[\/et_pb_text][et_pb_text admin_label=”Intro” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ vertical_offset_tablet=”0″ horizontal_offset_tablet=”0″ custom_padding=”20px||||false|false” z_index_tablet=”0″ text_text_shadow_horizontal_length_tablet=”0px” text_text_shadow_vertical_length_tablet=”0px” text_text_shadow_blur_strength_tablet=”1px” link_text_shadow_horizontal_length_tablet=”0px” link_text_shadow_vertical_length_tablet=”0px” link_text_shadow_blur_strength_tablet=”1px” ul_text_shadow_horizontal_length_tablet=”0px” ul_text_shadow_vertical_length_tablet=”0px” ul_text_shadow_blur_strength_tablet=”1px” ol_text_shadow_horizontal_length_tablet=”0px” ol_text_shadow_vertical_length_tablet=”0px” ol_text_shadow_blur_strength_tablet=”1px” quote_text_shadow_horizontal_length_tablet=”0px” quote_text_shadow_vertical_length_tablet=”0px” quote_text_shadow_blur_strength_tablet=”1px” header_text_shadow_horizontal_length_tablet=”0px” header_text_shadow_vertical_length_tablet=”0px” header_text_shadow_blur_strength_tablet=”1px” header_2_text_shadow_horizontal_length_tablet=”0px” header_2_text_shadow_vertical_length_tablet=”0px” header_2_text_shadow_blur_strength_tablet=”1px” header_3_text_shadow_horizontal_length_tablet=”0px” header_3_text_shadow_vertical_length_tablet=”0px” header_3_text_shadow_blur_strength_tablet=”1px” header_4_text_shadow_horizontal_length_tablet=”0px” header_4_text_shadow_vertical_length_tablet=”0px” header_4_text_shadow_blur_strength_tablet=”1px” header_5_text_shadow_horizontal_length_tablet=”0px” header_5_text_shadow_vertical_length_tablet=”0px” header_5_text_shadow_blur_strength_tablet=”1px” header_6_text_shadow_horizontal_length_tablet=”0px” header_6_text_shadow_vertical_length_tablet=”0px” header_6_text_shadow_blur_strength_tablet=”1px” box_shadow_horizontal_tablet=”0px” box_shadow_vertical_tablet=”0px” box_shadow_blur_tablet=”40px” box_shadow_spread_tablet=”0px” global_colors_info=”{}”]<\/p>\n
Minerva\u2019s Authentication<\/span><\/span>\u00a0<\/span><\/h1>\n<\/ul>\n\u00a0<\/span><\/p>\nThe Digital and Technology Partners (DTP) department has phased out the Symantec VIP token as the two-factor authentication method for Minerva. Minerva has switched to Microsoft\u2019s Azure multi-factor authentication (MFA) since <\/span>9:00 am\u00a0Thursday,\u00a0March\u00a026, 2026<\/span><\/b>.<\/span>\u00a0<\/span><\/p>\n\u00a0<\/span><\/p>\nAvailable authentication\u00a0methods:<\/span><\/b>\u00a0<\/span><\/p>\nThere are 3 methods\u00a0enabled.\u00a0You can choose\u00a0either one of them:\u00a0<\/span>\u00a0<\/span><\/p>\nMethod\u00a01:\u00a0Phone\u00a0Text\u00a0passcode\u00a0(Mount\u00a0Sinai profile default),\u00a0<\/span>\u00a0<\/span><\/p>\nMethod\u00a02:\u00a0Microsoft Authenticator App\u00a0\u2013\u00a0push notification,\u00a0<\/span>\u00a0<\/span><\/p>\nMethod\u00a03:\u00a0Microsoft Authenticator App\u00a0\u2013\u00a0one-time password code\u00a0\u00a0<\/span>\u00a0<\/span><\/p>\nBy default, users who\u00a0didn\u2019t\u00a0setup Microsoft Authenticator will receive\u00a0Phone Text\u00a0SMS message codes\u00a0(method 1).\u00a0Microsoft Authenticator\u00a0installation\u00a0on the\u00a0mobile\u00a0phone\u00a0is\u00a0optional now.\u00a0<\/span>\u00a0<\/span><\/p>\n\u00a0<\/span><\/p>\nTo authenticate to Minerva, after you are connected to <\/span>Mount Sinai VPN<\/span><\/b>\u00a0from your\u00a0PC,\u00a0please follow:<\/span>\u00a0<\/span><\/p>\n[\/et_pb_text][et_pb_text admin_label=”Method_One” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ vertical_offset_tablet=”0″ horizontal_offset_tablet=”0″ custom_margin=”20px||50px||false|false” custom_padding=”20px||||false|false” z_index_tablet=”0″ text_text_shadow_horizontal_length_tablet=”0px” text_text_shadow_vertical_length_tablet=”0px” text_text_shadow_blur_strength_tablet=”1px” link_text_shadow_horizontal_length_tablet=”0px” link_text_shadow_vertical_length_tablet=”0px” link_text_shadow_blur_strength_tablet=”1px” ul_text_shadow_horizontal_length_tablet=”0px” ul_text_shadow_vertical_length_tablet=”0px” ul_text_shadow_blur_strength_tablet=”1px” ol_text_shadow_horizontal_length_tablet=”0px” ol_text_shadow_vertical_length_tablet=”0px” ol_text_shadow_blur_strength_tablet=”1px” quote_text_shadow_horizontal_length_tablet=”0px” quote_text_shadow_vertical_length_tablet=”0px” quote_text_shadow_blur_strength_tablet=”1px” header_text_shadow_horizontal_length_tablet=”0px” header_text_shadow_vertical_length_tablet=”0px” header_text_shadow_blur_strength_tablet=”1px” header_2_text_shadow_horizontal_length_tablet=”0px” header_2_text_shadow_vertical_length_tablet=”0px” header_2_text_shadow_blur_strength_tablet=”1px” header_3_text_shadow_horizontal_length_tablet=”0px” header_3_text_shadow_vertical_length_tablet=”0px” header_3_text_shadow_blur_strength_tablet=”1px” header_4_text_shadow_horizontal_length_tablet=”0px” header_4_text_shadow_vertical_length_tablet=”0px” header_4_text_shadow_blur_strength_tablet=”1px” header_5_text_shadow_horizontal_length_tablet=”0px” header_5_text_shadow_vertical_length_tablet=”0px” header_5_text_shadow_blur_strength_tablet=”1px” header_6_text_shadow_horizontal_length_tablet=”0px” header_6_text_shadow_vertical_length_tablet=”0px” header_6_text_shadow_blur_strength_tablet=”1px” box_shadow_horizontal_tablet=”0px” box_shadow_vertical_tablet=”0px” box_shadow_blur_tablet=”40px” box_shadow_spread_tablet=”0px” global_colors_info=”{}”]<\/p>\n
Method 1:\u00a0Phone\u00a0Text\u00a0SMS message\u00a0code<\/strong>\u00a0–\u00a0Users who\u00a0didn\u2019t\u00a0install Microsoft Authenticator on the phone:\u00a0<\/span><\/p>\n\u00a0<\/span><\/p>\nFrom\u00a0a\u00a0SSH\u00a0terminal application like Putty on your PC or Terminal on MacOS:\u00a0<\/span>\u00a0<\/span><\/p>\n\nssh yourUserID@minerva.hpc.mssm.edu\n(yourUserID@minerva.hpc.mssm.edu) Password: <Enter your Sinai School Password Only>\nEnter Your Microsoft verification code<609017><\/code><\/pre>\n<\/blockquote>\nYou will receive a 6-digit code\u00a0in\u00a0your phone\u00a0Text\u00a0SMS message. Enter\u00a0that code after the prompt, like above\u00a0609017<\/code>.<\/p>\n[\/et_pb_text][et_pb_text admin_label=”Method_Two” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ vertical_offset_tablet=”0″ horizontal_offset_tablet=”0″ custom_padding=”20px||||false|false” hover_enabled=”0″ z_index_tablet=”0″ text_text_shadow_horizontal_length_tablet=”0px” text_text_shadow_vertical_length_tablet=”0px” text_text_shadow_blur_strength_tablet=”1px” link_text_shadow_horizontal_length_tablet=”0px” link_text_shadow_vertical_length_tablet=”0px” link_text_shadow_blur_strength_tablet=”1px” ul_text_shadow_horizontal_length_tablet=”0px” ul_text_shadow_vertical_length_tablet=”0px” ul_text_shadow_blur_strength_tablet=”1px” ol_text_shadow_horizontal_length_tablet=”0px” ol_text_shadow_vertical_length_tablet=”0px” ol_text_shadow_blur_strength_tablet=”1px” quote_text_shadow_horizontal_length_tablet=”0px” quote_text_shadow_vertical_length_tablet=”0px” quote_text_shadow_blur_strength_tablet=”1px” header_text_shadow_horizontal_length_tablet=”0px” header_text_shadow_vertical_length_tablet=”0px” header_text_shadow_blur_strength_tablet=”1px” header_2_text_shadow_horizontal_length_tablet=”0px” header_2_text_shadow_vertical_length_tablet=”0px” header_2_text_shadow_blur_strength_tablet=”1px” header_3_text_shadow_horizontal_length_tablet=”0px” header_3_text_shadow_vertical_length_tablet=”0px” header_3_text_shadow_blur_strength_tablet=”1px” header_4_text_shadow_horizontal_length_tablet=”0px” header_4_text_shadow_vertical_length_tablet=”0px” header_4_text_shadow_blur_strength_tablet=”1px” header_5_text_shadow_horizontal_length_tablet=”0px” header_5_text_shadow_vertical_length_tablet=”0px” header_5_text_shadow_blur_strength_tablet=”1px” header_6_text_shadow_horizontal_length_tablet=”0px” header_6_text_shadow_vertical_length_tablet=”0px” header_6_text_shadow_blur_strength_tablet=”1px” box_shadow_horizontal_tablet=”0px” box_shadow_vertical_tablet=”0px” box_shadow_blur_tablet=”40px” box_shadow_spread_tablet=”0px” global_colors_info=”{}” custom_margin=”20px||50px||false|false” sticky_enabled=”0″]Method 2:\u00a0Microsoft Authentication push notification\u00a0–<\/b>\u00a0Users who have installed Microsoft Authenticator on their phones and set the default method to be \u2018App based authentication – notification\u2019:\u00a0<\/span>\u00a0<\/span><\/p>\nStep\u00a00:<\/span><\/b>\u00a0Install and register\u00a0Microsoft\u00a0Authenticator\u00a0on your phone\u00a0for\u00a0Microsoft\u00a0MFA\u00a0with\u00a0your school network account,\u00a0following\u00a0Option 2\u00a0at\u00a0<\/span>https:\/\/itsecurity.mssm.edu\/mobile-device-security\/ms-authenticator\/<\/span><\/a><\/p>\n1) If you already have Microsoft Authenticator registered with Option 2, go to Step 1.<\/span><\/p>\n2) If you previously registered with Option 1 phone number, you still need to register with Option 2. Option 1 will send phone text code, no phone push<\/span>.\u00a0<\/span><\/p>\n3) If you are a new user to get started with MFA, please complete Option 3 and Option 2.