# How to generate a key and CSR in cPanel for your SSL certificate

> Generate a private key and Certificate Signing Request (CSR) in cPanel, ready to order an SSL certificate you will install yourself.

Source: https://www.kualo.com/knowledgebase/security-ssl/how-to-generate-a-key-and-csr-in-cpanel-for-your-ssl-certificate
Updated: 2026-06-11

---

Before you can order an SSL certificate, you need to generate a private key and a Certificate Signing Request (CSR) in cPanel. The CSR contains your site and organisation details, and you paste it into the order form when buying your certificate. Both live in the **SSL/TLS Certificates** tool, on its **Keys** and **Requests** tabs.

:::info
Most sites never need to do this - Kualo issues free certificates automatically with AutoSSL, so HTTPS just works. See [how to manually run AutoSSL for a domain in cPanel](/knowledgebase/security-ssl/how-to-manually-run-autossl-for-a-domain-in-cpanel). Only generate a key and CSR if you are buying a commercial certificate that you will install yourself.
:::

## Generate a private key

1. Log in to cPanel and, in the **Security** section, click **SSL/TLS**.
2. Open the **Keys** tab. Under **Generate a New Private Key**, choose the **Key Type** (the default **RSA, 2,048-bit** is fine for most certificates), optionally add a **Description** to help you identify the key, then click **Generate**.

   ![Generating a private key on the Keys tab in cPanel](https://kb-cdn.kualo.com/72/d2/72d28e64f750bd9d64cef7f7c501966813bdd592.png)

3. cPanel creates the key and shows it on screen. You do not need to copy it - it stays safely in cPanel, ready for when you install your certificate.

## Generate a Certificate Signing Request (CSR)

1. Open the **Requests** tab.
2. Under **Generate a New Certificate Signing Request (CSR)**, choose the **Key** you just generated, then fill in your details: the **Domains** the certificate is for, your **City**, **State**, **Country** (choose it from the list), and **Company**, plus a contact **Email**. Optional fields such as Company Division and a CSR passphrase can be left blank.

   ![Generating a CSR on the Requests tab in cPanel](https://kb-cdn.kualo.com/94/94/949455a3dbaff016cabaf57eb0878428c770efeb.png)

3. Click **Generate**. cPanel displays your CSR. Copy the entire block, including the `-----BEGIN CERTIFICATE REQUEST-----` and `-----END CERTIFICATE REQUEST-----` lines, and paste it into your certificate provider's order form.

:::tip
Keep your private key safe and never share it - it stays in cPanel and is used later when you install the certificate. The CSR, by contrast, is not secret: it is meant to be handed to your certificate provider.
:::


---

_Source: Kualo Knowledgebase — https://www.kualo.com/knowledgebase/security-ssl/how-to-generate-a-key-and-csr-in-cpanel-for-your-ssl-certificate · © Kualo Ltd._