{"id":25050,"date":"2022-02-02T15:03:05","date_gmt":"2022-02-02T15:03:05","guid":{"rendered":"https:\/\/1-grid.com\/knowledge\/how-to-setup-ssl-on-your-website\/"},"modified":"2025-05-27T10:41:18","modified_gmt":"2025-05-27T10:41:18","slug":"how-to-setup-ssl-on-your-website","status":"publish","type":"ht_kb","link":"https:\/\/1grid.co.za\/knowledge\/how-to-setup-ssl-on-your-website\/","title":{"rendered":"How to Setup SSL on your website"},"content":{"rendered":"

This article provides you with information on how to secure your Domain with SSL<\/a>.<\/span><\/p><\/blockquote>\n

If you are collecting ANY sensitive information on your website (including email and password), then you need to be secure. One of the best ways to do that is to enable HTTPS, also known as SSL (secure socket layers) so that any information going to and from your server is automatically encrypted. This prevents hackers from sniffing out your visitors\u2019 sensitive information as it passes through the internet.<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Your visitors will feel safer on your site when they see the lock while accessing your website \u2013 knowing it\u2019s protected by a security certificate.<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Overview<\/strong><\/span><\/h2>\n

\u00a0<\/span><\/p>\n

The best thing about SSL is it\u2019s simple to set up, and once it\u2019s done all you have to do is route people to use HTTPS instead of HTTP. If you try to access your site by putting https:\/\/ in front of your URLs right now, you\u2019ll get an error. That\u2019s because you haven\u2019t installed an SSL Certificate.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Setting up HTTPS on your website is very easy, just follow these 5 simple steps:<\/span><\/p>\n

\u00a0<\/span><\/p>\n

– Host with a dedicated IP address<\/span><\/p>\n

– Buy a certificate<\/span><\/p>\n

– Activate the certificate<\/span><\/p>\n

– Install the certificate<\/span><\/p>\n

– Update your site to use HTTPS<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Step 1: Host with a dedicated IP address<\/strong><\/span><\/h2>\n

In order to provide the best security, SSL certificates require your website to have its own dedicated IP address. With a dedicated IP, you ensure that the traffic going to that IP address is only going to your website and no one else\u2019s.<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Step 2: Buy a Certificate<\/strong><\/span><\/h2>\n

Next, you\u2019ll need something that proves your website is your website \u2013 kind of like an ID Card for your site. This is accomplished by creating an SSL certificate. A certificate is simply a paragraph of letters and numbers that only your site knows, like a really long password. When people visit your site via HTTPS that password is checked, and if it matches, it automatically verifies that your website is who you say it is \u2013 and it encrypts everything flowing to and from it.<\/span><\/p>\n

Technically this is something you can create yourself (called a \u2018self-signed cert\u2019), but all popular browsers check with \u201cCertificate Authorities\u201d (CA\u2019s) which also have a copy of that long password and can vouch for you. Please see here\u00a0<\/a>how to purchase a certificate with 1-grid.<\/span><\/p>\n

\u00a0<\/span><\/h2>\n

Step 3: Activate the certificate<\/strong><\/span><\/h2>\n

If you\u2019re activating the certificate yourself, the next step is to generate a CSR. It\u2019s easiest to do this within your web hosting control panel \u2013 such as WHM or cPanel. Go to the SSL\/TLS admin area and choose \u201cGenerate an SSL certificate and Signing Request\u201d. Fill out the fields in the screen below:<\/span><\/p>\n

\u00a0<\/span><\/p>\n

\u201cHost to make cert for\u201d is your domain name, and the contact email can be blank.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Copy the first block of text. You\u2019ll need this \u201cCSR\u201d to give to the SSL cert issuer so they can establish your identity. Login to your account (or wherever you bought your certificate) and activate it. Paste your CSR and any other fields needed. It will ask you for an approver email. This is an email address that proves you own the domain, ie ssl@1-grid.com. If it doesn\u2019t exist, you\u2019ll need to create it so you can get the email that contains the final certificate. Follow the steps and when you are done that email address should have received the cert as a .crt file.<\/span><\/p>\n

\u00a0<\/span><\/h2>\n

Step 4: Install the certificate<\/strong><\/span><\/h2>\n

If you\u2019re installing up the certificate yourself, this is the easiest step you\u2019ll ever do. You have the certificate in hand, all you need to do is paste it into your web host control panel. Please see the article here\u00a0<\/a>on how to install your SSL.<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Paste it into the first box and hit submit. That\u2019s it! Now try to access your site via https:\/\/www.domain.com<\/a> \u2013 you should be secure!<\/span><\/p>\n

\u00a0<\/span><\/h2>\n

Step 5: Update your site links to HTTPS<\/strong><\/span><\/h2>\n

At this point, if you go to https:\/\/yoursite.com<\/a> you should see it load! Congrats, you\u2019ve successfully installed SSL and enabled the HTTPS protocol! But your visitors aren\u2019t protected just yet, you need to make sure they\u2019re accessing your site through HTTPS!<\/span><\/p>\n

Keep in mind that you typically only need to protect a few pages, such as your login or cart checkout. If you enable HTTPS on pages where the user isn\u2019t submitting sensitive data on there, it\u2019s just wasting encryption processing and slowing down the experience. Identify the target pages and perform one of the two methods below.<\/span><\/p>\n

\u00a0<\/span><\/p>\n

You can update all links to the target pages to use the HTTPS links. In other words, if there\u2019s a link to your cart on your home page, update that link to use the secure link. Do this for all links on all pages pointing to the sensitive URLs.<\/span><\/p>\n

However, if you want to ensure that people can only use specific pages securely no matter what links they come from, it\u2019s best to use a server-side approach to redirect the user if it\u2019s not HTTPS. You can do that with a code snippet inserted on top of your secure page. Here\u2019s one in PHP:<\/span><\/p>\n

\u00a0<\/span><\/p>\n

\n
\/\/ Require https if ($_SERVER['HTTPS'] != \"on\") {    $url = \"https:\/\/\". $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'];    header(\"Location: $url\");    exit; }<\/span><\/pre>\n<\/blockquote>\n
\u00a0<\/span><\/p>\n
Another server-side approach is to use mod-rewrite. This won\u2019t require you to change any of your website files but will need you to modify your apache configuration. Here\u2019s a nice mod-rewrite cheat sheet<\/a>, or just use this example:<\/span><\/p>\n
\u00a0<\/span><\/p>\n
\n
RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(cart\/|checkout\/) https:\/\/%{HTTP_HOST}%{REQUEST_URI}<\/span><\/pre>\n<\/blockquote>\n
\u00a0<\/span><\/p>\n
This will ensure that if anyone accesses a page via HTTP they will automatically be redirected to HTTPS.<\/span><\/p>\n
\u00a0<\/span><\/p>\n
\u00a0<\/span><\/p>\n
\u00a0<\/span><\/p>\n