<\/span>\u00a0<\/span><\/p>\n\u00a0<\/span><\/p>\nStep\u00a01:<\/span><\/b>\u00a0Check\u00a0and\u00a0make\u00a0your default sign-in method to Microsoft Authenticator.<\/span>\u00a0<\/span><\/p>\nLogin\u00a0to\u00a0<\/span>https:\/\/mysignins.microsoft.com\/security-info<\/span><\/a>, in the\u202f<\/span>Security Info<\/span><\/b>\u202fpage\u202fclick \u2018Change\u2019\u00a0and\u00a0select\u00a0\u201cApp based authentication \u2013 notification\u201d\u00a0from the drop-down options\u00a0(See picture below).<\/span>\u00a0<\/span>Microsoft Authenticator must be the Sign-in method when most advisable is unavailable, as shown in the red box in the below picture. If you see your phone number there, please do the change.<\/span><\/p>\n![\"\"](\"https:\/\/labs.icahn.mssm.edu\/minervalab\/wp-content\/uploads\/sites\/342\/2026\/03\/Picture1.png\")
<\/p>\n
If you cannot login to\u00a0<\/span>https:\/\/mysignins.microsoft.com\/security-info<\/span><\/a> with your Sinai school account, or cannot change the methods, or the Microsoft Authenticator method disappears after refreshing the webpage, please send a ticket to hpchelp@hpc.mssm.edu. <\/span>\u00a0<\/span><\/p>\n\u00a0<\/span><\/p>\nStep\u00a02:<\/span><\/b>\u00a0SSH login to the\u00a0Minerva login\u00a0test server\u00a0with\u202fyour Sinai<\/span>\u00a0<\/span><\/b>school password\u00a0only<\/span><\/b>:<\/span>\u00a0<\/span><\/p>\n\nssh\u00a0yourUserID@minerva.hpc.mssm.edu\nyourUserID@minerva.hpc.mssm.edu's password: <Enter your Sinai School password only>\u00a0\n<\/code><\/pre>\n<\/blockquote>\nWait for Step 3.<\/p>\n
If you get error \u201cPermission denied (gssapi-keyex,gssapi-with-mic,password).\u201d even before password input, please check your local ssh config file like ~\/.ssh\/config, remove line \u201cPreferredAuthentications\u00a0keyboard-interactive\u201d or similar, or remove the config file.\u202f<\/span> <\/span>\u00a0<\/span><\/p>\n<\/code><\/pre>\nStep\u00a03:<\/span><\/b>\u00a0Wait for the\u202ffollowing\u00a0<\/span>Microsoft Authenticator\u00a0push\u00a0notification\u00a0dialogue<\/span><\/b>\u202fon your phone (usually in 10 seconds, see picture below).\u202f<\/span>Select Approve<\/span><\/b>\u202fto complete login.<\/span><\/p>\n1). You shall see this push dialogue from your Microsoft Authenticator App on your phone to get authenticated.<\/span><\/p>\n![\"\"](\"https:\/\/labs.icahn.mssm.edu\/minervalab\/wp-content\/uploads\/sites\/342\/2026\/02\/Image-1.jpg\")
<\/code><\/p>\n2).\u00a0If you\u00a0received\u00a0an SMS\u00a0text message code, and get denied with\u00a0\u201cPermission denied, please try again.\u201d This\u00a0method has not been configured properly.\u00a0Please follow above\u00a0Step 1 to change your default sign-in method to Microsoft Authenticator.\u00a0<\/span>\u00a0<\/span><\/p>\n3).\u00a0If you\u00a0don\u2019t\u00a0receive any notification on the phone, please start over from Step 0.\u00a0<\/span>\u00a0<\/span><\/p>\n\u00a0<\/code><\/p>\nStep\u00a04:<\/span><\/b> If Step 3 is successful and you have successfully logged into Minerva. <\/span>\u00a0<\/span><\/code><\/p>\n<\/code><\/pre>\nYou don\u2019t have to use Method 2, but if you elect to use it and still have trouble with the enrollment after making \u2018App based Authentication – Notification\u2019 as the default method in Step 2, or see issues other than those specified in the above Steps, please email us (hpchelp@hpc.mssm.edu<\/a>).[\/et_pb_text][et_pb_text admin_label=”Method_Three” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ vertical_offset_tablet=”0″ horizontal_offset_tablet=”0″ custom_padding=”20px||||false|false” hover_enabled=”0″ z_index_tablet=”0″ text_text_shadow_horizontal_length_tablet=”0px” text_text_shadow_vertical_length_tablet=”0px” text_text_shadow_blur_strength_tablet=”1px” link_text_shadow_horizontal_length_tablet=”0px” link_text_shadow_vertical_length_tablet=”0px” link_text_shadow_blur_strength_tablet=”1px” ul_text_shadow_horizontal_length_tablet=”0px” ul_text_shadow_vertical_length_tablet=”0px” ul_text_shadow_blur_strength_tablet=”1px” ol_text_shadow_horizontal_length_tablet=”0px” ol_text_shadow_vertical_length_tablet=”0px” ol_text_shadow_blur_strength_tablet=”1px” quote_text_shadow_horizontal_length_tablet=”0px” quote_text_shadow_vertical_length_tablet=”0px” quote_text_shadow_blur_strength_tablet=”1px” header_text_shadow_horizontal_length_tablet=”0px” header_text_shadow_vertical_length_tablet=”0px” header_text_shadow_blur_strength