Generating a CSR for cPanel is relatively straight forward but only if your host allows it.

*NOTE* SSL Certificates require a dedicated IP address! If you are using a shared IP address or are in any doubt please contact your webhosting provider before continuing.

First login to cPanel your usual way eg www.yourdomain.com/cpanel. You should see a button or link called "SSL Manager" if you do not see this button then you will need to contact your web hosting provider and ask for advice.

If you do see this button, click it! You will then be taken to a page that has 3 buttons "Private Keys", "Certificate Signing Requests" and "Certificates"

1. First you will need to generate a private key for the certificate so click the button called "Private Key"

a. Scroll down the resulting page until you see "Generate a New Key" enter the host you wish to generate the Certificate for. It is important to specify the correct host as we can not change the host, cancel or issue refunds on SSL Certificates that have been issued. So with that in mind enter your host. If you want visitors to be secure as soon as they visit your site its important to enter www.yourdomain.com **NOTICE THE www.**. SSL certificates can be issued to sub domains, for example we use secure.frozenweb.co.uk for our secure pages where our account management and order form are located.

b. Once you have entered the correct host (DO NOT enter http:// or https://) click the generate button

2. Next we have to generate the CSR so back to the SSL Manger page, and click on the Certificate Signing Request (CSR) button

a. The Host drop down box should be automatically filled with the host you entered during the last step (if not something has gone wrong and you should go back and repeat step 1)

b. Enter 'GB' in the country code, not 'UK' if you are a British company/website

c. The rest of the fields are quite straight forward, all must be filled out.

d. Once done click the generate button

3. Still in the Certificate Signing Request (CSR) page scroll down to where it says View and click the view button

a. You will then see something similar to this

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

4. This is your CSR highlight and copy whole thing including the -----BEGIN CERTIFICATE REQUEST----- and ----END CERTIFICATE REQUEST---- You will now need to past it into the enrolment form located in our billing manger (ModernBill) https://secure.frozenweb.co.uk. Once logged in you will see along the top a button called “My Sites”. Click that button, you will now see a link down the left hand side called “My SSL certificates”. Once you have clicked that link you will then see your SSL Order. Under the ID column you will see a number which is also a link. Click this number and you be taken to the start of the SSL Enrolment process.

5. To start the Enrolment process click the link called "Begin Certificate Request".

a. Here you will be asked to enter your Certificate Signing Request (CSR).

b. Its pretty straight forward from here on, select the appropriate check boxes for Renew and competitive upgrade, you may be entitled to free additional months if you are renewing or changing provider (you will be required to produce evidence)

6. You will need access to a generic email address such as webmaster@yourdomain.com or root@yourdomain.com this is where GeoTrust sends the verification email for your SSL Certificate (more information can be found here ). you MUST click the link contained in this email to verify your order. You will be presented a choice of email addresses and usually the only usable ones are in the 3rd level don't worry about this, just select an email address that you have or can gain access to.

7. Once you have received and click the link in the verification email your certificate will appear in the billing manger, where it once said  "Begin Certificate Request" it will now say "View Certificate" click this to view your certificate

8. You will now need to copy this certificate and go back to the SSL Manger in cPanel. This time click the "Certificates" button

a. Past the certificate including the ---BEGIN CERTIFICATE---- and ----END CERTIFICATE---- into the large text field under "Upload a New Certificate" then click "upload"

That's it you have successfully installed your new certificate. Your certificate will always be accessible from within modernbill so if there are any errors during installation you can copy and paste as often as required.