ISPAPI Registrar Module
A Registrar Module connects WHMCS to the Domain Registrar’s System. This Documentation covers the HEXONET/ispapi WHMCS Registrar Module maintained by HEXONET’s 3rd-party Software Integrations Team.
NOTE: If you experience any issue when using this module, please take a look at the FAQs or get in touch with our Support team.
Firstly, we want to welcome you on board. We are always interested in making our WHMCS integration and documentation better. So, in case you want to provide us some feedback, you’re welcome. We have a very short release cycle and can release patches and new features quickly, if necessary.
Back to topic, here the steps describing how to start with us using WHMCS.
Registrar TLD Sync / Pricing Import (WHMCS 7.10 ++)
- include ID Protection Setting
- include EPP Code Requirement Setting
- … and Domain Restore related Data
- Transliteration Support
- Internationlized Domain Names (IDNs)
- Better Additional Domain Fields
- Fully Translated (AR, DE, EN, FR)
- Customizable Translations
- Automatic Pre-Fill and Completion
- Built-in - No Configuration File required!
- Premium Domains
Domain & Transfer Synchronization
- Configurable: Auto-Suspension after Expiration
- Domain Registration (feat. .SWISS!)
- Domain Transfer, plus
- Cancel Transfer
- Resend Transfer Confirmation Email
- Status Details accessible
- Post-Transfer NS Update
- Post-Transfer Contact Update
- Domain Renewal
- Domain Restore
- Domain Release / Explicit Deletions
- Domain Suspension / Unsuspension
- Domain Management
- Automatic Registrar Lock
- Contact Data / WHOIS Update (UTF-8 capable)
- Change of Registrant / Trade
- IRTP / Domain Contact Verification
- Whois Output Settings
- ERRP Settings
- Private Nameserver Registration & Management
- Get EPP Code
- TLD-specific free Whois Privacy for Individuals (.ca, .se, .nz)
- Domain Addons
- Record-Types: A, AAAA, MX, MXE, CNAME, TXT, SRV
- DNSSEC / SecDNS Management
- Translation Support
- Sandbox Environment Support
- Web Apps (G Suite, …)
- Proxy Server Support
- 1-Click Migration from WHMCS’ built-in HEXONET Module
- Account Balance Overview
- Version Check
We encourage our Resellers to stick on the latest WHMCS release for security reasons and to benefit of latest features and patches.
- WHMCS <7.8: our module in version 5.1.12
- WHMCS >= 7.8 / better >=8: our latest module version
- Installed and working: curl, php-curl
For the latest WHMCS minimum system requirements, please refer to System_Requirements.
Create your Account
We have two System Environments:
- an Operational Test & Evaluation (OT&E) system and
- a LIVE system (“the real world”)
The OT&E system is thought for Integration Tests and everything you’re doing there is for free - but ordered products are then also not existing in real. With an OT&E account, all functionality and transactional processes can be tested thoroughly. The LIVE system corresponds to the real world system and comes with costs for ordered products and services.
LIVE System Signup can be done here. OT&E System Signup can be done here.
The creation of your account is completely free of charge. Your account will be used in WHMCS for ordering our products and services and for managing them.
Once your Account is created, a confirmation email with connection information will be provided to you by mail.
Domain Renewal Mode
By default the Domain Renewal Mode in our Systems is set to “Automatic Renewal”. WHMCS comes with its own logic and processes regarding domain management and that’s why it is important to change this default behavior accordingly. This is necessary to avoid domains are getting automatically renewed and causing costs for you if your customer is not interested in a renewal. Your customer wouldn’t renew then over WHMCS, but our API would do so. Please follow the below instructions to get this covered:
- Login to your account here: LIVE System or OT&E System.
- Click on your user name at top right
- Navigate to
Products > Domain Name Settings > Renewal Mode for New Domains
- Select ‘Expire Domain’ and press ‘Save’
Note: The renewal mode setting is only applied to new domain registrations in your account. If you already have domains registered previously in your account, ensure to reconfigure also their renewal mode to
Installation / Upgrade
Firstly, we want to point you to the setting
max_input_vars of your php.ini. You need to update this setting to
10000 to get WHMCS’ Registrar TLD Sync / Pricing Import up and working. This is not something special related to our integration but of WHMCS Core. Let me point to the PHP Docs and this feature request addressed to WHMCS as well.
HEXONET Module that is shipped with WHMCS is maintained by the WHMCS Core Team and as Pull Requests took to long, we decided to work on our own Module Version. We highly recommend downloading and installing our white label module
HEXONET/ispapi which is our maintained version and providing you latest features and patches. Available for download here.
- Download the ZIP archive and extract it to your HDD
- Extract the zip archive into the root directory of your WHMCS instance
- If you want to use our Transliteration, please copy the folder
includesinto the root directory of your WHMCS instance. Our Transliteration just cares about replacing Greek characters with Greeklish ones in contact data and replacing HTML Entities with their related character pendant.
- Care about creating language override files for our translation files or just include them in existing files - read below.
/lang/overrides if these files exist there: arabic.php, english.php, french.php, german.php.
If not - please create these files.
<?php include(implode(DIRECTORY_SEPARATOR, [ ROOTDIR, "modules", "registrars", "ispapi", "lang", "overrides", "arabic.php"]));
<?php include(implode(DIRECTORY_SEPARATOR, [ ROOTDIR, "modules", "registrars", "ispapi", "lang", "overrides", "english.php"]));
<?php include(implode(DIRECTORY_SEPARATOR, [ ROOTDIR, "modules", "registrars", "ispapi", "lang", "overrides", "german.php"]));
<?php include(implode(DIRECTORY_SEPARATOR, [ ROOTDIR, "modules", "registrars", "ispapi", "lang", "overrides", "french.php"]));
If these files already exist, please just copy’n’paste the above related include statements at the end of them. If you want to translate into a language that is not yet built-in in our module, we suggest to copy the
/lang/overrides/<language>.php of your WHMCS System, where
<language> corresponds to the language identifier e.g.
dutch etc. Then translate the contents of that file into the desired language. Just in case a translation is missing, we’ll be falling back to english.
