Skip to main content

Impediment: COMPLETELY_EXCLUDED

Mario Franco

When trying to run AutoSSL most of them are starting to fail with the following error:
Impediment: COMPLETELY_EXCLUDED

These are brand new cPanel users, and the exclusion button in the SSL/TLS Status no longer appears so the user wasn't the one who enabled the exclusion. Also due to the the lack of this button, we need to remove the exclusion from cmd for each cPanel user. 

This started this week (april 20th, 2026), do you know what happened?

Comments

8 comments

Date Votes
  • cPRex Jurassic Moderator

    Hey there!  New cPanel accounts are now excluded from AutoSSL by default.  You'll need to do the following to get those reactivated:

    *create /var/cpanel/panel.ini with the following configuration option to get that setting reactivated:

    [global]
autossl.exclude_new_domains = true
    0
  • Pierre Grandmaison

    I thought I was going crazy! Why did cPanel implement this change? I don't see how that makes any sense.

    Why would we want to disable autossl by default? Another cPanel update without published information about such a major change, and no way to enable or disable this default in WHM?

    I cannot state how frustrating the experience has been lately with these changes and how much time is wasted debugging these changes.

    1
  • Mario Franco

    I agree. This configuration in "/var/cpanel/panel.ini" has helped me:

    [global]
    ssl.autossl_in_unified = true
    autossl.exclude_new_domains = false

    This will include all new domains in autossl and will bring back the "Include" button in the SSL Status in cPanel. But it needs to be added manually in all your servers. More info at:
    https://support.cpanel.net/hc/en-us/articles/39104507734039-AutoSSL-certificates-are-not-installed-automatically-on-new-domains

    2
  • Pierre Grandmaison

    thank you for this Mario

    1
  • technik

    I just ran into this problem with a newly created account and added the above config into the ini file, but it still did not work.

    I had to change into the user's cpanel and had to do it there, because in "Manage AutoSSL" I kept getting the COMPLETELY_EXCLUDED error.

    Having said that, I'm sure it will be very confusing for users, because I was getting bombed with error messages for non-existing subdomains (DNS is managed externally).

     

    1
  • WorkinOnIt
    • Edited

    I'm guessing this is cPanel trying to sell their own SSL solution rather than allowing you to use Let's Encrypt?

    Good to know however, I'm slowly moving to web min because cP no longer supports Rocky which I'm sad about  

    0
  • Carles Bou

    This is easily one of the stupidest moves cPanel has made lately. Who thought it was a good idea to break a core feature just to create friction? It feels like a blatant attempt to make free SSLs a headache so people give up and buy them.

    0
  • Alex Sukhov

    This solution not helped. cPanel, how I can issue SSL for 12 my domains?!  

    [global]
    ssl.autossl_in_unified = true
    autossl.exclude_new_domains = false
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post