Skip to content
Snippets Groups Projects
Commit aeab7c92 authored by Adam Caprez's avatar Adam Caprez
Browse files

Merge branch 'update-quickstarts' into 'master'

Update quickstarts

See merge request !8
parents 69bec1de 25f9e35b
Branches
Tags
1 merge request!8Update quickstarts
Showing
with 153 additions and 314 deletions
+++ +++
title = "For Mac/Linux Users" title = "For Mac/Linux Users"
description = "Quickstart Guide for Mac/Linux Users" description = "Quickstart Guide for Mac/Linux Users"
weight = "30"
+++ +++
##### Use of Duo two-factor authentication is **required** to access HCC resources.
##### Please see [Setting up and Using Duo]({{< relref "setting_up_and_using_duo" >}}).
---
<span id="title-text"> HCC-DOCS : For Mac/Linux Users </span> ###### [Jump to the Mac Tutorial Video](#mac-tutorial-video) | [Jump to the Linux Tutorial Video](#linux-tutorial-video)
=============================================================
Created by <span class="author"> Huang Cheng-Wei</span>, last modified
by <span class="editor"> Caughlin Bohn</span> on Oct 26, 2017
[Mac Tutorial Video](#ForMac/LinuxUsers-Video1)
[Linux Tutorial Video](#ForMac/LinuxUsers-Video2)
<span
class="aui-icon aui-icon-small aui-iconfont-warning confluence-information-macro-icon"></span>
##### Use of Duo two-factor authentication is **required** to access HCC resources. Please see [Setting up and using Duo](Setting-up-and-using-Duo_5505155.html).
This quick start will help you configure your personal computer to work This quick start will help you configure your personal computer to work
with the HCC supercomputers. with the HCC supercomputers.
<span
class="aui-icon aui-icon-small aui-iconfont-warning confluence-information-macro-icon"></span>
If you are running Windows, please use the quickstart [For Windows If you are running Windows, please use the quickstart [For Windows
Users](For-Windows-Users_2851288.html). Users]({{< relref "for_windows_users" >}}).
Accessing to HCC Supercomputers Accessing to HCC Supercomputers
------------------------------- -------------------------------
...@@ -39,23 +25,14 @@ type `ssh <username>@tusker.unl.edu` and the corresponding password ...@@ -39,23 +25,14 @@ type `ssh <username>@tusker.unl.edu` and the corresponding password
to get access to the HCC cluster **Tusker**. Note that &lt;username&gt; to get access to the HCC cluster **Tusker**. Note that &lt;username&gt;
should be replaced by your HCC account username. If you do not have a should be replaced by your HCC account username. If you do not have a
HCC account, please contact a HCC specialist HCC account, please contact a HCC specialist
(<a href="mailto:hcc-support@unl.edu" class="external-link">hcc-support@unl.edu</a>) ({{< icon name="envelope" >}}[hcc-support@unl.edu] (mailto:hcc-support@unl.edu))
or go or go to http://hcc.unl.edu/newusers.
to <a href="http://hcc.unl.edu/newusers/" class="external-link">http://hcc.unl.edu/newusers/</a>. <span To use the **Crane** cluster, replace tusker.unl.edu with with crane.unl.edu.
style="font-size: 14.0px;line-height: 1.4285715;">To use the **Crane**
or </span>**Sandhills**<span {{< highlight bash >}}
style="font-size: 14.0px;line-height: 1.4285715;"> clusters, replace
tusker.unl.edu </span><span
style="font-size: 14.0px;line-height: 1.4285715;">with crane.unl.edu or
sandhills.unl.edu</span><span
style="font-size: 14.0px;line-height: 1.4285715;">. </span>
``` syntaxhighlighter-pre
$ ssh <username>@tusker.unl.edu $ ssh <username>@tusker.unl.edu
$ <password> $ <password>
``` {{< /highlight >}}
File Transferring with HCC Supercomputers File Transferring with HCC Supercomputers
----------------------------------------- -----------------------------------------
...@@ -67,9 +44,9 @@ executed from your computer. ** ...@@ -67,9 +44,9 @@ executed from your computer. **
**Uploading from local to remote** **Uploading from local to remote**
``` syntaxhighlighter-pre {{< highlight bash >}}
$ scp -r ./<folder name> <username>@tusker.unl.edu:/work/<group name>/<username> $ scp -r ./<folder name> <username>@tusker.unl.edu:/work/<group name>/<username>
``` {{< /highlight >}}
The above commend line transfers a folder from the current directory The above commend line transfers a folder from the current directory
(`./`) of the your computer to the `$WORK` directory of the HCC (`./`) of the your computer to the `$WORK` directory of the HCC
...@@ -78,9 +55,9 @@ and `<username>` with your HCC group name and username.  ...@@ -78,9 +55,9 @@ and `<username>` with your HCC group name and username. 
**Downloading from remote to local** **Downloading from remote to local**
``` syntaxhighlighter-pre {{< highlight bash >}}
$ scp -r <username>@tusker.unl.edu:/work/<group name>/<username>/<folder name> ./ $ scp -r <username>@tusker.unl.edu:/work/<group name>/<username>/<folder name> ./
``` {{< /highlight >}}
The above commend line transfers a folder from the `$WORK` directory of The above commend line transfers a folder from the `$WORK` directory of
