Knowledge Base
How to install and bind a Sectigo SSL certificate on Lite Speed
Overview
By the end of this guide, you will have downloaded your Sectigo SSL certificate files, configured a LiteSpeed listener, pointed it at your certificate and private key, enabled the secure protocol, and mapped it to your virtual host so the server serves traffic over HTTPS. It covers the prerequisites, obtaining the certificate files (primary certificate, Certificate Authority (CA) bundle, and private key), creating and securing a listener, configuring the certificate file paths and protocol version, assigning the virtual host (vhost) and its domains, and verifying the result.
Prerequisites
-
Administrator access to the LiteSpeed Web-Admin console
-
Your Sectigo SSL certificate bundle (primary certificate, Certificate Authority (CA) bundle, and private key) downloaded
-
OpenLiteSpeed or LiteSpeed installed and running
-
Access to the server directory where the SSL files are stored
Step 1: Obtain your SSL certificate files
Download the Sectigo SSL certificate bundle, including the primary certificate, CA bundle, and private key.
Step 2: Access the LiteSpeed admin console
Log in to the LiteSpeed Web-Admin console (usually at https://yourdomain.com:7080).
Figure 1: Sign in to the LiteSpeed Web-Admin console using your administrator credentials.
Step 3: Create a new listener
Go to Configuration > Listeners and click the + icon.
Figure 2: Open the Listeners page and select the add (+) option to create a new listener.
Step 4: Configure the listener address settings
-
Listener Name: an internal, friendly name for the listener.
-
IP Address: select Any unless you want to bind the listener to a specific machine, in which case enter the unique IP-port combination.
-
Port: HTTPS connections use port 443 by default. If another listener already uses 443, choose another port such as 8443.
-
Secure: select Yes.
-
Notes: any internal notes to help you identify the listener later.
Click Save.
Figure 3: Enter the listener name, IP address, port, secure setting, and notes, then save.
Step 5: Configure SSL for the listener
Select the listener (for example, Default), open the SSL tab, and click Edit.
Figure 4 & 5: Select the listener and open the SSL tab to begin certificate configuration.
Step 6: Configure the certificate file paths
-
Private Key File: the path to the private key saved during generation with OpenSSL.
-
Certificate File: the path to the server certificate the CA sent you.
Complete only one of the following two options to install the intermediate certificates:
-
CA Certificate Path: the path to the intermediate certificate file the CA sent you.
-
CA Certificate File: the path to the directory holding the intermediate certificates the CA sent you.
Click Save.
Figure 6: Add the private key, certificate, and CA certificate path details, then save the configuration.
Step 7: Configure the SSL protocol
Back on the SSL tab for your listener, click Edit on the SSL Protocol section, select the protocol version, and save.
Figure 7: Choose the appropriate SSL/TLS protocol version for the listener and save your changes.
Step 8: Assign the virtual host and domains
Select the appropriate virtual host (vhost), then enter all the domains that connect to it so OpenLiteSpeed knows where to send the traffic this listener receives, and click Save.
-
If multiple domains in the certificate connect to the vhost, separate them with a comma.
-
If you have one vhost and configured the server to disregard other vhosts, you can enter an asterisk (*) as the domain.
Figure 8: Assign the listener to the correct virtual host and add the relevant domains.
Figure 9: Assign the listener to the correct virtual host and add the relevant domains.
Figure 10: Assign the listener to the correct virtual host and add the relevant domains.
Figure 11: Assign the listener to the correct virtual host and add the relevant domains.
Figure 12: Assign the listener to the correct virtual host and add the relevant domains.
Step 9: Apply changes and restart LiteSpeed
Save your changes and restart LiteSpeed to apply the SSL configuration.
Figure 13: Apply the updated SSL settings and restart LiteSpeed for the changes to take effect.
Verification
Visit SSL Labs (https://www.ssllabs.com/ssltest/) to check certificate validity, the intermediate chain, and overall SSL health.
Troubleshooting tips
-
Ensure the private key matches the certificate.
-
Verify the CA bundle is uploaded correctly to avoid chain issues.
-
Restart LiteSpeed after making SSL changes.
-
Check firewall settings if the SSL port (443) is blocked.
Related articles
-
OpenLiteSpeed configuration documentation: https://docs.openlitespeed.org/config/
Need assistance?
Contact our team for help with your purchase or issuing your certificate.
Live chat
Click the button below or click "Chat with an Expert" to start chatting with us now!
