Blog Support

Webmin, Virtualmin SSL Configuration and Installation Guide

All users of WebMin do know that it is a pretty good Web Hosting manager with tons of features, but where WebMin does not hit the ball out of the park is with its complicated UI (User Interface). Well, this guide will go-through how you can successfully install an SSL Certificate on your website through the WebMin (VirtualMin) Web Hosting Manager.

Install an SSL/TLS Certificate in Virtualmin / Webmin Video Guide
Play Video

Install an SSL/TLS Certificate in Virtualmin / Webmin Video Guide

Step 1. Generating a CSR and Private Key

1: Login to your WebMin WHM through your default port. (Generally Port:10000).

webmin Dashboard

2: Click on the VirtualMin icon on the top left and select your domain name

virtualmin Dashboard

3: Scroll down to Server Configuration and click on SSL Certificate

webmin server ssl configuration

If you do not see the SSL Certificate option, you will need to turn on Apache SSL under Enabled Settings in the VirtualMin Configuration.

To do so, follow the steps below

Select your domain name and click on Edit Virtual Server

virtualmin edit services

Click on the Enabled Features Drop-Down and be sure to check the - Apache SSL Enabled Box

webmin enable ssl

Also, make sure to update all packages and install required dependencies.

4: Click on the Create Signing Request Box and fill in all your details accordingly.

webmin virtualmin create csr

City: Complete name of the city, no abbreviations.
State: Full name of the state.
Country: Choose your country from the dropdown list.
Organization: If you are a business; Enter your legal entity name. If you're not a business, any value entered will not be used in your certificate.
Department: If you are a business; Write the appropriate division of your company. It is best to use something generic such as "IT".
Email: Enter your email address

5: Click on the Generate CSR button below

virtualmin webmin generate csr

6: You will now see a newly generated CSR (Customer Signing Request) and a Private Key. Make sure you store this securely on your PC as you’re gonna need this later or keep that window open.

virtualmin webmin csr generated



Step 2. Order and Configure the SSL Certificate

Now, we need to buy an SSL Certificate. If you visit our SSL Certificates List page, you will see options available, such as a low-cost domain-validated SSL or a wildcard SSL, which also secures the sub-domains.

Cheap SSL Certificates

View our low cost SSL Certificates with domain validation.

Starting at $ per year

Wildcard SSL

View our Wildcard Certificates to Secure Unlimited Sub-domains.

Starting at $ per year

Multi-Domain SAN SSL

View our SAN Certificates to secure multiple domains.

Starting at $ per year

If you require any assistance with selecting an SSL Certificate, please feel free to contact our sales team and they will be happy to assist.

1: Order the SSL and complete the checkout.

2: Once you have completed the SSL Certificate Purchase you can begin the configuration process. This can be started by going into your SSLTrust account and managing your recent purchase.

manage ssl

You then will need to click the Submit Configuration button to begin the configuration process.

submit ssl configuration

3: You now need to paste in the CSR you generated in your WebMin Web Hosting Panel. This includes the lines:

text

-----BEGIN CERTIFICATE REQUEST----
  -----END CERTIFICATE REQUEST-----
paste csr

Select OTHER for your Web Server Type as WebMin is not recognized yet. Then continue to the next step.

configure ssl contact details

This information is to be of the individual who is responsible to approve and SSL Certificate. If it is a business SSL, it needs to be a contact under the business.

The Technical Contact Information is the details of the individual responsible for the installation and management of the Certificate.

If you have ordered a business SSL, you will also be required to enter your business details. These should be the correct address and phone number and legal entity name. They will be required to be validated by the Certificate Authority, any mistakes will cause delays. More information on Business Validation can be found here.

4: Click Continue to go to the next Step. Here you need to select the Authentication Method to validate your domain name. This is required to prove you own the domain name and have permission to issue an SSL Certificate for the domain.

ssl validation method

Select the method that will be the easiest for you to use; File-Based Authentication ( HTTP / HTTPS ), CNAME Based Authentication ( DNS ) or Certificate Approver Email.

If you have access to one of the listed emails, this can be the quickest method

Click Continue/Submit to finish the Configuration process.

After you complete the domain validation via your selected method, your SSL will be issued. If you ordered a Business SSL, you will need to wait for the Certificate Authority to complete the Business address and phone validation. If the validation has not progressed, or you have not received your Certificate after some time, please contact our support team so we can check on its status.

validation manager ssl



Step 3. Install the SSL Certificate on Plesk

When your SSL Certificate has been issued, you will be emailed the Certificate Directly from the Certificate Authority. You can also download it from your SSLTrust Portal. Downloading it from the SSLTrust Portal is a good option as we format the certificate in an easy to use way.

