SSL Installation Instructions

The following instructions will guide you through the SSL installation process on LiteSpeed. If you have more than one server or device, you will need to install the certificate on each server or device you need to secure. If you still have not generated your certificate and completed the validation process, reference our CSR Generation Instructions and disregard the steps below.

1. Make sure you have all the following files saved before proceeding:
   • Your Server Certificate - This is the certificate you received from the CA for your domain. You may have been sent this via email. If not, you can download it by visiting your Account Dashboard and clicking on your order.
   • Intermediate Certificates - These files allow the devices connecting to your server to identify the issuing CA. There may be more than one of these certificates. If you got your certificate in a ZIP folder, it should also contain the Intermediate certificate(s), which is sometimes referred to as a CA Bundle. If not, download the appropriate CA Bundle for your certificate.
   • Your Private Key - This file should be on your server, or in your possession if you generated your CSR from a free generator tool. On certain platforms, such as Microsoft IIS, the private key is not immediately visible to you but the server is keeping track of it.
2. In your LiteSpeed WebAdmin console, click Listeners and then Add.

   

3. Configure the following Address Settings for the newly created Listener:
   • Listener Name - Enter the internal friendly name for your Listener.
   • IP Address - Select Any from the dropdown unless you want to bind the Listener to a particular CPU. In that case, enter the unique IP-port combination.
   • Port - Most HTTPS connections are managed through port 443 by default. However, if you have other Listeners operating on that port, this may cause an issue and require you to use another port such as 8443.
   • Secure - Select Yes.
   • Notes - Add any internal notes that will help you distinguish the Listener in the future.
   • Click Save.

     

4. From your WebAdmin console, click Listeners and select your Listener Name (e.g. SSL).

   

5. Select the SSL tab and click the Edit button for SSL Private Key & Certificate.

   

6. Configure the Certificate filepaths for the following:
   • Private Key File - This is the path to your private key that was previously saved on your directory during the generation process via OpenSSL.
   • Certificate File - This is the path to your server certificate that the CA sent you. You should already have this saved locally or in your server directory.

     Only complete one of the two options below to successfully install the intermediate certificates:

   • CA Certificate Path - This is the path to the intermediate certificate "file" that the CA sent you.
   • CA Certificate File - This is the path to the "directory" holding the intermediate certificates that the CA sent you.
   • Click Save.

     

7. Return to the SSL tab and click Edit for SSL Protocol.

   

8. For Protocol Version, select TLSv1.1 and TLSv1.2 and then click Save.

   

9. Now, from your WebAdmin console, click Listeners and select your Listener Name (e.g. SSL).
   
10. Select the General tab and click Add for Virtual Host Mappings.

    

11. Select the Virtual Host you want to connect the listener to.
12. Enter all the Domains(s) that connect to your vhost(s) - this tells OpenLiteSpeed where to send traffic this listener picks up - and click Save.

    

    Note 1: If you have multiple domains in the certificate that connect to the vhost, use a comma "," to separate the additional domains.

    Note 2: If you have one vhost and configured the server to disregard other vhosts, you can enter an asterisk "*" as the domain.

13. On your Dashboard, click the green Graceful Restart button.

    

Congratulations! You’ve successfully installed your SSL certificate! To check your work, visit the website in your browser at https://yourdomain.tld and view the certificate/site information to see if HTTPS/SSL is working properly. Remember, you may need to restart your server for changes to take effect.

To check your server's configurations more thoroughly, use our SSL Checker Tool or contact our Customer Experience Department for additional assistance.