the HCC supercomputer, Tusker, to the current directory (`./`) of the the HCC supercomputer, Tusker, to the current directory (`./`) of the
...@@ -91,117 +68,67 @@ Using Cyberduck ...@@ -91,117 +68,67 @@ Using Cyberduck
If you wish to use a GUI, be aware that not all programs will function If you wish to use a GUI, be aware that not all programs will function
correctly with Duo two-factor authentication. Mac users are recommended correctly with Duo two-factor authentication. Mac users are recommended
to use Cyberduck to use [Cyberduck](http://cyberduck.io). It is compatible with Duo, but a
(<a href="http://cyberduck.io" class="external-link">http://cyberduck.io</a>). few settings need to be changed.
It is compatible with Duo, but a few settings need to be changed.
Under **Preferences - General**, change the default protocol to SFTP: Under **Preferences - General**, change the default protocol to SFTP:
<span {{< figure src="/images/7274497.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851290/7274497.png" class="confluence-embedded-image" /></span>
Under **Preferences - Transfers**, reuse the browser connection for file Under **Preferences - Transfers**, reuse the browser connection for file
transfers. This will avoid the need to reenter your password for every transfers. This will avoid the need to reenter your password for every
file transfer: file transfer:
<span {{< figure src="/images/7274498.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851290/7274498.png" class="confluence-embedded-image" /></span>
Finally, under **Preferences - SFTP**, set the file transfer method to Finally, under **Preferences - SFTP**, set the file transfer method to
SCP: SCP:
<span {{< figure src="/images/7274499.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851290/7274499.png" class="confluence-embedded-image" /></span>
To add an HCC machine, in the bookmarks pane click the "+" icon: To add an HCC machine, in the bookmarks pane click the "+" icon:
<span {{< figure src="/images/7274500.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851290/7274500.png" class="confluence-embedded-image" /></span>
<span style="line-height: 1.4285715;">Ensure the type of connection is Ensure the type of connection is SFTP. Enter the hostname of the machine
SFTP. Enter the hostname of the machine you with to connect to you wish to connect to (tusker.unl.edu, crane.unl.edu) in the **Server**
(tusker.unl.edu, crane.unl.edu) in the </span>**Server**<span field, and your HCC username in the **Username** field. The
style="line-height: 1.4285715;"> field, and your HCC username in the **Nickname** field is arbitrary, so enter whatever you prefer.
</span>**Username**<span style="line-height: 1.4285715;"> field. The
</span>**Nickname**<span style="line-height: 1.4285715;"> field is
arbitrary, so enter whatever you prefer.</span>
<span {{< figure src="/images/7274501.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851290/7274501.png" class="confluence-embedded-image" /></span>
After you add the bookmark, double-click it to connect. After you add the bookmark, double-click it to connect.
<span {{< figure src="/images/7274505.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851290/7274505.png" class="confluence-embedded-image" /></span>
Enter your HCC username and password in the dialog box that will appear Enter your HCC username and password in the dialog box that will appear
and click *Login*. and click *Login*.
<span {{< figure src="/images/7274508.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851290/7274508.png" class="confluence-embedded-image" /></span>
A second login dialogue will now appear. Notice the text has changed to A second login dialogue will now appear. Notice the text has changed to
say Duo two-factor. say Duo two-factor.
<span {{< figure src="/images/7274510.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851290/7274510.png" class="confluence-embedded-image" /></span>
Clear the **Password** field in the dialogue. If you are using the Duo Clear the **Password** field in the dialogue. If you are using the Duo
Mobile app, enter '1' to have a push notification send to your phone or Mobile app, enter '1' to have a push notification send to your phone or
tablet. If you are using a Yubikey, ensure the cursor is active in the tablet. If you are using a Yubikey, ensure the cursor is active in the
**Password** field, and press the button on the Yubikey. **Password** field, and press the button on the Yubikey.
<span {{< figure src="/images/7274509.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851290/7274509.png" class="confluence-embedded-image" /></span>
The login should complete and you can simply drag and drop files to or The login should complete and you can simply drag and drop files to or
from the window. from the window.
<span {{< figure src="/images/7274511.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851290/7274511.png" class="confluence-embedded-image" /></span>
