Documentation forWeb Help Desk
Thinking of upgrading to the cloud? Learn more about migrating from Web Help Desk to Service Desk.

TLS certificate settings for SSL connections

The information on this page applies only to WHD 2026.2.1. For guidance related to other versions, see Web Help Desk Previous Version Documentation.

WHD 2026.2.1 uses TLS certificates in PEM format, managed by the Caddy HTTP server. This replaces the Java Keystore (.jks) used in previous versions. Certificate paths are configured in conf/whd.env using WHD_TLS_CERT and WHD_TLS_KEY. The default self-signed certificate is generated automatically during installation.

The following table lists the TLS certificate settings in conf/whd.env.

Setting Description
WHD_TLS_CERT=${WHD_HOME}/conf/cert.pem

Set WHD_TLS_CERT to the path of your certificate PEM file. The default self-signed certificate is generated during installation at {WHD_HOME}/conf/cert.pem. To use your own certificate, replace cert.pem and key.pem, or update these paths to point to your certificate files.
WHD_TLS_KEY=${WHD_HOME}/conf/key.pem

Set WHD_TLS_KEY to the path of your private key PEM file.

{WHD_HOME}/conf/key.pem (default private key path)
WHD_DOMAIN=localhost The hostname WHD should respond to. Caddy uses this for TLS Server Name Indication (SNI). Set to your server's fully qualified domain name (FQDN) or IP address. For Let's Encrypt automatic certificates, this must be a publicly resolvable domain name.