If your website already has a valid SSL certificate, it is a good practice to force all visitors to use a secure HTTPS connection. This ensures that even if someone enters an HTTP address, they are automatically redirected to the encrypted version of the site.
This guide explains how to enable an automatic HTTP to HTTPS redirect using the Plesk control panel.
Plesk can be installed on servers where you have administrative access, which is common on setups using Plesk hosting.
Before You Continue
Make sure that:
- A valid and working SSL certificate is already installed for the domain
- The domain is accessible over HTTPS without errors
This configuration is typically used on managed environments as well as VPS or server-level deployments such as cloud servers.
Enabling HTTPS Redirection in Plesk
Step 1: Open Hosting Settings
Log in to the Plesk control panel. From the left sidebar, click Websites & Domains.
Locate the domain you want to configure and click Hosting Settings.
[Screenshot: Websites & Domains list with Hosting Settings highlighted]
Step 2: Enable SSL and redirect options
Scroll to the Security section of the Hosting Settings page.
Enable the following options:
- SSL/TLS support
- Permanent SEO-safe 301 redirect from HTTP to HTTPS
[Screenshot: Security section showing SSL/TLS support and 301 redirect options]
From the certificate selection list, choose the SSL certificate assigned to the domain.
Step 3: Save the configuration
Click OK to apply the changes.
Once saved, all incoming HTTP requests will be permanently redirected to HTTPS.
Verifying the Redirect
Open a web browser and manually enter the website address using http://. The browser should automatically redirect to the secure https:// version.
If the redirect does not work as expected, confirm that the SSL certificate is valid and assigned to the correct domain.
Practical Notes
- A 301 redirect helps search engines understand that HTTPS is the preferred version of the site
- Redirecting all traffic to HTTPS improves security and user trust
- Avoid enabling HTTPS redirects before an SSL certificate is fully installed
This setup is commonly used on production websites hosted on dedicated server environments where consistent security and SEO behavior are required.