2019 NCSU Computer Science Graduate Student Orientation Computing

2019 NCSU Computer Science Graduate Student Orientation Computing @ NCSU and Computer Science Carlos Benavente – cabenave@ncsu. edu CSC IT Manager

NCSU IT groups - WHO IS WHO?

CSC IT • • • Manager Enterprise Infrastructure Administrator Linux Administrator System (Mac and Windows) Administrator Web Programmer http: //it. csc. ncsu. edu/

CSC IT Service Catalog • • • Managed Desktop environment Web Hosting/ Web consultation Version Control Services Virtualization Software management Computer Lab Management IT Procurement Printer Setup Surplus and Hardware Decommissioning Networking Security Technology Loaner Program

NCSU IT Groups - Who is Who? • CSC IT – Computer Science IT: csc_help@ncsu. edu https: //it. csc. ncsu. edu (EB 2 2201) • ITECS – College of Engineering IT: eoshelp@ncsu. edu • OIT – NCSU Office of Information Technology: help@ncsu. edu • For “personal” computing support: – OIT’s West Dunn Help. Desk Walk-in • https: //oit. ncsu. edu/unit-tss/walk-center – ITECS Centennial Help. Desk • 1002 Engineering Building I; eoshelp@ncsu. edu If you don’t email the correct group, it may take a few days before someone gets to you

Reporting Issues • Read logs and manuals first • When submitting Help tickets: – Use your university email account: Unity. ID@ncsu. edu – Personal or Departmental-owned computer? – Physical location – Computer Number/TAG – What OS – Error Messages – Things you have tried • Service. Now (Incident Response Solution for IT Workflows) “My Computer Doesn’t Work” Is not very helpful

IT Facilities • EB 2 – Mailroom Printers/Poster printer – TA spaces (EB 2 1112 F, 1229 B) – Teaching classroom (EB 2 1221, EB 2 2236) – CSC Public labs: EB 2 1235 • Daniels – Computer Labs: Daniels 255, 200, 201 – TA/Faculty touchdown spaces • Server Rooms – EB 2 2291, EB 2 3267, EB 2 3293 – EB 2 2214 (for CSC IT only) • College of Engineering Labs (EOS Labs) • https: //it. engr. ncsu. edu/computing-labs/ – VCL (Virtual Computing Lab) https: //vcl. ncsu. edu – More info at https: //it. csc. ncsu. edu/infrastructure/

Technology Loaner Equipment • Smartphones • Laptops. • Raspberry Pis Lego Mindstorm • How to get to the e-technology Web page? – from https: //www. csc. ncsu. edu/ click on Faculty & Staff – click on Request Forms – under the IT sections click on “Technology Lending echeckout”

RULES AND POLICIES

Two Factor Authentication @ NCSU • All faculty, staff, student employees, and no-pay employees/retirees are required – Google 2 FA – Shibboleth Duo – Also enable UIA (User Identification & Authentication) • More about 2 FA: https: //oit. ncsu. edu/itsecurity/2 fa/ • Recommend Duo Mobile App for both Shib and Google 2 FA.

What is Endpoint Protection Standard (EPS)? • Collaborative effort with College IT groups and OIT resulted in 08. 00. 18. • RUL 08. 00. 18 - Endpoint Protection Standard (EPS) was published to ensure that authorized endpoint users take appropriate security precautions when interacting with university data. • The EPS applies to all devices that access university data, regardless of who owns them. • The standard also specifies that all university-owned devices be managed by a CMS (Configuration Management System) if one is available. • All University-owned Mac and Windows endpoints must be managed by a CMS by June 30, 2019. For Linux ~ December 2020 11