For cPanel users: Use this video on how to upload and extract a ZIP archive using your cPanel. Use this video on how to find the
public_html folder in your cPanel. In there you’ll find a subfolder
whmcs containing again a subfolder
modules and then the subfolder
registrars. Please copy the above mentioned folder of our zip archive into that folder.
For non cPanel users: check location
/var/www/whmcs (default path) or eventually
Note: Feel free to add yourself as Watcher to that github repository by clicking on the
Watch button at the top of the page and then choose
Releases Only. We are aware of that installation and upgrade effort of our module is something we need to minimize. We have projects in queue to achieve that and to cover a lot more.
Before we continue, we want to point you to the Section Migrating if you have already started with the HEXONET Module that is shipped with WHMCS. Switching Domains to our ISPAPI Registrar Module can be done in ease at this point.
When upgrading: Please make sure to back-up your existing CNIC bundle to prevent any data losses.
- Backup folders to a safe path
modules/widgets/ispapi*.php // just delete these ones if present
modules/widgets/hexonet_summary.php // just delete this one if present
And then delete these folders from your WHMCS instance.
- Extract the zip archive into the root folder of your WHMCS instance. (Upgrade completed! )
IMPORTANT Ensure to read the Release Notes carefully before Upgrading! Our Release numbers follow semantic versioning and thus we follow the version syntax: MAJOR.MINOR.PATCH. Please ensure to backup your current version’s folder to have a fallback possibility you can use, just in case there’s something wrong with our new version.
You can always upgrade without worries if the PATCH or MINOR version have just changed. If the MAJOR version has changed, check the release notes to avoid unexpected issues as a new MAJOR version comes always with breaking changes or at least with a new module behavior.
Follow the installations steps below and consider the provided release notes for the MAJOR version upgrade. In detail: if you’re upgrading from 1.x.y to 4.x.y, ensure to check ALL Major Version Release Notes up to the version you’re upgrading too. In this example, check the release notes for 2.0.0, 3.0.0 and 4.0.0.
If you’re upgrading regularly and keeping all our modules / addons / widgets updated, you run in less upgrade effort than doing multiple major version number steps. You can add/subscribe yourself to release notifications in our github repositories to get informed about new releases.
Module Updates Subscription
Feel free to add yourself as Watcher to our GitHub repository to get informed about new releases:
Simply click on the “Watch” Button, select “Custom” and there “Releases” and save. We also highly enjoy getting starred! Another solution is to use our Modules Overview Widget.
HEXONET Module Migration
Some of our customers started with the HEXONET module as it is shipped with WHMCS. The ISPAPI Registrar Module is the maintained white-label version of the HEXONET Module. Migrating can be done by a single click:
- Ensure to have file
hexonet_summary.phpdeleted (an old and deprecated HEXONET widget) - just in case you’re using it. WHMCS Widget folder can be found under path
/modules/widgetsof your WHMCS instance. A replacement for that widget can be found here.
- You can now deactivate the HEXONET module as the ISPAPI module is used as replacement.
For users with WHMCS version 8.0+, Navigate to
WHMCS Admin Panel>
Domain Registrars. Find the
HEXONETModule in the list and activate it. If you’re not able to find that Module in the list, something went wrong with the Module Installation - please check this part again please.
For users with WHMCS version 7.3+, Navigate in your WHMCS instance to
Domain Registrars. There, ensure to have the
HEXONETmodule deactivated. Find the
HEXONET/ispapiModule in the list and activate it. If you’re not able to find that Module in the list, something went wrong with the Module Installation - please check this part again please.
Now, configure this Module by entering your credentials (OT&E or LIVE System Account). Activate
Use Test Environment by activating the checkbox in case you want to use the OT&E System - just ensure you don’t mix it up with LIVE System Credentials or vice versa.
NOTE: We highly recommend to have two Sytems set up - An Integration Test / Demo System connected to our OT&E System and your Production System connected to our Live System. Switching this in one System may lead to bad experiences later on e.g. Registrar TLD Sync related, Domain Portfolio Mixup etc. You can request a free Developer License at whmcs.com that you can use for an internal hosted WHMCS Installation.
You may configure a
Proxy Server to use for connecting. This configuration setting is optional. But this might be the entry point for performance improvements. I you have a Reverse Proxy set up, communication will be sent to this server. It could care for keeping connections open for a while (connection keep-alive) to improve HTTP communication performance. This is similar to what we offer via the high-performance proxy setup, but a way working for other web servers than Apache. This setting does not work together with the High-Performance Proxy Setup!
IRTP (Inter-Registrar Transfer Policy) setting, we suggest using
Option 1 to activate the default WHMCS way of the IRTP integration. Find further details documented below.
Automatic Transfer Lock setting by using the appropriate checkbox to ensure outgoing transfers can’t be initiated in ease. We suggest that setting as it helps securing your domain names from getting transferred out in ease.
Automatic NS Update setting in case you want our module to update domain’s nameservers automatically after successful transfer. Just a little note: WHMCS itself by default suggests your configured default nameservers. This setting will automatically update the nameservers after successful transfer without knowing if the customer set these nameservers or if WHMCS did it. Removing all nameservers from input fields in step Configure in WHMCS’ Shopping Cart won’t change anything as WHMCS keeps then using the default nameservers. So, be aware of that design issue of WHMCS for Transfer Orders when using that feature. Read FAQ Entry #25 for more details.
