CloudLinux Support Access Guide

This document outlines what to do when you need CloudLinux support to access your server, and how to clean up afterwards.

???? When you need CloudLinux Support

✅ Steps:

1️⃣ Open a support ticket with CloudLinux

• Describe the problem clearly.
• Wait for them to reply with a link to the Secure Access Form.

2️⃣ Prepare your server for access

✅ SSH should already listen on all interfaces (0.0.0.0:22)

• Check: ss -tlnp | grep ssh

✅ Whitelist CloudLinux support IPs in Imunify360:

imunify360-agent whitelist ip add 23.111.175.214 --by-comment "CloudLinux Support"
imunify360-agent whitelist ip add 157.90.174.91 --by-comment "CloudLinux Support"
imunify360-agent whitelist ip add 142.132.169.29 --by-comment "CloudLinux Support"
[root@live ~]# imunify360-agent whitelist ip list

✅ Add their SSH public key to /root/.ssh/authorized_keys

• They provide the public key in the Secure Access Form.
• Run:

nano /root/.ssh/authorized_keys

• Paste the key on a new line, save and exit.
• Ensure permissions:

chmod 600 /root/.ssh/authorized_keys

✅ Optionally enable password authentication if requested:

nano /etc/ssh/sshd_config

• Set:

PasswordAuthentication yes
PermitRootLogin yes

• Reload SSH:

systemctl reload sshd

• Set root password if needed:

passwd root

✅ Submit the Secure Access Form:

• Fill in:
  • Server IP: 64.68.123.115
  • SSH port: 22
  • User: root
  • Auth: SSH key (or password if enabled)
• Wait for them to confirm.

???? After Support Work is Done

✅ Run the following cleanup commands:

1️⃣ Remove whitelisted IPs:

imunify360-agent whitelist ip delete 23.111.175.214
imunify360-agent whitelist ip delete 157.90.174.91
imunify360-agent whitelist ip delete 142.132.169.29

2️⃣ Remove SSH key:

nano /root/.ssh/authorized_keys

• Delete the line with their SSH public key.
• Save and exit.

3️⃣ Disable password authentication again:

nano /etc/ssh/sshd_config

• Set:

PasswordAuthentication no
PermitRootLogin prohibit-password

• Reload SSH:

systemctl reload sshd

✅ Change the root password (optional, recommended if password was shared):

passwd root

???? Optional: Script

You can also request a bash script to automate the cleanup steps if desired.

???? Summary of cleanup commands:

imunify360-agent whitelist ip delete 23.111.175.214
imunify360-agent whitelist ip delete 157.90.174.91
imunify360-agent whitelist ip delete 142.132.169.29

nano /root/.ssh/authorized_keys
# remove their key, save and exit

nano /etc/ssh/sshd_config
# set PasswordAuthentication no, save and exit

systemctl reload sshd

✅ Keep this document for future reference whenever you need to grant and revoke CloudLinux support access.