The SkySwitch platform UIs (User Interfaces) require a valid SSL certificate to function properly. For a branded UI that points to a domain that you own to work correctly, it must have a valid security certificate. The SkySwitch web UIs run on multiple physical servers, so you MUST provide a multi-server, wildcard certificate which can secure a single domain and multiple sub-domains.  We require you to send us the private key (.key), intermediate key and .crt files for your chosen domain.Example list of possible sub-domains SkySwitch will use your wildcard certificate for your domain name:  (*.yourdomainname.com)PBX.SkySwitch.com    ( Your customer's portal ) Meeting.SkySwitch.comsmsresponder.skyswitch.comnomorobo.skyswitch.comIMPORTANTIf you already own a Wildcard SSL Certificate, we can use your existing SSL certificate as long as you provide us the private key (.key) that was used to create the CSR to generate your current SSL Certificate. If this is the case, please submit this private key along with the other files requested in Step 4, below.PEM Format - THIS IS THE FORMAT WE REQUIRE IF YOU ARE ASKED BY THE CERTIFICATE SIGNING AUTHORITYThe PEM format is the most common format that Certificate Authorities issue certificates in. PEM certificates usually have extensions such as .pem, .crt, .cer, and .key. They are Base64 encoded ASCII files and contain "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----" statements. Server certificates, intermediate certificates, and private keys can all be put into the PEM format.SkySwitch uses the Apache webserver with MOD SSL and is compatible with PEM formatted certificates. If you are asked to choose which web server the certificate will be used on, select Apache or Apache + MOD SSL.SSL Certificates are available from many vendors, including DigiCert, Symantec, Comodo, and GoDaddy.Note: Because your UI will run on multiple physical servers, you MUST PROVIDE A MULTI-SERVER, WILDCARD SSL CERTIFICATE.Wildcard SSL Certificate Vendors for your considerationGo Daddy Wildcard Certificates  RapidSSL Wildcard CertificatesSteps to Purchase an SSL Certificate from GoDaddySTEP 1 - Gather or get a CSR (Certificate Signing Request). During the SSL certificate order process, GoDaddy will require you to provide a CSR. You can provide your own CSR, however, if you would like SkySwitch to provide this for you, please complete this CSR Request Form. After submitting the form, we will send you via email a CSR.Note: Our CSR Request Form tool will create a Support request. We will generate a CSR that can be submitted to any SSL certificate provider.Here is an example of the CSR that we will send back to you:-----BEGIN CERTIFICATE REQUEST-----MIIByjCCATMCAQAwgYkxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpHb29nbGUgSW5jMR8wHQYDVQQLExZJbmZvcm1hdGlvbiBUZWNobm9sb2d5MRcwFQYDVQQDEw53d3cuZ29vZ2xlLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEApZtYJCHJ4VpVXHfVIlstQTlO4qC03hjX+ZkPyvdYd1Q4+qbAeTwXmCUKYHshdgtheYSqlPzyIBwieMZrWFlRQddZ1IzXAlVRDWwAo60KecqeAXnnUK+5fXoTI/UgWshre8tJ+x/TMHaQKR/JcIWPhqaQhsJ&*d+vAdGA80BLxdMCAwEAAaAAMA0GCSqGSIb3DQEBBQUAA4GBAIhl4PvFq+e7ipARgI5ZM+GZx6mpCz44DTo0JkwfRDf+BtrsaC0q68eTf2XhYOsq4fkHQ0uA0aVog3f5iJxCa3Hp5gxbJQ6zV6kJ0TEsuaaOhEko9sdpCoPOnRBm2i/XRD2D6iNh8f8z0ShGsFqjDgFHyF3o+lUyj+UC6H1QW7bn-----END CERTIFICATE REQUEST-----Note: If you use a CSR that you generated on your own, then you must also provide us with the private key that was used to create the CSR. This CSR (private key) is sensitive information. We recommend sending sensitive information such as this through a website like www.onetimesecret.com.STEP 2 - Begin the SSL certificate purchase process with GoDaddy. SkySwitch has worked with Godaddy and we recommend their WILDCARD SSL option which secures one website and all its sub-domains and which you can explore at this link https://www.godaddy.com/web-security/ssl-certificateSTEP 3 - GoDaddy Certificate Setup (Prior purchasing steps have been skipped) - Take your CSR and enter it into the form on the GoDaddy site as shown in the image below. When asked for the type of web server, choose APACHE.STEP 4 - After submitting the CSR and specifying the type of web server (APACHE), GoDaddy will provide you with .crt (certificate) files.Step 5 - Please submit the crt files through the Branding the Web Centrex (PBX) Manager Portal form, see below: For additional help with Adding a CNAME record, please see this article.  https://skyswitch.elevio.help/en/articles/631-adding-a-cname-recordSSL Renewal ProcessIf your SSL certificate is about to or has already expired and you would like to have it renewed, please follow the steps below:Important Note: If your SSL certificate is automatically renewed by your SSL certificate provider, you will still need to provide the new certificate to SkySwitch at renewal as it is not automatically renewed on our end.Renew the SSL certificate with your SSL certificate provider (e.g. GoDaddy).Open a ticket with us, SkySwitch, stating that you would like to renew your SSL certificate and attach the new SSL certificate to the ticket.Once our support team is finished installing the SSL certificate, be sure to check your sites that everything is in order.