Automatic Contact Update setting in case you want our module to update your .com/.net/.cc/.tv domain’s contact details automatically after successful transfer. The mechanism will care about updating the related registrant contact details to the data of the client who initiated the transfer. It also cares about updating admin/tech/billing contact details as configured in WHMCS. This mechanism will only be updating domain names where we were not able to parse Contact Details out of WHOIS Data after successful transfer because of active WHOIS Privacy / id protection service (Hint: “Redacted for Privacy”).
If you want to offer secure DNS /
DNSSEC / Secure DNS, feel also free to activate the checkbox
Offer DNSSEC / Secure DNS. Find further details documented here.
Transfer Checkout Pre-Checks setting in case you want to have Domain Transfer Orders pre-checked. We validate if initiating the Transfer would succeed - so, if:
- the given eppcode / Authorization Code is correct,
- the Domain Name is unlocked
If something fails, it would look like shown below:
Sync Id Protection to include synchronizing this Domain Add-Ons checkboxes within the Registrar TLD Sync. We just Sync it for TLDs configured with us as Registrar in Auto Registration (see Domain Pricing Overview).
Suspend after Expiration if you want to suspend domain name automatically after expiration. This option is useful if you’re faced with clients who are used to pay their domain renewals very late and you want to pressure a bit. Worst case such clients would lose domains when accidentally forgetting about the renewal. You can unsuspend domains over Client Profile > Tab Domains using the Button
High-Performance Setup if you want to activate the High-Performance Proxy Setup. Please read this section about the technical requirements and necessary configuration steps first. This mechanism is only compatible to Apache - still, you might try to work out a similar configuration for your Web-Server. We were not successful for LiteSpeed.
If you want to offer our Web Apps to your customers, activate the
Offer Web Apps checkbox. Find further details documented below.
Now, press Save and voilà. If you’re getting a green message - you’re connected. Otherwise, you have to investigate further as described here.
In case you are experiencing network latency issues (long node path to our data center), this setup may help improving the situation. After activation your WHMCS is requesting ALL our API requests via HTTP to localhost / 127.0.0.1 and there, a Proxy Mechanism cares for forwarding these requests to our API endpoint using HTTPS. This mechanism improves the performance as it is keeping the connections persistent and avoids a bit of reccuring connection handling overhead.
At least Apache version 2.2.9 is required.
An example Apache configuration with binding to localhost:
<VirtualHost 127.0.0.1:80> ServerAdmin webmaster@localhost ServerSignature Off SSLProxyEngine on ProxyPass /api/call.cgi https://api.ispapi.net/api/call.cgi min=1 max=2 ProxyPass /api-ote/call.cgi https://api-ote.ispapi.net/api/call.cgi min=1 max=2 <Proxy *> Order Deny,Allow Deny from none Allow from all </Proxy> </VirtualHost>
The following Apache2 modules must be installed and activated:
sudo a2enmod http_proxy ssl sudo service apache2 restart
Other Web Servers
Basically, LiteSpeed is a Drop-in Replacement for Apache and very compatible with Apache Configuration Settings. Still, we were not able to get the above mechanism supported by LiteSpeed.
Let me point you to the “Proxy Server” setting as well. Set up a Proxy Server with a connection keep-alive setting and provide the ip address and the port e.g.
Proxy Server: 22.214.171.124:8080
or just the ip / hostname if port 80 in use
Proxy Server: 126.96.36.199
Domain Contact Verification
It governs the domain name transfers between ICANN registrars. The Inter-Registrar Transfer Policy (IRTP) includes changes to domain ownership. Small changes to a domain name’s registrar first name, last name, organization, and email address trigger the validation process.
IRTP handling is supported in WHMCS since version 7.6. We have adapted our ISPAPI registrar module to support this accordingly. Read more here about IRTP handling via WHMCS.
Our own related guide about IRTP and how our Backend System API is supporting it, can be found here.
We have introduced two options in the registrar module configuration settings. (
<WHMCS admin area> Setup > Products/Services > Domain Registrars > ISPAPI > Configure)
- Options One: Check to act as Designated Agent for all contact changes. Ensure you understand your role and responsibilities before checking this option. (SUGGESTED!)
- Options Two: Check to use IRTP feature from our API. (DEPRECATED)
Option One (SUGGESTED):
This is the default and suggested setting. By checking this option you confirm to have obtained verifiable DA (Designated Agent) status. You will be automatically acting as Designated Agent(DA) for the new and old registrant. Our registrar module confirms the DA status by sending the following additional domain fields automatically with the TradeDomain command:
"X-CONFIRM-DA-OLD-REGISTRANT" => 1, "X-CONFIRM-DA-NEW-REGISTRANT" => 1
Note: Ensure to have the “gTLD Inter-Registrar Transfer Policy” settings deactivated/removed in our control panel. If you haven’t configured this in the past, no worries.
Option Two (DEPRECATED):
By checking this option you confirm to have obtained verifiable DA (Designated Agent) status to act on behalf of the new registrant of a domain name.
- navigate on the control panel:
Reseller Controls > Product Settings > Domain Settings. Under the “gTLD Inter-Registrar Transfer Policy” section first read the terms, implement the legal changes, and finally verify your Designated Agent status and your wish to alter the ModifyDomain command for IRTP compliance.
- Whenever your customer evokes a material change of registrant, the Reseller must submit the change as the DA for the new registrant.
- The prior (old) registrant will always be sent an authorization email, and they will have fourteen (14) days to confirm the change.
