SSL- Updated Job Aid (2).pdf

Free SSL Installation Check if Nameservers Pointing to our servers Yes No Check if A record of Domain is No Free SSL will not work...

Free SSL Installation Check if Nameservers Pointing to our servers Yes No Check if A record of Domain is No Free SSL will not work (Suggest Paid SSL) pointing to us Yes Points to remember: Access Domain dashboard, click The nameservers and A record must point to the IP address on the domain name. associated with the customer's hosting account. Some second-level domains are NOT supported. Click here to see the list. Click on the Toggle button next to Free SSL to Free SSLs are currently NOT supported on Free Weebly site builder sites. enable it  Troubleshooting FREE SSL Certificate Issues Check Whois, Nameservers, A Records and make sure Domain is eligible for Free SSL Yes No Inform the customer why Free Confirm the Free SSL is enabled SSL can’t be installed, suggest for the Domain in Control Panel paid SSL Check SSL Checker/ SSL Shopper > Confirm the SSL Common Reasons why Free SSL does not work: status. 1. If the Domain is having a paid expired certificate installed in it, please confirm this with your Team Manager/ Web coach and Active Not Active escalate the case to Tech Tier 2 for removing the installed expired certificate Active > Try accessing the Check errors 2. If the issue is related to SRQIP- 798, please check the SRQ website using and assist list for more details https://domainname.name accordingly  Installation of Paid SSL Check if the Nameservers of the Domain is pointing to us Yes No SSL will be installed Inform the customer to add the Automatically provided CNAME Record by contacting Nameservers Provider, you can refer to the following slide to understand the CNAME Verification Process  SSL Auto Installation If Nameservers are pointing to us then the CNAME record will be added automatically when the SSL is purchased To check if the Record has been added, you can refer to Account Logs, which shows the generated CNAME record which has been added for Domain verification. For example: You can check if the CNAME record is propagating or not by using Command prompt or DNS Propagation Checker. ➔ Points to Remember: ◆ It will take between 30 minutes and 4 hours to complete the installation ◆ If A record is not pointing to our servers, they have to download and install the SSL certificate on the external server  CNAME Verification 1. When the SSL is purchased on the account, a CNAME record with unique values will be generated and you can check that on account logs. 2. Customer has to add this generated unique CNAME Record to his Domain by contacting Domain Nameserver provider 3. For example: a. CSFE Notes shows: b. Provide the above DNS Record details to customers 4. Once CNAME record is added, customer has to wait for the propagation time. 5. Once CNAME record is propagated and status shows as Pending/ In Progress, then please escalate the case to Tech T2 queue Pro tip: Customers who have purchased an SSL certificate and wish to guarantee that their site visitors are visiting a secure website (https), rather than accidentally landing on an unsecured website (http), will use a 301 redirect in their.htaccess file. Click here to learn more. If it’s a WordPress website, suggest customers to use a ‘Really Simple SSL’ plugin.  Important Links for Reference ➔ SSL Checker ➔ Why No PadLock ➔ Redirect Code Generator ➔ Free SSL (Knowledge Base ➔ Paid SSL (Knowledge Base) ➔ Free SSL (Confluence Article) ➔ Free SSL Installation and Renewal (Confluence Article) ➔ Paid SSL (Confluence Article) ➔ Legacy Link of SSL ➔ HTTP2.Pro - Check server & client HTTP/2, ALPN, and NPN support online. ➔ SSL Converter - Convert SSL Certificates to different formats (sslshopper.com) ➔ Free SSL - SSL.com ➔ VPS and Dedicated Hosting: How to Install an SSL Certificate | iPage