Requirement for users to get GI VPN access: Difference between revisions

Revision as of 20:20, 12 July 2018

If you need VPN access to POD, please make an appointment with the SysAdmin team by emailing cluster-admin@soe.ucsc.edu. In this email please provide

 your name
 your PI's name
 PI's approval for this access (an email from your PI will be fine) 
 what other access do you need such as an unix server account or to the OpenStack.

Before your appointment, please make sure you have the following:

 A laptop running OS X, Windows or Ubuntu
 wireless connection to eduroam. cruznet cannot connect to the VPNs. You can find the instruction on how to setup eduroam at https://its.ucsc.edu/wireless/eduroam-config.html.

For Macs, please download and install Tunnelblick from https://tunnelblick.net/downloads.html. Select the Stable version.

For Windows, please download and install OpenVPN Client from https://openvpn.net/index.php/open-source/downloads.html. Select openvpn-install-x.x.x-xxxx.exe

For Ubuntu, please install network-manager-openvpn by typing:

 sudo apt-get install network-manager-openvpn

if that fails, please also install the following:

 sudo apt-get install network-manager-openvpn-gnome

Please do NOT worry about how to configure the software at this point. We will help you to set it up at your appointment.

@@ Line 1: / Line 1: @@
-If you need VPN access to the Genomics Institute firewalled/secure area (aka the "Prism" Environment), please make an appointment with the GI SysAdmin team by emailing ''cluster-admin@soe.ucsc.edu'' requesting access. There are several requirements to gaining access to the firewalled area - please complete all these requirements '''BEFORE''' coming to have the VPN software set up for your laptop.
+If you need VPN access to POD, please make an appointment with the SysAdmin team by emailing ''cluster-admin@soe.ucsc.edu''. In this email please provide
+  your name
+  your PI's name
+  PI's approval for this access (an email from your PI will be fine)
+  what other access do you need such as an unix server account or to the OpenStack.
-: You are required to ask your PI or sponsor to email cluster-admin@soe.ucsc.edu requesting a VPN account for you - this email should include:
+Before your appointment, please make sure you have the following:
+  A laptop running OS X, Windows or Ubuntu
+  wireless connection to '''eduroam'''. cruznet cannot connect to the VPNs. You can find the instruction on how to setup '''eduroam''' at https://its.ucsc.edu/wireless/eduroam-config.html.
-  Your name
+'''For Macs''', please download and install '''Tunnelblick''' from https://tunnelblick.net/downloads.html. Select the Stable version.
-  Your PI's name
-  Your requested username (If your name is Jane Doe, then your username could be 'jdoe' for example).
-  PI's approval for this access
-  What other access you need such as a UNIX server account or access to OpenStack.
-: You must take the NIH Public Security Refresher Course online, then print out the Completion Certificate (which should have your name on it) at the end of the training and deliver it when you come to your appointment to install the VPN software:
+'''For Windows''', please download and install '''OpenVPN Client''' from https://openvpn.net/index.php/open-source/downloads.html. Select ''openvpn-install-x.x.x-xxxx.exe''
- https://irtsectraining.nih.gov/publicUser.aspx
+'''For Ubuntu''', please install network-manager-openvpn by typing:
+  sudo apt-get install network-manager-openvpn
-Click on the "2018 Information Security, Counterintelligence, Privacy Awareness, Records Management Refresher" link to begin the course.  At the end you will be able to print out the completion certificate that should have your name on it.
+if that fails, please also install the following:
+  sudo apt-get install network-manager-openvpn-gnome
-: You need to print and sign the Genomics Institute VPN User Agreement and bring it with you to your VPN software installation appointment, located here for download:
- [[Media:GI_VPN_Policy.pdf]]
-: Please print, read and sign the last page of the NIH Genomic Data Sharing Policy agreement, located here for download.  Just staple the pages together.  Please bring the signed document to your appointment.  By signing the document you agree that you have read and understand the policies described therein and that you agree to abide by those policies:
- [[Media:NIH_GDS_Policy.pdf]]
-: You will need access to the "eduroam" wireless network '''prior''' to your appointment.  Other UCSC wireless networks such as "cruznet" will not work with our VPN software, so please make sure your laptop works with eduroam before coming to your appointment.  Instructions on how to get on eduroam are detailed here:
- https://its.ucsc.edu/wireless/eduroam.html
-When using the VPN software off-campus, it will usually work unless the wireless network you are on has restrictions preventing it from functioning.  Some other universities have such restrictions (notably UCSF), but most other wireless network and home wireless networks should work fine.
-: Before your appointment, please make sure you install the appropriate OpenVPN software on your laptop:
- A laptop running OS X, Windows or Ubuntu
-For Macs, please download and install '''Tunnelblick''' from https://tunnelblick.net/downloads.html. Select the Latest Stable version.
-For Windows, please download and install '''OpenVPN Client''' from https://openvpn.net/index.php/open-source/downloads.html. Select ''openvpn-install-x.x.x-xxxx.exe''
-For Ubuntu, please install network-manager-openvpn by typing:
- sudo apt-get install network-manager-openvpn network-manager-openvpn-gnome
 Please do NOT worry about how to configure the software at this point. We will help you to set it up at your appointment.
-We will correspond with you via email on when the appointment will be.  The appointment can take up to 30 minutes per person depending on whether or not any issues come up during the software setup.  If you show up for your appointment without one (or more) of the above outlined requirements, we will have to reschedule your appointment for a time when you can arrive after completing the above requirements.
-'''PLEASE NOTE:''' Because of the overhead required in setting up VPN access, please only request access if you have an immediate need to work on data that exists behind the firewall.  We have had a decent number of people request access and go through the setup but then never use it.  In other words, please do not request access because "one day you might need it", but because you '''do''' actually need it!