Access for technical support

You can open access to the server with the platform for ISPsystem technical support specialists. Support staff will be able to connect to the server via SSH.

Managing access

To open access for technical support click in the right-hand menu → System information tab → enable Technical support access option.

When you enable this option, the platform will generate an SSL certificate with a validity of seven days. This certificate will be used for the identification of the support employee. The option will be automatically disabled when the certificate expires, and access to the platform will be closed. If necessary, you can disable this option earlier.

If the platform interface is unavailable

If the platform interface is unavailable (for example, due to platform failures), you can manage access via the script from the ISPsystem repository:

Connect to the server with the platform via SSH.

Download the script:

curl -O https://download.ispsystem.com/extras/support_access.sh

Run the script:

to open access:
```
sh support_access.sh enable
```
to close access:
```
sh support_access.sh disable
```

If access to the platform was opened with a script, it will not be disabled automatically. To close access, run the script with the disable parameter.

Work logic

When you open access, the platform:

Adds data from the platform configuration file to the /etc/ssh/sshd_config file.
Writes the public ISPsystem SSH key to the /etc/ssh/ispsystem.pub file.
Restarts the sshd service.

The cron scheduler keeps track of how long access is open and automatically closes it after seven days.

When you close access, the platform:

Deletes platform data from the /etc/ssh/sshd_config file.
Deletes the /etc/ssh/ispsystem.pub file.
Restarts the sshd service.

Diagnostics

Incoming SSH connections are logged using standard OS tools. To view the connection log, run the command:

journalctl -u ssh