---
schema_version: "1"
id: cf77223057f310913d081826a28ced4d011cde0a0ddb6dc9baec08d0d0d8a3de
title: Secure Domains for HTTPS
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/pardot_admin_tracker_domain_ssl_parent.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.pardot_admin_tracker_domain_ssl_parent.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 9e0f7ad6ff4a799a06824e95ed0b7de97a0d19019d4d8888cc7875b50e1055b7
description: Secure Sockets Layer (SSL) is a standard security protocol for establishing a secure HTTPS connection. If your business unit was created before February 15, 2021, you can automatically secure new tracker domains with an SSL certificate. You can also enable SSL certificates manually for individual domains. Business units created after February 15, 2021 automatically create SSL certificates for all tracker domains and the behavior can’t be changed.
products:
  - Marketing
  - Marketing Cloud Account Engagement
release: "264"
---
# Secure Domains for HTTPS

Secure Sockets Layer (SSL) is a standard security protocol for establishing a secure HTTPS connection. If your business unit was created before February 15, 2021, you can automatically secure new tracker domains with an SSL certificate. You can also enable SSL certificates manually for individual domains. Business units created after February 15, 2021 automatically create SSL certificates for all tracker domains and the behavior can’t be changed.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <span>All Account Engagement Editions</span></td></tr></tbody></table>

Secure Sockets Layer (SSL) is a standard security protocol for establishing an encrypted link between a web server and a web browser. All data exchanged between the browser and the server remains private and encrypted. This secure exchange requires an SSL certificate on the web server.

Account Engagement uses Let's Encrypt to configure SSL certificates for your tracker domain. If your domain currently uses certificate authority authorization (CAA) records, ask your IT team to add a CAA record for letsencrypt.org. If letsencrypt.org isn’t included, we can’t provision a certificate for your domain.

- **[Automatically Secure New Tracker Domains with SSL Certificates](https://help.salesforce.com/s/articleView?id=mktg.pardot_admin_tracker_domain_ssl_default.htm&release=264.0.0&type=5)**  
    To automatically secure all new tracker domains, enable SSL when you validate your domain. For business units created after February 15, 2021, this behavior is enabled by default and can’t be changed.
- **[Manually Enable SSL for Tracker Domains](https://help.salesforce.com/s/articleView?id=mktg.pardot_admin_tracker_domain_ssl_enable.htm&release=264.0.0&type=5)**  
    If your business unit was created before February 15, 2021, you can enable SSL for individual tracker domains to access content over HTTPS. Business units created after February 15, 2021 automatically enable SSL for all tracker domains.
- **[Change the Default Protocol for Tracker Domains](https://help.salesforce.com/s/articleView?id=mktg.pardot_admin_tracker_domain_default_https.htm&release=264.0.0&type=5)**  
    If your business unit was created before February 15, 2021, you can default tracker domains to use HTTP or HTTPS. We recommend securing all tracker domains by defaulting them to HTTPS. Business units created after February 15, 2021 default all tracker domains to HTTPS.