How do I troubleshoot a "Potential Security Risk Ahead" error when I access a WHM and cPanel site in Lightsail?

Short description

If cPanel hasn't issued a Secure Sockets Layer (SSL) certificate for your hostname, then "Warning: Potential Security Risk Ahead" errors occur.

Resolution

To resolve a "Warning: Potential Security Risk Ahead" error, use Lightsail or the WHM console to install an SSL certificate.

Prerequisite: Make sure that your site has a hostname, and that your domain name maps to your cPanel and WHM instance. For more information, see steps 4 and 5 of Quick start guide: cPanel & WHM.

Use Lightsail to install an SSL certificate

To use Lightsail to install an SSL certificate, complete the following:

1. Use SSH to connect to Lightsail.
2. Install an SSL certificate:

   sudo /usr/local/cpanel/bin/checkallsslcerts

If the output includes "Attempting to verify your certificate", then the certificate is installed.

Use WHM console to install an SSL certificate

To use WHM console to install an SSL certificate, complete the following steps:

1. Log in to WHM at https://example-ip:2087.
   Note: Replace example-ip with your server's IP address.
2. Under Service Configuration, choose Manage Service SSL Certificates.
3. Select every service that requires an SSL certificate. Examples of services that require an SSL certificate include Calendar, cPanel, WebDisk, Webmail, and WHM Services.
4. Choose Browse Account and then Choose Browse Apache.
5. To install an SSL certificate that already exists, select it, and then choose Use Certificate. WHM enters the certificate's information into the Install a New Certificate form.
   -or-
   To install a new SSL certificate, paste its details into the Install a New Certificate form. For more information, see Manage Service SSL Certificates on the cPanel website.
6. After the form is filled in, choose Install.
7. When the console prompts you to restart the cpsrvd daemon, choose Proceed.

Verify the changes

To verify that the "Warning: Potential Security Risk Ahead" error is resolved, log in to WHM. If you don't receive an error and if the padlock icon in the address bar is closed, then the error is resolved.