--- title: "Acronis Agent Install: cPanel - Secure Boot" slug: "acronis-agent-install-cpanel-secure-boot" updated: 2026-07-22T07:12:13Z published: 2026-07-22T07:12:13Z canonical: "docs.serversaustralia.com.au/acronis-agent-install-cpanel-secure-boot" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.serversaustralia.com.au/llms.txt > Use this file to discover all available pages before exploring further. # Acronis Agent Install: cPanel - Secure Boot This guide details the process of installing the Acronis Backup plugin and agent on a Linux cPanel server. To complete the guide, you’ll need to access your server through SSH or remote console. > [!NOTE] > If you’d like to learn how to access your server via the remote console, read the following guide: [**How to access IPMI / Remote Console**](/v1/docs/how-to-access-ipmi-remote-console-dedicated-server) --- > [!WARNING] > This guide is to be used if Secure Boot is ENABLED on your Linux server. > > This can be checked with the following command: > > ```bash > ( (command -v dnf && dnf install -y mokutil) || (command -v yum && yum install -y mokutil) || (command -v apt-get && apt-get update -y && apt-get install -y mokutil) ) >/dev/null 2>&1 ; echo -e "\n-----------\n" ; mokutil --sb-state > ``` > > If the command outputs “`SecureBoot disabled`” or “`EFI variables are not supported on this system`”, use this guide instead: [**Acronis Agent Install: cPanel**](/v1/docs/acronis-agent-install-cpanel) > > > > If the command outputs “`SecureBoot enabled`”, you may continue with this guide. > [!CAUTION] > Installing Acronis with Secure Boot requires a system reboot. > > This is used to enroll Machine Owner Keys for the Acronis “snapapi” kernel module. ## Adding a Protection Plan Before we can start, your Acronis Cyber Protect tenant requires at least **ONE** valid Protection Plan. Additionally, we strongly recommend cloning and using a separate Protection Plan for each protected workload, as any changes made to a multi-use plan will affect all workloads protected by that plan. > [!NOTE] > You can find a list of Protection Plan templates at the linked page. Make sure to select a “**Standard Backups - cPanel**” plan. > > [**Protection Plan templates**](/v1/docs/protection-plan-templates) > > > > A guide showing how to import the downloaded Protection Plan file is linked below: > > [**How to import a Protection Plan**](/v1/docs/importing-a-protection-plan) > > A guide showing how to clone the imported Protection Plan can be found further down in the same guide: [**Cloning a Protection Plan**](/v1/docs/importing-a-protection-plan#cloning-a-protection-plan) > > --- > > If you already have a suitable Protection Plan, you may continue to the next section: [**Allowing Acronis IPs into the firewall**](/v1/docs/acronis-agent-install-cpanel-secure-boot#allowing-acronis-ips-into-the-firewall) ## Allowing Acronis traffic through the firewall To set up and run Acronis backups, you need to whitelist the following outgoing TCP ports: - **443** - **7770-7800** - **8443** - **44445** To accomplish this easily, we have created an Acronis Firewall Allow script for your convenience. This script works on Debian, Ubuntu, or any RHEL-based Linux distribution and accounts for multiple software firewall implementations: CSF, **Imunify360**, **firewalld**, UFW, and plain **iptables**/**nftables**. You can make use of this script by running the below one-liner as `root` any user in the `sudoers` group. ```bash ( (command -v dnf && sudo dnf install -y wget) || (command -v yum && sudo yum install -y wget) || (command -v apt-get && sudo apt-get update && sudo apt-get install -y wget) ) >/dev/null 2>&1 ; sudo wget -q https://salt-fileserver.servercontrol.com.au/files/acronis/acronis_firewall_allow.sh -O /root/acronis_firewall_allow.sh && sudo chmod +x /root/acronis_firewall_allow.sh && sudo bash /root/acronis_firewall_allow.sh ``` If you ever need to revert any changes made by the script, simply execute the `acronis_firewall_allow.sh` file with the `--revert` flag. > [!WARNING] > If your SAU server is protected by a FortiGate Firewall, please refer to the below drop-down to see how to easily allow these IP addresses: > > > [!NOTE] > > **How to whitelist