Build-in SSL

Built-In SSL Certificates

Built-In SSL provides a quick and reliable way to secure an environment with the platform’s wildcard SSL certificate. It establishes HTTPS access without requiring a separate certificate purchase, upload, or manual server configuration.

In the platform dashboard, the option may also be displayed using the hosting provider’s name, for example {hosterName} SSL.

Convenient ManagementEnable or disable a ready-to-use SSL configuration directly from the topology wizard.
Fast ValidationDomain-level verification, website checking, and security-seal preparation can be completed quickly.
Enterprise-Level EncryptionSecure HTTPS communication helps protect application data and improves visitor confidence.
On this page

Built-In SSL Overview

Built-In SSL is enabled by default for all new environments. It can be disabled in the topology wizard when HTTPS through the platform wildcard certificate is not required.

Environment Created→Built-In SSL Enabled→Platform Domain Protected→Application Opens over HTTPS

Configure SSL for a New Environment

1Open the topology wizard

Sign in to the platform dashboard and click New Environment in the upper-left corner.

2Configure the environment

Select the required software stacks, resources, scaling limits, environment name, region, and other topology settings.

3Review the SSL option

The SSL configuration is available in the upper-left part of the topology wizard. Built-In SSL is enabled by default but can be switched off when it is not required.

4Create the environment

Click Create to start provisioning with the selected SSL configuration.

Change SSL for an Existing Environment

Built-In SSL can also be adjusted for an environment that has already been created.

1Open Change Environment Topology

Hover over the required environment in the dashboard and click Change Environment Topology.

2Update Built-In SSL

Enable or disable the SSL option in the topology wizard and apply the updated environment configuration.

Important Limitations

Public IP incompatibility: Built-In SSL is incompatible with a public IP address attached directly to the application servers.
  • The certificate is applied only to the environment-name domain provided by the platform.
  • For example, it protects an address such as my-project.domain.com.
  • It does not automatically secure a separately connected custom domain.
  • Use Custom SSL or Let’s Encrypt when a certificate is required for a custom domain.
  • Use a direct server-side SSL configuration when traffic must enter through a dedicated public IP.
Built-In SSL is designed for the platform-provided environment domain and traffic routed through the platform infrastructure.

Access the Environment over HTTPS

When the environment is opened from the dashboard, for example through Open in Browser, the connection is established automatically through HTTPS while Built-In SSL is enabled.

SSL disabled: When Built-In SSL is switched off, the automatically opened address may need to be changed manually from https:// to http:// before the application can be accessed.

What’s next?