Plesk: Activating Let's Encrypt SSL Certificate

Let's Encrypt offers free SSL certificates for encrypting web traffic. On the Plesk hosting platform, a simple implementation is possible that also secures webmail. Prerequisites for installation include a domain pointing to the Plesk IP, a domain set up in Plesk, and a functioning email address. Preparation involves logging into Plesk and enabling SSL/TLS support. Installation is done through the Plesk interface, where options for www domains and webmail protection can be selected. After activation, the certificate is automatically put into operation after a server restart.

Let's Encrypt provides free certificates (FreeSSL) in an easy way for encrypting web traffic. In our Plesk hosting environment, we offer a user-friendly implementation. Securing webmail is also possible.

Prerequisites
Preparation
Installation

Prerequisites

• The domain must point to the IP address defined in Plesk.
• The domain must be set up in Plesk (hosting or forwarding).
• The specified email address must be active and reachable.

Preparation

1. Log in to the Plesk administration tool (Forgot password?)

2. Click on the Websites & Domains tab and then on Hosting Settings next to the domain to check if SSL/TLS support is enabled.

3. Check if the box for SSL/TLS support is checked. If not, check the box.

   If the website should only be accessible via https, you can also enable the "Permanent, SEO-friendly 301 redirect from HTTP to HTTPS".

Make sure that no link with http is stored in your CMS, as this can cause a redirect error.

Installation

1. Under Websites & Domains, select the menu item SSL/TLS Certificates.

2. Now specify a valid contact email address and decide whether the certificate should also be issued for the domain with www. You can also protect the webmail interface with the certificate by selecting Protect webmail on this domain.

Check the box for "Issue SSL/TLS wildcard certificate" only if you have multiple subdomains (not aliases) registered in Plesk. This option is rarely needed.

1. Click on Use for free and then wait for the certificate to be issued.

2. If domain aliases exist, they can also be protected by the certificate in the Available Domain Aliases section:

3. After successful activation, you will see the status of the certificate in the overview.

After the web server restarts, which happens automatically (duration: up to 15 minutes), the certificate is fully activated.