---
title: SSL Decryption Wizard
slug: ps/help/en_us/vtm/userguide/ssl-decryption-wizard
docTags: 
createdAt: 2026-08-02T07:48:41.248Z
---

The **SSL Decrypt a service** wizard provides a step-by-step process to correctly configure SSL decryption. The wizard performs the following:

- Enables SSL decryption for an SSL virtual server.
- Assigns an SSL certificate from the Catalog to the virtual server.
- Enables SSL encryption for the default pool used by the virtual server.
- Changes all protocol types to the underlying (non-SSL) protocol type.

:::hint{type="info"}
To use the **SSL Decrypt a service** wizard, you must have at least one SSL virtual server (of any type). If you do not have the necessary SSL certificates, the Virtual Traffic Manager helps you create a certificate from the wizard.
:::

To use the SSL Decrypt a service wizard

1. Adjacent to the **Help** link in the toolbar, click the "Wizards" drop-down list and choose **SSL Decrypt a service**. A new window opens which explains that the wizard configures the service to be decrypted on receipt, and re-encrypts traffic before being passed to a pool. Click **Next**.
2. Select the service you want to decrypt. Note that only virtual servers that use an SSL protocol are listed. Click **Next**.
3. Choose which certificate to use to decrypt the incoming requests (or click Create New to add a certificate now). Click **Next**.
4. Choose a protocol type. This is the underlying decrypted protocol. For instance, HTTPS requests are decrypted to HTTP internally, so choose the underlying protocol HTTP as this matches the protocol type you are accepting, without the SSL wrapping.
5. Click **Finish** to complete the wizard.