Skip to content

ARCC HPC Icon

Logging into ARCC HPC Systems

ARCC Supports two different methods for logging into our HPC services. On this page you will find links and directions for both how to log into an ARCC cluster for the first time using a web browser, and how to configure SSH keys to log in to our HPC systems including MedicineBow and AI4WY.

Step-by-step instructions vary depending on your local computer/client, the system in which you're accessing, and the account type granting access. Please look through the table of contents for this documentation and select the appropriate tab to bring up instructions that best match your environment and use case.

ARCC HPC Login Methods

  • Web Portal Login

    Start here if:

    • You have just been granted access to the cluster and have never logged into an ARCC cluster before.

    • You have a new UWYO or ARCC-Only cluster account and:

      • Your account has been added to a project on the cluster and you've recieved an e-mail indicating you have access to said project.



    Web Portal Login

  • SSH Key Login

    Start here if:

    • You have successfully logged into the ARCC cluster through the web portal.

    • You would like to configure your local computer to access the cluster using an SSH connection.

      • The local computer is not a shared system that will be accessed by multiple users.
      • You have administrative access to the local computer in which you'd like to set up SSH keys.

    SSH Key Configuration

Assumptions

All instructions that follow assume you have already obtained an account and have access to a project on the cluster. If you have not completed this step, please see our Projects and Accounts page for in depth information regarding ARCC account types and access.

Login through the Web Portal (Open OnDemand)

OnDemand is available on and off campus from a web portal with a URL corresponding to the HPC system name. OnDemand URLs will be in the following format: https://hpcsystemname.arcc.uwyo.edu.

Simply replace 'hpcsystemname' in the URL above with the name of the ARCC system web portal you need access to, enter that into your browser address bar, and you should be taken to the appropriate login portal.

All ARCC HPC login portals require authentication

This requires that you already have a username and password set up (either your UWYO username and password or an arcc-only username and password), AND that your 2-factor authentication associated with the account have been set up before you log into the system.

  1. When opening the site in your browser, you will be presented with UW’s ARCC’s Login Screen. As a good cybersecurity practice, make sure the website reflects an arcc.uwyo.edu website address before putting in your uwyo username and password. ARCC’s MedicineBow Login Screen should display the following login screen:
    ARCC Login Icon
  2. If you do not receive any 2 factor prompt, log into: https://wyosecure.uwyo.edu and check your default 2 factor settings. If you are unable to log into wyosecure, you are locked out of 2 factor and must contact UW IT. If you are able to log into wyosecure.uwyo.edu, make sure that your default 2 factor method is accurate.
  3. Open your default 2 factor authentication device - typically this is your primary mobile device:
    Duo Icon
  4. You will hit the or key, after you enter your username and password, unless you are using a yubikey.
  5. In the duo app, after entering your password, you should see a prompt similar to this one asking if you are logging into ARCC login and to approve. Click the green checkbox to approve the 2 factor push:
    Prompt Graphic

Some users may receive a second push for login

If you receive a second notice immediately after the first, you may approve the second one if it is the same as the first one.

  1. This should allow you to authenticate with 2 factor as you would normally. Usually this is a push that comes through your Duo Mobile app on your default Duo Mobile device. Users should ensure that they already have Duo mobile up and opened on their mobile device before typing in their password.
  1. When opening the site in your browser, you will be presented with UW’s ARCC’s Login Screen. As a good cybersecurity practice, make sure the website reflects an arcc.uwyo.edu website address before putting in your uwyo username and password. ARCC’s MedicineBow Login Screen should display the following login screen:
    ARCC Login Icon
  2. Instead of logging in at this screen, click the white box at the bottom for Non-UW Users as shown in the screenshot below indicated by the Red Arrow:
    ARCC Login Icon

Configuration with SSH Keys

On all ARCC HPC systems, you must configure your client if you want the ability to log into the cluster using SSH/command line interface. Directions for generating and managing your SSH keys should be the same regardless of your local machine's operating system. Directions for configuring SSH keys on your local machine however, are dependent upon the client in which you're connecting to your HPC from, and the HPC resource(s) you are accessing.

