Depending on your laptop there are a few clients that can be installed.
Please note that RCIC does not provide Windows OS or macOS support for the campus.
If there is an operating system related issue, RCIC will refer you to you get support
to address your systems issue first before installing CRSP Desktop.
In July 2024, Campus DUO authentication
will be mandatory for all CRSP desktop clients. The push response of DUO can become very tiresome.
On some clients, DUO can make CRSP unusable because every file transfer requires another
DUO push. RCIC cannot βturn off DUO.β
However, ssh keys with strong passwords is a secure method to to provide a different
second factor of authentication. SSH keys managed properly do not require DUO after initial setup but still maintain
strong security. Never copy an ssh private key file!
Quick Start
You should follow the guide to Generate SSH keys for different platforms.
Note
It is highly recommended that your private key file is in
PEM format and has a .pem file extension.
The CRSP desktop clients more reliably recognize PEM-formatted keys.
If using Windows, it is recommended to use the Powershell method
for generating ssh keys and not use PuTTY.
Important
All ssh keys that you generate MUST have a strong password.
Passwordless keys are a security violation.
DO NOT COPY ssh keys from one laptop to another. Every different physical
device should have a different ssh key pair.
Learn how to use SSH Agent on your desktop/laptop. If on Windows,
you can also Puttyβs pageant. SSH agents securely store a private
key in memory so that you only have to type the keyβs passphrase once.
You should see three items on screen: a .pkg file for Mac clients, a .exe file for Windows,
and older-versions folder. To toggle the between list and icon view click on the Layout
icon outlined in green.
For the Mac, simply click on the file with .pkg ending:
You should then see a screen with a download button on it and the full name of the file that will be downloaded
to your local computer. Click Download:
First time the application is started, it will automatically open a template
window where you can configure your connection. The template bookmark is labeled panteater.
You will edit this bookmark with your specific information.
Configure Step 2
The most common share to access is a lab share, owned by a UCI principal investigator.
Needed information to connect to CRSP:
Your UCNetID
The UCNetID of the CRSP lab owner:
It is our UCNetID if you own CRSP Lab
It is the UCNetID of your adviser, If you are a graduate student or post-doctoral researcher
In this example configuration, we are going to use the following specific
information for user npw to access the ppapadop lab:
UCNetID - npw
UCNetID of the CRSP lab owner - ppapadop
You will edit 5 fields in the default bookmark: Nickname, Username,
SSH Private Key, Path, and Connect Mode:
Nickname - we recommend that you change it to something like: CRSP LAb - <pi> lab
Username - your UCINetID
SSH Private Key - use an SSH key name that you should have generated when following the
Quick Start procedure for working effectively with DUO.
The corresponding public key should have also been copied
to ~/.ssh/authorized_keys on CRSP itself.
Path - only the last part (highlighted) that represents CRSP Lab Ownerβs UCNetID
should be edited. The /mmfs1/crsp/lab must remain unchanged.
Connect Mode - should be changed to Online. This keeps all files on CRSP
and reduces local cache space. If you use CRSP from multiple clients, this the most reliable
mechanism for keeping all data in sync.
The URL is created automatically from the information you type in other fields,
you donβt directly change it. This URL is for using the SFTP protocol to access
CRSP and is an end-to-end encrypted connection.
Configure Step 3
After editing the bookmark with the specific information, your screen should
look similar to the one below (but with your specific information in place):
The snapshots folder is hidden.
To view hidden files/folders in Finder, on the open folder
press Command + Shift + . (period) to make the hidden files appear.
Notice that a local file (ssh private key ~/.ssh/crsp-npw) and a passphrase are requested.
You can optionally save the passphrase.
Assuming that the public key for the private key has been properly installed on CRSP, you should be connected
without a DUO prompt.
2. UCINetID + password + DUO Push
What to expect with a Password + DUO
If you do NOT install an ssh key, you will be prompted for your UCINetID password and a DUO push. Even if you have
the CRSP Desktop remember your password, the DUO Push will be required each and every time the desktop
reconnects to CRSP.
Step 1 Enter your password, similar to the following:
Fig. 6.15 Enter the password associated with YOUR UCINetIDο
Usually, you would enter 1 in the box, click on Continue and you will receive a duo push on your phone.
If your phone isnβt available, then you can enter one of your DUO backup codes that
you set up when you enrolled in DUO through the UCI Office of Information Technology.
You are not limited to just a single, mapped, space. To create a new share,
click Open Connection to create a new template and edit it
following the directions above.
You should see three items on screen: a .pkg file for Mac clients, a .exe file for Windows,
and older-versions folder. To toggle the between list and icon view click on the Layout
icon outlined in green.
For the Windows, simply click on the file with .exe ending.
