How to Enable SSL and Auto-Renewal in HestiaCP?

Introduction

Enabling SSL in HestiaCP is a quick and essential step to secure your website with HTTPS. HestiaCP allows you to generate a free Let’s Encrypt SSL certificate and automatically renew it without any manual intervention.

This guide will walk you through the steps to enable SSL and activate auto-renewal for your domain using your BigCloudy hosting account. Before proceeding, ensure that your domain is already added to HestiaCP and correctly pointed to your server.

1.Prerequisites

Before enabling SSL, make sure:

Your domain is pointing to your server’s IP
DNS has fully propagated (may take 0–24 hours)
Port 80 (HTTP) is open

You added the domain in HestiaCP

2.Enable SSL for a Domain

Step 1: Log In to HestiaCP

Step 2: Open the Web Section

Click Web from the top navigation menu.

Step 3: Select Your Domain

Find your domain in the list and click Edit.

Step 4: Enable Let’s Encrypt SSL

In the domain settings page:

Check Enable SSL Support
Check Use Let’s Encrypt
Make sure your email address is correct (needed for certificate issuance)

Click Save to generate the SSL.

3.Enable Auto-Renewal

Once Let’s Encrypt is enabled, SSL auto-renewal is activated by default.

To verify:

Step 1: Open the Domain’s Edit Page Again

Go to Web → Edit Domain.

Step 2: Confirm Auto-Renewal is Enabled

Check that:

Use Let’s Encrypt is selected
A valid email is added
“Auto-renewal active” message appears in the SSL section (varies by Hestia version)

4.Troubleshooting SSL Issues

If SSL fails to issue or renew, check these common issues:

Domain Not Pointing to Server IP

Use tools like DNS Checker to verify DNS propagation.

Incorrect DNS Records

You must have working A records:

yourdomain.com → Your Server IP

www.yourdomain.com → Your Server IP

File Permissions Problems

If the .well-known folder cannot be created, SSL will fail.

Expired SSL Not Renewing?

Try removing the SSL and enabling it again.

Conclusion

You have now enabled SSL and auto-renewal on HestiaCP using Let’s Encrypt. This ensures your website stays secure, encrypted, and trusted by visitors. If you encounter issues, follow the troubleshooting steps or contact BigCloudy Support for assistance.

Need Help?

If you face any issues updating your nameservers or need further assistance, our support team is always available:

Email: support@bigcloudy.com
Submit a support ticket

FAQ

What is SSL, and why is it important for my website?

SSL (Secure Sockets Layer) encrypts the connection between your website and its visitors, ensuring that sensitive information like passwords and payment details is secure. It also improves trust and can boost SEO rankings.

Does HestiaCP provide free SSL certificates?

Yes, HestiaCP supports free SSL certificates via Let’s Encrypt. You can enable SSL for any domain hosted on your server directly from the control panel.

How do I enable SSL for my website in HestiaCP?

You can enable SSL by navigating to Web → Edit Domain → Enable SSL in HestiaCP. Once enabled, you can also select Enable Auto-Renewal to ensure the certificate renews automatically before expiry.

What is Auto-Renewal, and why should I enable it?

Auto-Renewal automatically renews your SSL certificate before it expires, preventing downtime or browser security warnings for your visitors.

Can I use a custom SSL certificate in HestiaCP?

Yes, HestiaCP allows you to install custom SSL certificates. You can upload the certificate, private key, and CA bundle manually under the Edit Domain → SSL section.