Custom SSL or LetsEncrypt SSL to allow https on custom domains in the customer portal
Hey all,
I am happy to announce Atera has introduced the support for custom urls with a secure HTTPs connection by generating CNAME records for the Customer Portal.
By completeing the process, your portal will be covered by unique certificates under the DigiCert umbrella.
Moreover, Atera will automatically renew the certificate for you so there is no need for anything on your end beyond the initial setup.
Feel free to read more about the feature here: https://support.atera.com/hc/en-us/articles/360000689808-Set-up-SSL-for-your-Customer-Portal
To enable the feature, reach out to your account manager or the customer success team via success@atera.com
All the best,
Yakov
-
Morphera's Tech Support commented
Seriously available only for Enterprise plan? We preach security to our customers and then we have a domain not covered by SSL with an insecure site warning? What a fool are we making? Certificates are free and their management is now completely automated. Make the feature available on all plans and listen to your customers.
-
Steve Stringham commented
This is a critical security item and a reflection of the clear misunderstanding of Atera's perspective on Security. What other areas are security corners being cut? SSL certificates are available for free and can be handled automatically by the service. Why would something this critical be hidden behind a paywall? A login page should be secured by SSL cert, even if the service is free. If they are that desperate for revenue, then charge $1/mo in order to have a SSL cert.
-
Jack Hill-Evans commented
Think this is poor not to include this in any other plans. SSL are free to create - we now have to provide our customer with a long URL instead of one that looks in line with our company.
-
Robert Folbigg commented
Why would this not be a basic feature on all price tiers? SSL is a basic security requirement... If you are not going to protect the portal with SSL then remove client portal as an option at all on the lower tiers... This is really a bit of a running joke now guys..
-
Konstantinos-Marios Papastamatis commented
Note: SSL for customized domains is only available for Enterprise and Superpower plan subscribers.
Seriously now ?????
-
HelpDesk Support commented
I can't believe Atera even thought about letting people using http in this day in age.
-
HelpDesk Support commented
Why in 2023 is Atera still want people to use HTTP? Would it be great if we could at least use our own SSL certificate.
-
Michael Dijk commented
Custom domains, currently only work through HTTP (which is a big no in 2023 imo). But, if you do set a custom domain, then, that domain can only be used, with HTTP and not HTTPs.
I presume this isn't an easy solution, but you could add a wildcard SSL cert, to cover these issues...
It would be good to have, as users could get a message, that the site isn't secure while using custom domains.
-
Keith Thornburn commented
Can't believe this hasn't been implemented yet. Either set up LetsEncrypt functionality or allow us to upload a custom SSL certificate. There is no way I will be allowing my clients to use a non-SSL portal. In fact, my DNS uses Cloudflare and won't allow non-SSL connections.
-
blackkadush commented
as an MSP provider, customers see this and tell why your portal won't use SSL. Why this is even a discussion? it has to be implemented!!
-
abigael abigael commented
Https for the customer portal
-
Ryan Foster commented
Under review since 2021?! This cannot be serious! If this keeps up, I may be led to self host my own PSA and RMM solution(s).
-
Carsten Lund commented
This needs to be addressed. We used Freshservice before Atera and having a custom support domain with ssl support is a must have. This looks bad for our company. Please fix this as soon as possible. Thanky you.
-
Danny Merkenhof commented
I would see use of this when we could use portal.mspdomain.com with SSL. Not so much with the customer domain. But maybe that is what was actually meant?
-
Konstantinos-Marios Papastamatis commented
Important for us also.
The time reports come to email mark as ''Confidential'' and link to check them is HTTP and not HTTPS is not showing good for business reputation.
Also customer login with mark ''Not Secure" in all browsers also not showing good for business reputation.Atera, this must fixed asap ! :)
-
Bram Dispa commented
Most of my clients actively block non-HTTPS websites. The non-branded URL looks unprofessional, so at the moment I'm sticking to an external solution. I'd rather have all my MSP elements in one place, so I'm looking forward to seeing this feature added soon. Let's Encrypt is just fine for this application.
-
MatthiasB commented
I've been using Atlassian JIRA / ServiceDesk a few years and they were not able to implement custom domains for more than 11 years:
https://jira.atlassian.com/browse/CLOUD-6999I am still new to Atera but you've already surprised me a few times with your quick development.
This is your turn to do it again :) -
Michael Cain commented
HTTPS on a login page is absolute must have.
-
Simon Holt commented
Desperately need this feature. Please implement ASAP. Thanks
-
Ryan Foster commented
With all the heightened awareness concerning cybersecurity, I think this needs to be investigated and implemented ASAP! HTTP should not even be an option for a platform such as this.