> ## Documentation Index
> Fetch the complete documentation index at: https://support.getskara.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Setting up SSL for click tracking

### Overview

Salesmate supports SSL-enabled click and open tracking. This feature is enabled automatically if you are using a shared IP address or have a non-authenticated domain. To enable SSL click and open tracking for an authenticated domain, additional configuration for SSL keys is required.

### Configuring SSL Certificates and Keys

In order for click and open tracking to work over SSL, Salesmate needs to present a valid certificate that will be trusted by the email recipient's browser. For authenticated domains, Salesmate is not able to request and/or manage certificates, as it is not the record owner for the domain.To work around this restriction, you may use a CDN service, such as
[CloudFlare](#using-cloudflare)
,
[Fastly](#using-fastly)
, or
[KeyCDN](#using-keycdn)
to manage certificates and keys for your domain.

### Using CloudFlare

The following instructions assume you already have a CloudFlare account made, using either a
[Full DNS setup](https://support.cloudflare.com/hc/en-us/articles/205195708)
or a
[CNAME setup](https://support.cloudflare.com/hc/en-us/articles/200168706)
. You can compare the 2 different setups
[here](https://support.cloudflare.com/hc/en-us/articles/203685674)
. Note that a CNAME setup is only available to Business or Enterprise level CloudFlare plans.The instructions also assume that you have set up a valid
[custom tracking domain (branded link)](https://support.salesmate.io/hc/en-us/articles/360055782311)
on your account. This step is essential for the following instructions to work.

Begin by logging into your CloudFlare account, and navigating to the DNS settings for your domain.

<img src="https://mintcdn.com/salesmate/CBQ05yQ_amcnmLIN/emails/email-delivery/images/cloudflare1.png?fit=max&auto=format&n=CBQ05yQ_amcnmLIN&q=85&s=2986204d2ffb45ebe36fba411d18c2a4" alt="cloudflare1.png" width="974" height="159" data-path="emails/email-delivery/images/cloudflare1.png" />

Add a new CNAME entry that points your configured branded link domain to salesmatemail.com.

<img src="https://mintcdn.com/salesmate/CBQ05yQ_amcnmLIN/emails/email-delivery/images/cloudflare2.png?fit=max&auto=format&n=CBQ05yQ_amcnmLIN&q=85&s=78cafa63e6fc4aaeb614d04234bc2e76" alt="cloudflare2.png" width="950" height="108" data-path="emails/email-delivery/images/cloudflare2.png" />

Once the record is created, click on the cloud icon under the Status column to turn it orange and enable HTTP proxy.

<img src="https://mintcdn.com/salesmate/CBQ05yQ_amcnmLIN/emails/email-delivery/images/cloudflare3.png?fit=max&auto=format&n=CBQ05yQ_amcnmLIN&q=85&s=c55b6f363d0c3bf4f27a1e031b882a23" alt="cloudflare3.png" width="965" height="116" data-path="emails/email-delivery/images/cloudflare3.png" />

Next, navigate to the Page Rules settings for your domain. You will need to create a Page Rule for your branded link domain that sets SSL to Full. This is necessary due to how
[CloudFlare validates the certificate on the origin](https://support.cloudflare.com/hc/en-us/articles/200721975)
. You can find more information on the different SSL options
[here](https://support.cloudflare.com/hc/en-us/articles/200170416)
.

<img src="https://mintcdn.com/salesmate/CBQ05yQ_amcnmLIN/emails/email-delivery/images/cloudflare4.png?fit=max&auto=format&n=CBQ05yQ_amcnmLIN&q=85&s=a5cedecac419dfd0afe9c5c43eaa9bac" alt="cloudflare4.png" width="781" height="376" data-path="emails/email-delivery/images/cloudflare4.png" />

Ensure that the Page Rule is On.

