Secure Pages settings

Secure Pages needs to be configured before it will work to secure your site. The settings needed for Ubercart stores are really no different than normal Secure Pages settings, and may be entered at Administration » Configuration » System » Secure Pages (admin/config/system/securepages).

The first step is to enable Secure Pages. Choose the "Enabled" option at the top of the settings page. This option will be available only if your server is configured properly for SSL. If the "Enabled" radio button is not available, consult the Secure Pages project page and issue queue for help.

Most sites will want to run in mixed HTTP/HTTPS mode, with most pages served via HTTP for speed and HTTPS used only for pages that contain sensitive data. If you are going to run in mixed HTTP/HTTPS mode, select the "Switch back to http pages when there are no matches" option. If you are using Drupal 6 in mixed mode, you should also install Secure Pages Hijack Prevention module. Secure Pages Hijack Prevention is not needed for Drupal 7, as that functionality is included in Drupal core.

Enter your store's base URL in the textfields for "Non-secure Base URL" and "Secure Base URL". For example:
Non-secure Base URL = http://www.example.com
Secure Base URL = https://www.example.com
Of course, use your actual host domain name instead of www.example.com ...

If you're running in mixed HTTP/HTTPS mode, select "Make secure only the listed pages." See the next section Which paths should you protect? for a discussion about which pages to enter in this list.

Don't touch the "Ignore pages" list - the default values should be good enough. For Drupal 7, this box is empty anyway. For Drupal 6, it contains:

*/autocomplete/*
*/ajax/*

For Drupal 7, there is a "User roles" setting where you have the option to force HTTPS at all times, based on user role. You should make sure to check the box for the "administrator" role. Store administrators will be viewing customer data, store settings like API keys, and confidential information like product costs.

Save your configuration settings changes by pressing the "Save configuration" button at the bottom of the page.