An SSL certificate makes your site open with https:// and the padlock in the browser. Plesk installs free Let's Encrypt certificates and renews them automatically.
-
Open the domain's certificates
Go to Websites & Domains and, for your domain, open SSL/TLS Certificates.
-
Pick the free certificate
Click Install on the free certificate from Let's Encrypt.
-
Choose what it covers
Enter an email address for notices and tick:
- Include a "www" subdomain for
www.yourdomain.com; - Secure webmail if you want HTTPS for webmail too;
- Secure the mail for encrypted connections from email apps.
Click Get it free.
- Include a "www" subdomain for
-
Send visitors to HTTPS
On the same page, turn on Redirect from http to https. Anyone who types
http://yourdomain.comthen lands on the secure version.
Troubleshooting
Let's Encrypt cannot verify the domain
The domain's DNS does not point to Plesk yet, or has not propagated. Check with nslookup yourdomain.com. If the domain is proxied in Cloudflare, set the @ and www records to DNS only for a moment, issue the certificate, then turn the proxy back on.
The browser says the page is not fully secure
The site loads images or scripts over http://. In WordPress, change the site address to https:// under Settings → General.