Securing Cpanel And It's Functions?

[CitiZen]

Hi all,

 

Are there any ways to secure the cpanel and it's functions, like phpmyadmin, ect?

 

SSL, .htaccess, something.

 

Thanks!

[MikeJ]

Secure in what way?

 

cPanel functions are only available to people who are logged into cpanel.

 

If you want encrypted access to cPanel, you can use the following addresses:

 

https://******:2083/ - SSL cPanel

https://******:2096/ - SSL webmail

https://******:2087/ - SSL whm (resellers only)

 

You'll get a certificate warning about it not matching, but you can accept the connection anyway and it will be encrypted.

[CitiZen]

Thanks TCH-MikeJ,

 

So after I have my SSL certificate installed I can use:

 

https://www.****:2083/ - SSL cPanel

 

Yes?

[taznumber1]

There is a shared ssl certificate already on the server so you should be able to use it now.

[borfast]

taz is right, you don't need to install an SSL certificate unless you want your own certificate.

You can always use the shared certificate, as long as the warning Mike mentioned doesn't bother you.

[CitiZen]

Thanks everyone, but I do have a SSL Cert.

 

Good to know I could use TCH's if I needed to.

[CitiZen]

Okay,

 

I now have my SSL Cert installed, but I cannot access my cpanel or FTP with a secure SSL connection (using Cute_ftp) or (using WINSCP).

 

When trying to access the cpanel using https://www.****:2082 - nothing.

 

Tried :2083 and got a prompt for TCH SSL Cert.

 

When trying to connect through FTP SSL - unsupported by server - messages.

 

This bites!

 

Anyone know the correct program or settings to use to connect through SSL on a TCH server?

 

Thanks

[TCH-Andy]

Open a help desk ticket, and we'll take a look at it for you.

[JonBoston]

I don't see anything at 8083. Could someone check if the info above is still accurate.

Thanks,

Jon

[MikeJ]

I don't see anything at 8083. Could someone check if the info above is still accurate.

Thanks,

Jon

 

It's port 2083, not 8083.

[wayne]

That is great news. I use PHPmyadmin alot and was told about 6 months ago that I cannot get in through my ssl (I am a reseller and this is an account for a client). I was also told that there was no way to encrpt my connection to this account so I have been using it through a regular http connection and have always worried about my password being sent in plain text.

 

Now I can rest easy.

 

Thanks