---
schema_version: "1"
id: 3ae52e54cb8d668bfc1056140005b2471e7f74899b09e4abd49449af4ef19541
title: Secure a Domain with an SSL Certificate Supplied by Salesforce
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_overview_custom_domains.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_overview_custom_domains.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 762e55f81f16cff735f12248e576567c11737e7b82057b25c5e1f17babc14e0e
description: Secure a Sender Authentication Package (SAP) or CloudPages custom domain in Marketing Cloud Engagement using an SSL certificate provided by Salesforce.
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# Secure a Domain with an SSL Certificate Supplied by Salesforce

Secure a Sender Authentication Package (SAP) or CloudPages custom domain in Marketing Cloud Engagement using an SSL certificate provided by Salesforce.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_marketing_cloud_overview-264-0-0-production-enus/2555afdb-8049-4e3c-8043-0e04803e5f16/images/icon_note.png)

Note We automatically secure new SAP and CloudPages custom domains with a Salesforce-provided SSL certificate during the initial configuration process. If you choose to supply your own SSL certificate, secure the domains within 30 days. If your domains aren't secured after 30 days, we provision a Salesforce-provided certificate and use it to secure your domains. In this scenario, complete these steps to switch from the Salesforce-provided certificate to one that you provide.

Using the Domain SSL Certificates Setup page requires the Administration permission.

1. In Marketing Cloud Engagement Setup, in the Quick Find box, enter ssl, and then select **Domain SSL Certificates**.
2. Next to the domain that you want to secure, click the action arrow.
    1. To use a new certificate, select **Secure This Domain**.
    2. To update a certificate, select **Renew Certificate**.
    3. To switch to a certificate you supply on your own, select **Switch to Customer-Supplied**.
3. In the Confirm Secure Domain Settings page, enter an admin email address, and then click **Confirm**.

Return to the Domain SSL Certificates page later to view the status of the request. After the process of securing the domain completes, the value in the SSL status column changes to Secured. It can take up to 10 days to obtain and implement the security certificate.

#### See Also

- [Secure a Domain Using a Custom SSL Certificate](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_custom_domain_ssl_certificate.htm&release=264.0.0&type=5 "You can obtain an SSL certificate for Marketing Cloud Engagement from a certificate authority (CA). The CA that you use must let you use your own certificate signing request (CSR) rather than generate one for you. Image domains don’t support customer-supplied certificates, because the service is delivered from a shared infrastructure that uses common certificates. Salesforce uses DigiCert and Amazon as the certificate authorities.")