Secure Web Store

This topic applies to

Applies to

Commerce Web Stores | Elbrus | Kilimanjaro | Aconcagua



HTTPS is the industry standard for ecommerce services, and consumers prefer seeing the secure icon in their browser address bar. There are three types of secure HTTPS domain that you can set up for your web store:

  • Single Secure Domain for Shopping and Checkout — Including secure technology in your shopping area assures your customers that their activities on your site are safe. Also, search engines often rank secure sites higher than non-secure sites. Operating your web store shopping under a secure domain is one method for improving your search engine optimization (SEO). You can run your shopping and checkout under a single HTTPS domain. A single domain provides your customers with a seamless buying experience and removes the delays associated with shopping in one domain and moving to another for checkout.


    Single secure domains for shopping and checkout are not available in Site Builder.

  • Secure Shopping Domain — You can use an SSL certificate to secure the shopping portion of your web store under an HTTPS domain. You can do this for one or more secure shopping domains paired with a secure checkout domain. The secure checkout domain can be a default NetSuite checkout domain or a custom checkout domain


    Secure shopping domains are available for Site Builder (without Extensions) and Site Builder Extensions or Site Builder Extensions Premium (Elbrus and Kilimanjaro). If you have a different release of Site Builder, secure shopping domains may be available with a patch.

  • Custom Checkout Domain — A custom checkout domain lets you maintain your company branding throughout a user's web store experience, by using your company's website domain in the checkout URL. Your custom checkout domain is also visible when customers visit the My Account page in your web store.


    The default checkout domain associated with a Netsuite web store ( and the unbranded NetSuite checkout subdomains (such as are provided as secure domains. You do not need to obtain or add a certificate in order to use them. See NetSuite Checkout Subdomains for more information on unbranded checkout subdomains.

  • Secure Hosted Web Page – A hosted web page domain points to a page hosted in your NetSuite File Cabinet. Hosted web page domains are not associated with a Web Site Setup record and do not offer the web store functionality, such as checkout. However, they can be used for any kind of static website, for example, a promotional website. You can choose to set up a hosted web page domain as secure or non-secure. For information about setting up a non-secure hosted web page, see Supplementary Domains.

To set up a secure domain, you must first purchase and upload SSL certificates. See Overview of SSL Encryption and Prerequisites for Setting Up Secure Domains for more information. If you use SSL certificates in your web store, you are responsible for maintaining them. For more information, see Maintenance of Secure Domains.

You can switch an existing non-secure shopping domain to a secure shopping domain. You can also upgrade a secure shopping domain to a single secure domain for shopping and checkout. See Upgrade a Shopping Domain to a Secure Domain for more information.

To set up a web store with a secure domain:

  1. Complete the prerequisite tasks for setting up secure domains as described in Prerequisites for Setting Up Secure Domains.

  2. Go to Setup > SuiteCommerce Advanced > Domains.


    You can also open the domains list or add a new domain from the Web Site Setup record.

  3. Click New.

  4. Select the Protocol type: Secure Domain.

  5. Depending on the type of domain you are setting up, select one of the following options from the Hosted As list:

    • Single Domain Web Store and Checkout — for a single secure domain for shopping and checkout

    • Secure Web Store — for a secure shopping domain

    • Checkout — for a custom checkout domain

    • Secure Hosted Web Page – for a secure hosted web page

  6. In Web Site, select the website for the domain name. This step is not applicable for secure hosted web page domains.


    Since the Domain Name for a Secure Domain is generated from the certificate, the Domain Name field is dimmed for Secure Domains.

  7. Select the CDN box to enable caching of your Commerce web store assets on the Content Delivery Network (CDN). This optimizes your website and decrease page-loading time.

    Prior to choosing CDN for checkout, you should review the information about prerequisites, caching, and IP address ranges in CDN for Secure Domains. For more information, see CDN Caching and Configure CDN Caching.


    CDN is not available for Site Builder or for secure hosted web page domains.

  8. For HTML Hosting Root, select Live Hosting Files.

    You can select Hosting Root folders other than Live Hosting Files. For example, if you are setting up a domain for a test site, select Staging. For information about:

  9. (Optional) If you are setting up a hosted web page domain, choose the Home Page file from your File Cabinet that the domain name should point to.

    This step is not applicable if you have selected Single Domain Web Store and Checkout, Secure Web Store or Checkout in Hosted As.

  10. (Optional) Select a Site Maintenance Domain. For more information about setting up a custom site maintenance page and domain, see Custom Site Maintenance Page.

    This step is not applicable if you have selected Checkout in Hosted As.

  11. (Optional) For Not-Found Page, select the optional hosted page where customers are directed if they navigate to an inactive page. By default, customers are redirected to your home page.

    Begin by entering the page name and then press Tab or click the down arrow for a list.

The basic setup is now complete. The next step is to add certificates. If you do not have certificates available, see Prerequisites for Setting Up Secure Domains


Do not delete (disable) an existing certificate until the new domain certificate deploys. Otherwise you may have an interruption in service.

To add certificate files:

  1. Select the Certificate SSL certificate file (.crt) that you uploaded to the File Cabinet to use with the secure domain.

    Click the upload option next to the list if you need to upload a new certificate now. See Upload your Certificate Files for details.


    The certificate files are not validated or verified when they are uploaded to the file cabinet. You can upload files with any extension to the file cabinet. However, the only files you can select when setting up your domains are certificate files with the following extensions: .cer, .cert, .crt, or .pem. Files with extensions such as .pfx or .p12 do not work.

  2. Select the CA Certificate. This is the intermediate certificate file (_ca.crt).

    After you select the appropriate certificate and CA certificate files, the Certificate Information field displays the secure domain name and the dates for which the SSL certificates are valid.

  3. Enter the Key Password associated with your certificate key.

    Key Password has a limit of 2,000 characters.

  4. Enter the Certificate Key by copying data from the .key file and pasting into this field.

    Your encrypted key is not exposed online when you return to the Domains Setup record.

Your certificate file is now associated with your domain. The next step is to deploy your domain.

To deploy your domain:

  1. Click Save.

    Typical deployments go live in about 10 minutes. If you have chosen to have data cached on CDN, deployments can take up to 45 minutes to go live. You can track progress using the Deployment Status, which changes automatically as the deployment and DNS propagation proceeds. Each status is prefixed with the deployment type: NetSuite Hosting or CDN.

    The possible Deployment Status values are:

    • Live – Deployment successful, all processes complete.

    • Deployment in progress – DNS propagation underway.

    • Removing – DNS switched to new provider, old provider being removed.

    • Failed – Deployment failed.

  2. Visit your domain provider's website to complete the task of setting up a CNAME record. For more information, see Link your Domain Name with your NetSuite Domain.

After you enter your domain name in NetSuite and configure DNS with your domain provider, your domain name begins redirecting to your website. The time it takes for your Commerce web store to go live on your domain depends on your domain provider. Typically, redirection takes place from 2 – 48 hours after completing the setup.