_tablet=”1px” header_2_text_shadow_horizontal_length_tablet=”0px” header_2_text_shadow_vertical_length_tablet=”0px” header_2_text_shadow_blur_strength_tablet=”1px” header_3_text_shadow_horizontal_length_tablet=”0px” header_3_text_shadow_vertical_length_tablet=”0px” header_3_text_shadow_blur_strength_tablet=”1px” header_4_text_shadow_horizontal_length_tablet=”0px” header_4_text_shadow_vertical_length_tablet=”0px” header_4_text_shadow_blur_strength_tablet=”1px” header_5_text_shadow_horizontal_length_tablet=”0px” header_5_text_shadow_vertical_length_tablet=”0px” header_5_text_shadow_blur_strength_tablet=”1px” header_6_text_shadow_horizontal_length_tablet=”0px” header_6_text_shadow_vertical_length_tablet=”0px” header_6_text_shadow_blur_strength_tablet=”1px” box_shadow_horizontal_tablet=”0px” box_shadow_vertical_tablet=”0px” box_shadow_blur_tablet=”40px” box_shadow_spread_tablet=”0px” global_colors_info=”{}” sticky_enabled=”0″]<\/p>\nMethod 3:\u00a0Microsoft Authentication hardware token\u00a0method\u00a0<\/b>\u00a0<\/span><\/p>\nFollow\u00a0Step 0\u00a0in\u00a0<\/span>Method 2:\u00a0Microsoft Authentication push notification\u00a0method<\/span><\/b> but select \u201cApp based notification or hardware token \u2013 code\u201d in Step 1. Use the 6-digit one-time password code from your Microsoft\u00a0<\/span>Authenticatior\u00a0app\u00a0on your phone\u00a0when prompted for Microsoft Code.\u00a0<\/span><\/p>\n <\/p>\n
[\/et_pb_text][et_pb_text admin_label=”VPN” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ custom_padding=”20px||||false|false” global_colors_info=”{}”]<\/p>\n
Virtual Private Network (VPN) Tunneling<\/h2>\n
Connection to Minerva from off campus requires the use of VPN and the F5 Big-IP software to be installed on your local workstation.<\/p>\n
To setup VPN access, see https:\/\/itsecurity.mssm.edu\/vpn-steps\/<\/a><\/p>\nTo setup the F5 Big-IP software to enable tunneling on Windows or MAC, see https:\/\/itsecurity.mssm.edu\/vpn-access-selection\/<\/a><\/p>\n <\/p>\n
Instructions on F5 Setup on Ubuntu<\/h3>\n
On your local workstation, go to https:\/\/mshmsvpn.mssm.edu<\/a> and log in with your password and VIP credentials. The welcome page will have many boxes. Click on linux_deb<\/strong> and download the f5 software. Open a terminal on your workstation and enter one of the following commands:<\/p>\n\n sudo apt install \/absolute\/path\/to\/deb\/file\r\nor\r\n sudo dpkg -i \/absolute\/path\/to\/deb\/file<\/code><\/pre>\n<\/blockquote>\n\/opt\/f5 will be created. Click on \u201ctunnel\u201d and on the f5 popup, \u201cChoose\u201d \/opt\/f5\/vpn\/f5vpn and you should be in.<\/p>\n
Instructions for F5 Centos\/Red Hat systems<\/h3>\n
On your local workstation, go to https:\/\/mshmsvpn.mssm.edu<\/a> and log in with your password and VIP credentials. The welcome page will have many boxes. Click on linux_rpm<\/b> and download the f5 software. Open a terminal on your workstation and enter one of the following commands:<\/p>\nFor Centos:<\/strong><\/p>\n\n\tsudo yum localinstall \/absolute\/path\/to\/rpm\/file\r\nor\r\n\tsudo rpm -i absolute\/path\/to\/rpm\/file<\/code><\/pre>\n<\/blockquote>\nFor Red Hat\/Fedora:<\/strong><\/p>\n\n\tsudo rpm -i \/absolute\/path\/to\/rpm\/file\r\nor\r\n\tsudo dnf localinstall \/absolute\/path\/to\/rpm\/file<\/code><\/pre>\n<\/blockquote>\n\/opt\/f5 will be created. Click on \u201ctunnel\u201d and on the f5 popup, \u201cChoose\u201d \/opt\/f5\/vpn\/f5vpn and you should be in.<\/p>\n
[\/et_pb_text][et_pb_text admin_label=”Login Nodes” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ custom_padding=”20px||||false|false” global_colors_info=”{}”]<\/p>\n
Login Nodes:<\/h2>\n
Minerva currently has several login nodes which are used to access the compute cluster. The login nodes are connected to the campus network allowing access only on campus or via tunneling over Mount Sinai\u2019s VPN if off campus.<\/p>\n
There are currently four login nodes available for general use, minerva12, minerva13 and minerva14.You may connect to one of them through one of two round-robin Domain Name Server (DNS) load balancing names or you may specify one of them explicitly, if you prefer one over the other.For example, if you have a disconnected screen session running on one of the nodes, you will want to log onto that particular node if you want to reconnect.<\/p>\n
The addresses of the nodes are:<\/p>\n
\n- minerva.hpc.mssm.edu \u2013 round-robin redirect<\/li>\n
- chimera.hpc.mssm.edu \u2013 round-robin redirect<\/li>\n
