Choose the SSL setting for your website – IT Solver Support

The SSL setting controls how your website traffic is encrypted. It covers two connections: from the visitor to Cloudflare, and from Cloudflare to your website server. This article tells you what each setting does and how to change it in the IT Solver dashboard.

Before you start

To change the setting, you must be an Owner, IT manager or Web designer of your business in the dashboard. Other roles can see the setting but cannot change it. They see the message You have read-only SSL access. An owner, IT manager, or web designer can change the encryption mode.
Your domain's DNS must be in IT Solver DNS, or in your own Cloudflare account that IT Solver has connected to the dashboard. If it is not, see Change nameservers or move your DNS to IT Solver.
If you are moving your DNS to IT Solver, wait until your nameservers point to IT Solver DNS before you change the SSL setting. Until then, a change does not affect your live website.
If your domain is still transferring to IT Solver, the SSL settings are not available. Wait until the transfer is complete. See Check a domain transfer, resend the approval email or try again.
The SSL setting applies only to DNS records that show Proxied in Proxy status. Records that show DNS only go straight to your website server. See Add, change or delete DNS records.

The four settings

Off: No encryption. All traffic is sent in plaintext. Your website server does not need a certificate. Do not use this setting for a business website.
Flexible: The connection from the visitor to Cloudflare is encrypted. The connection from Cloudflare to your website server is not encrypted. Your website server does not need a certificate. Use this setting only when your website server cannot have a certificate.
Full: Both connections are encrypted. Your website server needs a certificate. A self-signed certificate is OK, because Cloudflare does not check the certificate.
Full (Strict): Both connections are encrypted, and Cloudflare checks the certificate on your website server. Your website server needs a valid certificate from a trusted authority. This is the recommended setting.

When you select a setting, the dashboard shows a label next to it: Not secure, Partial, Secure or Most secure. The How traffic flows section shows which connections are encrypted and what certificate your website server needs.

Change the SSL setting

Sign in at dashboard.itsolver.net.
Select Domains, then select your domain.
Select SSL settings. You can find it in Common actions on the Overview tab, or on the DNS tab. While you move your DNS to IT Solver, the button is on the Overview tab only, not on the DNS tab. If your website does not use website forwarding, you can also select the Website row in How your domain works on the Overview tab.
In SSL/TLS encryption mode, select a setting.
Read the How traffic flows section. Make sure your website server has the certificate that the setting needs.
Select Save SSL settings.
The page opens again. Make sure that your setting is selected.
Open your website in a browser. Make sure that the page loads and the address starts with https://.

If the setting you selected is not selected after the page opens again, the change did not save. Try again. If it still does not save, contact IT Solver.

Examples

Your website host installed a free certificate

Your website host tells you that your website now has a certificate from a trusted authority. The dashboard shows Flexible or Full.

To fix it: select Full (Strict), then select Save SSL settings. Open your website and make sure it loads.

Your website shows a certificate error after you select Full (Strict)

You change the setting to Full (Strict), and your website stops loading. The certificate on your website server has expired, or it is self-signed.

To fix it: select Full and save, so that your website loads again. Ask your website host to install a valid certificate. Then change the setting back to Full (Strict).

Your browser says the page has too many redirects

The setting is Flexible, and your website server sends all visitors to https://. The page never finishes loading.

To fix it: make sure that your website server has a certificate. Then select Full or Full (Strict) and save.

A team member cannot change the setting

A team member opens SSL settings and sees the read-only message. The options are greyed out and there is no save button.

To fix it: an Owner can give that person the IT manager or Web designer role. An IT manager can give a Billing only person the Web designer role. See Change a role, remove access or resend an invitation.

Still have a problem?

Questions? Email support@itsolver.net or phone 07 3123 6000.