• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Question Moving to Plesk, LetsEncrypt Certificates

iansen

New Pleskian
Hello,
I'm moving a website to a new Plesk powered server.
I would like to make the move seamless.
I plan on moving the backend first and keep the database on the old server until all the traffic switches to the new IP.
But I have an issue/question with/about the LetsEncrypt Certificates.
How can I keep both servers running with valid certificates, for a day or two until the DNS changes propagate?
Does requesting a new certificate for my domain in Plesk invalidate the old certificates?
How can I just use the old certificates until I make the change? I
I've tried uploading the pem in the domain configuration panel ...but it's saying it's invalid (although it's working fine on the old server).
Am I missing something?

I'm new to Plesk, sorry if my questions sound stupid :).

Thanks in advance.
 
AFAIK, the old certificate will remain valid until its expiration date. So what you could do:
  1. Lower the TTL of your domain to a low value (like 300 seconds) and wait until the previous TTL (usually 86400) has expired
  2. Set up the website on the new server (without the valid certificate) and make sure everything is working
  3. Change your DNS and point it to the new server and make sure that your authoritative nameservers are up to date
  4. Install the Let's Encrypt certificate on the new server
  5. If all goes well then you'll have a valid certificate on the new server and then you can take your time migrating the rest
 
Back
Top