How to Install an SSL Certificate on DirectAdmin

1 month ago
Remitur
7 minutes

Installing an SSL certificate on DirectAdmin is a straightforward process that can be completed directly from the control panel.

In this guide, we will show you how to manually install an SSL certificate on a website hosted with DirectAdmin, including the server certificate, private key and CA certificate chain.

What You Need Before Installing the SSL Certificate

Before starting, make sure you have the following:

  • Your SSL certificate, usually provided as a .crt, .cer or .pem file.
  • The private key associated with the certificate.
  • The CA Bundle / Intermediate Certificates supplied by the Certificate Authority.
  • Access to your DirectAdmin account.

The private key must be the same key that was used to generate the Certificate Signing Request (CSR). If the certificate and private key do not match, DirectAdmin will not be able to use the certificate correctly.

Important: Never share your private key with third parties. The private key should remain securely stored on the server where the SSL certificate is installed.

Step 1 – Log in to DirectAdmin

Log in to your DirectAdmin control panel.

DirectAdmin normally runs on port 2222, so your hosting provider may provide an address similar to:

https://server.example.com:2222

The exact login URL depends on your hosting provider.

Once logged in, make sure you are working at User Level and select the domain on which you want to install the SSL certificate.

Step 2 – Open SSL Certificates

In the DirectAdmin Evolution interface, navigate to:

Account Manager → SSL Certificates

If you manage multiple domains, make sure the correct domain is selected before continuing.

The SSL Certificates section allows you to generate CSRs, install certificates and manage the SSL configuration associated with your domain.

Step 3 – Select the Certificate Installation Option

In the SSL Certificates page, select the option that allows you to paste or install a pre-generated certificate and private key.

Depending on your DirectAdmin version and interface, the exact wording may vary slightly.

You will normally be presented with an area where the SSL certificate and its corresponding private key can be entered.

Step 4 – Install the SSL Certificate

Open the SSL certificate supplied by your Certificate Authority using a plain text editor.

The certificate should look similar to this:

-----BEGIN CERTIFICATE-----
MIIF...
...
-----END CERTIFICATE-----

Copy the entire certificate, including the BEGIN and END lines.

Paste it into the certificate field in DirectAdmin.

Step 5 – Install or Verify the Private Key

The certificate must be associated with the private key that was created when the CSR was generated.

A private key normally looks like this:

-----BEGIN PRIVATE KEY-----
MIIE...
...
-----END PRIVATE KEY-----

or:

-----BEGIN RSA PRIVATE KEY-----
MIIE...
...
-----END RSA PRIVATE KEY-----

If you generated the CSR directly from DirectAdmin, the corresponding private key may already be stored on the server.

In that case, you normally do not need to replace it.

If the CSR was generated elsewhere, you will need to provide the corresponding private key together with the certificate.

Make sure that you do not accidentally replace the existing private key with an unrelated key, as the SSL certificate will only work with the private key associated with the CSR used to obtain it.

Step 6 – Install the CA Bundle / Intermediate Certificates

Most commercial SSL certificates require one or more intermediate CA certificates to establish a complete chain of trust between your certificate and the trusted root Certificate Authority.

These certificates may be supplied by your SSL provider as a CA Bundle, Intermediate Certificate, Certificate Chain or similar file.

In DirectAdmin, locate the section dedicated to the CA Root Certificate, CA Certificate or certificate chain.

Paste the CA Bundle supplied with your certificate into this field and save the configuration.

If your CA Bundle contains multiple certificates, keep them in the order supplied by the Certificate Authority.

A CA Bundle may look similar to:

-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----

Do not remove the BEGIN and END lines.

Step 7 – Save the Certificate

Once the certificate, private key and CA certificate chain have been entered, click Save.

DirectAdmin will install the certificate for the selected domain.

If the certificate and private key match correctly, the new SSL certificate should become active immediately or within a few moments.

