Last modified: March 24, 2023

Upgrade blockers

None.

New features

ECDSA for SSL/TLS certificates

cPanel & WHM now supports ECDSA keys for SSL/TLS certificates. You can generate ECDSA keys, use those keys in certificate signing requests (CSR), and purchase and install ECDSA-based certificates in cPanel & WHM. By default, the system uses RSA, 2,048-bit key types.

• System administrators can select a default key type in WHM’s new SSL/TLS Configuration interface (WHM » Home » SSL/TLS » SSL/TLS Configuration) or in the Security section of the Tweak Settings interface (WHM » Home » Server Configuration » Tweak Settings).
• cPanel users can select their preferred key type in cPanel’s SSL/TLS interface (cPanel » Home » Security » SSL/TLS). This allows users to override the global setting in WHM and use their preferred key type instead.

WP Toolkit

We added a new feature called WP Toolkit. WP Toolkit is a management interface that enables you to easily install, configure, and manage WordPress®. WP Toolkit is available in both a Lite and Deluxe version.

When you upgrade a server with WP Manager to cPanel & WHM version 92, it will automatically install WP Toolkit.

Read our WP Toolkit documentation for more information on WP Toolkit.

Dynamic DNS

In cPanel & WHM version 92, we added cPanel’s Dynamic DNS interface (cPanel » Home » Domains » Dynamic DNS). The Dynamic DNS (DDNS) feature simplifies access to networks that use a dynamic IP address. This feature automatically updates the zone records for a DDNS domain. Users can navigate to a static hostname that matches the website with the network’s IP address.

Experimental: Support for CentOS 8 and CloudLinux 8

We added an experimental version of cPanel & WHM version 92 that has minimal functionality in CentOS 8 and CloudLinux 8 servers.

Experimental: ModSecurity 3

We now provide ModSecurity® 3.0 on an experimental basis. This new version supports servers that run both Apache and NGINX®.

To use ModSecurity 3.0, you must install the Experimental Repository.

Then, install the following packages in WHM’s EasyApache 4 interface (WHM » Home » Software » EasyApache 4):

1. The OWASP rule set — ea-modsec30-rules-owasp-crs
2. One of the following connectors:
   • ea-modsec30-connector-nginx — Use this package if your system runs NGINX.
   • ea-modsec30-connector-apache24 — Use this package if your system runs Apache.

Add ModSecurity rules via RPM

We added support for ModSecurity rule sets via RPM.

We converted the OWASP core rule set that cPanel provides to an RPM. This change ensures that your ModSecurity rules receive more frequent updates. The current rule set remains available; however, you cannot use both the old rule set and new RPM-based rule set at the same time.

To use the new, updated rules, install the ea-modsec2-rules-owasp-crs RPM in WHM’s EasyApache 4 interface (WHM » Home » Software » EasyApache 4).

You can also use a third-party RPM-based rule set. To install an RPM-based ModSecurity rule set, you must ensure that the yum repository exists on your server, then install the RPM file.

You can manage the rules in WHM’s ModSecurity® Vendors interface (WHM » Home » Security Center » ModSecurity® Vendors).

New Standardized Hooks

We added new standardized hooks for ModSecurity functions and for the /usr/local/cpanel/scripts/modsec_vendor script.

New MultiPHP Manager interface

In cPanel & WHM version 92, we added WHM’s MultiPHP Manager (new) interface (WHM » Home » Software » MultiPHP Manager (new)). This updates the old version of the interface.

The old MultiPHP Manager interface (WHM » Home » Software » MultiPHP Manager) remains accessible in this version of cPanel & WHM, but we will remove it in a future release.

Updated features

Experimental: Added MySQL® 8 support for CentOS 8 and CloudLinux 8

We added support for MySQL® 8 for CentOS 8 and CloudLinux 8 servers. MySQL 8 is the default database service for CentOS 8 and CloudLinux 8.

Experimental: ImageMagick for CentOS 8 and CloudLinux 8

For CentOS 8 and CloudLinux 8 servers, the system automatically installs ImageMagick® from the EPEL repository. In previous versions of CentOS and CloudLinux, the system automatically installs ImageMagick from the CentOS-Base repository.