- The opt-out of the sixty (60) days transfer lock is enabled for module Resellers by default. However, if a Reseller wishes to opt-IN (disable the automatic opt-out) to the registrar transfer lock so that they can immediately process Change of Registrant requests with added security (for Change of Registrant when email addresses are not working), resellers can simply enable the checkbox stating “Disable the automatic opt-out. Registrant changes are processed in realtime, but domains will also get transfer-locked for 60 days. Dependant on fallback being enabled.
Web Apps Support
This feature can be enabled in the Registrar Module configuration. When enabled, your customers can connect Web Apps to their domains in case the related DNSZone is managed by HEXONET (Active Addon
DNS Management). For now, we only have integrated
G Suite, just let us know if further Web Apps are of high demand for you. Here the ones HEXONET in general supports on API-side: Web Apps.
Here some impressions:
Domain Renewal Restrictions
NOTE: This step is mandatory!
Read here about how to customize the Domain Renewal Restrictions.
Add the below code snippet to your
// generated on 2021-05-17 $DomainRenewalMinimums[".amsterdam"] = "61"; $DomainRenewalMinimums[".at"] = "61"; $DomainRenewalMinimums[".be"] = "61"; $DomainRenewalMinimums[".ch"] = "61"; $DomainRenewalMinimums[".co.at"] = "61"; $DomainRenewalMinimums[".com.ar"] = "61"; $DomainRenewalMinimums[".com.lv"] = "61"; $DomainRenewalMinimums[".com.ru"] = "61"; $DomainRenewalMinimums[".com.ve"] = "61"; $DomainRenewalMinimums[".co.ve"] = "61"; $DomainRenewalMinimums[".de"] = "61"; $DomainRenewalMinimums[".dk"] = "61"; $DomainRenewalMinimums[".info.ve"] = "61"; $DomainRenewalMinimums[".it"] = "61"; $DomainRenewalMinimums[".jp"] = "61"; $DomainRenewalMinimums[".li"] = "61"; $DomainRenewalMinimums[".lu"] = "61"; $DomainRenewalMinimums[".lv"] = "61"; $DomainRenewalMinimums[".net.lv"] = "61"; $DomainRenewalMinimums[".net.ru"] = "61"; $DomainRenewalMinimums[".net.ve"] = "61"; $DomainRenewalMinimums[".nl"] = "61"; $DomainRenewalMinimums[".no"] = "61"; $DomainRenewalMinimums[".or.at"] = "61"; $DomainRenewalMinimums[".org.lv"] = "61"; $DomainRenewalMinimums[".org.ru"] = "61"; $DomainRenewalMinimums[".org.ve"] = "61"; $DomainRenewalMinimums[".pp.ru"] = "61"; $DomainRenewalMinimums[".ru"] = "61"; $DomainRenewalMinimums[".web.ve"] = "61";
The registries behind these TLDs do not support explicit renewals. We start accepting their renewal orders 61 days prior to expiration and we will forward the renewal to their systems as soon as they allow for it.
WHOIS Contact Data
In WHMCS navigate to
Setup > General Settings > Domains and activate the checkbox
Use Clients Details or alternatively configure the input fields directly after that checkbox accordingly. This configures WHMCS to provide the appropriate contact data in the Domain Registration Process. If not configured, a registration attempt may fail as some of the Registries defined one or more such contacts as mandatory.
For WHMCS < 7.10: Check our Pricing Importer AddOn.
For WHMCS >= 7.10: Use the Registrar TLD Sync feature which you can find in the menu Utilities. Read our FAQ entry 61 for details on that feature and FAQ entry 55.
Both ways support import of IDN TLDs. WHMCS supports IDN TLD Import in
Registrar TLD Sync since WHMCS 8 our module did allow IDN TLD import already earlier.
NOTE: The Pricing Importer AddOn is marked as deprecated since a while, we highly suggest to upgrade your WHMCS Software and to start with the
Registrar TLD Sync feature.
In order to support Internationalized Domain Names (IDN) (e.g. v-8.ευ or موقع.وزارة-الاتصالات.مصر), it is required to activate the ‘Allow IDN Domains’ option in the WHMCS Admin area under:
Setup > General Settings > Domains > Allow IDN Domains
NOTE: Even though WHMCS officially supported IDNs since WHMCS 8, our module is already capable of IDN handling for earlier WHMCS versions.
NS & DNS Management
If you want to use DNS, URL or Email forwarding, domains must resolve to the ISPAPI nameserver cluster (ns1.ispapi.net, ns2.ispapi.net, ns3.ispapi.net). Alternatively: your Nameservers, but pointing to the ip addresses of our nameservers, we will explain this in the next steps.
You can enter them in
Setup > General Settings > Domains as Default Nameservers for your customers:
You can also create your own nameserver hostnames and use them, as long as they are registered and resolve to the correct IP addresses.
If you plan to use HEXONET’s DNS, ensure to activate checkbox
DNS Management for the appropriate TLDs in the Domain Pricing Section of WHMCS (System Settings > Domain Pricing). This Domain Addon, when ordered, leads to getting an internal DNS Zone created at HEXONET, ready to use with the related domain name and the domain itself will be connected to it. This service is totally for free, no worries. Reminder: If you want to use a 3rd-party DNS, nothing you should start offering.
When registering a domain name, a checkbox for this Domain Addon will then be offered to your customers. When used, it finally allows managing resource records for that domain name over WHMCS.
NOTE: If you plan to offer .DK Domains, please ensure to have your custom nameservers registered at DK Hostmaster first. Read here.
Vanity Name Servers.
Vanity name servers allow you to create name servers that reflect your organization (in this example “anthony.com”). If you want to use HEXONET’s DNS and Nameservers, but you’re looking for a way to keep them branded? Then, this section covers what you need.
So, instead of using our name server set,
ns1.hexonet.net ns2.hexonet.net ns3.hexonet.net // aka. ns1/ns2/ns3.ispapi.net.
