Knowledge Base
How to Install and Bind an SSL Certificate on pfSense?
Overview:
This guide provides the step‑by‑step process for importing a Certificate Authority (CA), installing a server SSL certificate, and binding it to the pfSense WebGUI for secure HTTPS access.
Audience:
Network administrators, security engineers, and IT professionals managing pfSense firewalls.
Scope:
This document covers the full certificate installation workflow, including CA import, certificate installation, and SSL binding within the pfSense interface using the official pfSense documentation as reference.
Prerequisites
Before you begin, ensure you have the following:
-
Administrator access to the pfSense WebGUI
-
The CA bundle (root + intermediate certificates) from your certificate authority
-
The server certificate and corresponding private key (if CSR was generated externally)
-
A configured pfSense environment
Procedure to Install and Bind an SSL Certificate on pfSense
pfSense manages certificates through System → Certificates, where you can create, import, and assign certificates. The general process is:
-
Import CA certificates (root + intermediate)
-
Import or create the server certificate
-
Assign the certificate to the pfSense WebGUI (HTTPS)
Below are the detailed steps.
-
Import the Root and Intermediate Certificates
If your certificate authority (CA) sent you a CA Bundle:
-
Go to:
System → Certificates → Authorities tab
-
Click + Add.
-
Set Descriptive name
-
Set Method = Import an existing Certificate Authority.
-
Paste the CA Bundle (root + intermediate certs) into Certificate Data.
-
Click Save.
2. Install the Primary / Server Certificate
If you generated the CSR in pfSense
(You will see an entry for it already.)
-
Go to:
System → Certificates → Certificates tab
-
Click Edit next to the certificate.
-
Paste the signed certificate you received from the CA.
-
Click Update.
-
After that, it should show as below example
If you generated the CSR elsewhere (OpenSSL, IIS, etc.)
-
Go to:
System → Certificates → Certificates
-
Click + Add/Sign.
-
Choose Import an existing Certificate.
-
Paste:
-
Private Key
-
Certificate
-
Click Save.
3. Binding the SSL Certificate to pfSense WebGUI (HTTPS)
Once the certificate is installed, assign it to the GUI:
-
Navigate to:
System → Advanced → Admin Access
-
Under WebGUI, set:
-
Protocol: HTTPS
-
SSL/TLS Certificate: Select the certificate you imported/created
-
Click Save.
4. Verify SSL is Working
-
Open the pfSense URL from your browser
-
Check that:
-
The browser shows no certificate warnings
-
The certificate matches the host/IP/FQDN
You're Done!
Related Articles:
Tags:
Need assistance?
Contact our team for help with your purchase or issuing your certificate.
Live chat
Click the button below or click "Chat with an Expert" to start chatting with us now!
