Add SSL to Your Landing Pages add-ssl-to-your-landing-pages
SSL (Secure Socket Layer) encryption lets you make all of your Landing Pages for a Marketo Engage instance secure.
When you fill out a web form or visit a Landing Page that鈥檚 hosted by Marketo Engage, by default, the information is sent over non-secure protocol (HTTP). Per your company鈥檚 policy, you may want to secure the information submitted to Marketo over (HTTPS). For example, when you visit http://info.mydomain.com/
it will now be https://info.mydomain.com/
.
Marketo Engage tracks 鈥淰isited Web Page鈥 and 鈥淐lick Link on Web Page鈥 by default over non-secure HTTP protocol. If you want to have your tracking links secured with their own certificate, you need to have Marketo build a separate non-shared server to enable it. To secure all aspects of a contact鈥檚 interaction with you typically means securing both Landing Pages and tracking links.
Enable SSL certification enable-ssl-certification
Automatically add SSL for all the domain aliases you create as part of the Landing Page rules.
-
Go to the Admin area.
-
Select Landing Pages from the tree. In the Rules tab, click the New drop-down and select New Domain Alias.
-
Enter your Domain Alias and Default Page. Select the Generate SSL Certificate checkbox. Click Create when done.
This automatically adds an SSL certificate for this domain.
Enable SSL for your default domain enable-ssl-default-domain
Follow the steps below to enable SSL for your default domain.
-
Still in the Admin section, select Landing Pages. Click the orange Edit button next to Settings.
note note NOTE If desired, you can also modify the domain name here (valid domain required). -
Select the 鈥淕enerate SSL Certificate鈥 checkbox and click Save.
-
The SSL Certificate column in the listing shows certificate status for all the domain alias created after this feature was released (April 25, 2025). If you had the SSL enabled for a domain through Marketo Support, the certificate will continue to exist, but won鈥檛 show in the table. This table only reflects SSL certificates for domains added using the steps in this article.
-
It can take up to three minutes for the SSL to be in READY state. You must refresh the page for the changes to appear.
Error Messages error-messages
Below you鈥檒l find error messages you may receive along with their definitions.
Things to Note things-to-note
-
DNS mapping for domain to Marketo Engage: Before adding adding domains in the UI, you must map CNAMEs to a Marketo-provided domain.
-
Custom SSLs: If you need a custom SSL, please submit a . Do not use the self-service checkbox for SSL creation.
-
Pre-existing SSLs: While adding a domain, the system checks for pre-existing SSLs, which may have been manually created prior. If you encounter this validation, create your domain without selecting SSL creation, and we will connect them for you. more additional details/options.
-
First-time tracking domain: First-time creation of email tracking link domains will need manual intervention by . Subsequent subdomain creation under the same domain is allowed in the UI.
-
Adding certs to existing domains: Adding certs to existing domains is not supported at this time. For pre-existing domains, or for cases where you missed checking the SSL certificate box, you must reach out to to get the certificate added.
-
Deletion of domains: Deleting a domain does not automatically delete the SSL certificate at this time. This will be addressed in a future release.