Vanity Name Servers allow for your branded name server set:
ns1.anthony.com ns2.anthony.com ns3.anthony.com
Our NS IP Addresses
Our nameservers use the below ip addresses:
ns1.hexonet.net -> 188.8.131.52 ns2.hexonet.net -> 184.108.40.206 ns3.hexonet.net -> 220.127.116.11
In addition to the below private Nameserver Settings, please do not forget to add A records to the related domain name’s DNSZone (in this example “anthony.com”) via DNS Management:
In WHMCS’ Client Area, please navigate to the domain name under which you want to have you nameservers registered and managed. e.g. if you want to have the nameservers “ns1.anthony.com”, “ns2.anthony.com” and “ns3.anthony.com”, then navigate to the detailed overview of the domain “anthony.com” and then to
Here, you either Register new Nameservers or Modify existing Nameservers accordingly. If you don’t remember the current ip addresses of existing nameservers, well then delete and recreate them just with the new ip address. Just in case adding or modifying Nameservers is resulting into errors, be aware of that some registry providers are doing nameserver checks. So ensure the provided nameserver ip addresses are reachable - which should of course be the case for our nameservers. Also, sometimes it might be necessary to have the DNS Management Addon activated, if the underlying registry provider of a TLD covers private Nameservers through Glue Records.
Finally ensure to have this set of nameservers configured as Default Nameservers in WHMCS (read above) so that your clients are getting them suggested in the order process at the shopping cart level. In addition care about having the
DNS Management Domain Addon configured accordingly (read above).
- WHMCS is nowhere listing already existing private nameservers, still you recognize such a list in the screenshots. This is something our ISPAPI Registrar Module is injecting which is working with the Six and the Twenty-One Template. Let us know, if it is incompatible with your custom template, we will extend then (or temporarily switch to twenty-one).
- It may take a while (few hours) until these changes have been announced. Please be a bit patient.
If this is still not working as expected, please reach out to us.
WHMCS doesn’t allow SRV records. Our module makes it possible! We have WHMCS templates customized to introduce the SRV Resource Record to WHMCS.
Find the Template File for
First make a backup of the
clientaredomaindns.tpl template file of your current theme in use. Then replace it with our template file.
Voilà, now you are ready to support SRV records!
In order to activate this feature, within the WHMCS Admin area, go to
Setup > Products/Services > Domain Registrars > ISPAPI
and activate the DNSSEC checkbox.
In the domain details, a new “DNSSEC Management” section will be displayed. This feature allows your customers to add DS and KEY records and set the maxSigLife.
Activate our Registrar Module’s Configuration Setting Transfer Checkout Pre-Checks, if validating Transfer Orders on Shopping Cart Checkout is something you consider as useful. We’ll be prechecking then basic blockers like wrong Auth/EPP Code or the Domain being still locked.
For Pending Transfers, we offer special buttons like “Cancel Domain Transfer” and “Resend Transfer Approval Mail”. In addition we provide the full Transfer Log for your Reference.
Activate our Registrar Module’s Configuration Settings Automatic NS Update Automatic Contact Update, if these Features are of interest. Find them well explained in the Module Configuration Section.
We introduced the support of Domain Restores with v4.8.0 of our Registrar Module. As Domain Restores are very poorly documented, here some additional information about how this works.
Read the article “Domain Grace and Redemption Grace Periods” of the WHMCS Documentation.
So, Domain Restores are in WHMCS covered over Renewals. Whenever a Domain is in Redemption Grace Periods, we will display it as follows:
If you trigger a Renewal for such a Domain, WHMCS will include additional Redemption Fees in the related invoice:
After Payment, WHMCS will then invoke the Registrar Module accordingly. We execute the Restore and if necessary also followed by a Renewal. This might be necessary in case of multi-year Restores where the Restore Period our System uses differs from the Renewal Period provided by WHMCS.
Additional Domain Fields
NOTE: Since Version 6 of our Registrar Module, no need to worry about this configuration section any longer. We recommend removing an existing configuration file. You can skip this section then.
The registration of some domain extensions requires sometimes additional domain fields (e.g. Legal Type and CIRA Agreement for .CA domain).
In order to provide this additional fields on the registration page and map them with our module, it is about sharing with WHMCS that there are such fields for the specific TLD. Therefore, our HEXONET specific configuration needs to be injected.
Prior to WHMCS 7.0, create the file
From WHMCS 7.0 on, create the file
Our Configuration Sample
If you want to customize an additional domain field configuration, just copy the code of the appropriate domain extension out of our sample file and add it into the above mentioned file.
For some of the additional domain fields, it makes sense to prefill them with data out of client details:
- VAT ID input fields
- DK Hostmaster User ID input fields
- .CA: Contact Language (X-CA-LANGUAGE)
Let us know if you need other fields also being prefilled.
DK Hostmaster User ID:
Create a new custom field through
Setup > Client Custom Fields using the below configuration:
Field Name: DK-Hostmaster User ID
Field Type: Text Box
No further configuration settings necessary.
In case your clients provide their data, it will be pre-filled accordingly.
FYI: When installing WHMCS 7.6 and above, it is already enabled by default - you can skip this section then.
WHMCS comes with some background automation scripts that allow to synchronize data like expiry date and the domain status / transfer status with the one in the registrar system. Ensure to have the WHMCS Post Installation Steps covered, especially the Automation Settings chapter.
Find here on how to set the Domain Synchronization up.
If necessary, you can trigger the Domain and Transfer Synchronization also manually from Command Line:
/usr/bin/php -q $YOUR_WHMCS_CRONS_PATH/cron.php do --DomainTransferSync --DomainExpirySync
$YOUR_WHMCS_CRONS_PATH is the path to the cron script folder of your WHMCS instance.
