# Logging In

```{tip}
Need help navigating our documentation? Whether you're new or experienced, we recommend reviewing our [Navigating CURC Documentation](./navigating_docs.md) page. It includes flowcharts covering the core areas all users should be aware of.
```

## Getting a CURC account

All individuals wanting to access CU Research Computing (CURC) HPC systems (Alpine and Blanca), Open OnDemand, and storage solutions must have an associated CURC account. CURC systems are utilized by a variety of institutions including CU Boulder, Anschutz Medical Campus (AMC), Colorado State University (CSU), and institutions that are members of the Rocky Mountain Advanced Computing Consortium (RMACC). Given that CURC systems host a variety of institutions, each institution has its own method for creating a CURC account. To simplify this process, below we provide tabs that specify instructions on getting a CURC account based on the institution you are affiliated with. 

(tabset-ref-get-account)=
``````{tab-set}
:sync-group: tabset-logging-in

`````{tab-item} CU Boulder
:sync: logging-in-ucb

The process for obtaining a CURC account for CU Boulder users is straightforward. Simply navigate to our [Account Request](https://rcamp.rc.colorado.edu/accounts/account-request/create/organization) page, select **"University of Colorado Boulder"**, fill out the provided information, and select **"Verify & Continue"**. Once the form has been completed and submitted, an automatic process will provision your account. Once you've received a CURC account, you will need to enroll in CU Boulder's Duo two-factor authentication service. After installing the Duo mobile app to your phone (available via Apple App Store or Google Play Store), visit [https://duo.colorado.edu](https://duo.colorado.edu) to enroll. 

````{important}
- Research Computing accounts are separate from your CU accounts. You must sign up for an individual Research Computing account if you wish to access Research Computing resources.
- Once your account is provisioned, please wait 15 minutes before signing in
- If you are having issues with DUO, please consult our [Duo Frequently Asked Questions](./faq.md#duo-multi-factor-authentication) section
````

`````

`````{tab-item} CSU
:sync: logging-in-csu

The process for obtaining a CURC account for CSU users is straightforward. Simply navigate to our [Account Request](https://rcamp.rc.colorado.edu/accounts/account-request/create/organization) page, select **"Colorado State University"**, fill out the provided information, and select **"Verify & Continue"**. Once the form has been completed and submitted, an automatic process will provision your account. Once you've received a CURC account, you will need to enroll in Duo two-factor authentication service. For more information on setting up Duo, please visit CSU's [Duo Two Factor Authentication](https://it.colostate.edu/duo-two-factor-authentication/) page. For additional information on using CURC resources as a CSU user, please consult [CSU's Getting Started with Alpine](https://www.research.colostate.edu/rit/get-started-with-alpine/) documentation.  

```{important}
- Once your account is provisioned, please wait 15 minutes before signing in. 
```

`````

`````{tab-item} AMC
:sync: logging-in-amc

Currently, AMC users must go through the following steps to create a CURC account: 

1. If you do not already have an XSEDE/ACCESS account, follow the [instructions for new user registration](https://identity.access-ci.org/new-user). Please direct any questions about new accounts to the [ACCESS ticketing system](https://access-ci.atlassian.net/servicedesk/customer/portal/2/create/30).
2. Sign and fill out [CU Anschutz's Alpine form](https://ucdenverdata.formstack.com/forms/alpine_eua_and_intake)
3. You will receive an email from <hpcsupport@cuanschutz.edu> in approximately 1-2 weeks confirming your CURC account has been created.

```{important}
- For assistance filling out the Alpine form or updates on the account provisioning process, please email <hpcsupport@cuanschutz.edu>
- For assistance with Duo, please see [Duo's documentation on 2-factor authentication](https://guide.duo.com/)
- Once your account is provisioned, please wait 15 minutes before signing in. 
```

`````

`````{tab-item} RMACC
:sync: logging-in-rmacc

RMACC members can obtain a CURC account by completing the following steps

1. Create an [ACCESS-CI](https://access-ci.org/) account in the ACCESS user portal 
    ```{important} 
    If you already have an XSEDE or ACCESS account, please do not create another one and instead proceed to step 2.
    ```

2. Navigate to our [CURC support request form](https://colorado.service-now.com/req_portal?id=ucb_sc_rc_form) and fill in the "Your information" section.
    - For `Institution`, select `Other RMACC Institution`

3. In the CURC support request form select the `Nature of request`: `Login`.

4. Now, select the `Issue type`: `I would like to request a CU Research Computing account`.

5. After completing step 4, boxes will appear asking for additional information needed to create your account. After filling in this required information, submit the request form. 
    - You may enter "N/A" in the `Detailed description` box, if you do not want to add additional information

