UKC
SSL Frequently Asked Questions (FAQ)
What you need to know about SSL
Q: What is SSL?
A: Secure Sockets Layer (SSL) is a protocol for enabling data encryption on the Internet and for helping web site users confirm the owner of the web site. SSL is most commonly used to protect communications between web browsers and servers. However, it is increasingly used for server to server communications and for web-based applications.
Q: How long does enrolment take?
A: An SSL certificate may be issued within minutes of submitting your enrolment information as long as the information is correct and the authorised administrator responds promptly to the confirmation email. RapidSSL® Certificates and RapidSSL® Wildcard both use an authentication process to verify domain control validation.
Q: What is domain control validation?
A: RapidSSL will confirm domain control by sending an email to the administrator listed with the registrar for the domain. If the authorised administrator does not reply, a second email will be sent to an email address at the domain such as info@ or support@. We do this for you.
Q: What is encryption and why are there different levels?
A: Encryption is a mathematical process of coding and decoding information. The number of bits (40-bit, 56-bit, 128-bit, 256-bit) tells you the size of the key. Like a longer password, a larger key has more possible combinations.
When an encrypted session is established, the encryption level is determined by the capability of the web browser, SSL certificate, web server, and client computer operating system.
Q: How do web site visitors know if a web site is using SSL?
A: When a browser connects to a secure site it retrieves the site’s SSL certificate and checks that it has not expired, that it has been issued by a Certificate Authority the browser trusts and that it is being used by the web site for which it has been issued.
If it fails on any one of these checks the browser will display a warning to the end user. If it succeeds, several security indicators are built into modern browsers to indicate that SSL is enabled.
- The beginning of the URL or web address changes from http:// to https://
- A padlock on the browser window changes from open to closed
- The address bar will turn green and display the name of the web site owner when connecting to a web site protected by an Extended Validation SSL certificate.
In addition, a trust mark such as the RapidSSL site seal may be added to web pages on a secure site.
Q: What does browser recognition mean?
A: When a browser or operating system encounters an SSL certificate, it checks to make sure that the certificate is valid and trusted. An SSL certificate is trusted if it is signed by a “trusted” or pre-installed root certificate. If a browser that does not contain the root CA certificate used to issue the SSL certificate, a security warning will alert them.
Q: What is a certificate signing request or CSR?
A: A CSR is a public key that you generate on your server according to your server software instructions. (If you do not have access to your server, your web host or Internet service provider will generate it for you.) The CSR is required during the SSL certificate enrolment process because it validates the specific information about your web server and your organisation.
Q: What is a public/private key pair?
A: SSL uses unique cryptographic key pairs: each key pair consists of a secret private key and a related public key. Information encrypted with a public key can only be decrypted with the corresponding private key, and vice-versa.
Q: How do I obtain the RapidSSL Site Seal?
You must obtain the site seal directly from RapidSSL and follow the instructions given. Claim your RapidSSL Site Seal.
How to: Transfer your Web Site to UKC
Transferring your Web Site to UKC without Downtime
Moving your site from an old host to a new host might sound complicated but it is actually very easy.
Our technicians are moving all types of sites (self built, WordPress, Joomla, shopping carts) on a daily basis. Leave the complexity to us.
We will help you transfer your web site, data and mysql databases to our hosting service and minimise (if not eliminate) the need for any downtime whatsoever.
Here are the steps to follow:
- Order your new hosting plan from UKC. Do not cancel your old hosting plan (yet).
- Is your old host using Plesk? If so, all you need do is run a full backup in Plesk Backup Manager and provide us with the backup file. We can restore from here.
- You will now have access to two hosting accounts.
What we need from you
In order for us to successfully transfer your website, we need the following:
- A backup of your hosting account run from your old host (if you have one)
- The panel login details of your old hosting plan
- The FTP details of your old hosting plan
- If you have SSH with the old host, then these details can also help
From here we can take care of the transfer of all of your site data and databases.
Going live without downtime
We will transfer all of your web site, data and mysql databases before the “going live” date which we will agree with you beforehand.
Once we go live, the switch will simply be a name server change on your domain name. At this point, your web site will now be live using a UKC hosting plan. Once you are happy with the operations of your new site you can then proceed to cancel your old hosting plan.
If you have any questions now (or along the way) simply contact the Helpdesk who are there to help.
Emails sent to me are being returned as SPAM. Can I stop this?
Email blocking problems
Occasionally, someone who has sent you an email may receive a message saying that a mail they sent you hasn’t been delivered. The email they sent has been blocked, and the full message is:
senderdomain.com 12.34.56.78 is listed at bl.spamcop.net. Contact tech support enclosing a copy of this error message on email address.
The message will contain a full email address in place of email address. There may also be another address in place of bl.spamcop.net.
Only the sender will receive the message. You will not receive notification that an email to you has been blocked and you will be able to send and receive other messages as normal.
The message is part of our effort to block spam sent to email addresses hosted at UKC.
We check the IP address of the server each email has been sent from against several lists of addresses, one of which is maintained by bl.spamcop.net. If the IP address is on any of these lists then we block the email.
Although this stops lots of spam getting through, it does mean legitimate messages occasionally get blocked too. If this is happening to someone trying to send you email, it’s easy for them to stop it occurring in the future.
How to fix it
The person who sent you the email should forward the message they received to the address shown in it. We’ll put the relevant IP address onto our list of allowed addresses, so future mails from that person come through to your inbox.
If the message mentions spamcop.net, they can also enter the IP address in the message (e.g. 12.34.56.78) into the Lookup IP box at Spamcop.net. This will remove the IP address from their list and should ensure that other email providers using the list stop blocking messages from that person.
Priority Server Upgrade: MICROLITE10
Scheduled for weekend 12/13 September 2015
We are pleased to announce that MICROLITE10 is being upgraded to our new UKC Super Server high performance hardware range this coming weekend. We are rolling this new model out across the entire range during the latter half of 2015.
During the weekend 12/13 September, we will be migrating all client data from the current hardware (5.77.60.40) to completely new hardware (5.77.36.144).
There will be no downtime for your web sites or email services. We will switch the new server into production only after it has passed our comprehensive data migration and validation testing.
Notice: Please refrain from making significant changes to your web site during this period. The migration of the data will take many hours. We request that you put off any changes until the upgrade is complete to avoid an inconsistent transfer of your site and data.
Thank you for your patience,
UPDATE: Monday 06:30
The migration of all MICROLITE10 accounts to UKC06 Super Server is complete.
UKC06 has fully “absorbed” MICROLITE10. The new Plesk URL and name servers for MICROLITE10 accounts are:
Plesk Panel: https://ukc06.uk:8443 (replaces https://www.microlite10.com:8443)
Name servers:
- ns.ukc06.uk (replaces ns.microlite10.com)
- ns2.ukc06.uk (replaces ns2.microlite10.com)
Please note the following:
- The old Plesk server name MICROLITE10.COM and old name servers ns.microlite10.com and ns2.microlite10.com will continue to function as normal.
- There is no urgent need to change all the name servers on your domain names however we recommend using the new name servers for good housekeeping purposes.
- Using the old MICROLITE10 Plesk URL may give a security error in your browser which you can safely ignore.
- The server IP address has changed from 5.77.60.40 to 5.77.36.144
- If you have any problems, we can remigrate you account from the old server again upon request. Simply log a ticket and ask for a re-migration of your account from MICROLITE10 with your domain name. Your account as it stood at 06:30 Monday will be re-migrated.
We hope you enjoy the enhanced performance and security of your new UKC Super Server!