Find here the full technical chapter about WHMCS Crons and their Options as reference.
The HEXONET lookup provider yields high-performance availability checks of the domains using our fast API. For the domains that are not supported by HEXONET, the lookup fallbacks to WHOIS. In order to utilize this feature, you just have to choose “HEXONET” (The one with the logo HEXONET ISPAPI) in the lookup provider suggestions.
This new lookup feature requires at least WHMCS version 7.3
Configure the lookup provider by activating the suggestion engine for accurate and efficient search results. You can customize our sugestion engine’s default settings by using the additional configuration options provided. The TLD List selection field is provided by WHMCS itself and can’t be influenced/skipped by our integration. Use
CTRL+A to select all TLDs for lookup over HEXONET.
The Suggestion Engine provides fast domain suggestions based on the searched domain or keyword.
HEXONET is providing Registry premium domains support. (Without having to install our ISPAPI High-Performance DomainChecker Module)
NOTE: Since WHMCS 7.10, you can define a list of TLDs that have to be checked over the Lookup Provider. We suggest to select ALL TLDs you want to offer, even if you are not offering them over HEXONET / ISPAPI.
In order to see premium domain name suggestions in the search results, configure the “Premium Domains” section in WHMCS.
In order to configure your price markups for premium domains, you can use the “Configure” button.
Better Domain Search
Even though this step is optional, it might be of interest for you!
The ISPAPI High Performance DomainChecker Module enables extremely fast domain availability checks utilizing HEXONET’s registrar API. Further more, this module also allows the reseller to sell lucrative premium domain names. Follow this guide to get it up and running.
Migrating your Portfolio
If you have doubts related to prices, please contact our Sales Department. We are highly interested in helping you getting your domain portfolio migrated to us - just get in touch with us here. We are experienced with migrations and have Tools ready for this - even an Auto-Migration Tool for WHMCS. Ask for it!
The customer is king, is a principle to which we ascribe.
Importing existing Domains
If you started with any other frontend, hosting solution or custom solution and you’re already having domains on your account at HEXONET, you can still start with WHMCS. We offer a domain importer addon for free. It imports domains and automatically create clients if not existing in your WHMCS system based on the Registrant Contact Data. Find the Module documented here.
NOTE: if you import domains with activated trustee service, be aware of that these costs won’t be invoiced in WHMCS as WHMCS itself has no built-in support for a trustee service domain addon. Feel free to upvote our feature request for this here.
An alternative manual Way of Importing is described here.
WHOIS Privacy Management
The registrar module fully supports the WHOIS Privacy service WHOISTRUSTEE.com:
ID protection flag gets enabled or disabled in the WHMCS Admin Area, the module synchronizes the new protection status to the domain.
If the ID Protection flag gets disabled in the Admin Area, clients will not be able to re-enable WHOIS Privacy themselves, it can only be re-enabled by an Administrator of your WHMCS Instance!
In addition, the Registrar Module adds a new Menu Entry
WHOIS Privacy that will show up on Client Area in the Domain Details Page.
Using that Feature, a client can verify the current protection status, and enable or disable it automatically.
The new WHOIS Privacy page looks as follows (protection is enabled in the example):
TLD-specific WHOIS Privacy
TLDs like .ca, .se, .nz offer a free Whois Privacy Service for Individuals provided by the Registry Provider. This Service is by default active and therefore protects Whois Data, but it can also be disclosed.
This is accessible in WHMCS’ Client-Area over Menu Entry “WHOIS Privacy”. The regular ID Protection Service is accessible over Menu Entry
Addons, if in offered and mainly available for gTLDs/nTLDs.
Again, the Registry Provider’s Whois Privacy Service is only available for Individuals and by default activated:
Therefore, unavailable for Organizations:
On the left, you’ll get your account balance displayed, and on the right, if you see the message “You’re running with the latest version.”, then you are running the latest release, You can also verify your current version on the bottom right of your widget e.g. “Current version x.y.z.”.
Otherwise, we suggest upgrading. Click on the button “Latest version x.y.z available!” to download the latest module release.
- Hooks: With v16.10.0 we’ve added a possibility for injecting custom hook logics. Add your custom logic to
Since Version 6 of our Registrar Module, we have introduced a Translation Mechanism that is allowing us to translate our Module’s Texts in Client Area.
Find our translation files in the
lang folder of our ZIP Archive. Read about the installation steps here. Feel free to support us with missing language files. Contributions are highly welcome!
Since Version 6 of our Registrar Module, we started considering WHMCS’ transliterated data for contact data in Registrations, Transfers and Contact Information Updates.
We ignored this in the past as WHMCS in Version < 7 had a lot trouble regarding Transliterations. Our Module offers a ready-to-use transliteration approach that replaces HTML Entities with their UTF-8 Pendants and maps Greek Characters to so-called Greeklish ones. Copy folder
includes from our ZIP Archive to your WHMCS System’s root directory. Please cover this step after each module upgrade.
Read here for further Details.
WHMCS comes with a default configuration that is not covering all TLDs. We started gathering such cases, feel free to copy the contents of our sample configuration file to the whois.json override file. Ensure the final json format is valid using jsonlint.com!
NOTE: The above provided configuration is just an example how it might work. We know this .bo WHOIS Server Configuration not being compatible with the possibilities of WHMCS Core.
Change of Registrant
Will be automatically executed when Contact Information has changed accordingly. If there are costs for this process, we will output them in the WHMCS Activity Log for Reference. WHMCS is not invoicing this as it is completely incompatible with Domain Trades.
We are looking for a solution to get this improved, but probably impossible as long WHMCS Core isn’t support this natively. At least our Module is logging Trade Costs into the Activity Log and allows some very basic Controlling.
