Search for:

Available article translations:

The SSL certificate used by Parallels Plesk has expired. How can it be renewed?

Article ID: 1736, created on Mar 7, 2007, last review on Nov 17, 2014

  • Parallels Plesk for Linux/Unix
  • Parallels Plesk for Windows


When Parallels Plesk or another site is opened via HTTPS, a warning is displayed regarding an expired certificate.

How do you renew this certificate?


Please note that installations of Plesk 7.x, 8.x, and 9.x are compatible with Offline Management of Parallels Virtual Automation (PVA) Power Panel and connections to port 8443 can be served by services on the Hardware Node. If this is the case (the URL contains "/vz/cp/"), follow the steps described in this Knowledgebase article: How do I install an SSL certificate for Power Panel or PVA Management Node?.

There are no special Plesk certificates provided by Parallels. The default SSL certificate you used for Plesk is a self-signed certificate, which is generated once during your Plesk installation. The presence of this SSL certificate is required for SSL connections.

This is a default certificate shown in the server certificate repository at Server -> Certificates (for Plesk 7.5, 8.x) and at Settings -> SSL Certificates (for Plesk 9.x).

You can create your own self-signed certificate on the Certificates page, or purchase a real certificate from one of the certificate authorities.

To create a new self-signed SSL certificate, log into Plesk as an administrator, go to the Certificates page, and create the new certificate.

For Parallels Plesk version 7.x, 8.x:

Server -> Certificates -> Add New Certificate

For Parallels Plesk version 9.x:

Settings -> SSL Certificates -> Add SSL Certificate

For Parallels Plesk version 10.x:

Tools & Utilities -> SSL Certificates -> Add SSL Certificate

For Parallels Plesk version 11.x

Tools & Settings -> SSL Certificates -> Add SSL Certificate

For Parallels Plesk version 12.x

Tools & Settings -> SSL Certificates -> Add

Fill in the required preferences and click the button Self-Signed.

A new self-signed SSL certificate will be created in the server certificate repository:

# ls -la /usr/local/psa/admin/conf/httpsd.pem
-r-------- 1 root root 3089 Sep 23 12:50 /usr/local/psa/admin/conf/httpsd.pem

The old one will be renamed as httpsd.pem.sav

# ls -la /usr/local/psa/admin/conf/httpsd.pem.sav
-r-------- 1 root root 3046 Sep  5 01:23 /usr/local/psa/admin/conf/httpsd.pem.sav

To assign this SSL certificate for securing your Plesk installation, check the newly-enabled SSL certificate in the list and click on Secure the panel if you have Plesk 8.2 or later. In older Plesk versions, click Install.

You can also use HTTP mode to access the Plesk interface: navigate to http://hostname:8880 and follow the same instructions as above.

Renewal is also possible through SSH:

  1. Connect to the Plesk server under root

  2. Go to the certificate directory and rename it:

    # cd /usr/local/psa/admin/conf/
    # mv httpsd.pem{,.old}
  3. Create a new certificate with the same name:

    # openssl req -new -nodes -x509 -out httpsd.pem -newkey rsa:2048 -keyout httpsd.pem -days 3650

    Fill out all the required fields.

    In this case, a PEM type certificate will be created, valid for 10 years with a private part without a password and 2048 bit key length.

  4. Restart sw-cp-server:

    # service sw-cp-server restart

See the Plesk documentation for more information on how to set up self-signed certificates.

After you have created or uploaded a new certificate into Plesk and wish to use it for domains, you should set it for every IP you need.

This can be done at Server -> IP Addresses -> "Choose IP" by selecting the required certificate in the "SSL Certificate" drop-down menu.

NOTE: The browser will still warn you that the certificate is not from a trusted source since you created a self-signed certificate. In order to get rid of this warning, it is necessary to buy a certificate from an authorized certificate seller.

Search words:

fail to apply ssl to plesk cp

SSL for 8443 port

problem replacing shared certificate

ssl fail install plesk

SSL Certificate

new SSL certificate cannot be selected / used by panel

ssl certificate

56797cefb1efc9130f7c48a7d1db0f0c c81e59b61af9dca603ba03b14aabe968 9f8baf78266b4e54525d1c6bf06305a5 42844a8183c58f5bd71c7d59929707e6

Was this article helpful?
Tell us how we may improve it.
Yes No
Server Virtualization
- Parallels Cloud Server
- Parallels Containers for Windows 6.0
- Parallels Virtuozzo Containers
- Parallels Automation
- Parallels Automation for Cloud Infrastructure
- Parallels Business Automation Standard
- Parallels Virtual Automation
- Parallels Plesk Panel Suite
- Web Presence Builder
- Parallels Plesk Automation
- Parallels Small Business Panel
- Value-added Services for Hosters
- Parallels Partner Storefront
Services & Resources
- Cloud Acceleration Services
- Professional Services
- Support Services
- Training & Certification