Mac Tutorial Video
<span id="ForMac/LinuxUsers-Video1" ------------------
class="confluence-anchor-link"></span>
{{< youtube ulfcmRGfqxU >}}
<span id="ForMac/LinuxUsers-Video2"
class="confluence-anchor-link"></span> Linux Tutorial Video
--------------------
Attachments:
------------ {{< youtube K0i3swpwtdc >}}
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[osxfuse-2.5.6.dmg](attachments/2851290/3178535.dmg)
(application/octet-stream)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[Macfusion\_2.0.4.zip](attachments/2851290/3178536.zip)
(application/zip)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck1.png](attachments/2851290/7274497.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck2.png](attachments/2851290/7274498.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck3.png](attachments/2851290/7274499.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck4.png](attachments/2851290/7274507.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck5.png](attachments/2851290/7274501.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck10.png](attachments/2851290/7274506.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck10.png](attachments/2851290/7274505.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck4.png](attachments/2851290/7274500.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck11.png](attachments/2851290/7274508.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck13.png](attachments/2851290/7274509.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck12.png](attachments/2851290/7274510.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck14.png](attachments/2851290/7274512.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[cyberduck14.png](attachments/2851290/7274511.png) (image/png)
Document generated by Confluence on Oct 24, 2018 14:47
[Atlassian](http://www.atlassian.com/)
+++ +++
title = "For Windows Users" title = "For Windows Users"
description = "Quickstart for Windows Users"
weight = "20"
+++ +++
##### Use of Duo two-factor authentication is **required** to access HCC resources. Please see [Setting up and using Duo](Setting-up-and-using-Duo_5505155.html). ##### Use of Duo two-factor authentication is **required** to access HCC resources.
##### Please see [Setting up and Using Duo]({{< relref "setting_up_and_using_duo" >}}).
---
###### [[Jump to the Tutorial Video]](#tutorial-video)
This quick start will help you configure your personal computer to work This quick start will help you configure your personal computer to work
with the HCC supercomputers. Here we use the two third party application with the HCC supercomputers. Here we use the two third party application
**PuTTY** and **WinSCP** for demonstration. **PuTTY** and **WinSCP** for demonstration.
PuTTY: PuTTY: https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html
<a href="https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html" class="external-link">https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html</a> or [Direct Link](https://the.earth.li/~sgtatham/putty/latest/w32/putty.exe)
or <a href="https://the.earth.li/~sgtatham/putty/latest/w32/putty.exe" class="external-link">putty.exe</a>
WinSCP: WinSCP: http://winscp.net/eng/download.php
<a href="http://winscp.net/eng/download.php" class="external-link">http://winscp.net/eng/download.php</a>
<span
class="aui-icon aui-icon-small aui-iconfont-warning confluence-information-macro-icon"></span>
{{% notice info %}}
If you are on a Mac, please use the quickstart for [For Mac/Linux If you are on a Mac, please use the quickstart for [For Mac/Linux
Users](2851290.html). Users]({{< relref "for_maclinux_users" >}}).
{{% /notice %}}
Accessing to HCC Supercomputers Access to HCC Supercomputers
------------------------------- -------------------------------
Here we use the HCC cluster **Tusker** for demonstration. To use the Here we use the HCC cluster **Tusker** for demonstration. To use the
...@@ -33,48 +33,34 @@ crane.unl.edu or sandhills.unl.edu. ...@@ -33,48 +33,34 @@ crane.unl.edu or sandhills.unl.edu.
1. On the first screen, type `tusker.unl.edu` for Host Name, then click 1. On the first screen, type `tusker.unl.edu` for Host Name, then click
**Open**. **Open**.
<span {{< figure src="/images/3178523.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/3178523.png" class="confluence-embedded-image" /></span>
2. On the second screen, click on **Yes**. 2. On the second screen, click on **Yes**.
<span {{< figure src="/images/3178524.png" height="300" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/3178524.png" class="confluence-embedded-image" /></span>
3. On the third screen, enter your HCC account **username**. If you do 3. On the third screen, enter your HCC account **username**. If you do
not have a HCC account, please contact an HCC specialist not have a HCC account, please contact an HCC specialist
