۶Ƶ

DocumentationMarketo EngageMarketo Guide

Add SSL to Your Landing Pages add-ssl-to-your-landing-pages

Last update: Fri Aug 01 2025 00:00:00 GMT+0000 (Coordinated Universal Time)

SSL (Secure Socket Layer) encryption lets you make all of your Landing Pages for a Marketo Engage instance secure.

When you fill out a web form or visit a Landing Page that’s hosted by Marketo Engage, by default, the information is sent over non-secure protocol (HTTP). Per your company’s policy, you may want to secure the information submitted to Marketo over (HTTPS). For example, when you visit http://info.mydomain.com/ it will now be https://info.mydomain.com/.

Marketo Engage tracks “Visited Web Page” and “Click Link on Web Page” by default over non-secure HTTP protocol. If you want to have your tracking links secured with their own certificate, you need to have Marketo build a separate non-shared server to enable it. To secure all aspects of a contact’s interaction with you typically means securing both Landing Pages and tracking links.

IMPORTANT
Before adding an SSL, be sure to check your contract for the total number of domains you’re permitted to add. Otherwise, you may incur a fee. If you cannot find the information, please reach out to the ۶Ƶ Account Team (your account manager) for details.

Enable SSL certification enable-ssl-certification

Automatically add SSL for all the domain aliases you create as part of the Landing Page rules.

  1. Go to the Admin area.

  2. Select Landing Pages from the tree. In the Rules tab, click the New drop-down and select New Domain Alias.

  3. Enter your Domain Alias and Default Page. Select the Generate SSL Certificate checkbox. Click Create when done.

This automatically adds an SSL certificate for this domain.

Enable SSL for your default domain enable-ssl-default-domain

Follow the steps below to enable SSL for your default domain.

  1. Still in the Admin section, select Landing Pages. Click the orange Edit button next to Settings.

    {width="800" modal="regular"}

    note note
    NOTE
    If desired, you can also modify the domain name here (valid domain required).

  2. Select the “Generate SSL Certificate” checkbox and click Save.

NOTE

  • The SSL Certificate column in the listing shows certificate status for all the domain alias created after this feature was released (April 25, 2025). If you had the SSL enabled for a domain through Marketo Support, the certificate will continue to exist, but won’t show in the table. This table only reflects SSL certificates for domains added using the steps in this article.

  • It can take up to three minutes for the SSL to be in READY state. You must refresh the page for the changes to appear.

Error Messages error-messages

Below you’ll find error messages you may receive along with their definitions.

Error
Details
Unexpected error encountered while creating a domain. Please contact Support for assistance.
An unexpected error has occurred. Please gather logs and error details, and escalate the issue to .
The default domain was not found. Please contact Support for assistance.
There was an issue when trying to locate the default domain. Please reach out to Support so they can investigate.
SSL certificate has already been issued.
An SSL certificate already exists for this custom domain. No further action is needed unless the certificate has expired or needs to be reissued.
Domain is not mapped to the default domain.
The custom domain is not correctly mapped to the default domain. Please verify the domain mapping settings and ensure the DNS configuration points to the correct default domain.
Domain already exists.
A domain with same name already exists.

Things to Note things-to-note

  • DNS mapping for domain to Marketo Engage: Before adding adding domains in the UI, you must map CNAMEs to a Marketo-provided domain.

  • Custom SSLs: If you need a custom SSL, please submit a . Do not use the self-service checkbox for SSL creation.

  • Pre-existing SSLs: While adding a domain, the system checks for pre-existing SSLs, which may have been manually created prior. If you encounter this validation, create your domain without selecting SSL creation, and we will connect them for you. more additional details/options.

  • Adding certs to existing domains: Adding certs to existing domains is not supported at this time. For pre-existing domains, or for cases where you missed checking the SSL certificate box, you must reach out to to get the certificate added.

  • Deletion of domains: Deleting a domain automatically deletes the SSL certificate.

recommendation-more-help
94ec3174-1d6c-4f51-822d-5424bedeecac