← Blog

Guide

Install SSL with cPanel, Plesk, or Cloudflare — no SSH key

Most customers never upload a private key. They connect a hosting API instead.

Security reviews often block "paste your SSH private key into a SaaS." Fair. ManageMyCert's primary deploy path is hosting panel APIs — scoped tokens or admin credentials that can install SSL, not shell access to your entire server.

When you add a domain, we probe your site and suggest a platform: cPanel, Plesk, Cloudflare, WordPress, Shopify, and others. On Renew & deploy → Install certificate, pick your provider, save encrypted credentials, test, and deploy.

What each integration does
cPanel — UAPI SSL/install_ssl with an API token that has SSL install permission.
Plesk — REST upload of certificate + key for the domain.
Cloudflare — Custom edge certificate create/update via API (see Cloudflare guide).
WordPress / Drupal / etc. — No standard upload API; use ZIP download and your host's SSL UI.
Shopify / Wix — Vendor-managed TLS; use Monitor only.

Credentials are encrypted with AES-256-GCM at rest (SECRETS_ENCRYPTION_KEY on your server). They are decrypted only for the deploy job and never written to logs.

Typical workflow
1. Issue Let's Encrypt via DNS-01 (or upload your own CA cert).
2. Connect hosting API on Install certificate.
3. Click Install now — or let renewal push automatically.
4. Fallback anytime: download ZIP and upload manually.

SSH deploy remains available under Advanced for self-managed VPS teams who want it. Docs: Hosting panel install and Optional SSH & encryption.