Grant cPanel Support Access v82

Valid for versions 82 through the latest version

Version:

82


Overview

When you create a ticket with cPanel Support, it is often necessary for Support to access your server. The Grant cPanel Support Access interface uses the server authentication details in your ticket to automatically provide Support with SSH access to your server. Your server must connect to the cPanel Customer Portal to transfer the authentication details.

Log in

To establish a secure connection with the cPanel Customer Portal, perform the following steps:

  1. Click Log in to cPanel Customer Portal. A new window will appear.
  2. Enter your Customer Portal email address and password in the appropriate text boxes.
  3. Click Sign In. The Grant cPanel Support Access interface will display.

cPanel Customer Portal login window

Note:

You can access the cPanel Customer Portal directly.

Grant or Revoke access

The Grant or Revoke cPanel Support’s Access section lists your Customer Portal account’s open Support tickets and the closed tickets for which you granted access. If the interface does not display the desired ticket, you may need to log in with a different Customer Portal account.



The Grant or Revoke cPanel Support’s Access section of the Grant cPanel Support Access interface.

This interface displays each ticket’s number, status, and the following information:

Column Description
Server The server ID.
User The login username.
SSH Info The sshd IP address and port.
Granted Support access status.

Allow access

To allow cPanel Support access to your server, perform the following steps:

  1. Locate the desired ticket number in the list.
  2. Click Grant in the row that corresponds to the server to which you wish to grant access.
Note:
When you click Grant, the system will check if it allows the root user to log in over SSH. If SSH root login is disabled, the system will create a temporary user in the wheel group, and it will assign the SSH key to that user for cPanel Support’s access.
Important:

The server will automatically whitelist cPanel Support’s IP addresses to following services:

For more information about firewall configuration, read our How to Configure Your Firewall for cPanel Services documentation.

You can view cPanel Technical Support’s IP addresses below:

SSH connection test

After you grant access for a ticket, you must test the SSH configuration and login details.


The Grant or Revoke cPanel Support’s Access section of the Grant cPanel Support Access interface.

Click Test to verify that your server’s configuration will allow Support to connect.

SSH test statuses

This interface displays the following status information:

Status Description
Success All of the tests succeeded.
Timeout The connection test timed out for your server.
Escalate The configured user failed to escalate to root privileges on your server.
Auth Authentication failed during connection to your server.
Unreachable Your server is unreachable.
Refused Your server refused the connection.
Protocol A protocol-level error occurred on your server.
Environment Your server responded unexpectedly.
Unknown An unexpected error occurred.
Ticket System Timeout The cPanel Ticket System failed to respond.

Revoke access

To remove cPanel Support’s access to your server, perform the following steps:

  1. Locate the desired ticket number in the list.
  2. Click Revoke in the row that corresponds to that ticket and account.

Revoke access and remove a closed Support ticket

Important:
Always remove access after you close a Support ticket.

To revoke cPanel Support’s access to your server and remove a closed Support ticket from the list, perform the following steps:

  1. Locate the desired ticket number in the list.

  2. Click Revoke and Remove in the row that corresponds to that ticket.
  3. A confirmation window will appear. Click OK.
Note:
  • You can view the SSH keys that the Grant cPanel Support Access interface creates in the Manage root’s SSH Keys interface (WHM >> Home >> Security Center >> Manage root's SSH Keys).
  • The transactional log for the Grant cPanel Support Access interface exists in the /var/cpanel/logs/supportauth/audit.log file. This file only logs changes from the Grant cPanel Support Access interface.

Additional Documentation