How to configure multiple SSL types, set up SSL certificates to be availabe only within certain packages, or available for free.
Overview
The Atomia system supports selling of multiple different SSL certificate types to customers. Each certificate type can be set to be available only within certain packages. A certain number of SSL certificates within each package can also be set to be available for customers for free.
Configuring multiple SSL types
In order to offer multiple different SSL types to customers a product has to be created in the Admin Panel for each SSL type.
- Open Admin Panel > Products > Add new product.
- Set the following values:
- Provisioning service: SSLCertificate
- Product category: SSL
- Type of billing: Fixed price, Recurring
- Renewal period: Only yearly renewal periods are supported
- Reprovision: True
- Renew with: Same product
- Add a new product property in the product’s Other data section to specify the SSL certificate type.
- The property name should be Product.
- The value should be one of the SSL certificate types that the selected SSL provider supports (for example quickssl).
The possible values for the OpenSRS provider that Atomia currently supports can be found in their documentation. See the product_type property.
Configuring SSL certificates to be available only within certain packages
It is possible to limit the availability of certain SSL certificates in the Admin Panel to specific packages.
- Open the existing SSL product for editing in Products > Actions > Edit.
- Add a new product property in the product’s Other data section.
- The property name should be Packages.
- The value should be the package’s article numbers separated with the | symbol (for example HST-GLDY|HST-PLTY).
When the SSL product update is done the SSL certificates will only be available for customers who have one of the packages from the configuration.
Configuring free SSL certificates
With Atomia it is possible to offer free SSL certificates to customers. This is useful e.g. if a client wants to offer a certain number of free SSL certificates when a customer purchases a specific package. To offer this the SSL product needs to have a free renewal period set.
- Go to Admin panel > Products > Actions > Edit for the SSL product.
- There should be a renewal period (one or more years) with the price set to 0 for the reseller currency. Since an SSL product configured this way will be available for free for all customers, you might have to set some limitations.
- Open Admin panel > Products > Actions > Edit for the package’s product and add a new product property in the product’s Other data section.
- The property name should be FreeSslMaxNumber.
- The value should be the number of free SSL certificates in total that will be available to the customer within this package.
Once the free SSL limit is reached for the package the customer will no longer be able to set one more certificates for free. If the SSL certificate’s product has some other renewal period defined with a price larger than 0 the customer will be offered to buy it. Otherwise, that SSL won’t be offered to customers anymore.
If a customer downgrades to a package that has a lower free SSL limit than the current one the excess number of certificates will be either converted to the paid renewal period (if it exists for the product), or terminated.
Configuring prefix for SSL certificates
It is possible to create a wildcard certificate with a prefix *. By default this prefix is not included, but it can be added through configuration. Go to Hosting Control Panel, open Atomia.Web.Plugin.AdvancedWebsiteSettings.dll.config and in pluginSettingCustomAttributeList section add
<pluginSettingCustomAttribute id="domainprefix2" name="*" value="*" />
Configuring SSL validation with DNS
SSL certificates are validated with email by default. Some OpenSRS certificates support validation with DNS. To enable DNS validation, you need to add the custom attribute DnsValidation with the value true to the SSL product. When a customer buys DNS validated SSL certificate, Atomia automatically adds DNS records for the certificate validation. The DNS validation also works for renewal.