• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Plesk > Tools Utilities > SSL Certificates

R

RickR

Guest
I've purchased an SSL Certificate from ResellOne and I've followed the install directions pertaining to IIS 7. Now I'm trying to apply that certificate to Plesk 10. I've found posts about exporting the certificate from IIS and then convert it using openssl into a .pem file and then import that PEM file into Plesk. I'm getting errors, the latest with the PEM file is Unable to find the appropriate private key for the certificate.

What is the recommended method to bring SSL Certificates into Plesk if you've already purchased one?

System:
Windows 2008 R2 Web Edition
IIS 7.5
Plesk 10.1.1
 
Found it by Trial and Error!

Apparently I'm covering new ground. For anyone that runs into the same problems...

Server Tools >> SSL Certificates >> Add SSL Certificate >> click on the Help at the top of the page to get the online help. This may help but it didn't in my case. I tried to upload the certificate I received and Plesk errors out. Research led me to openssl and that I should export the certificate from IIS and then convert it to a .pem file. This would have been nice in the P docs! I tried to import this PEM file and Plesk still errored out, something about the Private Key. So I tried several times to cut and paste the certificate into the Add SSL Cert window and failed. Finally I read somewhere to include the:
Locate the CSR section on the page, and copy the text that starts with the line -----BEGIN CERTIFICATE REQUEST----- and ends with the line -----END CERTIFICATE REQUEST----- to the clipboard.

Oh, I guess the P doc helped but not completely!

Here is what I did to finally uploade the certificate.

Open the PEM file and find your -----BEGIN RSA PRIVATE KEY----- string. Copy it and everything up to and including the -----END RSA PRIVATE KEY----- string. Paste this into the large text box specified as Private Key *.

Next find your -----BEGIN CERTIFICATE----- string and copy it and everything up to and including the -----END CERTIFICATE----- string. Paste this in the large text box specified as Certificate *.

I don't know what or where to find the CA Certificate so I left that blank. Click the Send Text button and you should be home free. After this I drilled back to the Default Certificate and noticed that the CA Certificate was unassigned as well.

These appear to be very simple questions and I expect simple and quick replies from Parallels, go figure!
 
CA Certificate final note

When I applied my two keys and clicked the button to send I received the following:

SSL Start...

...SSL certificate is being reloaded, please wait...
If Parallels Plesk Panel does not respond, please access the server and restart the administrative web server engine manually.


Response:
Content was blocked because it was not signed by a valid security certificate.

For more information, see "Certificate Errors" in Internet Explorer Help.


The response wasn't very helpful! After additional research I went to my Registrar's website and found the CA Certificate. Yes, you need to, well at least I needed to, apply the CA certificate. Contact your registrar and ask them to provide it or a link of where to get it.
 
Back
Top