Secure a Domain Using a Custom SSL Certificate

You can obtain an SSL certificate for Marketing Cloud Engagement from a certificate authority (CA). The CA that you use must allow you to use your own certificate signing request (CSR) rather than generate one for you. Image domains do not support customer-supplied certificates as the service is delivered from shared infrastructure using common certificates.

1. From Setup, in the Quick Find box, enter ssl, and then select Domain SSL Certificates.
2. Next to the domain that you want to secure, click the action arrow.
   1. To use a new certificate, select Secure This Domain.
   2. To update a certificate, select Renew Certificate.
3. On the Confirm Secure Domain Settings page, enter an admin email address and select Customer-Supplied Certificate.
4. On the Generate Certificate Signing Request (CSR) page, enter the registration details for your organization.
5. Confirm the registration details.
6. On the Download Your CSR page, click Download CSR.
7. Obtain an SSL certificate from your preferred CA. The process of obtaining the certificate varies depending on which CA you use.
   

   Important After you download the CSR, note the expiration date. You must obtain the certificate from your CA before the CSR expires.
8. On the Upload Certificate page, upload your certificate in .p7b or .pem format. If you’re using the .pem format, you must also upload a trust chain file in .pem format.
9. Confirm the domain certificate details.