SmartCard-Fix
Smart-Card-Fix.zip -- Only for personal, non-domain computers with smartcard problems
Two-Factor Authentication
Access to Accelerator computers (opsll, devll, etc..) and other Accelerator subnets from the general CUE/CST networks and from your home requires two-factor authentication.
If you need to access Accelerator systems remotely please file an ACE ServiceNow and select the "CryptoCard/MobilePASS" subcategory and request your Yubikey (preferred) be added to your account or a MobilePass token. For the Yubikey option, please provide the numbers printed on the bottom of the USB fob. Alternately, if the CST Help Desk is more convenient for your location you can file a CST ServiceNow with the same request and choose the "Desktop Support" category.
Useful Tools
The following are scripts and bundles designed to make the connection process more simple. The idea is that you can simply install/unzip these and run them without any configuration. Note: It is adviseable to move the extracted folder to your Desktop or ensure that there are no spaces in the path to the Windows bundle.
Please note, if Windows security warns you about running these tools the first time, you must click "More Info" and allow. Likewise, under MacOS, you might need to "Right-Click and Run" the first time.
Description | Tool |
---|---|
Windows Bundle of Scripts and Client | NX-Connects-8 (RHEL 7) - Latest |
*BETA* Windows Bundle of Scripts and Client | NX-Connects-9 (RHEL 9) - Beta |
Mac NX Tunnel Script | nxtunnel.command (RHEL 7) - Latest |
Linux NX Tunnel Script | nxtunnel (RHEL 7) - Latest |
Useful Tools - Legacy
The following scripts and bundles are deprecated, unsupported and are not guaranteed to work. Please use the current tools above unless you have a specific reason.
Description | Tool |
---|---|
Windows Bundle of Scripts and Client | NX-Connects-7 (RHEL 7) - Previous |
Mac Bundle of Scripts and Client (RHEL7) | NX-Connects-7 (RHEL 7) - Legacy |
Mac NX Tunnel Script | nxtunnel-legacy.command |
Linux NX Tunnel Script | nxtunnel-legacy |
Useful Documents
Description | Procedure |
---|---|
Two-Factor Training Slides | Two-Factor Training Slides |
NX Connects Step-by-Step Guide | Step-by-Step Guide |
How to Open A Remote Linux Desktop Session from Linux, Windows or Mac | HowToRemoteDesktopLinux |
How to Open A Remote Windows Desktop Session from Linux, Windows or Mac | HowToRemoteDesktopWindows |
CryptoCard Overview and How To | HowToCryptoCard |
CryptoCard Manual | KT4-Token Guide |
CryptoCard Smart Phone Application Overview | HowToCryptoCardApp |
NX Troubleshooting - Green Screens | NXTroubleShooting |
Smartphone Application Welcome Guide | MobilePass-SmartPhone-Guide |
Computer Center's Windows Remote Access Procedure | https://cc.jlab.org/windows/remotedesktop |
Computer Center's Off-Site Services Page | https://cc.jlab.org/offsiteservices |
Windows Terminal Server
The following hosts are available as Windows Terminal Servers. They are available directly from all Jlab networks.
Host | Operating System | Login Method |
---|---|---|
opswin | Windows Server 2016 | Remote Desktop Client |
jlabts | Windows Server 2019 | Remote Desktop Client |
Login Server (Remote Shell Access)
The following hosts are available for remote shell (ssh) access to anyone with a valid Accelerator Account. These systems are only available via the gateway login host acclogin, which requires two-factor authentication.
Host | Fiefdom | Operating System | Comment |
---|---|---|---|
chlll | CHL | RHEL 7 | Alias for chll77 |
devll | DEV | RHEL 7 | Alias for devl77 |
felll | FEL | RHEL 7 | Alias for fell77 |
itfll | ITS | RHEL 7 | Alias for itfl77 |
opsll | OPS | RHEL 7 | Alias for opsl77 |
srfll | SRF | RHEL 7 | Alias for srfl77 |