Introduction To How To Set Up cPanel AutoSSL Certificates When Using Cloudflare
Securing your website with SSL certificates is crucial for protecting user data and maintaining trust. When using Cloudflare’s CDN and security features, you can further enhance your site’s performance and security. This guide explains how to use cPanel AutoSSL certificates effectively when your domain is managed by Cloudflare.
Understanding SSL Certificates and AutoSSL
What is an SSL Certificate?
An SSL (Secure Sockets Layer) certificate encrypts data between the user’s browser and your web server, ensuring secure communication. It is essential for protecting sensitive information and building user trust.
What is AutoSSL?
AutoSSL is a feature provided by cPanel that automates the process of issuing and installing SSL certificates for your domains. It uses trusted Certificate Authorities (CAs) like Let’s Encrypt to provide these certificates for free.
Why Use Cloudflare?
Enhanced Performance
Cloudflare accelerates your website by caching content and delivering it from servers closest to your visitors. This reduces latency and improves load times.
Improved Security
Cloudflare offers robust security features, including DDoS protection, SSL/TLS encryption, and a Web Application Firewall (WAF), safeguarding your site from various threats.
Increased Reliability
Cloudflare’s global network ensures your website remains accessible even during traffic spikes or server outages, providing a consistent experience for your users.
Adding Your Domain Name to Cloudflare
How To Create a Cloudflare Account
- Visit the Cloudflare website and click on the “Sign Up” button.
- Enter your email address and create a password to set up your account.
- Select “Create Account” to complete the registration process.
How To Add Your Domain Name
- Log in to your Cloudflare account.
- Select the “Add Site” button on the Cloudflare dashboard.
- Enter your domain name (e.g. SheffieldWordPressHosting.com) and select “Add Site”.
Selecting a Cloudflare Plan
- Choose a plan that suits your website’s needs. We will be selecting the free plan located at the bottom.
- Select the “Confirm Plan” button to proceed.
Reviewing Your DNS Records
- Cloudflare will scan your existing domain’s DNS records. This means that if you’re pointing to your website already, it will pick this up so you won’t need to enter the A records again.
- Check the detected DNS records to ensure they are correct. Add or modify any records if necessary.
- Select “Continue” to proceed.
Pointing Your Domain’s Nameservers To Cloudflare
- Cloudflare will now provide you with two nameservers of their nameservers.
- Log in to your domain registrar’s account an example would be GoDaddy.
- Navigate to the DNS management section for your domain.
- Replace your current nameservers with the ones provided by Cloudflare.
- Save the changes to update your nameservers.
Confirming You Have Updated The Nameservers
- Return to the Cloudflare walkthrough.
- Select “Continue” to let Cloudflare know you’ve updated the nameservers on your domains registrar.
- Cloudflare will verify the nameserver update. This could take up to 48 hours however it is usually done in a few minutes.
- Select Finish to complete the domain setup process
Configuring/Checking Your Cloudflare Settings To Work With cPanel AutoSSL
- Select the domain you want to secure.
- In the left-hand menu navigate to the “SSL/TLS” settings.
- Set the SSL/TLS encryption mode to “Full”.
- Full: Encrypts connections end-to-end, including a self-signed certificate on the server.
- Full: Encrypts connections end-to-end, including a self-signed certificate on the server.
- In the left-hand menu navigate to the “Edge Certificates” settings.
- Scroll down the page until you see “Always Use HTTPS” make sure this is toggled off (grey)
- Scroll down the page until you see “Automatic HTTPS Rewrites” make sure this is toggled off (grey)
How To Run AutoSSL Inside cPanel
Creating an AutoSSL Certificate In cPanel
- Log in to your cPanel account. If you’re unsure of how to log in to cPanel please follow this article.
- Scroll down to the “Security” section.
- Select “SSL/TLS Status”.
- Select the domains you wish to secure by checking the boxes to the left.
- Select “Run AutoSSL” to start the process.
AutoSSL will automatically issue and install SSL certificates for the ticked domains.
Testing Your SSL Certificate Works
- Visit your website using HTTPS for example https://yourdomain.com.
- Check for the padlock icon in the browser’s address bar, indicating a secure connection.