Transfer a TLS Certificate with cPanel or WHM Securely

Moving a certificate requires its matching private key and any required intermediate chain, not just copying a .crt file. Decide first whether reissuing on the destination is safer than transferring a reusable private key.

Check scope and authorization

This is a self-managed certificate-transfer procedure for authorized administrators, not an offer of server migration service. InterServer web-hosting migrations are limited to cPanel-to-cPanel and DirectAdmin-to-DirectAdmin on web hosting plans; VPS and dedicated-server migrations are not offered.

Confirm the names, destination, expiry, issuer terms and whether the private key is exportable. For a panel-managed account move, check what the supported account restore actually includes before manually copying or replacing its certificate settings.

Transfer privately

1. Keep the working source configuration and a protected recovery copy until cutover is verified.
2. Use the trusted cPanel/WHM certificate tools, such as SSL Storage Manager where authorized, to identify the exact certificate and matching key. Private keys can have different PEM headers; do not assume only RSA-format text is valid.
3. Use an authenticated encrypted transfer route and owner-restricted storage outside the public document root. Do not leave keys in shared notes, clipboard-sync tools or public backup URLs.
4. On the destination, install the certificate, matching key and required chain for the intended site. Inspect autofilled values rather than assuming a domain match proves key correspondence.

Verify before switching traffic

Check the destination with the correct hostname/SNI while preserving certificate validation. Verify the leaf certificate, names, chain and application behavior before DNS cutover. Review any CDN and separate mail/panel services; the website certificate does not necessarily configure them.

Assign renewal ownership on the destination and retire temporary transfer copies according to your secure retention policy. If a key was exposed, copying it again does not repair that exposure; arrange reissuance and appropriate revocation with the issuer.

References: WHM certificate storage; cPanel certificate installation.

Reviewed October 15, 2026. No customer private key, account or server was transferred.