Skip navigation
Knowledge Base    SSL    Setup: Troubleshooting Symantec Encryption Everywhere SSL Setup

Troubleshooting Symantec Encryption Everywhere SSL Setup

Last Updated: Jan 21, 2022

Setting up your Symantec Encryption Everywhere SSL that came with the Advanced Security product on your domain can be a little tricky from time to time. Luckily, there are some tips to make the process much easier. 


First, make sure you are using our nameservers. 

  • The domain needs our nameservers to install and verify a TXT record so that the certificate may be issued.
  • You can use any nameservers you want after the SSL is issued. 


Next, make sure your CSR is valid. 

  • Please make sure you are generating your CSR for the bare domain but add the www subdomain under the Subject Alternative Name (SAN) field. 

  • Please also make sure you generate the Key size for 2048 rather than 4096.

    • The Symantec EE SSL does not support 4096 key sizes.


Finally, make sure there are no CNAME records on the bare domain. 

  • Some hosting providers recommend a CNAME record on the bare domain. Unfortunately, CNAME records will trump all other records on a bare domain. The TXT verification record that is required to set up the SSL needs to go on the bare domain and your CNAME record will cause the validation to fail. 
  • You can temporarily change your CNAME record to an ANAME record. Then change it back to a CNAME record after your SSL is setup. 


Can't find what you're looking for? Contact our support team now
Open a Support Ticket
Submit a request

Anytime 24/7

Live Chat

Live agent:  12am - 5pm MST every day
Live virtual bot:  5pm - 12am MST every day
Mountain Time, Denver, USA