Acronis IPs on a FortiGate Firewall** > > > > 1. Log into your FortiGate web UI. > > 2. Copy and paste the below code block into the FortiGate CLI. These commands will create Acronis service object for use with a firewall policy. > > > > ```plaintext > > config firewall service custom > >    edit "Acronis Backup Ports" > >        set tcp-portrange 443 7770-7800 8443 44445 > >        set comment "Required Acronis outbound TCP ports" > >    next > > end > > ``` > > 3. In your Firewall Policy table, create a **LAN > WAN ACCEPT** policy named “**Acronis Backup Ports - Outgoing**” that matches the below image. The “**Acronis Backup Ports**” service object will already exist if you ran the commands in the second step. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/2026-07-17 19_25_37-Script Archive - File Explorer.png) > > > > A written description of the policy configuration is below: > > - Name: **Acronis Backup Ports - Outgoing** > > - Incoming interface: **vdXXXXX_lan (VLANXXXX)** > > - Outgoing interface: **vdXXXXX_wan** > > - Source: **all** > > - Security posture tag: > > - Destination: **all** > > - Schedule: **always** > > - Service: **Acronis Backup Ports** > > - Action: **Accept** > > - Inspection mode: **Flow-based** ## Installing the cPanel plugin Install the Acronis cPanel plugin using the official Acronis script: ```bash sh <(curl -L https://download.acronis.com/ci/cpanel/stable/install_acronis_cpanel.sh || > wget -O - https://download.acronis.com/ci/cpanel/stable/install_acronis_cpanel.sh) ``` > [!WARNING] > If your server previously used our R1Soft backup solution, this is the point where the R1Soft agent needs to be removed from the server. > > Doing this at a later time may cause the server to crash! > > Run the following one-line command on your Linux server to remove R1Soft. This will work with CentOS, AlmaLinux, Ubuntu and Debian. > > ```bash > bash -c 'set -euo pipefail; r1softpacks="r1soft-getmodule serverbackup-agent serverbackup-async-agent* serverbackup-setup serverbackup-enterprise-agent"; svc(){ for s in cdp-agent sbm-agent; do (systemctl stop $s 2>/dev/null || service $s stop 2>/dev/null || true); done; }; pkg(){ if command -v dnf>/dev/null; then sudo dnf remove -y --skip-broken $r1softpacks; elif command -v yum>/dev/null; then sudo yum remove -y --skip-broken $r1softpacks; elif command -v apt-get>/dev/null; then sudo apt-get update -y || true; sudo apt-get purge -y $r1softpacks || true; sudo apt-get autoremove -y || true; else echo "No supported package manager detected!"; exit 2; fi; }; svc; pkg; rm -f /etc/yum.repos.d/r1soft.repo >/dev/null 2>&1; [ -f /etc/apt/sources.list ] && sed -i "\|repo.r1soft.com/apt|d" /etc/apt/sources.list >/dev/null 2>&1 || true; /usr/local/cpanel/scripts/uninstall_plugin r1soft-cpanel-plugin-2.0 --theme paper_lantern; /usr/local/cpanel/scripts/uninstall_plugin r1soft-cpanel-plugin-4.0 --theme jupiter' > ``` > > --- > > If you don’t have R1Soft installed, continue on. > [!NOTE] > Before running the installer, make sure you have the server’s root password ready. You’ll need this later. 1. Navigate to the server’s WHM interface, and search for “**Acronis**”. There should be a plugin named “**Acronis Backups**”. Click it. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-8A6KERLF.png) 2. You will land on this page: ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-6LOJ9SGG.png) The filled-out page should look something like this. Note the different Service URL. Click “**Sign In**” to continue. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-QCKNSSD3.png) - Replace the **Service URL** with the following: `https://backup.aci.servercontrol.com.au` - Enter the username and password for your Acronis **“Service Account”** user. > [!NOTE] > A guide showing how to reset the password for this user can be found here: [**How to update the service account email/password**](/v1/docs/how-to-update-service-user-email-or-password) 3. On the Protection plan page, select “**Use an existing protection plan**”. Then click “**Continue**”. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-AKLO7QC5.png) 4. Leave both **self-service** boxes ticked and click “**Continue**”. