Body
On March 8, changes were made to make Mount Moran directly accessible from any system with a public network connection. This means you will no longer need to use the UWYO VPN to access Mount Moran. In order to make this change and maintain a secure environment, two-factor authentication is required to login to the publicly accessible login nodes. ARCC resources that require two-factor authentication use the same two-factor service as the rest of UWYO resources, thus separate accounts are not needed.
On June 7 of 2016, all access to Mount Moran will require two-factor authentication. It is strongly recommended that all users begin using two-factor prior to June 7 to make necessary work-flow adjustments. All users who do not begin using two-factor will receive periodic reminder emails encouraging them to make the transition. To be exempt from receiving these reminder emails, you must login to Mount Moran using two-factor.
This document details the two-factor login process on Mount Moran.
1) You must register a device to use two-factor authentication. If you are already using two-factor authentication on any UWYO system(s), you are already registered. If you need to register, please follow the “Enroll a Device with Duo” instructions: https://uwyo.teamdynamix.com/TDClient/KB/ArticleDet?ID=11313
Note: All ARCC users are already enabled to use two-factor authentication so you will be able to register.
2) Access Mount Moran via SSH using the command syntax “ssh <your_username>@mtmoran2f.uwyo.edu” from a Linux/Unix/MacOS system. From a Windows system you will need to download and install a SSH client, such as PuTTY. You can download PuTTY installer here: http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
3) You should now be prompted to enter a password. The two-factor authentication instructions should be above the password prompt for future reference.
Enter your password for authentication using one of the following methods (in these examples, the uwyo passsword is “mypassword”):
UWYO Password + Duo Generated Token:
1) Open the Duo app on your mobile device.
2) Press the key symbol to request a new token. After pressing the symbol, you should see a 6 digit token.
For this example, the token is 123456.
3) On the terminal prompting for your password, enter your UWYO password a comma and the token.
The password is on one line in the form <uwyo_password>,<token>.
So, we would type “mypassword,123456” then press enter.
If you typed the password correctly using your UWYO password and a valid token from the Duo Mobile app, you should be successfully logged in.
UWYO Password + Push Notification OR Phone Call:
1) On the terminal prompting for your password, enter your UWYO password. The password is on one line in the form <uwyo_password>.
So, we would type “mypassword” then press enter.
2) If your device is setup to default to a push notification, you will receive a prompt to verify you are attempting to login to the system. Press accept.
If your device is setup to default to a phone call, you will receive a call that requests you verify the attempted login. Follow the instructions from the call to verify the attempt.
If you typed the password correctly using your UWYO password and validated the login attempt, you should be successfully logged in.
UWYO Password + YubiKey token:
1) Insert your YubiKey into a USB port on the system you are attempting to login from.
2) On the terminal prompting for your password, enter your UWYO password and a comma. Touch the gold button on the YubiKey.
So, we would type “mypassword,” then touch the button on the YubiKey.
If you typed the password correctly using your UWYO password and the YubiKey token was valid, you should be successfully logged in.
Please contact the ARCC team at arcc-info@uwyo.edu if you experience issues using two-factor authentication to access Mount Moran.