-
Notifications
You must be signed in to change notification settings - Fork 5
Logging into Savio
This document provides instructions on how to log into the Savio high performance computing (HPC) cluster at the University of California, Berkeley.
Unlike most remote computer systems that you may have encountered to date, when logging into the Savio cluster (via SSH), you'll need to enter a password that changes each time you log in. You'll generate this password using a One Time Password (OTP) application named Pledge.
The following instructions cover how to install and set up Pledge, and then how to use the one-time passwords it generates each time that you log into the Savio cluster.
Requiring time-expiring, one-time-use passwords helps protect your work and data from unauthorized access - and potential damage and alteration - by intruders. Moreover, it helps protect the cluster itself from attacks, so that it can remain highly available to the campus community.
Installing and setting up Pledge
Before you can log into the Savio cluster for the first time, you will need to install and set up Pledge on at least one device: a laptop or desktop computer, smartphone, or tablet. Here's how:
- Step 1: Install Pledge on your device
- Step 2: Create a Pledge profile for your device
- Step 3: Download the profile to your device
- Step 4: Test the profile
Logging into the Savio cluster
After installing Pledge, here's how you'll use it each and every time you log into the Savio cluster:
- Step 5: Use Pledge to generate a one time password
- Step 6: Connect to Savio using SSH
- Step 7: Log in with your username and one-time password
You will need to install and set up Pledge (via Steps 1 through 4, below) just once ... once, that is, on each of your devices on which you want to generate one-time passwords.
On your laptop or desktop computer, smartphone, or tablet, install the Pledge application:
1. Download the Pledge application via the link below that's appropriate to your device
Computers:
Smartphones and tablets:
(The links above are for Pledge version v2.2-29275 as of February, 5, 2014.)
For other platforms, go directly to the McAfee Pledge downloads page.
2. Open the downloaded file.
3. Follow the onscreen instructions to install Pledge.
- You can also find installation instructions - with screenshots for Microsoft Windows, but the Linux and Mac OS X installations are highly similar, as well - in the McAfee Pledge manual.
Note for Mac OS X: When running the Pledge installer, it will ask you to install Java 6 on your system, if it isn't already present. Please wait for that Java installation to finish - noting that it can take a while, and its success dialog may be hidden behind other windows - before proceeding with your installation of the Pledge application.
You'll then visit a web page to create a Pledge profile for your device:
REQUIREMENT: You will need your Savio cluster username and initial 10-character password that was provided to you via an email link to a Google Document. If you cannot locate the email, please check your Spam or Junk folder.
- In your web browser, visit the OTP Device Management web page.
- (In some other documentation, you may sometimes see this web page also referred to as the "Pledge Enrollment" page.)
- At the User Name prompt, enter your Savio cluster username.
- At the Password prompt, enter your initial 10-character password.
- Tip: Have you already set up Pledge on one of your other devices? If so, rather than entering your initial 10-character password, you can instead launch the Pledge application on that device, generate a 6-digit one-time password, and enter that one-time password at the Password prompt on the Pledge Enrollment web page.
- From the Realm menu, select
HPCS - Click the Enroll button.
- On the OTP Device Management web page, you will now be presented with an 8-digit Profile ID ("Enter this Profile ID in the Pledge Client:")
- Copy, write down (or otherwise save) this Profile ID. You'll need to enter it into the Pledge application on your device in Step 3, below.
- Be sure to leave the OTP Device Management web page open in your browser. (You'll need to visit this page once again in Step 4, below.)
Once you've created your Pledge profile via the web page, you'll need to download it directly onto your device:
- Launch the Pledge application.
- Click the + button to start the profile configuration process.
- Enter your 8-digit profile ID into the Pledge application.
- You will have obtained this 8-digit profile ID from the Pledge Enrollment web page in Step 2.
- Click the OK button.
- In the Enter PIN: field, enter a PIN code of your choosing.
- This PIN code is unique to this particular device. You'll need to enter it each time you use this device to generate a one-time password.
- REQUIREMENT: Copy, write down (or otherwise save) this PIN code, along with a hint about which computer, smartphone, or tablet it pertains to, and store it in a safe place to which only you have access.
- In the Confirm PIN: field, enter the same PIN code.
- Click the OK button.
After you've downloaded the Pledge profile to your device, the next step is to test it. This will verify that you can now successfully generate one-time passwords on your device:
- Visit the OTP Device Management web page once again. (This page should still be open from when you last visited it in Step 2, above.)
- On that web page, click the Click here to test your new profile link.
- Click in the Pledge application window.
- In the Pledge application window, click the Generate one-time password button to generate a one-time password.
- In the Enter PIN: field, enter your PIN code to confirm that it's you doing this.
- You will be presented with a 6-digit one-time password.
- Tip: you can copy this password to the Clipboard using a button near the lower right of the Pledge application window.
- Visit the OTP Device Management web page.
- In the One Time Password: field, enter your 6-digit one-time password.
- From the Realm menu, select
HPCS - Click the Verify button.
- If your profile test is successful, you will be presented with a "Success: The One-Time Password is correct" message.
You will need to repeat Steps 5 through 7, below, each time you log in to the Savio cluster.
Use Pledge on your computer, smartphone, or tablet to generate a 6-digit one-time password you'll need to log into the Savio cluster:
- Launch the Pledge application.
- Click the Generate one-time password button.
- If a one-time password is currently being displayed in the Pledge application window, click that password in order to redisplay the Generate one-time password button.
- Enter your PIN code.
- The PIN code should be the same number that you created in Step 3 above.
- Click the OK button.
- Tip: On a mobile device, you might need to press the Enter key on the device's keyboard.
- You'll see a 6-digit one-time password displayed.
- Tip: you can copy this password to the Clipboard using a button near the lower right of the Pledge application window.
Connect to the Savio cluster via SSH:
- Connect to a Login Node on the Savio cluster with:
ssh [email protected]
(Be sure to substitute your actual Savio cluster username for the placeholderyourusernamein the example above.) - Tip: If you're using an application with a graphical user interface (GUI), you may be able to set up a connection profile or "bookmark" to connect to the Savio cluster. In that profile or bookmark, enterhpc.brc.berkeley.eduas the hostname.
Log in with your cluster username and your just-generated one-time password:
- At the Username: prompt (in a terminal window or in your GUI application), enter your Savio cluster username.
- At the Password: prompt, enter the 6-digit one-time password you obtained from Step 5 above.
If you encounter any issues during this process:
- You can find even more thorough documentation in LBL's guide to generating and using one-time passwords.
- If the documentation, both here and in the LBL guide, isn't sufficient to resolve your issue, the Berkeley Research Computing consultants can help. Please send email to [email protected].