Enom SSL

This module automates SSL certificate sales through Enom.

You can offer the following types of certificate:

GeoTrust QuickSSLGeoTrust QuickSSL PremiumGeoTrust TrueBizIDGeoTrust TrueBizID Wildcard
GeoTrust TrueBizID EVRapidSSLComodo EssentialComodo Instant
Comodo Premium WildcardComodo Essential WildcardComodo EVComodo EV SGC
VeriSign Secure SiteVeriSign Secure Site ProVeriSign Secure Site EVVeriSign Secure Site Pro EV

Supported Features

CreateSuspendUnsuspendTerminate
✖️✖️✖️✖️
Change PackageChange PasswordUsage UpdatesClient Area Link
✖️✖️✖️✖️

Create an SSL Certificate Product

To set up an SSL certificate product:

  1. Go to Configuration () > System Settings > Products/Services.
  2. Create a new product with type Other.
  3. Set the desired billing cycle.
    Due to limitations in Enom’s API, the system cannot renew SSL certificates. Clients must place a new order when the certificate period ends. Because of this, we only recommend using the One Time billing cycle.
  4. Set the price.
  5. Set the welcome email to None.
  6. In the Module Settings tab, select Enomssl.
  7. Enter your Enom credentials.
    If you see a Bad User name or Password error at any point, you have entered an invalid username and password here. If you have enabled Test Mode, make certain that you have registered it on the test server.
  8. Choose the certificate type and length to offer.
  9. Optionally, configure the product to allow clients to choose a different certificate type and pricing using a Certificate Type configurable option.
  10. Register your IP address with Enom.
    Because access to Enom’s API is IP address-restricted, you must register the IP address from which you will connect your account.

The module’s create function does not generate a username and password. The username and password fields will be blank under the client’s Products/Services tab.

Register your IP Address with Enom

To use the Enom API, you must first contact them with the server IP address from which you will connect (your WHMCS installation’s server’s IP address). If you do not do this, you will see a User not permitted from this IP address error.

To do this:

  1. Log in to your account on the Enom website.
  2. Go to Resellers > Manage > API.
  3. Enter your server’s IP address in New.
  4. Click add.

Provisioning Process

After you create it, the product will appear as a regular product that clients can add to the cart.

The system will not perform any configuration before purchase.

Sales use the following process:

  1. The client purchases and pays for the desired certificate.
  2. The system activates the order or you activate it manually, according to your configuration.
  3. The system sends an email to the client with a link to configure the certificate in the Client Area.
  4. The client provides the necessary configuration details.
  5. The system sends the certificate data to the Certificate Authority for validation.
  6. The Certificate Authority issues the certificate.
  7. The system sends an email to the client with instructions to install the certificate on their hosting account.

Reissuance

Typically, the certificate issuer is able to reissue a certificate. The process varies depending on the company from which you purchased your SSL certificate.

You will need the following information to complete a reissuance:

  • Your full SSL domain name or order ID. If your SSL certificate included www, make certain to include it.
  • A new CSR request containing the exact same information as the original order.
  • The email address for the order. You must have access to this address.

Symantec (GeoTrust® and RapidSSL)

GeoTrust SSL certificates include free reissues and replacements for the lifetime of the certificate. GeoTrust will reissue or replace SSL certificates that have not expired for the exact same Fully-Qualified Domain Name (FQDN). To qualify for reissuance, all existing core SSL certificate details must remain the same (including the FQDN).

  • GeoTrust provides a self-service portal that allows you to do this.
  • Use the admin email and not the approver email.

Comodo®

For Comodo SSL certificates, reissuance is a manual process. To initiate this, you must open a support ticket with eNom and include the required details above.

Comodo also allows the option to change the common name on certificate from, for example, www.example.com to secure.example.com. The subdomain can change but not domain.

provisioning-modules ssl

Last modified: June 14, 2024