Plesk Hosting SSL Domains Webmail

How to install free Let's Encrypt SSL in Plesk

SSL & HTTPS 190 views 3 min read Updated 6 hours ago

Quick Answer

Point your domain to the Plesk server, open SSL/TLS Certificates in Plesk, choose the free Let's Encrypt option, select domain/www/webmail/mail options, then click Get it free.

Most Nakroteck shared and WordPress hosting accounts can use a free Let's Encrypt SSL certificate in Plesk. This is the normal SSL option for simple websites, blogs, school websites, church websites, and business sites.

Before you start

The domain must point to the Nakroteck Plesk server.
DNS propagation should be complete.
The website should be active in Plesk.
If you want to secure www or webmail, those records must also point to the same server.

Install the free certificate

Go to Client Area > Hosting > Open service > Login to Plesk.
In Plesk, open Websites & Domains.
Open the domain you want to secure.
Open Hosting & DNS, then Hosting Settings.
Make sure SSL/TLS support is enabled, then save if you changed it.
Open SSL/TLS Certificates.
Choose Install a free basic certificate provided by Let's Encrypt.
Select the options you need.
Click Get it free.

Recommended options

Secure the domain name: always select this.
Include www: select this if visitors use www.yourdomain.com.
Secure webmail: select this if you use webmail.yourdomain.com.
Assign certificate to mail domain: select this if you use domain email on the same hosting account.

After it installs

Open https://yourdomain.com in a browser.
Click the padlock and confirm the certificate is for your domain.
Follow the related article Forcing HTTPS in Plesk so visitors always use the secure version.

Webmail and mail SSL

If you selected webmail and mail options, Plesk can assign the certificate to webmail and the mail service. If webmail still shows a warning, confirm that webmail.yourdomain.com points to the Plesk server, then open a ticket if it still fails.

Wildcard SSL note

A wildcard certificate can cover subdomains such as shop.yourdomain.com and app.yourdomain.com. Wildcard SSL normally needs a DNS TXT record called _acme-challenge. If Nakroteck manages your DNS, Plesk may add it automatically. If DNS is external, you may need to add the TXT record manually and wait for it to resolve.

Common errors

Domain does not resolve: the domain is not pointing to the Plesk server yet.
DNS challenge used another IP: DNS is still pointing to another host or propagation is not complete.
www failed: the www record is missing or points elsewhere.
webmail failed: the webmail record is missing or a conflicting subdomain exists.
HTTPS still does not redirect: the certificate is installed, but HTTPS redirect is not enabled yet.

How to point a domain to Nakroteck hosting.
Forcing HTTPS in Plesk.
How to open webmail.
Installing an SSL certificate in Plesk for paid certificates.

When to contact support

Open a ticket if the free certificate option is missing, the domain has pointed to Nakroteck for more than 24 hours but still fails, or you are using external DNS and need help with the TXT challenge.

Was this article helpful?

Still need help?

If this article did not solve it, open a support ticket and we will see which article you already checked.

Contact Support