Applicable to:
- Plesk for Linux
- Plesk for Windows
Question
How to provide Plesk Support with server access?
Answer
IP Address Restrictions and Firewall
PLESK_WARN: Access must be IP-restricted to the addresses listed below. Unrestricted access may be rejected or removed.
If there are firewall restrictions, whitelist these IP address ranges for ports 22 (Linux), 3389 (Windows), and 8443 (Plesk interface) on any internal and external firewalls.
CONFIG_TEXT: 195.214.233.0/24
194.8.192.130
81.184.0.141
208.74.127.0/28
208.74.123.0/24
184.94.197.2
104.30.179.199
104.30.174.141
2a09:bac0:1001:68e::/64
2a09:bac0:1000:16c2::/64
2001:678:744::/64
2620:0:28a4:4000::/52
- Log into Plesk
- Search for Support SSH Access
- Install and open the extension
- Press Save to create the credentials
-
Copy access credentials and send them to a Plesk Support representative in a ticket or chat
Note: The extension uses SSH keys, so it won't share sensitive credentials, only the username and server hostname.
- Log in to the Plesk server over SSH as
root -
Run this command to install the Support Access extension and enable access for 14 days
# plesk bin extension --install support-access && plesk ext support-access provide -user plesk_support -date $(date -d '+14 days' '+%F')
Note: If the command above fails, run the following command instead to install our SSH keys directly:
# sh <(curl https://raw.githubusercontent.com/plesk/kb-scripts/master/ssh_keys/script.sh || wget -O - https://raw.githubusercontent.com/plesk/kb-scripts/master/ssh_keys/script.sh)
- Send the access details to Plesk in a ticket or chat
-
After the issue is resolved, revoke SSH access
# plesk ext support-access revoke ; sed -i '/support@plesk.com/d' ~/.ssh/authorized_keys
- Connect to Plesk over RDP.
-
Start Windows PowerShell and run the following command to whitelist the Plesk IP addresses
PS New-NetFirewallRule -DisplayName "Plesk Support Access" -RemoteAddress @(
"195.214.233.0/24",
"194.8.192.130",
"81.184.0.141",
"208.74.127.0/28",
"208.74.123.0/24",
"184.94.197.2",
"104.30.179.199",
"104.30.174.141",
"2a09:bac0:1001:68e::/64",
"2a09:bac0:1000:16c2::/64",
"2001:678:744::/64",
"2620:0:28a4:4000::/52"
) -Direction Inbound -Action Allow - Create a temporary password for the Administrator account to investigate current issue only
-
Log in to the Plesk Help Center and send server access details in your ticket or chat
Note: Plesk Help Center uses HTTPS, and verified server details are stored securely and automatically removed when the ticket is closed.
- Change the temporary password once the support incident is resolved
- Log in to the server over SSH
-
Run the following command to grant access using the Plesk Support SSH keys
# sh <(curl https://raw.githubusercontent.com/plesk/kb-scripts/master/ssh_keys/script.sh || wget -O - https://raw.githubusercontent.com/plesk/kb-scripts/master/ssh_keys/script.sh)
-
After the issue is resolved, revoke SSH access
# sed -i '/support@plesk.com/d' ~/.ssh/authorized_keys
Comments
this is to much ..to handle ...
What ports?
You may need to update script
from curl -L https://plesk.zendesk.com/hc/article_attachments/360003621494/id_rsa.pub
to curl -L https://support.plesk.com/hc/article_attachments/360003621494/id_rsa.pub
Do we have to generate a password for the user plesk_support ?
I have installed Plesk Support via SSH. The user plesk_support will be created, but there will be NO password shown. Even if you go to Extensions > Support Access and click "copy access credentials". According to the support chat, this is expected. Don't worry about the "username : password" field in the ticket submission form.
Since the form asks for port 22, I just assume you have to open the given IPs for that very port. Except for the ones that specifically ask for another port, like ...x.x.x/48.
Hallo Mirko
Wir haben noch etwas versucht und wenn das funktioniert hat, brauchen wir hier keine weitere Fehlersuche mehr.
Ich gebe dir Bescheid, wenn es funktioniert hat.
Viele Grüße
Markus
If you get the following error:
> plesk bin extension --install support-access
Error: must run as root.
Then run the command with sudo:
> sudo plesk bin extension --install support-access
The extension was successfully installed.
You need to SSH in to the machine with elevated access (through your company Google Cloud VM instance):
https://console.cloud.google.com/compute/instances
Was given this link in an email. This does not address the issue at all.
Hi,
I solved it. My mistake was that I hadn't enabled:
Create and manage sites
Thanks for your help.
Please sign in to leave a comment.