(<a href="mailto:hcc-support@unl.edu" class="external-link">hcc-support@unl.edu</a>) ({{< icon name="envelope" >}}[hcc-support@unl.edu] (mailto:hcc-support@unl.edu))
or go to or go to http://hcc.unl.edu/newusers.
<a href="http://hcc.unl.edu/newusers/" class="external-link">http://hcc.unl.edu/newusers/</a>.
<span {{% notice info %}}Replace `jingchao` with your username.{{% /notice %}}
class="aui-icon aui-icon-small aui-iconfont-warning confluence-information-macro-icon"></span>
Replace `jingchao` with your username.
<span {{< figure src="/images/8127261.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/8127261.png" class="confluence-embedded-image" /></span>
4. On the next screen, enter your HCC account **password**. 4. On the next screen, enter your HCC account **password**.
<span {{% notice info %}}**Note that PuTTY will not show the characters as you type for security reasons.**{{% /notice %}}
class="aui-icon aui-icon-small aui-iconfont-warning confluence-information-macro-icon"></span>
**Note that PuTTY will not show the characters as you type for
security reasons.**
{{< figure src="/images/8127262.png" height="450" >}}
<span 5. After you input the correct
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/8127262.png" class="confluence-embedded-image" /></span>
5. <span style="line-height: 1.4285715;">After you input the correct
password, you will be asked to choose a Duo authentication password, you will be asked to choose a Duo authentication
method.</span> method.
6. If you have a Yubikey set up by HCC, please hold the Yubikey for \~1 6. If you have a Yubikey set up by HCC, please hold the Yubikey for \~1
second. Then you will be brought to your home directory similar as second. Then you will be brought to your home directory similar as
below. below.
<span {{< figure src="/images/8127266.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/8127266.png" class="confluence-embedded-image" /></span>
7. If you set up Duo via a smart phone, please type "1" in your 7. If you set up Duo via a smart phone, please type "1" in your
terminal and press "Enter". (Duo-Push is the most cost-effective way terminal and press "Enter". (Duo-Push is the most cost-effective way
...@@ -84,69 +70,60 @@ crane.unl.edu or sandhills.unl.edu. ...@@ -84,69 +70,60 @@ crane.unl.edu or sandhills.unl.edu.
8. Check your smart phone for Duo login request. Press "Approve" if you 8. Check your smart phone for Duo login request. Press "Approve" if you
can verify the request. If you find any Duo login request that is can verify the request. If you find any Duo login request that is
not initiated by yourself, deny it and report this incident not initiated by yourself, deny it and report this incident
immediately to hcc-support@unl.edu. immediately to {{< icon name="envelope" >}}[hcc-support@unl.edu] (mailto:hcc-support@unl.edu).
<span {{< figure src="/images/8127263.png" height="450" >}}
class="confluence-embedded-file-wrapper confluence-embedded-manual-size"><img src="assets/images/2851288/8127263.png" class="confluence-embedded-image confluence-thumbnail" width="300" /></span>
9. After you approve the Duo login request, you will be brought to your 9. After you approve the Duo login request, you will be brought to your
home directory similar as below. home directory similar as below.
<span {{< figure src="/images/8127264.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/8127264.png" class="confluence-embedded-image" /></span>
File Transferring with HCC Supercomputers File Transferring with HCC Supercomputers
----------------------------------------- -----------------------------------------
Usually it is convenient <span Usually it is convenient to upload and download files between your personal computer
style="font-size: 14.0px;line-height: 1.4285715;">to upload and download and the HCC supercomputers through a Graphic User Interface (GUI).
files between your personal computer and the HCC Download and install the third party application **WinSCP**
supercomputers </span><span to connect the file systems between your personal computer and the HCC supercomputers.
style="font-size: 14.0px;line-height: 1.4285715;">through a Graphic User Below is a step-by-step installation guide. Here we use the HCC cluster **Tusker**
Interface (GUI). </span><span for demonstration. To use the **Sandhills** cluster, replace `tusker.unl.edu`
style="font-size: 14.0px;line-height: 1.4285715;">Download and with `sandhills.unl.edu`.
install the third party application </span>**WinSCP**<span
style="font-size: 14.0px;line-height: 1.4285715;"> </span><span
style="font-size: 14.0px;line-height: 1.4285715;">to connect the file
systems between your personal computer and the HCC supercomputers. Below
is a step-by-step installation guide. Here we use the HCC
cluster </span>**Tusker**<span
style="font-size: 14.0px;line-height: 1.4285715;"> for demonstration. To
use the </span>**Sandhills**<span
style="font-size: 14.0px;line-height: 1.4285715;"> cluster, replace
</span>`tusker.unl.edu`<span