You should then see a screen with a download button on it and the full name of the file that will be downloaded
to your local computer. Click Download and save the file to your local computer:
By default, the file is downloaded in your Downloads folder. Find the downloaded file,
double-click on it to launch the installation. This installation includes the licensed version of
CRSP Desktop.
Install Step 2
In the opened window click Install to Install the CRSP Desktop on your laptop.
CRSP Desktop shows in the Windows
Notification Area
(also known as system tray). You can left-click or right-click on the CRSP Desktop icon to open it:
Nickname - we recommend that you change it to something like: CRSP LAb - <pi> lab
Username - your UCINetID
SSH Private Key - use an SSH key name that you should have generated when following the
Quick Start procedure for working effectively with DUO.
The corresponding public key should have also been copied
to ~/.ssh/authorized_keys on CRSP itself.
Path - only the last part (highlighted) that represents CRSP Lab Ownerβs UCNetID
should be edited. The /mmfs1/crsp/lab must remain unchanged.
Connect Mode - should be changed to Online. This keeps all files on CRSP
and reduces local cache space. If you use CRSP from multiple clients, this the most reliable
mechanism for keeping all data in sync.
The URL is created automatically from the information you type in other fields,
you donβt directly change it. This URL is for using the SFTP protocol to access
CRSP and is an end-to-end encrypted connection.
Configure Step 3
After editing the bookmark with the specific information, your screen should
look similar to the one below (with your information).
Click OK to save the updated bookmark:
Click connect to open your share.
At this point, your lab share is connected and you can use it just like a folder or network drive.
If you are not running ssh-agent or CRSP desktop has not remembered your password, you should asked for the
passphrase to your ssh private key file that you specified.
Notice that a local file (ssh private key) and a passphrase is requested. You can optionally save the passphrase.
Assuming that the public key for the private key has been properly installed on CRSP, you should be connected
without a DUO prompt.
2. UCINetID + password + DUO Push
What to expect with a Password + DUO
If you do NOT install an ssh key, you will be prompted for your UCINetID password and a DUO push. Even if you have
the CRSP Desktop remember your password, the DUO Push will be required each and every time the desktop
reconnects to CRSP.
Step 1 Enter your password, similar to the following:
Fig. 6.31 Enter the password associated with YOUR UCINetIDο
Usually, you would enter 1 in the box, and you will receive a duo push on your phone. If your phone isnβt
available, then you can enter one of your DUO backup codes that you set up when you enrolled in
DUO through the UCI Office of Information Technology
You are not limited to just a single, mapped, space. To create a new share,
click Open Connection to create a new template and edit it
following the directions above.
Here is an example with multiple connections configured and active:
Once logged in, you will be presented with the CRSP top level screen. You can
follow the tabs to your Lab shared areas in My-labs or HOME
private area in My-Home:
Nothing can be stored in HOME area, it is used for for files associated with the account
and for storing quota info file. It is a completely private area, only you have access.
We recommend that you do most work on CRSP in your lab area.
Lab areas are flexible for sharing. You can be granted access to multiple Lab areas.
To see your labs, Click on My-Labs, then click on CONNECT.
You will see a screen similar to the next one. In this example a user npw
has an access to 4 labs:
The File Browser is fairly easy to navigate, with some very basic sets of functions.
Create folders (directories)
Click on desired folders to navigate to a location where you want to create a
new folder. Click on NEW FOLDER and on a newly opened line type
desired folder name:
Click on desired folders to navigate to a location where you want to create a
file then click on NEW FILE and on a newly opened line type
desired file name:
Then follow your local laptop file finder application that will let you
choose file or multiple files for upload.
Once uploaded the CRSP browser will show a confirmation similar to
the one below showing your uploaded file name:
You must either be on the campus network or connected to the
UCI campus VPN to use sshfs.
In this example there are two variables:
username - Your UCNetID
labname - The UCNetID of the CRSP lab owner:
It is our UCNetID if you own CRSP Lab
It is the UCNetID of your adviser, If you are a graduate student or post-doctoral researcher
From your desktop or laptop, execute the following command
replacing username and labname with the appropriate UCNetIDs:
$ cd ~
$ mkdir crsp_mount
$ sshfs -o ssh_command='ssh -A -X -o StrictHostKeyChecking=no' \
-o idmap=user username@access.crsp.uci.edu:/mmfs1/crsp/lab/labname \
~/crsp_mount
As a result, sshfs mounts CRSP Lab share under ~/crsp_mount
directory. Use any name of your choice in place of crsp_mount.
Sshfs will not automatically map all your remote UID and GID from all of your CRSP groups
into your local Linux system. Note in the command above the use of -o idmap=user option.
This will only present your primary UID/GID from the remote CRSP system to your local system.
As the campus does not have a centralized directory service to manage every systems, options
on how to keep your local system and CRSP accounts synced are very limited.