- minerva11.hpc.mssm.edu \u2013 specific login node<\/li>\n
- minerva12.hpc.mssm.edu \u2013 specific login node<\/li>\n
- minerva13.hpc.mssm.edu \u2013 specific login node<\/li>\n
- minerva14.hpc.mssm.edu \u2013 specific login node<\/li>\n<\/ul>\n
Suggestion: Use the name minerva.hpc.mssm.edu for your connections, as it will continue to work in the future even if the login nodes are changed.<\/strong><\/p>\nFrom Windows<\/b>
To log in from a Windows machine, you will need a terminal emulator. There are two that we recommend.<\/p>\n
MobaXterm ( https:\/\/mobaxterm.mobatek.net<\/a> ) an all-in-one product that provides a terminal emulator, builtin X11 server, multiple tabbed windows, scp, sftp, etc.<\/p>\nPuTTY ( https:\/\/www.putty.org\/<\/a> ) a widely used SSH client and associated utilities (scp, sftp, etc). PuTTY does not come with a built in X11 server. Users will have to install Xming ( https:\/\/sourceforge.net\/projects\/xming\/<\/a> ) if they wish to use X11 graphics.<\/p>\nFrom MAC<\/b>
MAC machines come with a console window already installed. However, you may want to install a more versatile terminal emulator such as iTerm2 ( https:\/\/iterm2.com<\/a> )<\/p>\n
\u00a0<\/span><\/p>\n The Digital and Technology Partners (DTP) department has phased out the Symantec VIP token as the two-factor authentication method for Minerva. Minerva has switched to Microsoft\u2019s Azure multi-factor authentication (MFA) since <\/span>9:00 am\u00a0Thursday,\u00a0March\u00a026, 2026<\/span><\/b>.<\/span>\u00a0<\/span><\/p>\n \u00a0<\/span><\/p>\n Available authentication\u00a0methods:<\/span><\/b>\u00a0<\/span><\/p>\n There are 3 methods\u00a0enabled.\u00a0You can choose\u00a0either one of them:\u00a0<\/span>\u00a0<\/span><\/p>\n Method\u00a01:\u00a0Phone\u00a0Text\u00a0passcode\u00a0(Mount\u00a0Sinai profile default),\u00a0<\/span>\u00a0<\/span><\/p>\n Method\u00a02:\u00a0Microsoft Authenticator App\u00a0\u2013\u00a0push notification,\u00a0<\/span>\u00a0<\/span><\/p>\n Method\u00a03:\u00a0Microsoft Authenticator App\u00a0\u2013\u00a0one-time password code\u00a0\u00a0<\/span>\u00a0<\/span><\/p>\n By default, users who\u00a0didn\u2019t\u00a0setup Microsoft Authenticator will receive\u00a0Phone Text\u00a0SMS message codes\u00a0(method 1).\u00a0Microsoft Authenticator\u00a0installation\u00a0on the\u00a0mobile\u00a0phone\u00a0is\u00a0optional now.\u00a0<\/span>\u00a0<\/span><\/p>\n \u00a0<\/span><\/p>\n To authenticate to Minerva, after you are connected to <\/span>Mount Sinai VPN<\/span><\/b>\u00a0from your\u00a0PC,\u00a0please follow:<\/span>\u00a0<\/span><\/p>\n [\/et_pb_text][et_pb_text admin_label=”Method_One” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ vertical_offset_tablet=”0″ horizontal_offset_tablet=”0″ custom_margin=”20px||50px||false|false” custom_padding=”20px||||false|false” z_index_tablet=”0″ text_text_shadow_horizontal_length_tablet=”0px” text_text_shadow_vertical_length_tablet=”0px” text_text_shadow_blur_strength_tablet=”1px” link_text_shadow_horizontal_length_tablet=”0px” link_text_shadow_vertical_length_tablet=”0px” link_text_shadow_blur_strength_tablet=”1px” ul_text_shadow_horizontal_length_tablet=”0px” ul_text_shadow_vertical_length_tablet=”0px” ul_text_shadow_blur_strength_tablet=”1px” ol_text_shadow_horizontal_length_tablet=”0px” ol_text_shadow_vertical_length_tablet=”0px” ol_text_shadow_blur_strength_tablet=”1px” quote_text_shadow_horizontal_length_tablet=”0px” quote_text_shadow_vertical_length_tablet=”0px” quote_text_shadow_blur_strength_tablet=”1px” header_text_shadow_horizontal_length_tablet=”0px” header_text_shadow_vertical_length_tablet=”0px” header_text_shadow_blur_strength_tablet=”1px” header_2_text_shadow_horizontal_length_tablet=”0px” header_2_text_shadow_vertical_length_tablet=”0px” header_2_text_shadow_blur_strength_tablet=”1px” header_3_text_shadow_horizontal_length_tablet=”0px” header_3_text_shadow_vertical_length_tablet=”0px” header_3_text_shadow_blur_strength_tablet=”1px” header_4_text_shadow_horizontal_length_tablet=”0px” header_4_text_shadow_vertical_length_tablet=”0px” header_4_text_shadow_blur_strength_tablet=”1px” header_5_text_shadow_horizontal_length_tablet=”0px” header_5_text_shadow_vertical_length_tablet=”0px” header_5_text_shadow_blur_strength_tablet=”1px” header_6_text_shadow_horizontal_length_tablet=”0px” header_6_text_shadow_vertical_length_tablet=”0px” header_6_text_shadow_blur_strength_tablet=”1px” box_shadow_horizontal_tablet=”0px” box_shadow_vertical_tablet=”0px” box_shadow_blur_tablet=”40px” box_shadow_spread_tablet=”0px” global_colors_info=”{}”]<\/p>\n Method 1:\u00a0Phone\u00a0Text\u00a0SMS message\u00a0code<\/strong>\u00a0–\u00a0Users who\u00a0didn\u2019t\u00a0install Microsoft Authenticator on the phone:\u00a0<\/span><\/p>\n \u00a0<\/span><\/p>\n From\u00a0a\u00a0SSH\u00a0terminal application like Putty on your PC or Terminal on MacOS:\u00a0<\/span>\u00a0<\/span><\/p>\n You will receive a 6-digit code\u00a0in\u00a0your phone\u00a0Text\u00a0SMS message. Enter\u00a0that code after the prompt, like above\u00a0 [\/et_pb_text][et_pb_text admin_label=”Method_Two” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ vertical_offset_tablet=”0″ horizontal_offset_tablet=”0″ custom_padding=”20px||||false|false” hover_enabled=”0″ z_index_tablet=”0″ text_text_shadow_horizontal_length_tablet=”0px” text_text_shadow_vertical_length_tablet=”0px” text_text_shadow_blur_strength_tablet=”1px” link_text_shadow_horizontal_length_tablet=”0px” link_text_shadow_vertical_length_tablet=”0px” link_text_shadow_blur_strength_tablet=”1px” ul_text_shadow_horizontal_length_tablet=”0px” ul_text_shadow_vertical_length_tablet=”0px” ul_text_shadow_blur_strength_tablet=”1px” ol_text_shadow_horizontal_length_tablet=”0px” ol_text_shadow_vertical_length_tablet=”0px” ol_text_shadow_blur_strength_tablet=”1px” quote_text_shadow_horizontal_length_tablet=”0px” quote_text_shadow_vertical_length_tablet=”0px” quote_text_shadow_blur_strength_tablet=”1px” header_text_shadow_horizontal_length_tablet=”0px” header_text_shadow_vertical_length_tablet=”0px” header_text_shadow_blur_strength_tablet=”1px” header_2_text_shadow_horizontal_length_tablet=”0px” header_2_text_shadow_vertical_length_tablet=”0px” header_2_text_shadow_blur_strength_tablet=”1px” header_3_text_shadow_horizontal_length_tablet=”0px” header_3_text_shadow_vertical_length_tablet=”0px” header_3_text_shadow_blur_strength_tablet=”1px” header_4_text_shadow_horizontal_length_tablet=”0px” header_4_text_shadow_vertical_length_tablet=”0px” header_4_text_shadow_blur_strength_tablet=”1px” header_5_text_shadow_horizontal_length_tablet=”0px” header_5_text_shadow_vertical_length_tablet=”0px” header_5_text_shadow_blur_strength_tablet=”1px” header_6_text_shadow_horizontal_length_tablet=”0px” header_6_text_shadow_vertical_length_tablet=”0px” header_6_text_shadow_blur_strength_tablet=”1px” box_shadow_horizontal_tablet=”0px” box_shadow_vertical_tablet=”0px” box_shadow_blur_tablet=”40px” box_shadow_spread_tablet=”0px” global_colors_info=”{}” custom_margin=”20px||50px||false|false” sticky_enabled=”0″]Method 2:\u00a0Microsoft Authentication push notification\u00a0–<\/b>\u00a0Users who have installed Microsoft Authenticator on their phones and set the default method to be \u2018App based authentication – notification\u2019:\u00a0<\/span>\u00a0<\/span><\/p>\n Step\u00a00:<\/span><\/b>\u00a0Install and register\u00a0Microsoft\u00a0Authenticator\u00a0on your phone\u00a0for\u00a0Microsoft\u00a0MFA\u00a0with\u00a0your school network account,\u00a0following\u00a0Option 2\u00a0at\u00a0<\/span>https:\/\/itsecurity.mssm.edu\/mobile-device-security\/ms-authenticator\/<\/span><\/a><\/p>\n 1) If you already have Microsoft Authenticator registered with Option 2, go to Step 1.<\/span><\/p>\n 2) If you previously registered with Option 1 phone number, you still need to register with Option 2. Option 1 will send phone text code, no phone push<\/span>.\u00a0<\/span><\/p>\n 3) If you are a new user to get started with MFA, please complete Option 3 and Option 2.<\/span>\u00a0<\/span><\/p>\n \u00a0<\/span><\/p>\n Step\u00a01:<\/span><\/b>\u00a0Check\u00a0and\u00a0make\u00a0your default sign-in method to Microsoft Authenticator.<\/span>\u00a0<\/span><\/p>\n Login\u00a0to\u00a0<\/span>https:\/\/mysignins.microsoft.com\/security-info<\/span><\/a>, in the\u202f<\/span>Security Info<\/span><\/b>\u202fpage\u202fclick \u2018Change\u2019\u00a0and\u00a0select\u00a0\u201cApp based authentication \u2013 notification\u201d\u00a0from the drop-down options\u00a0(See picture below).<\/span>\u00a0<\/span>Microsoft Authenticator must be the Sign-in method when most advisable is unavailable, as shown in the red box in the below picture. If you see your phone number there, please do the change.<\/span><\/p>\n If you cannot login to\u00a0<\/span>https:\/\/mysignins.microsoft.com\/security-info<\/span><\/a> with your Sinai school account, or cannot change the methods, or the Microsoft Authenticator method disappears after refreshing the webpage, please send a ticket to hpchelp@hpc.mssm.edu. <\/span>\u00a0<\/span><\/p>\n \u00a0<\/span><\/p>\n Step\u00a02:<\/span><\/b>\u00a0SSH login to the\u00a0Minerva login\u00a0test server\u00a0with\u202fyour Sinai<\/span>\u00a0<\/span><\/b>school password\u00a0only<\/span><\/b>:<\/span>\u00a0<\/span><\/p>\n Wait for Step 3.<\/p>\n If you get error \u201cPermission denied (gssapi-keyex,gssapi-with-mic,password).\u201d even before password input, please check your local ssh config file like ~\/.ssh\/config, remove line \u201cPreferredAuthentications\u00a0keyboard-interactive\u201d or similar, or remove the config file.\u202f<\/span> <\/span>\u00a0<\/span><\/p>\n Step\u00a03:<\/span><\/b>\u00a0Wait for the\u202ffollowing\u00a0<\/span>Microsoft Authenticator\u00a0push\u00a0notification\u00a0dialogue<\/span><\/b>\u202fon your phone (usually in 10 seconds, see picture below).\u202f<\/span>Select Approve<\/span><\/b>\u202fto complete login.<\/span><\/p>\n 1). You shall see this push dialogue from your Microsoft Authenticator App on your phone to get authenticated.<\/span><\/p>\n 2).\u00a0If you\u00a0received\u00a0an SMS\u00a0text message code, and get denied with\u00a0\u201cPermission denied, please try again.\u201d This\u00a0method has not been configured properly.\u00a0Please follow above\u00a0Step 1 to change your default sign-in method to Microsoft Authenticator.\u00a0<\/span>\u00a0<\/span><\/p>\n 3).\u00a0If you\u00a0don\u2019t\u00a0receive any notification on the phone, please start over from Step 0.\u00a0<\/span>\u00a0<\/span><\/p>\n Step\u00a04:<\/span><\/b> If Step 3 is successful and you have successfully logged into Minerva. <\/span>\u00a0<\/span> You don\u2019t have to use Method 2, but if you elect to use it and still have trouble with the enrollment after making \u2018App based Authentication – Notification\u2019 as the default method in Step 2, or see issues other than those specified in the above Steps, please email us (hpchelp@hpc.mssm.edu<\/a>).[\/et_pb_text][et_pb_text admin_label=”Method_Three” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ vertical_offset_tablet=”0″ horizontal_offset_tablet=”0″ custom_padding=”20px||||false|false” hover_enabled=”0″ z_index_tablet=”0″ text_text_shadow_horizontal_length_tablet=”0px” text_text_shadow_vertical_length_tablet=”0px” text_text_shadow_blur_strength_tablet=”1px” link_text_shadow_horizontal_length_tablet=”0px” link_text_shadow_vertical_length_tablet=”0px” link_text_shadow_blur_strength_tablet=”1px” ul_text_shadow_horizontal_length_tablet=”0px” ul_text_shadow_vertical_length_tablet=”0px” ul_text_shadow_blur_strength_tablet=”1px” ol_text_shadow_horizontal_length_tablet=”0px” ol_text_shadow_vertical_length_tablet=”0px” ol_text_shadow_blur_strength_tablet=”1px” quote_text_shadow_horizontal_length_tablet=”0px” quote_text_shadow_vertical_length_tablet=”0px” quote_text_shadow_blur_strength_tablet=”1px” header_text_shadow_horizontal_length_tablet=”0px” header_text_shadow_vertical_length_tablet=”0px” header_text_shadow_blur_strength_tablet=”1px” header_2_text_shadow_horizontal_length_tablet=”0px” header_2_text_shadow_vertical_length_tablet=”0px” header_2_text_shadow_blur_strength_tablet=”1px” header_3_text_shadow_horizontal_length_tablet=”0px” header_3_text_shadow_vertical_length_tablet=”0px” header_3_text_shadow_blur_strength_tablet=”1px” header_4_text_shadow_horizontal_length_tablet=”0px” header_4_text_shadow_vertical_length_tablet=”0px” header_4_text_shadow_blur_strength_tablet=”1px” header_5_text_shadow_horizontal_length_tablet=”0px” header_5_text_shadow_vertical_length_tablet=”0px” header_5_text_shadow_blur_strength_tablet=”1px” header_6_text_shadow_horizontal_length_tablet=”0px” header_6_text_shadow_vertical_length_tablet=”0px” header_6_text_shadow_blur_strength_tablet=”1px” box_shadow_horizontal_tablet=”0px” box_shadow_vertical_tablet=”0px” box_shadow_blur_tablet=”40px” box_shadow_spread_tablet=”0px” global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n Method 3:\u00a0Microsoft Authentication hardware token\u00a0method\u00a0<\/b>\u00a0<\/span><\/p>\n Follow\u00a0Step 0\u00a0in\u00a0<\/span>Method 2:\u00a0Microsoft Authentication push notification\u00a0method<\/span><\/b> but select \u201cApp based notification or hardware token \u2013 code\u201d in Step 1. Use the 6-digit one-time password code from your Microsoft\u00a0<\/span>Authenticatior\u00a0app\u00a0on your phone\u00a0when prompted for Microsoft Code.\u00a0<\/span><\/p>\n <\/p>\n [\/et_pb_text][et_pb_text admin_label=”VPN” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ custom_padding=”20px||||false|false” global_colors_info=”{}”]<\/p>\n Connection to Minerva from off campus requires the use of VPN and the F5 Big-IP software to be installed on your local workstation.<\/p>\n To setup VPN access, see https:\/\/itsecurity.mssm.edu\/vpn-steps\/<\/a><\/p>\n To setup the F5 Big-IP software to enable tunneling on Windows or MAC, see https:\/\/itsecurity.mssm.edu\/vpn-access-selection\/<\/a><\/p>\n <\/p>\n On your local workstation, go to https:\/\/mshmsvpn.mssm.edu<\/a> and log in with your password and VIP credentials. The welcome page will have many boxes. Click on linux_deb<\/strong> and download the f5 software. Open a terminal on your workstation and enter one of the following commands:<\/p>\n \/opt\/f5 will be created. Click on \u201ctunnel\u201d and on the f5 popup, \u201cChoose\u201d \/opt\/f5\/vpn\/f5vpn and you should be in.<\/p>\n On your local workstation, go to https:\/\/mshmsvpn.mssm.edu<\/a> and log in with your password and VIP credentials. The welcome page will have many boxes. Click on linux_rpm<\/b> and download the f5 software. Open a terminal on your workstation and enter one of the following commands:<\/p>\n For Centos:<\/strong><\/p>\n For Red Hat\/Fedora:<\/strong><\/p>\n \/opt\/f5 will be created. Click on \u201ctunnel\u201d and on the f5 popup, \u201cChoose\u201d \/opt\/f5\/vpn\/f5vpn and you should be in.<\/p>\n [\/et_pb_text][et_pb_text admin_label=”Login Nodes” _builder_version=”4.27.4″ _module_preset=”default” header_font=”|600|||||||” header_text_color=”#221f72″ header_font_size=”26px” header_2_text_color=”#221f72″ header_2_font_size=”24px” header_3_text_color=”#221f72″ custom_padding=”20px||||false|false” global_colors_info=”{}”]<\/p>\n Minerva currently has several login nodes which are used to access the compute cluster. The login nodes are connected to the campus network allowing access only on campus or via tunneling over Mount Sinai\u2019s VPN if off campus.<\/p>\n There are currently four login nodes available for general use, minerva12, minerva13 and minerva14.You may connect to one of them through one of two round-robin Domain Name Server (DNS) load balancing names or you may specify one of them explicitly, if you prefer one over the other.For example, if you have a disconnected screen session running on one of the nodes, you will want to log onto that particular node if you want to reconnect.<\/p>\n The addresses of the nodes are:<\/p>\n Suggestion: Use the name minerva.hpc.mssm.edu for your connections, as it will continue to work in the future even if the login nodes are changed.<\/strong><\/p>\n From Windows<\/b> MobaXterm ( https:\/\/mobaxterm.mobatek.net<\/a> ) an all-in-one product that provides a terminal emulator, builtin X11 server, multiple tabbed windows, scp, sftp, etc.<\/p>\n PuTTY ( https:\/\/www.putty.org\/<\/a> ) a widely used SSH client and associated utilities (scp, sftp, etc). PuTTY does not come with a built in X11 server. Users will have to install Xming ( https:\/\/sourceforge.net\/projects\/xming\/<\/a> ) if they wish to use X11 graphics.<\/p>\n From MAC<\/b>\n
ssh yourUserID@minerva.hpc.mssm.edu\n(yourUserID@minerva.hpc.mssm.edu) Password: <Enter your Sinai School Password Only>\nEnter Your Microsoft verification code<609017><\/code><\/pre>\n<\/blockquote>\n609017<\/code>.<\/p>\n<\/p>\n\n
ssh\u00a0yourUserID@minerva.hpc.mssm.edu\nyourUserID@minerva.hpc.mssm.edu's password: <Enter your Sinai School password only>\u00a0\n<\/code><\/pre>\n<\/blockquote>\n<\/code><\/pre>\n<\/code><\/p>\n\u00a0<\/code><\/p>\n<\/code><\/p>\n<\/code><\/pre>\nVirtual Private Network (VPN) Tunneling<\/h2>\n
Instructions on F5 Setup on Ubuntu<\/h3>\n
\n
sudo apt install \/absolute\/path\/to\/deb\/file\r\nor\r\n sudo dpkg -i \/absolute\/path\/to\/deb\/file<\/code><\/pre>\n<\/blockquote>\nInstructions for F5 Centos\/Red Hat systems<\/h3>\n
\n
\tsudo yum localinstall \/absolute\/path\/to\/rpm\/file\r\nor\r\n\tsudo rpm -i absolute\/path\/to\/rpm\/file<\/code><\/pre>\n<\/blockquote>\n\n
\tsudo rpm -i \/absolute\/path\/to\/rpm\/file\r\nor\r\n\tsudo dnf localinstall \/absolute\/path\/to\/rpm\/file<\/code><\/pre>\n<\/blockquote>\nLogin Nodes:<\/h2>\n
\n
To log in from a Windows machine, you will need a terminal emulator. There are two that we recommend.<\/p>\n
MAC machines come with a console window already installed. However, you may want to install a more versatile terminal emulator such as iTerm2 ( https:\/\/iterm2.com<\/a> )<\/p>\n