Basic (probably invalid) question: what is the order for updating WHM, etc. ...


Sep 6, 2014
cPanel Access Level
Website Owner
Apologies for typo in Title, "Basic", not "Baic". WI-FI keyboard!


Following on from my earlier post on Linux, Apache, WHM & cPanel training and development.


I'm currently a webmaster and web developer using a UK based VPS Cloud - new to WHM, but more familiar with cPanel from a Shared Hosting perspective.

I'm beginning to see what my responsibilities will be in terms of security and optimization, and 'hardening'.

I understand that the hosting provider is responsible for the server, et al; though I'm not sure exactly what at the moment, but I hope to ask them the following questions too.

Sorry for the tiring repetition... I appreciate and accept that these question might be invalid, but I'm approaching this learning curve from a very basic and naive perspective.


1 - Who updates WHM and when? Release, or Stable? For example, current WHM is 11.44.1, but I notice 11.46 documentation available online. Also current selected is RELEASE.

2 - Who updates cPanel and when? By the host, or by me, automatically or manually?

3 - Who updates Apache and when? By the host, or by me, automatically or manually?

4 - How is PHP, MySQL updated? At every new release, or is this dictated by the application, such as the CMS? Either way, updates should occur in strict order of release, e.g. 2.2, 2.2, 2.3... when having missed an upgrade.

5 - Essential (recommended) plugins for security and optimization?

6 - Is EasyApache dependent on WHM in terms of order of updating, e.g. WHM Updates, THEN EasyApache? In other words, what is the order for updating overall? Update WHM > Update cPanel > Update EasyApache > Update PHP / MySQL > Update CMS (when appropriate).

My main focus at the moment is preparing for development and production, and I am also in discussion with the hosting provider about this: hardening and optimization - not that there's any major issue, just that there are number of Defaults set for items that apparently should be set to alternative options, contrary to some Defaults

I hope I've explained myself clearly, I think perhaps not! :) I tremble LESS here compared to when I'm on StackOvr/flow!
Last edited:


Staff member
Apr 11, 2011
Hello :)

1. You will need to contact your hosting provider to get a better idea of how exactly they manage your server. As far as the release tiers, this is documented here:

cPanel & WHM Product Versions and the Release Process

2. cPanel/WHM are not separate applications. Both update at the same time.

3. This question is also better answered by your hosting provider. There is no standard here, as it depends on the type of service your provider offers. VPS owners typically manage their own servers.

4. Apache and PHP are updated through EasyApache:

Introduction to EasyApache

5. The "Security Advisor" option in Web Host Manager is a good place to start. Also, CSF is a firewall management utility that many administrators use.

6. EasyApache and upcp (cPanel update process) are independent of one another. This is explained in the "Introduction to EasyApache" document referenced above.

Thank you.