<img src="https://mintcdn.com/salesmate/CBQ05yQ_amcnmLIN/emails/email-delivery/images/cloudflare5.png?fit=max&auto=format&n=CBQ05yQ_amcnmLIN&q=85&s=6d3e455a2d05cf3be335b8b22f032821" alt="cloudflare5.png" width="967" height="126" data-path="emails/email-delivery/images/cloudflare5.png" />

If you are using a CNAME setup, you will also need to change DNS to point to the CloudFlare CNAME you created.Once all of this is done, you will need to contact support on chat or email to [support@salesmate.io](mailto:support@salesmate.io) and request that SSL click and open tracking be enabled on your account. They will then verify the configuration and enable the setting on your account.

### Using Fastly

* [Sign up for Fastly](https://www.fastly.com/signup/)
  or
  [log in](https://manage.fastly.com/)
  to an existing account.Click **Configure** on the Dashboard.Click the gear icon to open the **Manage Service** menu and click **Create**.

Set the options as follows:- **Server address and port:** `salesmatemail.com` : `443` *The connection on the SSL port 443*

* **Domain:** `lt.example.com` *Enter your custom tracking domain here. Ensure it matches the domain configured in the Custom tracking domain settings. This value will be what recipients see in your SSL enabled click tracking links.*
* **Description:** `Salesmate` (or whatever you like)Finally, click the **Create**. The new service will appear in the list of available services.Contact Salesmate support to validate your CDN settings and enable SSL click and open tracking.For more information, please visit [Fastly's documentation](https://docs.fastly.com/guides/basic-setup/working-with-services#creating-a-new-service).

### Using KeyCDN

This section is maintained by KeyCDN, if you have any questions about KeyCDN please
[contact their support](https://www.keycdn.com/support/)
team.
[Sign up for KeyCDN](https://app.keycdn.com/signup)
or login to your existing account.Create a pull zone and point the origin URL to
[https://salesmatemail.com](https://salesmatemail.com/)

<img src="https://mintcdn.com/salesmate/CBQ05yQ_amcnmLIN/emails/email-delivery/images/keycdn1.png?fit=max&auto=format&n=CBQ05yQ_amcnmLIN&q=85&s=416da5f5b3e1f8c8a752f0dd48a02724" alt="keycdn1.png" width="681" height="545" data-path="emails/email-delivery/images/keycdn1.png" />

Enable SSL and HTTP/2 (custom SSL or Let's Encrypt).

<img src="https://mintcdn.com/salesmate/CBQ05yQ_amcnmLIN/emails/email-delivery/images/keycdn2.png?fit=max&auto=format&n=CBQ05yQ_amcnmLIN&q=85&s=2424de473f1fb1f2a9459473f2d17c54" alt="keycdn2.png" width="675" height="394" data-path="emails/email-delivery/images/keycdn2.png" />

Enable the option "Forward Host Header."

<img src="https://mintcdn.com/salesmate/CBQ05yQ_amcnmLIN/emails/email-delivery/images/keycdn3.png?fit=max&auto=format&n=CBQ05yQ_amcnmLIN&q=85&s=801cd7c3bfab576da5fd318dd95188a8" alt="keycdn3.png" width="672" height="225" data-path="emails/email-delivery/images/keycdn3.png" />

Create a CNAME record in your DNS settings pointing the alias you want to use for your custom tracking domain (e.g. lt.domain.com) to the Zone URL provided within your KeyCDN dashboard (e.g. salesmate-1c6b.kxcdn.com). Then, add that alias as a Zonealias.

<img src="https://mintcdn.com/salesmate/CBQ05yQ_amcnmLIN/emails/email-delivery/images/keycdn4.png?fit=max&auto=format&n=CBQ05yQ_amcnmLIN&q=85&s=a0b771afe60ed196f2df6256d7fb85f9" alt="keycdn4.png" width="565" height="360" data-path="emails/email-delivery/images/keycdn4.png" />

Finally, contact our support team and they'll validate the CDN settings and enable SSL click and open tracking.
