To establish secure communications with your web server, you need to purchase an SSL certificate from one of the secure Certificate Authorities.

This article provides instructions on how to:

Note: In order to install an SSL certificate on Windows 2008 server, a dedicated IP address is required. To get an IP address, please submit the Dedicated IP address for IIS7 account request via the Extended Services portal.

Install an SSL certificate from GeoTrust (initial purchase or renewal via Intermedia)

Intermedia is a reseller of GeoTrust SSL Certificates.

Follow these steps to purchase and install or renew a GeoTrust secure certificate on your server:

  1. Submit a Certificate Renewal / CSR Generation request via the Extended Services portal:

    a) The purpose of your request: please specify whether you want us to submit an initial purchase order or renew a GeoTrust certificate.
    b) Enter a Domain name you want to secure: for example, www.yourdomain.com for https://www.yourdomain.com URL, or yourdomain.com for https://yourdomain.com URL.
    c) Fill the Organization name, Organizational unit, City, State, Country fields.
    d) Enter the appropriate Bit Length: 2048 or higher. When choosing, keep in mind that 2048-bit length is generally sufficient for any website, unless there are very high security requirements like those of financial institutions. If you select a longer key, the server will be slower to reply because it will take more time to encrypt the data. New Standard for SSL Certificates Industry standards set by the Certification Authority/Browser (CA/B) Forum require that certificates issued after January 1, 2014 must be at least 2048-bit key length.
    e) Enter a valid existing Approval E-Mail Address to which GeoTrust will send a message with instructions on how to approve the certificate request order. GeoTrust has a predefined list of email addresses that can be used for an approval message:
    admin@yourdomain.com
    administrator@yourdomain.com

    hostmaster@yourdomain.com
    webmaster@yourdomain.com
    postmaster@yourdomain.com
    You can also use address which is listed as Administrative or Technical contact in WHOIS information of the domain. This information can be edited through your domain name registrar.
  2. Once you submit the request, a new case will be created for Technical Support. Support engineers will submit the purchase\renewal order for GeoTrust and update the case once the order is submitted.
  3. Check for the message from GeoTrust (the 'From:' address on this message is Intermedia Support email address, the subject is 'QuickSSL Premium Approval') that is sent to the approval email address you specified previously, and follow the link in the message to approve your order. As soon as you approve the order, your certificate will be generated immediately and sent to your account contact email.
  4. Update the support case with the certificate you received, so it can be installed on your web server. The certificate should start with -----BEGIN CERTIFICATE----- and end with -----END CERTIFICATE----- (no trailing spaces).
  5. As soon as the SSL certificate is installed, a Technical Support engineer will update the case to let you know the operation is complete.

Note: If you submit request for GeoTrust SSL certificate, please note that by default we place an order for QuickSSL Premium SSL Certificate (see our prices here). However, we can also place an order for True BusinessID Wildcard ($349 for 1 year, $610 for 2 years) or True BusinessID with EV ($179 for 1 year, $329 for 2 years), if you need one of them please specify it in the Customer notes field.

Install an SSL certificate from other Certificate Authority (initial purchase or renewal)

If you want to renew or purchase certificate from a different vendor, you need to provide the vendor with the CSR for your virtual server, along with other documents as requested by secure certificate authorities. Your virtual server must have a domain name assigned to it, because certificates are issued per domain name, not IP address. Follow these steps to generate CSR to purchase and install a secure certificate on your server:

  1. Submit a Certificate Renewal / CSR Generation request via the Extended Services portal:
    a) The purpose of your request: please specify whether you want us to submit an initial purchase order or renew a GeoTrust certificate.
    b) Enter a Domain name you want to secure: for example, www.yourdomain.com for https://www.yourdomain.com URL, or yourdomain.com for https://yourdomain.com URL.
    c) Fill the Organization name, Organizational unit, City, State, Country fields.
    d) Enter the appropriate Bit Length: 2048 or higher. When choosing, keep in mind that 2048-bit length is generally sufficient for any website, unless there are very high security requirements like those of financial institutions. If you select a longer key, the server will be slower to reply because it will take more time to encrypt the data. New Standard for SSL Certificates Industry standards set by the Certification Authority/Browser (CA/B) Forum require that certificates issued after January 1, 2014 must be at least 2048-bit key length.
    e) In both the Approval E-Mail Address and Validity Period fields, enter N/A.
  1. Once you submit the request, a new case will be created for Support. Our Intermedia Support technicians will create the secure certificate request for your web server and forward you an email containing the CSR in reply. You should submit this key to the certificate authority of your choice.
  2. Reply to the support case with the certificate, so it can be installed on your web server. The certificate should start with -----BEGIN CERTIFICATE----- and end with -----END CERTIFICATE----- (no trailing spaces).
  3. As soon as the SSL certificate is installed, a Technical Support engineer will update the case to let you know the operation is complete.

Transfer an existing complete SSL certificate

If you are transferring your website (with the SSL certificate installed) from another hosting company to Intermedia, you can transfer the complete SSL certificate using export/import procedure.

Please export the SSL certificate installed on your website to a password protected *.pfx (PKCS#12 archive) file (you may contact your hosting company support for the assitance).

Then you can import the SSL certificate to your Intermedia hosted website using the HostPilot:

  • Windows 2008
    Send the .pfx file to Technical Support along with the password for the file. We will install the certificate on your server and let you know the operation is complete.
  • Windows 2003

    1. Navigate to Web/FTP Server > Web Server > Secure Certificates page, click Browse button, select a .pfx file, browse to .pfx file on your machine and select it, then click Imoport Certificate button.
    2. Enter the password the *.pfx archive file created with, hit OK button.
  • Linux
  1. Navigate to Web/FTP Server > Apache Server > Add-Ons > Mod_SSL > Install/Uninstall, click Install Mod_SSL button.
  2. On Web/FTP Server > Apache Server > Add-Ons > Mod_SSL > Secure Certificates page, click Browse button, browse to .pfx file on your machine and select it, then click Imoport Certificate button.
  3. Enter the password the *.pfx archive file created with, hit OK button.
  4. Restart the website via the Web/FTP Server > Apache Server > Start/Stop page.

Notes: 

  • Only one SSL certificate can be installed on an account. Some Certificate Authorities allows to include few domain names to one SSL certificate (GeoTrust does not have this option).
  • If you would like to get an SSL certificate valid for few sub-domain names (sub1.yourdomain.com and sub2.yourdomain.com, for example) you should specify *.yourdomain.com as the Domain name so we generate the CSR for a wildcard SSL certificate. 
  • Installation of the SSL certificate does not prevent you from accessing your site in insecure mode using HTTP. If you would like to make your website available through HTTPS secure connection only, please refer to this Knowledge Base article for the instructions.
  • To secure a Miva store, read the Knowledge Base article on How Do I Secure My Miva Store? for more information.