1. Generate and Manage SSH Keys

SSH keys are generated and managed using the SSH Key Manager available from the cluster OnDemand Web Portal. Steps for creating your keys, managing them, and configuring them on your personal computer are provided below.
1. Log into the OnDemand resource for the HPC you want to configure SSH keys for.
2. Upon login, you will be presented with an HPC dashboard. Click the following icon to set up SSH key authentication:
SSH Key Manager App
3. Note: Each key in this manager list is associated with your identity, therefore you do not need to create a new key for ever client you use to ssh into the system. If you've already created a key previously, you do not need another key. Skip this step and simply download your current key if you've already generated one for your account, as described in the next step. If you haven't set up an SSH key before, you should see an empty screen/list with the option to generate a new key. Click that button if you need to set up your SSH key as shown in the screenshot below:
Generate a New SSH Key
4. Click the download button associated with the key ID for your ssh key to download the key set to your client/computer.
Download Your Key

Security Warning

Please be careful with these files. Do not change their permissions, put them in an insecure digital location, or share them with others. They are your “virtual keys” to log in as yourself on the HPC. If provided to or shared with others, they will be able to log into that ARCC HPC resource as you.

2. Device Specific Configuration

The following steps should be performed on the machine from which you typically SSH into the cluster, and you should configure the key on any computer from which you ssh to the custer from as long as you have exclusive access to that machine. Additional directions for configuration then depend on your preferred SSH client (if you use one) on that machine. Directions for Windows, Mac, and Linux are available below. Click the tab associated with your Operating System.

  1. Assuming the files you downloaded from OnDemand were placed in your Downloads folder (C:/Users//Downloads in this example), go into your downloads folder and look for a file named with your uwyo or arcc-only account username, and unzip that by right clicking and choosing “Extract All”
    Extract All
  2. This should create a new folder with your username.
  3. Check for a .ssh folder associated with your computer account. This should be located at C:/Users//.ssh. (If your data is set to store on another drive, you may have a different drive letter in your path).
  4. If you do not have an .ssh folder under your Windows username, go to your start menu and search for command prompt. It should come up as a best match:
    Command Prompt App
  5. Once open, type in the following command into your command prompt: ssh-keygen then hit Enter/Return. This will generate a public/private rsa key pair (which we will be replacing) and create your .ssh folder with appropriate permissions structure.
  6. Copy the files from the extracted folder into your .ssh folder. You will be asked if it’s ok to replace the current files in the folder. Say ‘yes’ to confirm overwriting these files.

CAUTION BEFORE PROCEEDING WITH STEPS 7-9:

Be very careful when updating file and folder permissions. If done incorrectly, you could make any folder and the files within INACCESSIBLE TO ALL USERS on your computer. If you're not sure how to do this correctly, contact ARCC-help@uwyo.edu or IT support to assist you with these directions.