6. Once the request has been submitted, our team will work on creating your account and reach out to you once your account has been created or we require further information.

```{important}
- Once your account is provisioned, please wait 15 minutes before signing in
- The first time you log in you will be prompted to set up Duo two-factor authentication
- For assistance with Duo, please see [Duo's documentation on 2-factor authentication](https://guide.duo.com/)
```

`````
``````

## Getting access to CURC resources 

Once you have obtained a CURC account, you can proceed to logging in to CURC resources. Users accessing CURC resources will be connected to a login node. A login node is an outward-facing node within the research computing environment that users can connect to from their local machines. Once on a login node, users can perform a limited number of tasks:

+ Edit files
+ Transfer data
+ Submit jobs
+ Access storage resources  

```{important}  
The [login node policy](../additional-resources/policies.md#login-nodes) states that login nodes should not be used for resource-intensive tasks such as running code. For all other tasks, users should run batch jobs, interactive jobs, or use the compile nodes. 
```

Similar to obtaining an account, the process of logging in to CURC resources can vary based on the institution you are affiliated with. In the tab sections below we provide details on how each institution can gain access to our login nodes.

(tabset-ref-get-access)=
`````{tab-set}
:sync-group: tabset-logging-in

````{tab-item} CU Boulder
:sync: logging-in-ucb

For CU Boulder users, the following methods are available for logging in to CURC resources:
- Utilizing Secure Shell (SSH) from your computer's terminal to `ssh` into a login node
    - For more information, on how to do this, see [Terminal access for different operating systems](#terminal-access-for-different-operating-systems) below
- Using Open OnDemand to obtain access to a terminal or launch interactive jobs 
    - See our [Open OnDemand (Browser Based HPC Portal)](../open_ondemand/index.md) documentation for more information
````

````{tab-item} CSU
:sync: logging-in-csu

For CSU users, the following methods are available for logging in to CURC resources:
- Utilizing Secure Shell (SSH) from your computer's terminal to `ssh` into a login node
    - For more information, on how to do this, see [Terminal access for different operating systems](#terminal-access-for-different-operating-systems) below
    - For CSU specific guides for this process, please refer to the **"Remote Login"** section of CSU's [Get Started with Alpine](https://www.research.colostate.edu/rit/get-started-with-alpine/) page
- Using Open OnDemand to obtain access to a terminal or launch interactive jobs 
    - See our [Open OnDemand (Browser Based HPC Portal)](../open_ondemand/index.md) documentation for more information

```{tip}
CSU users have an `@` symbol in their CURC username. It is important to keep in mind that this can cause issues when running certain software. For more information on this topic please consult our [CSU and ACCESS (XSEDE) usernames](../additional-resources/csu-xsede-usernames.md) page.
```

````

````{tab-item} AMC
:sync: logging-in-amc

For AMC users, the following methods are available for logging in to CURC resources:
- Using Open OnDemand to obtain access to a terminal or launch interactive jobs 
    - See our [Open OnDemand (Browser Based HPC Portal)](../open_ondemand/index.md) documentation for more information
- Utilizing Secure Shell (SSH) from your computer's terminal to `ssh` into a login node
    ```{important}
    SSH access is only available for individuals who have completed the steps outlined in our [SSH Key-Based Authentication for Anschutz Medical Campus](../additional-resources/amc_ssh_auth.md) page.
    ```

```{tip}
AMC users have an `@` symbol in their CURC username. It is important to keep in mind that this can cause issues when running certain software. For more information on this topic please consult our [CSU and ACCESS (XSEDE) usernames](../additional-resources/csu-xsede-usernames.md) page.
```

````

````{tab-item} RMACC
:sync: logging-in-rmacc

Currently, RMACC users can obtain access to a terminal or launch interactive jobs using Open OnDemand 
- See our [Open OnDemand (Browser Based HPC Portal)](../open_ondemand/index.md) documentation for more information
    
```{important}
Due to security issues, RMACC users do not have access to SSH. We apologize for this inconvenience. 
```

RMACC users can transfer data using the following methods: 
- For data transfers that are 1GB or less, the Open OnDemand [Files application](../open_ondemand/files_app.md) can be used
- Globus, an intuitive interactive Graphical User Interface, can be used for all data transfers regardless of data size
    - For more information on Globus, please refer to our [Globus transfers](../compute/data-transfer.md#globus-transfers) documentation 

```{tip}
RMACC users have an `@` symbol in their CURC username. It is important to keep in mind that this can cause issues when running certain software. For more information on this topic please consult our [CSU and ACCESS (XSEDE) usernames](../additional-resources/csu-xsede-usernames.md) page.
```

````
`````

### Terminal access for different operating systems

```{important}
Not all users have the ability to access CURC resources using a terminal. Please consult the appropriate tabbed item in the previous section [Getting access to CURC resources](#getting-access-to-curc-resources) before proceeding. 
```

(tabset-ref-terminal-access)=
`````{tab-set}
:sync-group: tabset-terminal-access

````{tab-item} Windows 
:sync: terminal-access-windows

Logging in from a Windows machine requires the additional step of [installing the PuTTY ssh client](https://putty.software) onto your local machine. This application enables users to connect to remote servers with the ssh protocol. Note that there are other ssh clients that enable Windows machines to connect to remote ssh servers; Research Computing recommends PuTTY for reliability and simplicity.

