Logo Cineca Logo SCAI
MARCONI status
GALILEO100 status
LEONARDO status

You are here

REMINDER: New two-factor authentication (2FA) method to access CINECA clusters

Error message

Deprecated function: unserialize(): Passing null to parameter #1 ($data) of type string is deprecated in css_injector_init() (line 53 of /prod_service02/web-prod/hpc-web/sites/all/modules/css_injector/css_injector.module).
08/06/2023

Dear Users,

we remind you that we have increased the security of all clusters by introducing a two-factor authentication (2FA) method to access CINECA clusters.

We warmly encourage you to go through the registration and activation of the 2FA service as soon as possible.

The access to the clusters for personal users (other types of users are not involved in this first step) will be allowed ONLY after authenticating via 2FA and downloading a temporary ssh certificate. Please, refer to the online documentation for detailed instructions:

https://wiki.u-gov.it/confluence/display/SCAIUS/How+to+connect+via+2FA

Please note that it is already not possible to use the command passwd to reset the password. The reset password will be available only via https://sso.hpc.cineca.it. Users will be informed of the expiration of their password 30,20,10,5,4,3,2,1 days before the event.

In addition to what was already announced, we inform that ADA-Cloud login will also move from the current authentication method to a new 2FA-based one. In their case, at login the website will ask for the password and the OTP to access, without need for additional setup such as in the other cases. Also, for this category of users it won't be possible to test the new method until the day of the change, scheduled for June 27th.

The migration to the 2FA method in accessing the clusters will be managed according to the following plan:

  • June 13th, Marconi's users will be forced to adopt the 2FA method to access the cluster;
  • June 27th, G100's users will be forced to adopt the 2FA method to access the cluster.
  • June 27th, access to ADA-Cloud resources will also be limited to users adopting the 2FA method.
This authentication method is already active on all CINECA clusters (except for ADA-Cloud). We strongly encourage you to activate 2FA and access via ssh certificates before the method is enforced on the clusters. If you currently use ssh keys to log in, please store them elsewhere to guarantee that your authentication method is via ssh certificate and 2FA.

Best regards,

HPC User Support and Production Team @CINECA