Again; View your certificate management page within SSLTrust

manage ssl

1: Click on the Manage button and collect/download your certificate

collect ssl

2: Go to the first column and click on copy to clipboard

download ssl

3: Head back over to your WebMin Dashboard and go to the SSL Certificate setting under Server Configuration again.

webmin server ssl configuration

4: Click on the Apply Signed Certificate dialog box

webmin virtualmin install ssl

Paste in your copied SSL Certificate. Also, make sure that you check the boxes as Pasted text.

5: Click on the Install Now button.

And we’re done.

In some cases, you will also have to copy and paste you CABUNDLE (Intermediate Certificate) - The chain is required to improve compatibility of the certificates with web browsers and other kind of clients so that browsers recognize your certificate and no security warnings appear.

6: Click on the CA Certificate Dialog Box

webmin virtualmin install ca bundle certificate

Copy and paste your CABUNDLE (Intermediate Certificate) from the Sectigo Collection page

download intermediate certificate

And click on Save Certificate



Step 4. Check the SSL is working

SSLTrust's Free SSL Checker is a tool that allows you to test and validate the SSL/TLS certificates installed on websites. Simply enter a domain name and it will analyze the certificate, providing details like the issuer, expiration date, encryption strength, and whether the certificate is properly configured and trusted by major browsers and operating systems. In SSL tests, receiving an "A" rating typically signifies that the SSL certificate and its configuration meet high security standards.

SSLTrust Free SSL Checker A Rating

The checker highlights any potential security issues or misconfigurations with the SSL implementation. This free tool makes it easy to verify if a website's SSL certificate is valid and secure, giving visitors confidence their connection is encrypted and their data is protected from eavesdroppers.

SSLTrust Free SSL Checker Detailed Report Example Drop Down

Additionally, you can also performed a detailed check which generates an actionable report with all the ins and out of your SSL Certificate. This includes Protocols, Ciphers, Vulnerabilities and much more.

SSLTrust Free SSL Checker Detailed Report

-

You might require assistance from your web developer or make the necessary updates to your website personally to ensure that all files utilize "https://" and all links leading to and within your website employ "https://".




Optional Troubleshooting and Further Configuration

1: If you do not get an A rating on the SSLLabs test, make sure to have installed the CABUNDLE (Intermediate) Certificate and only allow TLS 1.2 and higher to function

You can check which versions of TLS are enabled by the process below:

Go the VirtualMin Dashboard -> select your Domain Name and head over to the -> Services Option -> Configure SSL Website

virtualmin configure services ssl

Click on SSL Options

webmin virtualmin ssl options

Check all SSL Protocols and make sure that only TLS 1.2 and higher are enabled.

virtualmin ssl protocal

2: Redirect all HTTP traffic to HTTPS

Head over to the VirtualMin Dashboard and go to :-
Server Configuration -> Website Options.

On the bottom of Website and PHP options, you’ll see a Redirect all requests to SSL Site dialog. Make sure that you check on Yes and click on Save below

webmin redirect to https ssl

3: Redirect www to non-www site:

Some site owner prefer the non www version as by default, you’ll be able to access your site via both options and would like to only use one.

Go the VirtualMin Dashboard -> select your Domain Name and head over to the -> Services Option -> Configure SSL Website

virtualmin configure services ssl

Click on the Edit Directives Dialog Box

Remove the line that says:

text

ServerAlias www.your-domain-name

webmin edit directives

Discussions and Comments

Click here to view and join in on any discussions and comments on this article.

Written by
Siddiqui Ammar


Helpful Guides

View more Guides, FAQs and information to help with your Certificate purchases.

Learning Centre

View more resources on cyber security, encryption and the internet.


Continue reading with these guides you may be interested in...

#SSL/TLS

Webuzo SSL/TLS Installation Guide

Video Included

Webuzo - powered by Softaculous is a Single User Control Panel, which helps to deploy apps and more on the server. It can enable people to focus more on using applications rather than run around the clock maintaining them. This guide will go through …

#SSL/TLS

VestaCP SSL Configuration and Installation Guide

Video Included

Vesta Control Panel or Vesta CP- powered by Softaculous is an open source hosting control panel, which can be used to manage multiple websites, create and manage email accounts, FTP accounts, and MySQL databases, manage DNS records and much more. …

#SSL/TLS

CrazyDomains SSL/TLS Certificate Install. A Cheaper Option

Video Included

Crazy domains is a well-known provider of Web Hosting and IT services in Australia, India and the Middle East. Crazydomains has disabled the cPanel SSL module, for no other reason than to try to force you to buy their overpriced SSL Certificates. …