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-JBV8N3XL.png) 5. Click “**Continue**” again ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-B3UIMRJR.png) 6. The plugin will now run through the automated process of installing the Acronis agent, which may take 5-10 minutes to complete ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-7I5PFEJ2.png) 7. Once the process has completed, click “**Done**”. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-IGD9YEH6.png) 8. The plugin should now display this page: ![Acronis Backup dashboard showing storage usage, last backup, and recovery operations statistics.](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-LL052RO2(1).png) 1. From here, log in to the Acronis Cyber Protect Cloud portal in another browser window, the link can be seen here: [*https://backup.aci.servercontrol.com.au/login*](https://backup.aci.servercontrol.com.au/login) > The default tenant username can be found in the MySAU portal, as shown in this guide: [**How to access the Acronis Cyber Protect Cloud portal**](/v1/docs/access-acronis-cyber-protect-portal) 2. Click “**Devices**” on the left-hand side of the page ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-20251111-140443.png) You should see your newly-added server listed here: ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-CLRH6QA6.png) 3. The Linux server must now undergo a reboot, **BUT WAIT! Please read the info box below before rebooting.** > [!NOTE] > **Before you perform a restart, you’ll need to access the server via remote console.** > > A guide detailing this process can be found here: [**How to access IPMI / Remote Console**](/v1/docs/how-to-access-ipmi-remote-console-dedicated-server) > > --- > > Upon reboot, a blue screen will appear for a limited time. You must quickly press any letter key to enter **Key Management**. Failure to complete this in time will require a full reinstall and re-registration of the Acronis agent. 4. Once you have the remote console open and ready, gracefully reboot the server. This can be done using one of the following commands: - `shutdown -r now` - `reboot` 5. During boot, you should encounter this blue screen, as previously mentioned. **Make sure to press any letter key as quickly as possible.** ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-ZICVPNCZ.png) 6. Use the arrow keys to navigate the menu. Select “**Enroll MOK**”, and press **Enter**. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-KQY2GH8K.png) 7. Select “**Continue**”, and press **Enter**. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-ASRKKJ5D.png) 8. Select “**Yes**”, and press **Enter**. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-4KS6QW90.png) 9. Enter the server’s root password, and press **Enter**. **Note:** You get three attempts to complete this, so make sure it’s correct. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-K1GWEHKW.png) 10. Select “**Reboot**”, and press **Enter**. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-C1GY4SIJ.png) 11. Once the server is back online, test the kernel module is running with this command: ```bash lsmod | grep snapapi ``` *If the command outputs anything, it means the kernel module is loaded.* 12. **Proceed to the next section to apply your Protection Plan. If this is not completed, your backups will have no way to function.** ## Applying the protection plan 1. Click on the server name, and select “**Protect**”. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-8IRWW6DP.png) ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-OM59BF0I.png) 2. Select the required Protection Plan. Make sure it’s a **“cPanel”** plan, or interaction with the cPanel/WHM plugin will break. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-37HP64PL.png) If this prompt appears, click “**Confirm**”. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-7VZSQ2N2.png) The “**Protect**” section will now display the selected Protection Plan. ![](https://cdn.document360.io/d809f158-d4f4-47ff-83d4-18d9c9f7a04d/Images/Documentation/image-4G18IU9P.png) > [!TIP] > Acronis agent setup is complete! > > If you’d like to manually run an initial backup to test this, refer to this guide: [**How to manually start a backup**](/v1/docs/how-to-manually-start-a-backup)