Our registrar module is supporting .SWISS registrations. This function requires WHMCS 6.x and has been reviewed from scratch in our Registrar Module Version 6.
When using our Module in Version < 6:
.SWISS registrations require 2 additional domain fields. Please add the following code at the end of the /resources/domains/additionalfields.php file:
## .SWISS DOMAIN REQUIREMENTS ## $additionaldomainfields[".swiss"] = array(); $additionaldomainfields[".swiss"] = array( "Name" => "Enterprise ID", "Type" => "text", "Required" => true, "Description" => "(must be CHE followed by 9 digits)", "Ispapi-Name" => "X-SWISS-REGISTRANT-ENTERPRISE-ID", ); $additionaldomainfields[".swiss"] = array( "Name" => "Intended use", "Type" => "text", "Required" => true, "Ispapi-Name" => "X-CORE-INTENDED-USE", );
.SWISS registration process:
- Customer registers a .SWISS domain (like he will register a normal domain)
- Once the invoice paid, the domain registration will be sent
- The domain will be set to Pending Registration until the application process has been completed
- A cronjob is checking the application status once a day
- If the Registration succeeded the domain will be set to Active and the customer will be able to manage it.
- If the Registration failed, the domain will be set to Cancelled and you will have to refund the customer manually.
In order to work automatically the WHMCS Cron job has to be configured properly. Please have a look at this page.
Further information regarding .SWISS is available in our wiki here.
HEXONET Account Hardening
In order to secure your WHMCS installation, we recommend creating a User Role only dedicated for WHMCS. This User Role will only be able to execute the white-listed commands.
Whitelist API Commands
Here the list of commands ordered by whmcs module, that you need to whitelist - see next section where to paste them.
ALL our modules:
The below list covers all commands you need for all our modules (except deprecated ones).
AddDomain():ALLOW AddDomainApplication():ALLOW AddNameserver():ALLOW CheckAuthentication():ALLOW CheckAuthorization():ALLOW CheckDomains():ALLOW CheckDomainTransfer():ALLOW CheckIDNLanguage():ALLOW ConvertIDN():ALLOW CreateSSLCert():ALLOW DeleteDomain():ALLOW DeleteNameserver():ALLOW DENIC_CreateAuthInfo1():ALLOW EndSession():ALLOW ExecuteOrder():ALLOW GetEnvironment():ALLOW GetUserIndex():ALLOW ModifyContact():ALLOW ModifyDomain():ALLOW ModifyNameserver():ALLOW ModifyUserPassword():ALLOW ParseSSLCertCSR():ALLOW PayDomainRenewal():ALLOW PushDomain():ALLOW QueryDNSZoneRRList():ALLOW QueryDNSZoneStats():ALLOW QueryDomainList():ALLOW QueryDomainOptions():ALLOW QueryDomainRepositoryInfo():ALLOW QueryDomainSuggestionList():ALLOW QueryDomainWhoisInfo():ALLOW QueryEnvironmentList():ALLOW QueryExchangeRates():ALLOW QueryObjectList():ALLOW QueryObjectLogList():ALLOW QueryOrderList():ALLOW QuerySSLCertDCVEmailAddressList():ALLOW QueryUserObjectStatistics():ALLOW RenewDomain():ALLOW RequestDomainAuthInfo():ALLOW ResendDomainRegistrantVerificationEmail():ALLOW ResendDomainTransferConfirmationEmails():ALLOW ResendSSLCertEmail():ALLOW RestoreDomain():ALLOW SetEnvironment():ALLOW StartSession():ALLOW StatusAccount():ALLOW StatusContact():ALLOW StatusDNSZone():ALLOW StatusDomain():ALLOW StatusDomainApplication():ALLOW StatusDomainTrade():ALLOW StatusDomainTransfer():ALLOW StatusObjectLog():ALLOW StatusRoleUser():ALLOW StatusSSLCert():ALLOW StatusUser():ALLOW TradeDomain():ALLOW TransferDomain():ALLOW UpdateDNSZone():ALLOW
Create a Role User
Create a restrictive Role User by:
- Login to the HEXONET Control Panel
- Click on your username (top right)
- Click on ‘Settings’, click on ‘Share Access’ from the dropdown menu
- Create a new role user by clicking on “New Role User”
Fill in the necessary input fields:
Role ID: whmcs Password: ********** Default Access: Deny Status: Active
- Copy and paste the your desired commands from previous section into the “Access Control” section. Please remove any default commands listed in that textarea first.
- [Optional] Continue to the “IP Restrictions” step and enter the outgoing ip address of your server (that runs your WHMCS instance)
- Login to your WHMCS Backend and replace your Hexonet username with your role user.
(If your Hexonet username is “customer1” and your role user is “whmcs” you have to use the login like this: customer1!whmcs)
FYI: Further documentation about securing your WHMCS installation, can be found in the
Post Installation Suggested Steps section of the WHMCS Installation Guide.
WHMCS itself does not support using 2-Factor Authentication (2FA) for Registrar Modules. So having 2FA activated for your user and using it in WHMCS simply does not work. If you’ve set up a restrictive User Role as described above and you’re using that one in your registrar configuration, then you can activate 2FA for your account (!!!not for your restrictive User Role!!!).
You can activate 2FA by logging in to our control panel (OT&E, LIVE). Then click on your user name at the top right of the page and then navigate to
Settings > Security. There, click on
2-Factor Authentication and follow that wizard.
If you lost your 2FA device / code generator, contact our support - see the footer of this page.
Activate IP Restrictions
You can activate IP Restrictions for both: Your account and the above described User Role. Find instructions on how to do that for the restrictive User Role as described here.