style="font-size: 14.0px;line-height: 1.4285715;"> for </span>`sandhills.unl.edu`<span
style="font-size: 14.0px;line-height: 1.4285715;">.</span>
1. On the first screen, type `tusker.unl.edu` for Host name, enter your 1. On the first screen, type `tusker.unl.edu` for Host name, enter your
HCC account username and password for User name and Password. Then HCC account username and password for User name and Password. Then
click on **Login**. click on **Login**.
<span
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/3178530.png" class="confluence-embedded-image" /></span> {{< figure src="/images/3178530.png" height="450" >}}
2. On the second screen, click on **Yes**. 2. On the second screen, click on **Yes**.
<span
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/3178531.png" class="confluence-embedded-image" /></span> {{< figure src="/images/3178531.png" >}}
3. Choose option "1" and press "Enter". Or simply press your Yubikey if 3. Choose option "1" and press "Enter". Or simply press your Yubikey if
you have one. you have one.
<span {{< figure src="/images/8127268.png" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/8127268.png" class="confluence-embedded-image" /></span>
4. On the third screen, click on **Remote**. Under Remote, choose Go To 4. On the third screen, click on **Remote**. Under Remote, choose Go To
and Open Directory/Bookmark. Alternatively, you can use the keyboard and Open Directory/Bookmark. Alternatively, you can use the keyboard
shortcut "Ctrl + O". shortcut "Ctrl + O".
<span
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/3178532.png" class="confluence-embedded-image" /></span> {{< figure src="/images/3178532.png" height="450" >}}
5. On the final screen, type `/work/<group name>/<username>` for Open 5. On the final screen, type `/work/<group name>/<username>` for Open
directory. Use your HCC group name and username to replace directory. Use your HCC group name and username to replace
`<group name>` and `<username>`. Then click on **OK**. `<group name>` and `<username>`. Then click on **OK**.
<span
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/3178533.png" class="confluence-embedded-image" /></span> {{< figure src="/images/3178533.png" height="450" >}}
6. Now you can drop and drag the files between your personal computer 6. Now you can drop and drag the files between your personal computer
and the HCC supercomputers. and the HCC supercomputers.
<span {{< figure src="/images/3178539.png" height="450" >}}
class="confluence-embedded-file-wrapper"><img src="assets/images/2851288/3178539.png" class="confluence-embedded-image" /></span>
Tutorial Video
--------------
{{< youtube -Vh7SyC-3mA >}} {{< youtube -Vh7SyC-3mA >}}
......
1. [HCC-DOCS](index.html) +++
2. [HCC-DOCS Home](HCC-DOCS-Home_327685.html) title = "Setting Up and Using Duo"
3. [HCC Documentation](HCC-Documentation_332651.html) description = "Duo Setup Instructions"
4. [Quick Start Guides](Quick-Start-Guides_1245279.html) weight = "10"
+++
<span id="title-text"> HCC-DOCS : Setting up and using Duo </span>
================================================================== ##### Use of Duo two-factor authentication (https://www.duosecurity.com) is required for access to HCC resources.
Created by <span class="author"> Adam Caprez</span>, last modified on Users will connect via SSH and enter their username/passwords as usual. One additional
Sep 18, 2018 authentication step through Duo is then needed before the login is completed. This
second authentication can be in several different forms (cell phone, YubiKey hardware token),
**Use of Duo two-factor authentication and is user-selectable at each login. A brief description of each is provided
(<a href="https://www.duosecurity.com" class="external-link">https://www.duosecurity.com</a>) [below](#duo-authentication-methods). See the
is required for access to HCC resources.** Users will connect via SSH [Duo Authentication Methods](https://www.duosecurity.com/authentication-methods)
and enter their username/passwords as usual. One additional
authentication step through Duo is then needed before the login is
completed. This second authentication can be in several different forms
(cell phone, YubiKey hardware token), and is user-selectable at each
login. A brief description of each is provided
[below](#SettingupandusingDuo-authmethods). See
the <a href="https://www.duosecurity.com/authentication-methods" class="external-link">Duo Authentication Methods</a>
page for more details. page for more details.
Initial Setup Initial Setup
============= -------------
Most HCC account holders use the Duo Mobile application on their Most HCC account holders use the Duo Mobile application on their
smartphone or purchase a YubiKey USB device. smartphone or purchase a YubiKey USB device.
<span style="color: rgb(0,0,0);">Smartphone</span> ### Smartphone
--------------------------------------------------
1. Install the free **Duo Mobile** application from the
