Authenticated Origin Pulls setup on Plesk

Cloudflare sent the below message by email and I would like to know if anyone can advise on how to configure this on #plesk

Cloudflare has detected that your configuration is using our Authenticated Origin Pulls feature. Recently, we renewed the certificate that our edge network presents to your origin due to the upcoming expiration of the current certificate on January 11, 2020 .

To ensure uninterrupted service, you need to update your origin server to authenticate with the new authenticated origin pull certificate anytime before January 11, 2020 .

You can find the updated certificate and follow the instructions for updating popular origin servers in this Cloudflare Help Center article: https://support.cloudflare.com/hc/en-us/articles/204899617/

On Plesk, when adding SSL/TLS certificate, you get the below fields to fill:

Private key (.key) which is mandatory.
Certificate (
.crt) * which is mandatory.
CA certificate (*-ca.crt) which is not mandatory.

Where to add the origin-pull-ca.pem certificate to authenticate origin pulls? Also, if added, how to test if it is working?

A post was merged into an existing topic: Authenticated Origin Pulls feature