# Support Team Access
In certain situations, the EasyDCIM support team may require access to the server with the EasyDCIM system installed. SSH server access enables quicker and more effective troubleshooting by examining system services and custom logs.
# Access management from the backend section
In order to allow the support team to access the SSH server, you need to go to EasyDCIM's advanced settings. To do this, select 'Basic' → 'System Access' from the side menu.
In this section, you will find a button to enable or disable access to the SSH server:
- Enable Support Team Access - this option will be accessible if establishing the access is doable. If you want our support team to be able to log in to your SSH server, enable this option.
- Disable Support Team Access - this option will be accessible if the access has been already established. If you no longer want our support team to be able to log into your SSH server, turn on this option.
# Access management from the command line
It is possible to manage access from the command line if the backend section is not accessible. Such a situation may occur, for example, in case of problems with the web server or database.
Please input the following lines into the command line to enable or disable access to the SSH server:
- Enable Support Team Access:
easydcim-control app shell -- sudo bash /opt/easydcim/scripts/support/access.sh enable - Disable Support Team Access:
easydcim-control app shell -- sudo bash /opt/easydcim/scripts/support/access.sh disable
# Workflow
When enabling access to the SSH server, the script performs the following actions:
- Removes legacy or duplicate EasyDCIM support keys from
/root/.ssh/authorized_keys. - Adds the current EasyDCIM support public key.
- Restricts use of the key to connections originating from the EasyDCIM company VPN address
91.192.166.30. - Preserves unrelated SSH keys already configured by the server administrator.
- Creates a backup at
/root/.ssh/authorized_keys.easydcim-support.bak.
When disabling access, the script removes current and legacy EasyDCIM support keys while preserving unrelated entries. Restarting the SSH server is not required for changes to authorized_keys.
# Rotating active support access
After EasyDCIM announces a support-key rotation, servers with active support access should have access disabled and then enabled again. This removes the previous EasyDCIM support key and installs the current restricted key.
If the SSH server observes a different source address because of NAT or an SSH gateway, the restricted key will be refused. Contact EasyDCIM Support before changing the allowed source address.
# Current public key
Fingerprint:
SHA256:O5q8ROLLpN9A4jPX+bDx06sKl87GLMIohcPbIseUmUY
Restricted authorized_keys entry:
from="91.192.166.30",no-agent-forwarding,no-X11-forwarding ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILAop58p3ZHIp+GRGZdC0nk76AZWMzFmDW0KGVr3VJUB EasyDCIM-Support-Team-2026-07