1. Install the free *Duo Mobile* application from the [Google Play Store](https://play.google.com/store/apps/details?id=com.duosecurity.duomobile), [Apple App Store](https://itunes.apple.com/us/app/duo-mobile/id422663827), or [Microsoft Store](https://www.microsoft.com/en-us/store/apps/duo-mobile/9nblggh08m1g)
<a href="https://play.google.com/store/apps/details?id=com.duosecurity.duomobile" class="external-link">Google Play Store</a>, <a href="https://itunes.apple.com/us/app/duo-mobile/id422663827" class="external-link">Apple App Store</a> or <a href="https://www.microsoft.com/en-us/store/apps/duo-mobile/9nblggh08m1g" class="external-link">Microsoft Store</a>. 2. Visit one of the following locations. **Bring your smartphone and a valid photo ID** such as your university ID card or drivers license.
2. Visit one of the following locations. **Bring your smartphone and a 1. Visit either HCC location [118 Schorr Center, UNL](http://www1.unl.edu/tour/SHOR) |
valid photo ID** such as your university ID card or drivers license. [152 Peter Kiewit Institute, UNO](http://pki.nebraska.edu/new/pages/about-pki/maps-directions-and-parking) in-person anytime from 9am-5pm to enroll.
1. Visit either HCC location 2. Visit Information Technology Services [107 Otto Olsen, UNK](http://www.unk.edu/campus-map/?q=m15)
(<a href="http://www1.unl.edu/tour/SHOR" class="external-link">118 Schorr Center, UNL</a> \|\| <a href="http://pki.nebraska.edu/new/pages/about-pki/maps-directions-and-parking/" class="external-link">152 Peter Kiewit Institute, UNO</a>) in-person
anytime from 9am-5pm to enroll.
2. Visit Information Technology Services
<a href="http://www.unk.edu/campus-map/?q=m15" class="external-link">107 Otto Olsen, UNK</a>
in-person and ask for HCC identity verification. in-person and ask for HCC identity verification.
Faculty/staff members with a verified NU telephone number can enroll by Faculty/staff members with a verified NU telephone number can enroll by
phone. If you would like an HCC staff member to call your NU telephone phone. If you would like an HCC staff member to call your NU telephone
number to enroll, please email number to enroll, please email
<a href="mailto:hcc-support@unl.edu" class="external-link">hcc-support@unl.edu</a> {{< icon name="envelope" >}}[hcc-support@unl.edu] (mailto:hcc-support@unl.edu)
with a time you will be available. with a time you will be available.
YubiKeys ### YubiKeys
--------
YubiKey devices are currently a one-time cost of $22 from HCC, or can be YubiKey devices are currently a one-time cost of $22 from HCC, or can be
purchased from Yubico and added in-person at either HCC location. purchased from Yubico and added in-person at either HCC location.
...@@ -60,7 +48,7 @@ YubiKeys are configured for HCC's Duo, and not for general YubiCloud or ...@@ -60,7 +48,7 @@ YubiKeys are configured for HCC's Duo, and not for general YubiCloud or
U2F use. U2F use.
Example login using Duo Push Example login using Duo Push
============================ ----------------------------
This demonstrates an example login to Crane using the Duo Push method. This demonstrates an example login to Crane using the Duo Push method.
Using another method (SMS, phone call, etc.) proceeds in the same way. Using another method (SMS, phone call, etc.) proceeds in the same way.
...@@ -69,20 +57,16 @@ Using another method (SMS, phone call, etc.) proceeds in the same way. ...@@ -69,20 +57,16 @@ Using another method (SMS, phone call, etc.) proceeds in the same way.
First, a user connects via SSH using their normal HCC username/password, First, a user connects via SSH using their normal HCC username/password,
exactly as before. exactly as before.
<span {{< figure src="/images/5832713.png" width="600" >}}
class="confluence-embedded-file-wrapper image-center-wrapper confluence-embedded-manual-size"><img src="assets/images/5505155/5832713.png" class="confluence-embedded-image image-center" width="500" /></span>
Account lockout
<span {{% notice warning%}}**Account lockout**
class="aui-icon aui-icon-small aui-iconfont-warning confluence-information-macro-icon"></span>
**After 10 failed authentication attempts, the user's account is After 10 failed authentication attempts, the user's account is
disabled. If this is the case, then the user needs to send an email to disabled. If this is the case, then the user needs to send an email to
<a href="mailto:hcc-support@unl.edu" class="external-link">hcc-support@unl.edu</a> [hcc-support@unl.edu] (mailto:hcc-support@unl.edu)
including his/her username and the reason why multiple failed including his/her username and the reason why multiple failed
authentication attempts occurred. authentication attempts occurred.
** {{% /notice %}}
After entering the password, instead of completing the login, the user After entering the password, instead of completing the login, the user
will be presented with the Duo prompt. This gives the choice to use any will be presented with the Duo prompt. This gives the choice to use any
