You must have a few things set up on your end to be successful in submitting jobs on the command line.
1. Get Duo
DUO is required to access the majority of UM services and all HPC services. If you need to set up DUO please visit this page.
2. Get a user login
You must establish a user login by filling out this form.
3. Get an SSH Client for your machine
You must be on campus or on the VPN to connect to the clusters. If you are trying to log in from off campus, or using an unauthenticated wireless network such as MGuest, you have a couple of options:
- Install VPN software on your computer
- SSH to login.itd.umich.edu and continue with the Linux instructions
Mac, Linux or Windows 11 or later
Open Terminal and type:
ssh [email protected]
You will be required to enter your Kerberos level-1 password to log in. Please note that as you type your password, nothing you type will appear on the screen; this is completely normal. Press “Enter/Return” key once you are done typing your password.
When you’re connecting for the first time, it’s not uncommon to see a message like this one:
The authenticity of host 'greatlakes.arc-ts.umich.edu (141.211.192.39)' can't be established. RSA key fingerprint is 6f:8c:67:df:43:4f:e0:fc:80:5b:49:1a:eb:81:cc:54. Are you sure you want to continue connecting (yes/no)?
This is normal. By saying “yes” you’re accepting the public SSH key for the system. This key will be stored in a local known_hosts file on your system so you won’t be prompted in the future. The keys from Great Lakes will NOT change. So, for example, if you get a new computer and SSH to the clusters, you’ll be prompted to add the key again.
We encourage you to compare the fingerprint you’re presented with, when connecting for the first time, to one of the fingerprints below. The format of the fingerprint you’re presented could be dictated by the SSH client on your machine.
| RSA | 6f:8c:67:df:43:4f:e0:fc:80:5b:49:1a:eb:81:cc:54 |
| ECDSA | Dae1G3gu0mtro2Rm15U6l8aQg4bGFnDQJhmGH3k+fKs |
| ED25519 | 9ho43xHw/aVo4q5AalH0XsKlWLKFSGuuw9lt3tCIYEs |
In the example message given above, we are presented with the RSA key fingerprint and its MD5 value, which is the same value as in the above table. Note: The output may be prefixed by "SHA256:".
If you’re NOT seeing one of these fingerprints, submit a ticket to [email protected] and do NOT connect to the server via SSH until discussing with an ARC staff member to determine if there is a security issue.
To avoid being prompted to accept the key on a new system you may choose to pre-populate your SSH known_hosts file with the pub keys from the clusters. The keys can be found in the FAQ
Windows 10 and Earlier (using PuTTY)
Download and install PuTTY here.
Launch PuTTY and enter the host name, then click open.
greatlakes.arc-ts.umich.edu
armis2.arc-ts.umich.edu
lighthouse.arc-ts.umich.edu
If you receive a “PuTTY Security Alert” pop-up, this is completely normal, click the “Yes” option. This will tell PuTTY to trust the host the next time you want to connect to it. From there, a terminal window will open; you will be required to enter your UMICH uniqname and then your Kerberos level-1 password in order to log in. Please note that as you type your password, nothing you type will appear on the screen; this is completely normal. Press “Enter/Return” key once you are done typing your password.
All Operating Systems
At the “Enter a passcode or select one of the following options:” prompt, type the number of your preferred choice for Duo authentication.
