# Connect Openprovider

> Connect Openprovider to manage your domains, your DNS and your SSL certificates from InfraNest — one connection covers all three.

Source: https://infranest.io/docs/connect-openprovider
Last updated: 2026-09-30

---

Connect your Openprovider account to manage your domains, DNS and SSL certificates from InfraNest — one connection covers all three.

## Overview
- Openprovider is a wholesale registrar built for managing many domains at once, not just a handful.
- If you manage domains for clients, InfraNest imports your whole portfolio — even if that means thousands of domains — a page at a time.
- Once connected, you can handle domains, DNS zones and certificate tracking all from one place in InfraNest.

> [!NOTE]
> Before you connect, you need a dedicated Openprovider user set up for the API, with API access switched on, no two-factor authentication on it, and InfraNest's IP address allowed. See **Set up Openprovider API access** first — it takes a few minutes and determines whether the connection will work at all.

## Connect Openprovider
1. Go to **Integrations** and open **Openprovider**.
2. Give the connection an **Account label** so you can recognise it later. This is optional, and worth doing if you have more than one Openprovider account.
3. Enter the **API username** and **password** of the user you created for InfraNest — not your own login.
4. Select **Connect**.

<!-- screenshot: connect-openprovider -->

<!-- docs-screenshots:start:connect-openprovider -->

![Connect Openprovider](/media/48cbc34a-3b68-406b-b34d-51d668c360c3)

<!-- docs-screenshots:end:connect-openprovider -->

InfraNest checks the credentials and starts importing your domains. A large portfolio takes a few minutes.

## What you can do once it's connected

**Domains**
- See your whole portfolio with renewal dates, and get told before anything expires
- Check availability and pricing across every extension Openprovider sells
- Register, transfer in, renew, and restore a domain from quarantine
- Change nameservers, DNSSEC, transfer lock, WHOIS privacy and auto-renew
- Fetch the EPP (auth) code when you are moving a domain away

**DNS**
- Manage zones and records for any domain, wherever you registered it
- Create and delete zones from InfraNest

**Certificates**
- The SSL certificates on your Openprovider account appear in your certificate inventory, with their expiry dates, alongside certificates from everywhere else

## Check your account balance

Openprovider is prepaid: registrations and renewals come out of your account balance. InfraNest shows that balance on the connection's page and warns you when it is running low.

> [!WARNING]
> This matters more here than at a retail registrar. An empty balance does not just fail one registration — it stops auto-renew across every domain you manage, including your clients'.

## Good to know

- **Renewal dates.** Openprovider tracks a renewal date that can differ from the expiry date shown at the registry. InfraNest uses the renewal date, because that is the one you have to act on.
- **Changing a domain's owner** is a paid "trade" at Openprovider with its own confirmation process, so it is not offered here as an ordinary contact edit. Do it in the Openprovider panel instead.
- **Certificate files cannot be downloaded** from InfraNest. Openprovider never holds the private key — you created the CSR, so you have it — and we do not store keys we did not generate.
- **DNS records without IDs.** Openprovider identifies a record by its name, type and value. Two records that differ only in TTL look identical to us, so they appear as one row.

## Troubleshooting

If InfraNest reports "Authentication/Authorization Failed", the password is the least likely cause. See the troubleshooting list at the end of **Set up Openprovider API access** — it is almost always API access being off, 2FA on the user, or the IP whitelist.