...@@ -91,40 +75,30 @@ this example, the choices are Duo Push notification, SMS message, or ...@@ -91,40 +75,30 @@ this example, the choices are Duo Push notification, SMS message, or
phone call. Choosing option 1 for Duo Push, a request to verify the phone call. Choosing option 1 for Duo Push, a request to verify the
login will be sent to the user's smartphone. login will be sent to the user's smartphone.
<span {{< figure src="/images/5832716.png" height="350" >}}
class="confluence-embedded-file-wrapper image-center-wrapper confluence-embedded-manual-size"><img src="assets/images/5505155/5832716.png" class="confluence-embedded-image confluence-content-image-border image-center" width="100" height="178" /></span>
Simply tap `Approve` to verify the login. Simply tap `Approve` to verify the login.
<span {{< figure src="/images/5832717.png" height="350" >}}
class="confluence-embedded-file-wrapper image-center-wrapper confluence-embedded-manual-size"><img src="assets/images/5505155/5832717.png" class="confluence-embedded-image confluence-content-image-border image-center" width="100" height="178" /></span>
<span
class="aui-icon aui-icon-small aui-iconfont-warning confluence-information-macro-icon"></span>
**If you receive a verification request you didn't initiate, deny the {{% notice warning%}}**If you receive a verification request you didn't initiate, deny the
request and contact HCC immediately via email at request and contact HCC immediately via email at
<a href="mailto:hcc-support@unl.edu" class="external-link">hcc-support@unl.edu</a>. [hcc-support@unl.edu] (mailto:hcc-support@unl.edu)**
** {{% /notice %}}
In the terminal, the login will now complete and the user will logged in In the terminal, the login will now complete and the user will logged in
as usual. as usual.
<span {{< figure src="/images/5832714.png" height="350" >}}
class="confluence-embedded-file-wrapper image-center-wrapper confluence-embedded-manual-size"><img src="assets/images/5505155/5832714.png" class="confluence-embedded-image confluence-thumbnail image-center" width="300" /></span>
<span id="SettingupandusingDuo-authmethods" class="confluence-anchor-link"></span>Duo Authentication Methods Duo Authentication Methods
============================================================================================================ --------------------------
### <span style="color: rgb(0,0,0);font-size: 16.0px;line-height: 1.5625;">Duo Push</span><span style="color: rgb(0,0,0);font-size: 16.0px;line-height: 1.5625;"> </span><span style="line-height: 1.5625;"> \[</span><a href="https://www.duosecurity.com/duo-push" class="external-link"><span style="line-height: 1.5625;">Watch </span><span style="line-height: 18.0px;">the</span><span style="line-height: 1.5625;"> Duo Push Demo</span></a><span style="line-height: 1.5625;">\]</span> ### Duo Push
##### [[Watch the Duo Push Demo]](https://www.duosecurity.com/duo-push)
<span {{< figure src="/images/5832709.png" height="350" caption="Photo credit: https://duosecurity.com" >}}
class="confluence-embedded-file-wrapper confluence-embedded-manual-size"><img src="assets/images/5505155/5832709.png" class="confluence-embedded-image confluence-thumbnail" width="150" /></span>
<span style="font-family: monospace;line-height: 1.4285715;">Photo
credit:
</span><a href="https://www.duosecurity.com" class="external-link">Duo Security</a>
For smartphone or tablet users (iPhone, Android, Blackberry, Windows For smartphone or tablet users (iPhone, Android, Blackberry, Windows
Phone), the Duo Mobile app is available for free. A push notification Phone), the Duo Mobile app is available for free. A push notification
...@@ -133,10 +107,7 @@ one tap. ...@@ -133,10 +107,7 @@ one tap.
### Duo Mobile Passcodes ### Duo Mobile Passcodes
<span {{< figure src="/images/5832711.png" height="350" caption="Photo credit: https://duosecurity.com" >}}
class="confluence-embedded-file-wrapper confluence-embedded-manual-size"><img src="assets/images/5505155/5832711.png" class="confluence-embedded-image confluence-thumbnail" height="250" /></span>
`Photo credit: Duo Security`
The Duo Mobile app can also be used to generate numeric passcodes, even The Duo Mobile app can also be used to generate numeric passcodes, even
when internet and cell service is unavailable. Press the key icon to when internet and cell service is unavailable. Press the key icon to
...@@ -145,68 +116,32 @@ prompt to complete authentication. ...@@ -145,68 +116,32 @@ prompt to complete authentication.
### SMS Passcodes ### SMS Passcodes
<span
class="confluence-embedded-file-wrapper confluence-embedded-manual-size"><img src="assets/images/5505155/5832712.png" class="confluence-embedded-image confluence-thumbnail confluence-content-image-border" width="100" /></span> {{< figure src="/images/5832712.png" height="350" >}}
For non-smartphone users, Duo can send passcodes via normal text For non-smartphone users, Duo can send passcodes via normal text
