoSSL on select users — Override the feature list setting and force AutoSSL to be disabled.
- Reset AutoSSL on selected users — Use setting established by the feature list's default setting.
Run AutoSSL Check
You can use the Check button to perform a domain check for a specific user.
Pending Queue
The Pending Queue section of the interface lists the status and the details of the pending AutoSSL jobs on your server.
Use the navigation controls at the top of the table to sort and search through the list.