Step 8 – Enable SSL for the Domain

SSL must also be enabled for the domain.

If necessary, go to:

Account Manager → Domain Setup

Select your domain and make sure that Secure SSL is enabled.

On most modern DirectAdmin installations, SSL is already enabled, so no additional changes should normally be necessary.

Step 9 – Test the SSL Certificate

After installation, open your website using HTTPS:

https://www.example.com

Your browser should display a secure connection without certificate warnings.

However, simply seeing the padlock icon does not necessarily mean that the certificate installation is perfect.

It is also a good idea to verify:

  • that the certificate is issued for the correct hostname;
  • that the certificate has not expired;
  • that the complete intermediate certificate chain is installed;
  • that there are no certificate trust errors;
  • that all required domain names are included in the certificate.

Common DirectAdmin SSL Installation Problems

Certificate and Private Key Do Not Match

This usually means that the private key installed on the server is not the key that was used to generate the CSR associated with the certificate.

You will need to locate the correct private key.

If the original private key has been permanently lost, the certificate cannot be used with a newly generated key. You will need to generate a new CSR and have the SSL certificate reissued.

The Website Still Shows the Old Certificate

If the previous certificate is still displayed after installing the new one, first make sure that:

  • you installed the certificate on the correct domain;
  • the new certificate was successfully saved;
  • the domain points to the correct server;
  • no reverse proxy, CDN or load balancer is serving a different SSL certificate.

You may also need to wait briefly for the web server configuration to be reloaded.

The Certificate Is Installed but Browsers Report a Trust Error

One of the most common causes is a missing or incorrect intermediate certificate.

Check that the correct CA Bundle / certificate chain supplied for your SSL certificate has been installed in DirectAdmin.

The Certificate Works on One Hostname but Not Another

An SSL certificate is valid only for the domain names included in the certificate.

For example, a certificate issued only for example.com may not necessarily protect www.example.com, and a standard single-domain certificate for example.com will not protect arbitrary subdomains such as shop.example.com.

Check the Subject Alternative Names (SANs) included in your certificate.

If you need to secure multiple different hostnames, consider using a Multi-Domain (SAN) SSL certificate. If you need to secure multiple subdomains of the same domain, a Wildcard SSL certificate may be more appropriate.

Installing a Renewed SSL Certificate on DirectAdmin

The procedure for installing a renewed SSL certificate is essentially the same.

Go to:

Account Manager → SSL Certificates

and replace the old certificate with the renewed one.

If the renewed certificate was issued from the same CSR and private key, you can continue using the existing private key.

Remember to update the CA Bundle as well if your Certificate Authority provided a new certificate chain.

Do I Need to Restart DirectAdmin?

Normally, no.

When you install an SSL certificate through the DirectAdmin interface, DirectAdmin handles the required web server configuration changes automatically.

You generally do not need SSH access or to manually restart Apache, Nginx or DirectAdmin.

DirectAdmin SSL Certificate Installation Checklist

Before considering the installation complete, verify that:

  • the correct SSL certificate is installed;
  • the certificate matches the private key;
  • the CA Bundle / intermediate certificates are installed;
  • SSL is enabled for the domain;
  • the website loads correctly over HTTPS;
  • the certificate covers all required hostnames;
  • the browser reports no certificate errors;
  • the certificate expiration date is correct.

Conclusion

Installing an SSL certificate on DirectAdmin requires three main components: the SSL certificate, its corresponding private key, and the appropriate CA certificate chain.

DirectAdmin makes it possible to manage all these components directly from the control panel without manually editing the web server configuration.

Once the certificate has been installed, always test the website over HTTPS and verify that the complete certificate chain is being served correctly.

If you purchased your SSL certificate from EuroSSL, you can download the issued certificate and the required CA certificates from your customer area and then install them in DirectAdmin following the procedure described above.

Leave a Reply 0

Your email address will not be published. Required fields are marked *