messages which are entered manually to complete login. Please note since messages which are entered manually to complete login. Please note since
this is an SMS message it may not be free, depending on the details of this is an SMS message it may not be free, depending on the details of
the particular cell phone plan. the particular cell phone plan.
### <span style="color: rgb(0,0,0);font-size: 16.0px;line-height: 1.5625;">Phone Callback</span> ### Phone Callback
For users with cell phones who prefer not to use any of the above For users with cell phones who prefer not to use any of the above
methods and for those with landline phones, Duo will call the phone and methods and for those with landline phones, Duo will call the phone and
provide a passcode via automatic voice message. The passcode is then provide a passcode via automatic voice message. The passcode is then
entered manually to complete the login. entered manually to complete the login.
### YubiKey <span style="color: rgb(61,61,61);font-size: 12.0px;line-height: 1.6666666;">\[</span><a href="http://www.yubico.com" class="external-link">Yubico</a><span style="color: rgb(61,61,61);font-size: 12.0px;line-height: 1.6666666;">\]</span> ### YubiKey
##### [[Yubico]](http://www.yubico.com/)
<span {{< figure src="/images/5832710.jpg" height="200" caption="Photo credit: Yubico" >}}
style="color: rgb(61,61,61);font-size: 12.0px;line-height: 1.6666666;"><span
class="confluence-embedded-file-wrapper confluence-embedded-manual-size"><img src="assets/images/5505155/5832710.jpg" class="confluence-embedded-image confluence-thumbnail" width="150" /></span>
`Photo credit: Yubico`
</span>
YubiKeys are USB hardware tokens that generate passcodes when pressed. YubiKeys are USB hardware tokens that generate passcodes when pressed.
They appear as a USB keyboard to the computer they are connected to, and They appear as a USB keyboard to the computer they are connected to, and
so require no driver software with almost all modern operating systems. so require no driver software with almost all modern operating systems.
YubiKeys are available from the Union Bookstore at UNL for a one-time YubiKeys are available from the Union Bookstore at UNL for a one-time
cost of $25 each. Users may also purchase them directly from cost of $25 each. Users may also purchase them directly from
<a href="https://store.yubico.com" class="external-link">Yubico</a> if [Yubico](https://store.yubico.com) if desired; this does require stopping
desired; this does require stopping by either HCC location in person to by either HCC location in person to have the YubiKey added to the user's account.
have the YubiKey added to the user's account. For your convenience, HCC For your convenience, HCC often carries some YubiKeys as well; these may only be purchased via a
often carries some YubiKeys as well; these may only be purchased via a
Cost Object transfer. Cost Object transfer.
Attachments:
------------
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[duo-push.png](attachments/5505155/5832709.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[black\_single.jpg](attachments/5505155/5832710.jpg) (image/jpeg)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[duo-mobile-passcodes.png](attachments/5505155/30446716.png)
(image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[2013-11-26 15.57.32.png](attachments/5505155/5832715.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" /> [Screen
Shot 2013-11-27 at 9.57.26 AM.png](attachments/5505155/5832713.png)
(image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" /> [Screen
Shot 2013-11-27 at 9.58.00 AM.png](attachments/5505155/5832714.png)
(image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[2013-11-26 15.57.32.png](attachments/5505155/5832712.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[2013-11-27 09.57.48.png](attachments/5505155/5832716.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[2013-11-27 09.59.23.png](attachments/5505155/5832717.png) (image/png)
<img src="assets/images/icons/bullet_blue.gif" width="8" height="8" />
[duo-mobile-passcodes.png](attachments/5505155/5832711.png)
(image/png)
Document generated by Confluence on Oct 24, 2018 14:47
[Atlassian](http://www.atlassian.com/)
static/images/3178523.png

18.4 KiB

static/images/3178524.png

10.4 KiB

static/images/3178530.png

18.5 KiB

static/images/3178531.png

11.5 KiB

static/images/3178532.png

36.7 KiB

static/images/3178533.png

12 KiB

static/images/3178539.png

31 KiB

static/images/5832709.png

24.2 KiB

static/images/5832710.jpg

61.3 KiB

static/images/5832711.png

37.8 KiB

static/images/5832712.png

19.6 KiB

static/images/5832713.png

15 KiB

static/images/5832714.png

25.9 KiB

static/images/5832716.png

29 KiB

static/images/5832717.png

32.1 KiB

static/images/7274497.png

40.8 KiB

static/images/7274498.png

39 KiB

0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment