Description

SSL certificates protect sensitive data in transit, like login credentials, credit card information. Secure web URL (HTTPS) establish a secure connection and authenticate an organization’s online identity.

Procedure to obtain, install SSL Certificate and configure Magento to use secure ‘https’ URL

1. Generate Private key in new website
2. Create CSR for the new website (CSR – Certificate Signing request)
3. Submit CSR to SSL vendor to initial SSL cert issuing process
4. Domain Control validation to be performed for the new website by uploading files as per vendor instructions. (This is to verify the ownership of domain)
5. Domain verification and issuing of SSL cert from Vendor (such as Symantec, GoDaddy, Comodo)
6. Download the 3 certificate files
a. SSL Certificate crt File
b. SSL Certificate Key File
c. SSL Certificate CA File
7. Upload cert files to new website and install the SSL cert
8. Test and verify SSL cert, validity date
9. Update Magento store configuration for base URL, secure URL and secure front end.
10. Configure web server and setup redirection to always use secure URL “https”
11. Verify checkout process and https URL
12. Generate SSL comprehensive report to measure grade of SSL

Note: There will be additional steps in SSL setup for websites hosting without cPanel,