PCI Compliance - Panel Self-signed certificate

[ShotgunFront]

Hi,

We are running a server with Plesk on and trying to pass a PCI scan.

This scan has an issue with Plesk's self signed SSL certificate.

Whilst Plesk should not enter into the remit of the PCI scan because it is accessible from the domain we are getting scanned at port 8443 it is showing up.

I see two options - firstly, we could actually use a valid SSL for Plesk but I dont see how, because we have multiple domains on this server, so can't specify a single domain to purchase the SSL for..

..The other thing is that this domain doesnt need access to plesk via port 8443. We access Plesk by using our servers IP with the port on the end - is there a way we could stop the domain being able to access this port, which would stop the PCI scanner accessing it?


Thanks,
Tim