1. Open the PuTTY application on your computer
    * Under “Host Name (or IP address)”, enter `login.rc.colorado.edu`. Select “SSH” as the connection type. Click on “Open”.
2. Enter your Identikey in response to the “login as” prompt
3. When prompted to enter your password:
    * If you are logging in using Duo Push, simply type your Identikey password. You will then receive an authentication request from the Duo app on your phone. Approve the request.
    * If you are using Duo SMS, Phone Call, or Token login methods, instructions can be found under the [As a CU Boulder user, how can I login with Duo?](./faq.md#as-a-cu-boulder-user-how-can-i-login-with-duo) FAQ section.
    ```{note}
    As a security feature, PuTTY does not display any text while you type your password
    ```
````

````{tab-item} Mac
:sync: terminal-access-mac

Logging in with a Mac requires no extra installation on your local machine. Simply utilize the terminal application that is pre-installed with your operating system to access Research Computing resources. 

1. Under “File”, open a new finder window. Navigate to the “Applications” folder, then the “Utilities” folder. Open a terminal window and type `ssh username@login.rc.colorado.edu`, where `username` is your assigned username. Press enter.
2. Enter your password:
    * If you are logging in using Duo Push, type your Identikey password.  You will then receive an authentication request on the Duo app on your phone. Approve the request.
    * If you are using Duo SMS, Phone Call, or Token login methods, instructions can be found under the [As a CU Boulder user, how can I login with Duo?](./faq.md#as-a-cu-boulder-user-how-can-i-login-with-duo) FAQ section.
````

````{tab-item} Linux
:sync: terminal-access-linux

Much like with Macs, Linux machines require no additional setup to access Research Computing resources. Simply utilize the your Linux terminal to access Research Computing resources. 

1. Open a terminal window from your application menu and type: `ssh username@login.rc.colorado.edu`, where `username` is your research computing username.

2. Enter your password:
    * If you are logging in using Duo Push, simply type your Identikey password. You will then receive an authentication request on the Duo app on your phone. Approve the request.
    * If you are using Duo SMS, Phone Call, or Token login methods, instructions can be found under the [As a CU Boulder user, how can I login with Duo?](./faq.md#as-a-cu-boulder-user-how-can-i-login-with-duo) FAQ section.

````
`````

#### SSH host keys

The first time you log into an RC login node you will be asked to verify the host key. You can refer to the keys published here to confirm that you are connecting to a valid RC login node.

```{note}
Each login node may support more than one type of key, but only one is used (or displayed) by your client at any given time.
```

#### login.rc.colorado.edu keys

```
# Fingerprint
# 256 SHA256:MB+601umlOc1sPXT4AXbV0rNRywUH4UlOIB9oJMuD8Q no comment (ECDSA)
ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPfjz9VZAwSS0329z6RNZQDNrN3vU1YcthmBRqQAgxmDxBVPJzhazEzKqigoWuuQDHNzfm+05xTOYAmcnL3V7tc=
```

```
# Fingerprint
# 256 SHA256:uNn+9REKipRZ59VZQEKlBzB8xjOCe/9yII8uBgEFOGY no comment (ED25519)
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPub4h8XLU3dXJBNZljS4PdPWOORXoBdSdaKnwFcMTxe
```

```
# Fingerprint
# 2048 SHA256:xZ9xXWtJwBWYqm3ZSvqq2Q7Vq0qnhnImGfTyanytrEk no comment (RSA)
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQWIqetVDUqKB2im3HyQZJ72PMYXFJUXR2Z+dzhGfOERABAV6m0fKcVcPrBjX9SYR4QYbxR+Yu2bIDDxpK+PZs2sAy/LU4po9mZUN8VAWBE0rwgcEvKfbQriwyhkdqdjEEzbEN5FTx05iYMN2o2vpshmi3dUpHaKMZPI0bhQKmwjM3bf77gpxXWNANsGIag0SdX4bmiWYQhR+CnzUJUis9DVOpVNfN+Jtw4IgnuJedehkZi/z/v7JKvV26jIxXmdq6+VkRCpoVnL3pJkoU5e4vaSc4V5kvgfI9G4tj6BEDGsRgHXAcZXk+hLtNp2nj2VsSocWcOVkn85obSfnVwV/f
```

```{tip}
Not sure what to do next? Try reviewing our [Navigating CURC Documentation](./navigating_docs.md) page, which includes flowcharts that can help you find key areas of our documentation - like how and where to store your files or how to start a job on the HPC cluster. 
```