You can do that for your Account by logging in to our Control Panel (OT&E, LIVE). Then click on your user name at the top right of the page and then navigate to
Settings > Security. There, click on
IP Restrictions and follow that wizard.
IMPORTANT: If you’re doing something wrong here, like just white-listing your internal server ip address instead of the outgoing one or not white-listing the ip address you are currently using yourself, you might no longer be able to login. It is also possible to add there ip address ranges. We suggest to have someone of your administrative team helping with that to ensure the correct ip addresses being white-listed. If you run into trouble or need help, contact our support - see the footer of this page.
As the HEXONET system is a pre-paid system, you have to add funds to your account to be able to order products and services. For doing this login in to the HEXONET Control Panel LIVE System. Click on your account name at the top right and then press the button
Add Funds. If you need funds to be added to your OT&E Account, let us know.
Known WHMCS Issues
Find below some collection of topics related to Incompatibilities, Bugs, Requested Features and special Behavior of WHMCS worth to know.
1. Change of Registrant
When it comes to a change of owner while updating whois contact information of a domain, this might lead to a so-called
Trade. This is in general for free, except at some ccTLD providers. In case this results into costs, we log such costs to the System Activity Log for transparency. WHMCS is by design totally incompatible to this process and can’t therefore automatically generate an invoice for this (and to process the update after payment). We are trying to figure a better solution out. A Feature Request has been addressed to WHMCS as well.
2. Registrar-Lock Configuration
Registrar-Lock isn’t supported by all TLDs/TLD providers. Registrars have therefore to implement a manual workaround for getting the menu item removed and the warning about the domain being unlocked removed. This should be better covered by a TLD-based configuration setting (like the one for epp code). A Feature Request has been addressed to WHMCS.
3. IDN Conversion
Reported to and confirmed by WHMCS (-> #CORE-17342). When it comes to IDNs, WHMCS is doing the conversion to punycode incorrect. There are different standards - IDNA2003, IDNA2008, UTS46. It depends on the underlying TLD provider / registry which one to support. e.g. when searching for
fussball.com is the right way for .com and
fußball.de the right one for .de, but WHMCS is converting it to
fussball.de which is still supported and valid, but probably not the domain you were looking for (
fußball.de). This is affecting all registrar integrations.
4. EPP Codes
Some TLDs like .DK, .AT, etc. do not require an epp / authorization code for transfers. That’s why we automatically disable the “epp code” checkbox for such TLDs within the “Registrar TLD Sync” (WHMCS’ pricing import). But when it comes to a system-internal transfer in the HEXONET System, so from customer A to customer B, our Backend System is enforcing the epp / authorization code which is not compatible to the global configuration setting. Workaround: Deactivation of the global configuration. Which is then enforcing the authcode for all transfer cases of the underlying TLD and therefore also not what we are looking for. If a transfer is failing, check the Module Queue (find it under utilities) if there’s an error message including “Authorization failed; USERTRANSFER - AUTH CODE REQUIRED”. If so, please ask the current owner for the epp code and then reach out to our support department. We have addressed a feature request to WHMCS to get this solved.
5. Local Presence Service
WHMCS isn’t offering a Domain Add-On to cover Local Presence Services. This would definitely increase selling. Furthermore, if you’re manually importing Domains to WHMCS with activated Local Persence Service on Registrar-side, it won’t get invoiced in WHMCS. A Feature Request has been addressed to WHMCS.
6. Registrar TLD Sync Automation
Importing TLD Settings and Prices using WHMCS’ Feature “Registrar TLD Sync” got released, but without the option to automatically schedule it via cron. A Feature Request has been addressed to WHMCS.
7. Importing TLD registration terms and renewal terms
For some registries, registration terms do not match renewal terms (such as in the below table).
TLD REGISTRATION TERM (years) RENEWAL TERM (years) --------------------------------------------------------- .as 1,2,3,4,5,6,7,8,9,10 1,2,3,4,5,6,7,8,9 .au 1,2,3,4,5 1,2,3,4 .com.au 1,2,3,4,5 1,2,3,4 .com.my 1,2,3,4,5,6,7,8,9,10 1,2,3,4,5 .id.au 1,2,3,4,5 1,2,3,4 .my 1,2,3,4,5,6,7,8,9,10 1,2,3,4,5 .net.au 1,2,3,4,5 1,2,3,4 .org.au 1,2,3,4,5 1,2,3,4 .tm 10 1,2,5
Although this is supported by CentralNic (both CentralNic Reseller and Hexonet), WHMCS does not have enough flexibility to support this, as it assumes that registries will offer matching terms for both registration and renewal, and so is unable to distinguish between available registration terms and renewal terms within the Registrar TLD Sync Feature. You see registration terms listed that are partially not supported as renewal period.
A Feature Request has been raised with WHMCS to address this issue.
Until WHMCS addresses this deficiency, the workaround is to manually reconfigure these TLDs after import.
8. Function Deprecations
Reported to and confirmed by WHMCS (-> #CORE-17038). The developer documentation for Registrar Modules is pointing out function
GetDomainInformation to be integrated instead of the deprecated functions
GetRegistrarLock. We just run into issues after removing these deprecated functions and re-alived them again. Find the whole related issues and topic documented here. This isn’t affecting you as reseller or your customers. But, when patched by WHMCS, would increase the performance of our integration.
9. localAPI GetTLDPricing
Reported to and confirmed by WHMCS (-> #CORE-16920). This API Command is not returning prices that are set to 0.00. Not affecting our Integration, just something we addressed to WHMCS.
10. localAPI DomainRequestEPP
Reported to WHMCS, but not confirmed as bug. So let us see it as strange behavior. The epp code returned has to be html decoded. Not affecting our Integration.