Experimental: Installer updates network services automatically in CentOS 8 and CloudLinux 8 servers

On systems that run CentOS 8, the cPanel & WHM installer will automatically disable the Network Manager service and enable the network.service service. For more information, read our How to Disable Network Manager documentation.

Experimental: Host Access Control interface update for CentOS 8 and CloudLinux 8 users

We updated the look and feel of WHM’s Host Access Control interface (WHM » Home » Security Center » Host Access Control). This interface relied on the use of the TCP Wrappers package (tcp_wrappers), which CentOS 8 no longer supports.

MySQL® 5.5 upgrade

If you run MySQL 5.5 on cPanel & WHM version 86, you will be able to upgrade your server to cPanel & WHM version 92.

Added European Spanish translations

We added an improved set of European Spanish translations. This will provide a better experience for users who prefer Spanish.

Added German translations

We added an improved set of German translations. This will provide a better experience for users who prefer German.

Added Russian translations

We added an improved set of Russian translations. This will provide a better experience for users who prefer Russian.

Deprecated and removed items

WP Manager

We deprecated our WP Manager plugin. For more information, read our cPanel Deprecation Plan documentation.

Removed new installation option for MariaDB 10.1

Due to the upcoming End Of Life status for MariaDB 10.1, we removed the installation option for MariaDB 10.1 from cPanel & WHM.

Appendix A: Third-party applications

cPanel & WHM version 92 includes the following third-party applications:

Appendix B: New and modified API functions

New UAPI functions

• DynamicDNS::create — This function creates a dynamic DNS (DDNS) domain.
• DynamicDNS::delete — This function removes an existing DDNS domain.
• DynamicDNS::list — This function lists any DDNS domains.
• DynamicDNS::recreate — This function provides a new, randomly-generated ID for an existing DDNS domain.
• DynamicDNS::set_description — This function updates the description of a DDNS domain.
• SSL::set_default_key_type — This function sets a user’s preferred SSL/TLS key type.

Modified UAPI functions

• SSL::delete_cert — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns now return a null value if the certificate’s key is not an RSA key.
• SSL::delete_csr — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus return now returns a null value if the CSR’s key is not an RSA key.
• SSL::delete_key — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the key is not an RSA key.
• SSL::fetch_certificates_for_fqdns — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• SSL::find_certificates_for_key — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• SSL::find_csrs_for_key — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus return will return a null value if the CSR’s key is not an RSA key.
• SSL::generate_cert — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• SSL::generate_csr — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus return will return a null value if the CSR’s key is not an RSA key.
• SSL::generate_key — Added the keytype parameter and deprecated the keysize parameter. Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the key is not an RSA key.
• SSL::installed_host — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• SSL::installed_hosts — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• SSL::list_certs — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• SSL::list_csrs — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus return will return a null value if the CSR’s key is not an RSA key.
• SSL::list_keys — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the key is not an RSA key.
• SSL::show_cert — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and return will return a null value if the certificate’s key is not an RSA key.
• SSL::show_csr — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus return will return a null value if the CSR’s key is not an RSA key.
• SSL::show_key — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the key is not an RSA key.
• SSL::upload_cert — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• SSL::upload_key — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the key is not an RSA key.
• Variables::get_user_information — Added the new ssl_default_key_type return.

Modified WHM API 1 functions

• fetch_service_ssl_components — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• fetch_ssl_certificates_for_fqdns — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• fetch_ssl_vhosts — Added the ecdsa_curve_name and ecdsa_public returns. The encryption_algorithm return now returns the id-ecPublicKey value. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• install_service_ssl_certificate — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• listcrts — Added the key_algorithm and ecdsa_curve_name returns. The modulus_length return will return a null value if the certificate’s key is not an RSA key.
• reset_service_ssl_certificate — Added the key_algorithm, ecdsa_curve_name, and ecdsa_public returns. The modulus and modulus_length returns will return a null value if the certificate’s key is not an RSA key.
• showbw — This function now also returns data for all accounts on a parent server and any child node servers.
• unsuspendacct — Added the retain_service_proxies parameter.