Follow this: https://documentation.cpanel.net/display/CKB/The+Let%27s+Encrypt+Plugin
The this for the icon in cpanel: https://premium.wpmudev.org/blog/free-ssl-https-cpanel/
Log into your SSH client at root level, then add the Let’s Encrypt repository with the following command:
cd /etc/yum.repos.d/ && wget https://letsencrypt-for-cpanel.com/static/letsencrypt.repo
Next, install the plugin for cPanel with line below and yum:
yum -y install letsencrypt-cpanel
yum -y install letsencrypt-cpanel Loaded plugins: fastestmirror, universal-hooks Loading mirror speeds from cached hostfile * EA4: 220.127.116.11 * cpanel-addons-production-feed: 18.104.22.168 * base: mirrors.usc.edu * extras: mirror.san.fastserv.com * updates: mirrors.xmission.com letsencrypt-cpanel | 2.9 kB 00:00:00 letsencrypt-cpanel/primary_db | 9.4 kB 00:00:00 Resolving Dependencies --> Running transaction check ---> Package letsencrypt-cpanel.x86_64 0:0.14.0-1 will be installed --> Finished Dependency Resolution Dependencies Resolved ====================================================================================================================================================== Package Arch Version Repository Size ====================================================================================================================================================== Installing: letsencrypt-cpanel x86_64 0.14.0-1 letsencrypt-cpanel 3.5 M Transaction Summary ====================================================================================================================================================== Install 1 Package Total download size: 3.5 M Installed size: 10 M Downloading packages: letsencrypt-cpanel-0.14.0-1.x86_64.rpm | 3.5 MB 00:00:00 Running transaction check Running transaction test Transaction test succeeded Running transaction *** By running this installer, you indicate that you have read the end-user licence agreement (https://cpanel.fleetssl.com/eula) and agree to all of its terms, as stated. *** Running installer as root OS version OK cPanel version OK No licence file detected at /etc/letsencrypt-cpanel.licence Fetching new trial licence ... Licence file present Redirecting to /bin/systemctl stop letsencrypt-cpanel.service Failed to stop letsencrypt-cpanel.service: Unit letsencrypt-cpanel.service not loaded. FleetSSL cPanel service daemon stopped Installing : letsencrypt-cpanel-0.14.0-1.x86_64 1/1 This server has self-signed service certificates It is not safe to operate this plugin in this circumstance 'insecure' is being added to /etc/letsencrypt-cpanel.conf If you wish to generate a Let's Encrypt cert for the server Please read the configuration documentation on our website, at https://cpanel.fleetssl.com/docs/service-certificates/ Config written to /etc/letsencrypt-cpanel.conf Uninstallation of existing service failed (it's OK) Installed init scripts. Copied plugin files OK Installing cPanel paper_lantern plugin (may take a minute) ... cPanel Plugin installer succeeded OK Installed chkservd scripts Added apache pre virtualhost global include Set cpanel tweak settings --- Installation complete --- The plugin should now be available in the cPanel feature manager Will rebuild conf and restart Apache to reload AutoSSL DCV URLs Rebuilding Apache conf and restarting now ... Built /etc/apache2/conf/httpd.conf OK Verifying : letsencrypt-cpanel-0.14.0-1.x86_64 1/1 Installed: letsencrypt-cpanel.x86_64 0:0.14.0-1 Complete!