Tag: security

Overview

SSL (Socket Security Layer) or TLS (Transport Layer Security) is a mechanism for encrypting data, which is transferring from your computer to host or server and vice versa.

Generate a CSR

CSR (Certificate Signing Request) is an encoded certificate, which CA authorities ask for when we purchase a SSL certificate from them. To issue a SSL certificate they need some additional information, which we provide in the CSR.

To generate a CSR, follow these steps below.

Step 1 − Click SSL/TLS link found under Security section of the cPanel.

Step 2 − Under Certificate Signing Request (CSR) click Generate, view, or delete SSL certificate signing requests.

Step 3 − In SSL Certificate Signing Request Interface, scroll down to see Generate a New Certificate Signing Request (CSR).

Step 4 − Choose an existing Private Key from Key dropdown. You can also choose to generate a new Private Key.

Step 5 − Enter Domains for which you want to generate CSR. You can choose a wild card domain by putting * as a subdomain.
E.g. *.example.com.

Step 6 − Provide all necessary information in text fields like City, State, Country, Company etc.

Step 7 − Click Generate Button to generate a CSR.

Installing SSL

To activate SSL/TLS certificate in your domain or Subdomains follow these steps −

If you have obtained a SSL/TLS certificate from a Trusted Certificate Provider, to use it on your website, you will need to upload it to your server.

To generate Upload a SSL/TLS certificate, follow these steps below.

Step 1 − Click SSL/TLS link found under Security section of cPanel.

Step 2 − In the left-side pane, click Install and Manage SSL for your site (HTTPS).

Step 3 − In this interface, you can choose to install SSL in your website. Scroll down to install an SSL Website.

Step 4 − Choose a certificate from the installed certificates by clicking on Browse Certificates. Or, you can also select a Domain from the dropdown box. Then paste the certificate you obtain from your SSL Provider in the Certificate: (CRT) field.

Step 5 − All fields of Certificates, Private Key and Certificate Authority bundle will be filled automatically.

Step 6 − Click Install Certificate button to activate the certificate for the Domain or Subdomain.

Overview

Two-factor authentication (2FA) is a security measure that requires two forms of identification. After you enter your password, you must enter a security code. An application on your smartphone supplies this code. Without your smartphone, you cannot log in.

Note:
2FA requires a smartphone with a supported time-based one-time password (TOTP) app. We suggest the following apps:

• For Android™, iOS®, and Blackberry® — Google Authenticator™
• For Android and iOS — Microsoft Authenticator

1. The Two-Factor Authentication menu can be found in the cPanel >> Security >> Two-Factor Authentication:
   
2. Go to the Two-Factor Authentication menu and click on the Set Up Two-Factor Authentication button:
   
3. Connect your cPanel to your Authenticator app.There are 2 ways to connect the app:
   • Automatically create the link by scanning the displayed QR code with your app
   • Manually create the link by entering the provided Account and Key information in your app
     
4. After the app is installed and connected to the cPanel, continue by entering the six-digit security code into the cPanel >> Security >> Two-Factor Authentication >> Step 2 >> Security code:
   
5. You should receive the following success message:
   
6. During the next cPanel login, after you enter your username and password, you will be redirected to the next page to enter the security code:
   

Overview

Many cPanel web hosting comes with this ClamAV virus scanner feature to guard against potential threats on your server. You can run on-demand scan of your files to see if they are infected with any virus or not. ClamAV is an open source powerful antivirus, it uses its extensive database to detect several types of potential threats like viruses, Trojan horses, malwares, malicious scripts etc.

You can scan different sectors of your home directory using the antivirus. To scan your account with a virus scanner, use the following steps.

Step 1 − Open cPanel Virus Scanner by clicking the Virus Scanner link in the Advanced section of the cPanel home.

Step 2 − You can choose the scan type from here.

• Scan Entire Home Directory − This option will scan your entire cPanel account. If you choose this option, no need to run the scan on other options. This will scan your home directory, which contains the Emails, FTP accounts and Website.
• Scan Mail − This option will scan your emails for viruses. If somebody sends a malicious email having some virus or malware, this virus scanner will tell you that.
• Scan Public FTP Space − This option will scan your public_ftp folder. If somebody uploaded a malicious file through FTP, virus scanner will find it.
• Scan Public Web Space − This option will scan your public_html in which all your front end files reside.

Step 3 − Click Scan Now button to start the scan and it will automatically show you the results.

If the Virus Scanner finds any malicious software, then it will give you options to correct the error. You may choose the option accordingly.

Note: Virus Scanner takes time specially when your cPanel account has a lot of files and directories. It is recommended to perform virus scanning during off-peak hours.