Built-In SSL

Built-In SSL Certificates

The platform provides a built-in wildcard SSL certificate for quickly securing an environment without manually purchasing, uploading, or configuring a separate certificate. It is enabled by default and automatically protects the platform-generated environment domain.

Overview

The built-in wildcard certificate may appear in the dashboard under the hosting provider’s SSL name. It offers a fast way to establish an encrypted HTTPS connection for applications that use the environment’s default platform domain.

Enabled by default

Built-in SSL is enabled automatically for all environments. It can be disabled manually in the topology wizard when it is not required.

Built-In SSL Benefits

Convenient management Enable or disable the configured SSL option directly from the topology wizard with a single control.
Fast validation Domain-level validation and certificate activation are completed automatically within a short period.
Encrypted communication The certificate protects data exchanged between the visitor’s browser and the hosted application.
No manual certificate setup No separate certificate files, private keys, or certificate-chain configuration are required for the default environment domain.

Configure SSL for a New Environment

1

Sign in to the platform dashboard.

2

Click New Environment in the upper-left area of the dashboard to open the topology wizard.

New Environment button in the platform dashboard
Click New Environment to open the environment topology wizard.
3

Select the required application stack and configure the environment topology.

4

Locate the SSL control in the upper-left part of the topology wizard.

The built-in SSL option is enabled by default. Click the control only when you need to disable it.

Built-in SSL option in the environment topology wizard
The built-in SSL control is available in the upper-left section of the topology wizard.
5

Complete the remaining environment configuration and click Create to start the installation.

Configure SSL for an Existing Environment

The same built-in SSL option can be adjusted after an environment has already been created.

1

Locate the required environment in the dashboard.

2

Hover over the environment and click Change Environment Topology.

3

Enable or disable the built-in SSL option from the upper-left area of the topology wizard.

4

Apply the topology changes to update the environment configuration.

Important Compatibility Notes

!

Public IP incompatibility

Built-in SSL cannot be used with a Public IP address attached directly to the environment servers.

!

Default environment domain only

The certificate applies only to the platform-generated environment domain, for example my-project.platform-domain.com. It does not automatically secure a separately connected custom domain.

Use Custom SSL or Let’s Encrypt when a custom domain needs its own trusted certificate.

Access the Environment over HTTPS

When built-in SSL is enabled, opening the application from the dashboard establishes the connection automatically through the secure HTTPS protocol.

1

Locate the environment in the dashboard.

2

Click Open in Browser.

3

The platform opens the environment URL using HTTPS.

!

When built-in SSL is disabled

The dashboard may still open an HTTPS URL. In this case, manually change the address from https:// to http:// to access the application.

Expected result

The application is available through an encrypted HTTPS connection on its default environment domain without any manual certificate installation.