How to enable redirection from HTTP to HTTPS for a domain in Plesk?

Plesk for Windows kb: how-to Plesk for Linux ABT: Group B

Applicable to:

Plesk for Linux
Plesk for Windows

Question

How to make a website hosted in Plesk use a secure connection over HTTPS permanently?

Answer

Follow the steps below in order to enable the HTTP to HTTPS redirection for a website hosted in Plesk successfully:

Log into Plesk
Make sure that the website is accessible over HTTPS by covering the following requirements:
- The SSL/TLS support setting in Plesk > Domains > example.com > Hosting & DNS > Hosting is enabled
- An SSL certificate is installed and used on the domain
Afterwards, go to Domains > example.com > Hosting & DNS > Hosting
Enable the setting Redirect visitors from HTTP to HTTPS via a SEO friendly 301 redirect and select your certificate from the drop-down menu and press Save

Note: If the setting Redirect visitors from HTTP to HTTPS via a SEO friendly 301 redirect is grayed out for you, please contact your service provider for assistance with permanent HTTPS redirection.

After this has been done, redirection from HTTP to HTTPS will be happening automatically for your website.

Alternatively, if you cannot follow the steps above for some reason, you may achieve the same result by using one of the alternative solutions provided below:

Alternative solutions for Linux

Click on a section to expand

Enabling HTTPS redirection using additional Apache and nginx directives in Plesk (For Linux)

Log in to Plesk.
Go to Domains > example.com > Apache & nginx Settings.
Copy the following directives to the Additional directives for HTTP field:

Note: If you are a domain owner and Apache & nginx Settings is not available for you, please contact your service provider for assistance with permanent HTTPS redirection.

CONFIG_TEXT: <IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R,QSA]
</IfModule>
Copy the following directives to the Additional nginx directives field, if nginx is used:

CONFIG_TEXT: if ($ssl_protocol = "") {
rewrite ^/(.*) https://$server_name/$1 permanent;
}

Enabling HTTPS redirection via the .htaccess file (For Linux)

Note: This solution is applicable only if the website is processed by Apache.

Log in to Plesk.
Go to Domains > example.com > File Manager.
Open the .htaccess file, if available, or create a new one: click > Create File > type .htaccess in the File Name field > click OK. Once created, click on the file and paste the following content:

<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R,QSA]
</IfModule>
Click OK.

Alternative solutions for Windows Server

Click on a section to expand

Enabling HTTPS redirection via domain's web.config file (For Windows Server)

Log in to Plesk.
Go to Domains > example.com > File Manager and open the web.config file.
Paste the following content right before </system.webServer>:

Note: If the <rewrite>/<rules> sections already present in the web.config file, put the content below without tags <rewrite><rules>... </rules></rewrite> inside existing <rules> section.

CONFIG_TEXT: <rewrite>
<rules>
<rule name="HTTP to HTTPS redirect" stopProcessing="true">
<match url="(.*)" />
<conditions>
<add input="{HTTPS}" pattern="off" ignoreCase="true" />
</conditions>
<action type="Redirect" redirectType="Permanent" url="https://{HTTP_HOST}/{R:1}" />
</rule>
</rules>
</rewrite>

Click on the picture to enlarge

Enabling HTTPS redirection in IIS Manager (For Windows Server)

Connect to a Plesk server via RDP.
Start Internet Information Service (IIS) Manager at Windows Start > All Programs > (Windows) Administrative Tools.
In IIS Manager, expand SERVERNAME > Sites > click on a required site name > double-click URL Rewrite.

Note: If the URL Rewrite button is missing, install the component "IIS URL Rewrite Module" using this KB article.
Click Add rule(s)... on the right pane > under the Inbound rules select Blank rule and click OK:
Configure the new rule:
- Set the rule name in the field Name.
- Match URL section
  - Requested URL: Matches the Pattern
  - Using: Regular Expressions
  - Pattern: (.*)
- Conditions section
  Expand the Conditions section > click Add... and fill in the fields:
  - Condition input: {SERVER_PORT_SECURE}
  - Check if input string: Matches the Pattern
  - Pattern: ^0$
- Action section:
  - Action type: Redirect
  - Redirect URL: https://{HTTP_HOST}{REQUEST_URI}
  - Redirect type: Permanent (301)
- Click Apply on the right pane to save the rule.