What This Incident Looks Like
Multiple clients report login failures simultaneously. Email service goes down. Websites stop loading. You try accessing WHM and cPanel yourself both are inaccessible. This pattern indicates a system-level infrastructure failure, not individual account issues.
In this incident, missing cPanel system libraries prevented WHM and cPanel from starting. Without these foundational components, all dependent services failed. The fix required identifying the root cause and running cPanel's repair tool.

Symptoms and Root Cause
What clients reported:
- Unable to log into cPanel
- Email services offline
- Websites inaccessible
- Cannot access webmail
What we confirmed:
- WHM won't start (connection refused)
- cPanel services show "inactive (dead)"
- Error logs report missing libraries (libssl, libcrypto, cPanel modules)
Root cause: Missing or corrupted system libraries in /usr/local/cpanel/. These libraries are foundational. Without them, WHM, cPanel, webmail, DNS services, and other components cannot initialize.
Diagnostic Process
Step 1: Test local access
SSH into your server and test:
curl -vk https://localhost:2087/
https://your-server-ip:2083/If both fail, the control panels themselves are broken, not individual accounts.
Step 2: Check service status
systemctl status cpanel
systemctl status cpsrvd
systemctl status tailwatchd
Look for "active (running)" or "inactive (dead)."
Step 3: Review error logs
cd /var/log/cpanel/
tail -f error_log
journalctl -xe
Document error messages. Common indicators:
Cannot find required library: libssl.so.1.0.0 Missing critical module in /usr/local/cpanel/ Library /usr/lib64/libcrypto.so not found
Step 4: Check system health
df -h # Disk space
ls -la /usr/local/cpanel/ # Missing directories
rpm -Va --nofiles --nodigest 2>/dev/null | grep cpanel
dmesg | grep -iE "ext4|xfs|i/o|disk|filesystem"This diagnostic process should take 10-15 minutes. Document all findings.
Resolution:
Run the repair script:
df -h
/usr/local/cpanel/scripts/check_cpanel_pkgs --fix
This script:
- Scans cPanel packages for missing or corrupted files
- Compares installation against cPanel's verified manifest
- Reinstalls damaged components
- Reconfigures services to start correctly
Let it run completely (5-15 minutes). This is cPanel's official recovery tool.
Verify access:
- Log into WHM (https://your-server-ip:2087/) with root credentials
- Log into cPanel (https://your-server-ip:2083/) with a test account
- Access webmail (https://your-server-ip:2093)
- Send test email from external account and verify delivery within 5 minutes
- Access hosted website and confirm normal performance
If any test fails, check error logs again and run additional repairs if needed.
| Time | Event | Action |
| 14:32 | First login failure reported | Support ticket logged |
| 14:45 | Multiple reports: login, email, websites failing | Escalated to technical team |
| 14:50 | WHM/cPanel locally inaccessible | Confirmed system-level issue |
| 14:55 | Error logs reviewed | Root cause identified |
| 15:02 | Repair script launched | Automated recovery started |
| 15:18 | Repair complete | Services restarted |
| 15:22 | WHM and cPanel accessible | Control panels online |
| 15:30 | All services verified | Full restoration confirmed |
In this specific incident, the downtime was approximately 13 minutes. With automated monitoring, this could have triggered self-repair before client impact.
Root Causes
This happens through:
- Incomplete cPanel updates (update interrupted mid-process)
- Accidental package deletion (cleanup scripts removing too much)
- Low disk space (partial file deletion)
- Hardware failure (RAM corruption, disk I/O errors)
- Migration issues (incomplete file copying during server moves)
FAQ
Q: Does the repair script affect client data?
No. It only touches cPanel system files in /usr/local/cpanel/. Client websites, emails, and databases remain untouched.
Q: How long does repair take?
Typically, 5-15 minutes depending on how many packages need repair. Monitor the output for progress.
Q: Can I run repairs while clients are online?
The repair script can run while users are connected, but service restarts afterward may temporarily disconnect active sessions.
Summary
When multiple services fail simultaneously across your server, check whether you can access WHM locally. If not, run the diagnostic process (check status, review logs, and verify hardware). In most cases, cPanel's repair script fixes the underlying issue.
The methodology is simple: diagnose the root cause, run the repair tool, restart services, and verify access. Most incidents resolve within 30 minutes.
If issues persist after running the repair script, for hands-on assistance, contact our support team. We've handled hundreds of these incidents and can guide you quickly to resolution.



