KeyHelp® 20.1 – Features SSH chroot environment, TLS security update and process manager

by Alexander Mahr

Last week KeyHelp 20.1 was released. Below you will find an overview of a selection of new, important features.

  • SSH chroot environment
    An SSH chroot environment allows you to grant your users the privilege of an SSH connection to the server without compromising server security.
    For example, such a restricted SSH environment allows users to use an SFTP connection or to navigate their home directory via the console and perform various operations without being able to access system data beyond the boundaries of their home directory.
    Please note: This feature is currently only available in the Professional Edition and is currently only available to Keyweb customers. Non-Keyweb customers will soon be able to use it as well.
  • SSH keys
    To provide a secure and more convenient alternative to password authentication on the server, KeyHelp now offers users the possibility to store SSH public keys.
    The keys can be added via the user profile of the KeyHelp users, under the tab "SSH keys". For this tab to be displayed, the user must have the "SSH" user privilege.
  • TLS security update
    As already mentioned in the announcement text for KeyHelp 20.1, an increase of the security level took place in the course of the update.
    The TLS protocol as well as the used TLS ciphers were accordingly raised to TLS protocol version 1.2. Further information can be found in the linked article.
    Via "Configuration" → "TLS version and ciphers" you can adjust the settings to your needs.
  • Process Manager
    The Process Manager allows you to get an overview of the server's workload and to examine the resources used, broken down by system and KeyHelp user accounts. Furthermore, options for process termination are available.
    The process manager can be accessed under the menu item "System Status".
  • Synchronization of email alias addresses and Roundcube identities
    The alias addresses of an email account created in KeyHelp can now be automatically synchronized with the identities in the web mailer Roundcube and are available there from now on as sender address.
    For new installations, this feature is active by default. On systems that have obtained KeyHelp 20.1 via panel update, it must first be activated as follows
    Navigate to the configuration under "Configuration" → "Webmail" → "Plugins" and add the entry "keyhelp_sync_identities" to the list.

An overview of all changes can be found in the change log at:

Update of the PHP interpreters:

Also since last week, new versions of the additionally installable PHP interpreters are available. If you use the PHP packages, they are updated by KeyHelp independently.

The changes can be tracked via the following link: