Skip to main content

Free SSL (HTTPS)

  • Updated

Making a Safer Web

MODX Cloud offers SSL certificates that are totally free and only take about a minute to install. If you have the ability to click a few buttons, you too can set up a site to show the lock icon in your browser address bar. We handle all the crazy, behind-the-scenes things needed to serve your content securely.

Before enabling SSL on your site, be sure to review the steps to make sure your site is ready for serving secure content and prevent Insecure Content errors or a broken looking site.

Enable SSL on your Site

To enable SSL for your site, log in to the MODX Cloud Dashboard and complete the following steps:

  1. Before proceeding, review your site to ensure it's ready for SSL and domains have no AAAA records. 
  2. From the Clouds view, locate the Cloud instance you wish to serve securely
  3. Click on the name of the Cloud instance to go to the Cloud Edit view
  4. Near the top of the Cloud edit view, find and click on the Web Server tabfree-ssl-2.png
  5. Below the Web Rules, you'll find the SSL section; click the SSL toggle at the right to start the install process
  6. Click the “Install a Free Certificate" buttonfree-certificate.png
  7. If you see a notice about domains or subdomains not covered by the certificate (see Limitations below), you can acknowledge to proceed or exit to correct any issues.free-ssl-4.png  
  8. Click the “Install” button, and wait about one minute for the process to complete. You'll see a progress indicator and the view will update once complete. free-ssl-5.png

That’s all folks! 

You may also want to review our documentation on configuring your Web Rules for SSL.

Renewals Automatically Occur

Free SSL certificates, by design, expire every 90 days. But don’t worry: we renew them for you 30 days ahead of time. You shouldn’t have to do anything. 

Limitations

There are a few considerations before enabling free SSL:

  • Your domain must be resolved to MODX Cloud before you can install a free SSL certificate. There is no “instant” SSL coverage. If you are switching DNS to MODX Cloud, there will be a brief period of time when your site will not serve content securely while your certificate is being deployed (usually no more than a minute or two). If you need uninterrupted secure, SSL coverage for a site moving to MODX Cloud, you should use a custom, commercial SSL certificate rather than a free SSL certificate.
  • DNS for your domain must not include IPv6 (AAAA) records. Certificate issuers will use IPv6 records when validating your domains, but MODX Cloud does not yet support IPv6.
  • Certificates issued by MODX Cloud cannot be used elsewhere. The Terms of Service prohibit our providing private keys for any use external to the MODX Cloud infrastructure.
  • You must be on one of our current account plans to access self-serve SSL functions, including Free SSL. If you're not on a Basic, Pro, Studio, Business or Premium plan, then you will need to switch to one of these newer plans from your Account Plans page in the MODX Cloud dashboard.
  • Testing a domain using a custom hosts file is not possible. Certificates cannot be issued without the DNS publicly resolving to the intended Cloud instance. You may be able to get around this by using a subdomain, or alternate domain for the testing period, but you’ll need to re-issue your certificate when you switch your domain.
  • Extended Validation is not available. If you need an enhanced green bar for branding purposes, you will need to purchase and use a custom SSL certificate. 
  • Only 100 domains are supported on a single Cloud instance. If you have more than this, you will need a custom certificate. 
  • No Warranty/Insurance. Most SSL vendors offer some form of monetary insurance with their certificates. If that is important, you need to purchase and use a custom SSL certificate.
  • No support for Internet Explorer on Windows XP. Both MODX Cloud and our free SSL certificates rely on SNI to function, which is not supported by that browser/OS combination. If you must support IE on XP, you will need to choose an alternate web host. 

Debugging Certificate Issuance and Renewal Issues

Using free SSL certificates in MODX Cloud is usually smooth sailing, however if you are experiencing issues you might want to check out our Troubleshooting Free SSL Issues guide.

 

 

 

 

Related articles