Open SSL & Security
In the EPAdmin administrator workspace, open SSL & Security or search the exact tool label. Certificate, firewall, SSH, WAF and identity changes each retain their own protections. Read the detailed operational guide before making changes. The table lists every requested leaf in this group. A connected destination remains subject to current local permissions, resource ownership, installed capability, licence and fresh verification. It is not a production acceptance claim.
Complete tool reference
| Tool | Destination and behavior | Permission or limitation |
|---|---|---|
| SSL Certificate Management | Server → SSL | Any listed local Admin grant: hosting:read, hosting:manage |
| AutoSSL | Server → SSL | Any listed local Admin grant: hosting:read, hosting:manage |
| Let's Encrypt Integration | Server → SSL | Any listed local Admin grant: hosting:read, hosting:manage |
| Firewall Management | Server → Security | Any listed local Admin grant: security:read, security:manage |
| Brute Force Protection | Server → Security | Any listed local Admin grant: security:read, security:manage |
| Two-Factor Authentication | Security | Current local Admin session and destination policy |
| SSH Security | Server → Security | Any listed local Admin grant: security:read, security:manage |
| Malware Scanner | Server → Security | Any listed local Admin grant: security:read, security:manage |
| WAF Management | Server → Security | Any listed local Admin grant: security:read, security:manage |
| ModSecurity Rules | Unavailable in this checkpoint | Reviewed engine/ruleset installation and ModSecurity rule management are not implemented. |
| Security Advisor | Unavailable in this checkpoint | Versioned security adviser scan/remediation/rescan is not implemented. |
| Security Logs | ServerLogs → Security | Any listed local Admin grant: security:read, security:manage |
Make and verify a change
Select the intended owned resource and load its current detail. Read impact, current revision, applicable preview and confirmation before an explicit submission. If the server requires fresh authentication, complete its password/MFA flow and submit the reviewed request again; no write is automatically replayed. Keep the durable operation ID and inspect the final resource/service state.
When a tool is missing or denied
Check the current role/grants, installed version and actual capability. A menu label marked unavailable has no supported action to force. Source updates can be newer than your installed kit; they do not automatically add hosting acceptance. Preserve the safe operation/correlation reference and inspect original state before retrying an interrupted change. Do not disable confinement, modify private journals or substitute another account to bypass denial.