How to set up your CDN SSL service

    October 31, 2019

    How Nexcess clients can configure their active CDN SSL service.

    What you need


    As noted above, you must enable your CDN SSL service before following this procedure. 

    Attention: Changes to your CDN configuration on may take up to an hour to take effect.

    Attention: If you require multiple Edge CNAMES for your SSL service, contact our Support Team instead of using the below method, which can only provide one.

    1. Log in to the Client Portal. From the dashboard, click Services > Other.

    2. Locate the relevant CDN service. From the menu toggle, followed by CDN Control Panel.

    3. Select HTTP Small > Customer Origin.

    4. Choose your language if prompted.

    5. If you already have a small customer origin, skip to Step 6. Otherwise:

      1. In Directory Name field, enter your preferred name.

      2. Under Hostname Configuration, select the HTTP Edge Protocol check box if it is not already selected.

      3. In the Hostname or IP Address field, enter the web or IP address of your website

      4. Click the Add button directly to the right of the Hostname or IP address field.

    6. In the Hostname Configuration section, select the HTTPS Edge Protocol check box.

    7. Attention: For Step 7, do not change the “https://” prefix when you enter the web address.

      In the Hostname or IP Address field, enter the web or IP address of your website and click the Add button directly to the right.

    8. On the lower right, click Add.
      Screenshot - 2_11_2016 , 2_40_42 PM.png

    9. Configure an Edge CNAME pointing to your small customer origin:
      1. Under HTTP Small, select Edge CNAMEs.

      2. Attention: In Step 9b, you must include "-ssl-" and "" as part of the New Edge CNAME as shown in Figure 12, or this procedure will not work properly. Do not use a custom domain name.

        In the New Edge CNAMEfield, enter your new Edge CNAME as shown in the following example:

        • In the image below, the DNS settings reads, “”; therefore, the New Edge CNAME would be “”. Note the placement of "-ssl-" and"", both of which must appear in your New Edge CNAME. 
        • In the Points To: field, select the Customer Origin radio button.
        • In the Origin Directory field, and choose the correct origin from the provided list. On the lower right, click Add.

    10. After allowing an hour for the changes to take effect, verify the customer origin functions properly.

      1. The simplest way to do so is is to select the same image or other asset on both your website and CDN, test the URL of this image or asset on your website, and then test the corresponding URL of the same image or asset on the CDN.

      2. For example, if the URL of your website’s image is
        and the URL of your CDN SSL CNAME is
        then the corresponding CDN URL would be

      3. You may now update your application to use the new CDN SSL base URL.

    For 24-hour assistance any day of the year, contact our support team by email or through your Client Portal.

    Was this article helpful?

    Send feedback

    Can’t find what you’re looking for?

    Our award-winning customer care team is here for you.

    Contact Support