  1. Correct the Permissions associated with your .ssh folder and key files.
    A. Disable permission inheritance for the .ssh folder B. Go up to the folder containing your key and certificate files. (Usually this is C:\Users\) C. Right click on the .ssh folder (or whichever folder contains your new key files)
    Choose Properties
    D. Choose Properties from the list of options in the menu (you may also select the .ssh folder so it is highlighted and hit Alt+Enter) E. This will bring up a Properties window for your folder. Properties Window
    F. Click on the Security tab in the window then click the Advanced button. Security Tab
    G. This will bring up a new window for the folders Advanced Security Settings. Ensure that the Permissions tab is selected, then click the button to disable inheritance. Disable Enheritance
  2. Convert your directory/folder permissions to explicit permissions. A. You will be prompted for how to handle the blocked inheritance. Choose the option to Convert inherited permissions into explicit permissions on the object. !!! warning "Warning"
    Choosing the other option (to remove all inherited permissions from this object) can make the entire folder inaccessible. Do not select that option. If accidently selected, click the Cancel button at the bottom. B. After converting the inherited permissions to explicit permissions set them to remove all users except for SYSTEM and yourself. Ensure that both you and SYSTEM have Full Control under access: Confirm Settings
  3. Update permissions for the key files. A. Within the folder in which your key files are stored, perform the same actions to update permissions on each of the following files:
    B. id_ecdsa, id_ecsda.pub id_ecdsa-cert should all have the following permission properties: SYSTEM and your_username on the computer should have full control while no one else has access to them.
    File Properties
  1. Unzip the files associated with your login.
  2. Open your terminal (Finder→Go→Utilities→Terminal) or hit Up+Cmd+U keys.
  3. Confirm you're in your home directory by changing directories to your home with the following command: cd ~
  4. List the contents (including hidden items) of your home directory with the following command: ls -lah
  5. If you have a .ssh directory, it will be in this list. If you don’t have one, you will need to create one with: mkdir ~/.ssh
  6. Unzip the newly downloaded SSH keys to your .ssh folder: unzip ~/Downloads/<username>.zip -d ~/.ssh
  7. If your key has been configured properly, when you open a terminal and log into the cluster, you will be logged in automatically, and will not be prompted for a password (first factor), nor second factor authentication for login.

Note:

If you run into permissions errors on the key files (usually errors will take the form of something similar to: "permission 0### too open") we recommend running the following commands then reattempting to ssh using your key files.

Should you see this error message, use command: chmod 0600 -R ~/.ssh
That command sets appropriate permissions for the .ssh private keys. Next run: ssh-add
This command configures ssh agent for certs when not natively supported.

  1. Unzip the files associated with your login to your .ssh folder: unzip <username>.zip -d ~/.ssh/
  2. Test your configuration.
    If If configured properly, you will be logged in automatically, and will not be prompted for a password (first factor), nor second factor authentication for login.

Note:

If you run into permissions errors on the key files (usually errors will take the form of something similar to: "permission 0### too open") we recommend running the following commands then reattempting to ssh using your key files.

Should you see this error message, use command: chmod 0600 -R ~/.ssh
That command sets appropriate permissions for the .ssh private keys. Next run: ssh-add
This command configures ssh agent for certs when not natively supported.

ARCC-Only Account Setup

You should recieve e-mails indicating you've been granted an ARCC-Only account. One e-mail is for initial configuration of your password and the other is for initial setup of your 2 factor device. If you have not recieved either of these e-mails, you should contact ARCC-help@uwyo.edu to make sure these were sent, or to have us re-send them to you.

  1. Upon creation of your account on MedicineBow as an arcc external user account, you will receive an e-mail asking you to update your ARCC external account with a password update. This e-mail with account update capabilities expires after a short window of time indicated in the e-mail.
  2. Click on the link in this e-mail. You will be taken to a page to update your cluster password. Click the link to proceed:
    Update Pwd Graphic
  3. You will need to create a new password for your cluster account and you will be prompted to enter it two times in the text boxes provided. You must submit your new password with the same password in both boxes to proceed.
  4. After updating your password, you should see this page indicating your account has been updated successfully.
    ConfirmPwdUpdate Graphic
  5. At this point, you should be able to go to the medicinebow.arcc.uwyo.edu login page and click on the option at the bottom for WildIris (non-uw account) users.
  6. After logging into the system with your username and password you've just created, you will be directed to set up 2 factor using a Mobile Authenticator. You should follow the instructions on the page to set up 2 factor authentication.
  7. Make sure you have a 2 factor app installed on your mobile device. We recommend Duo Mobile, Google Authenticator, Microsoft Authenticator, or Free OTP as we have tested all these applications and can verify they work.
  8. Open your preferred application on your mobile device
  9. Depending on your preferred application, scanning the QR code through the application may be slightly different. Scan the QR code displayed on the Mobile Authenticator Setup screen after you logged into the cluster.
    QRCode Graphic
  10. Once scanned in, your account is saved in the app as ARCC External:
  11. On the cluster 2 factor setup screen on your computer, type in the code provided in the application for this account in the One-time code * textbox. Code Graphic