This tutorial explains how to generate a CSR code in DirectAdmin, and how to install an SSL Certificate on DirectAdmin servers.
Generate CSR in DirectAdmin
The Certificate Signing Request (CSR) is a block of plain text that contains details about your domain ownership and organization. It is necessary during your SSL order. To generate the CSR in DirectAdmin, follow the steps below:
1 Log into your DirectAdmin account. If you have administrator rights, navigate to the upper right corner and change the access level from Admin to User level
2 Locate the Advanced Features section and click on SSL Certificates
3 Select Create a Certificate Request, and fill in the fields as shown below:
a. 2 Letter Country Code – enter the two-letter abbreviation for the country where your organization is legally located. For example, US or CA
b. State/Province – specify the full name of the state where your business is registered. For example, Arizona
c. City – type the full name of the city where your organization is located. For example, Phoenix
d. Company – enter your company’s legal name. For example, GPI Holding LLC. For a Domain Validation certificate, enter your full name
e. Company Division –specify the department managing the SSL certificate. For example, IT
f. Common Name – provide the Fully Qualified Domain Name (FQDN) you want to secure. For example, ssldragon.com. If you have a wildcard certificate, add an asterisk in front of the common name (e.g. *.ssldragon.com)
g. E–Mail – submit a valid email address
h. Key Size (bits) –the standard key size is 2048 bits. Higher values are resource-intensive and may affect your server’s performance
i. Certificate type – you will see this field only if you run an older version of DirectAdmin. The hashing algorithm you select will not affect your SSL certificate, because all out SSL products include the SHA-2 hashing algorithm by default
4 Double-check the fields you’ve just completed, then click Save
5 DirectAdmin will now generate the CSR code and your private key. Save the CSR code including the —–BEGIN CERTIFICATE REQUEST—– and —–END CERTIFICATE REQUEST—– header and footer using a text editor such as Notepad. You will send it to the Certificate Authority, and they will sign your certificate. As for the private key, you’ll need it during the SSL installation. Copy it into a separate file and keep it on your server. Once you close this page, the private key will not be available anymore.
Note: If you don’t see the private key, don’t worry. DirectAdmin has automatically copied it to the SSL installation page.
Install an SSL Certificate on DirectAdmin
After the Certificate Authority sings and sends the SSL certificate files to your inbox, you can continue with the SSL installation. Follow the steps below to configure your certificate:
1 Prepare your certificate, private key and ca-bundle files in advance. You will soon use them. Remember, you generated the private key along with the CSR code. As for certificate and ca-bundle files, the CA sent them to you in an archived folder
2 Log into your DirectAdmin account. If you are logged in as Admin, switch to the User level. You can do it in the upper right menu
3 Go to Advanced Features section and click SSL Certificates
4 Select the Paste pre-generated certificate and key option
5 Next, you need to paste your Private Key including the —–BEGIN PRIVATE KEY—– and —–END PRIVATE KEY—– tags. If your private key is already filled in, proceed to the next step
6 Paste your certificate together with —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—– header and footer
7 Double-check the codes you’ve just pasted and then click Save
8 Now, you need to install the certificate chain you received from your Certificate Authority. Return to the SSL Certificates menu and click on Click Here to paste the CA Root Certificate
9 Copy and paste all the certificates from your CA-bundle file. Tick the Use a CA Cert checkbox, and then hit the Save button
10 Make sure that the SSL is enabled for this domain. A message at the top of the SSL Certificates panel will display the SSL status. If SSL is disabled, click on the You can enable it here link. Next, tick the Secure SSL checkbox, and press the Save button.
Congratulations! You have successfully installed your SSL Certificate using the DirectAdmin control panel. To test your SSL installation for potential errors, use these excellent SSL tools.