Data Sensitivity Framework Data sensitivity levels: ● Ultra-sensitive – Purple (Examples: SSNs, PINs, passwords, credit cards, digital signatures, biometric data) ● Highly sensitive – Red ( Examples: personal information regarding health, financials, identity) ● Moderately sensitive – Yellow (Examples: education-related data and any data that would affect university business if disclosed inappropriately - grades, course schedule, student ID) ● Normal, not sensitive – Green (Examples: published university web content and any data that would not affect university business if disclosed - preferred email address, grade level - undergrad, grad) ● Unclassified– White (Examples: static content published on university web pages) 12

Configuration Management System (CMS) • • An endpoint enrolled in a Configuration Management System means it is installed with a small piece of software/agent which allows it to communicate with a CMS. A CMS ensures that the configuration of your endpoint is known, trusted, and with the required security policy settings. • Most common problems are lack of patching and other basic security controls — having all endpoints in a common CMS facilitates easier patch management. • Makes it more efficient to – distribute site-licensed software either automatically or on-demand, – patch the OS and upgrade software applications (as opposed to scheduling an in-person visit. ) 13

Approved Configuration Management Systems @ NCSU Windows - Wolftech Active Directory (AD) with SCCM Mac OS - Jamf Pro Linux - CLS (Campus Linux Services - based on Puppet & Foreman) Configuration Management Systems at NCSU 14

Endpoint Security Controls • • Endpoint controls are tools, system policies & requirements that are implemented on an endpoint to be compliant with EPS Depending on where the data is stored and how it is being accessed, and who owns the endpoint; security control requirements may vary. – – – – – Anti-malware & antivirus software Login Authentication Encrypted Network Communication HD encryption Host-based firewall Least Privilege Access Sensitive Info Identification & Remediation Software Inventory Web Reputation Filtering 15 Endpoint Protection Standard - Security Controls Mobile device security requirements & recommendations: https: //oit. ncsu. edu/itsecurity/mobile/requirements-recommendations/

Exceptions • • An “exception” means that your computer is exempted from complying with the EPS. An exception require compensating controls to secure your computer in place of the EPS requirement. Exceptions are submitted to the campus security and compliance group via the IT Exception Request Form. If a CSC faculty or staff needs to submit an exception, please send a request for consultation to csc_help@ncsu. edu. Exceptions must be renewed once a year. Requires Departmental Approval from Carlos Benavente cabenave@ncsu. edu (919) 515 -1964 Exception Example: Billboard Mac Minis are set to auto login 16 IT Exception Request Form

DONTs • Do not re-install an endpoint w/o prior approval from CSC IT • Do not transfer endpoint from one user to another user w/o CSC IT approval. • Instruct your RAs/TAs Not to transfer endpoints from one lab to another lab (e. g. from networking to gaming) without prior consent from CSC IT 17

RULES/POLICIES (continuation) • Clickwrap Agreements: Do not install software on department equipment that requires you to click “I AGREE” before installing it! Check clickwrap approved list 1 st at http: //software. ncsu. edu/clickwraps • Unnecessary services: Do not install: Web/FTP services or P 2 P applications on your RA/TA workstation. • DO NOT store sensitive data on non-approved cloud services. Visit http: //software. ncsu. edu/clickwraps • NCSU monitors network

RULES/POLICIES (continuation) • PHISHING: Don’t feed the PHISH! – NCSU will never ask you to provide your password. • Dual Boot: Not allowed on departmental desktops • No Piracy: software, music, videos, movies… All violators will be reported to Dean of Students. All TAs/RAs will have their Advisors notified. The DGP is made aware of all infractions Violations of usage policies will result in appropriate disciplinary action up to dismissal from the program.

RULES/POLICIES (continuation) University Computer Use Regulation: https: //policies. ncsu. edu/regulation/reg-08 -00 -02

The BASICS – Computing Account & File Space/Storage

University Computing Accounts • Unity Account or Unity ID – It is a unique ID. Example: cabenave – Unity Password – UIA (User Identification and Authentication) • Email Address: – Unity. ID@ncsu. edu (example: cabenave@ncsu. edu) • Student ID # or Campus ID #

What happens To Unity Accts after graduation? • Students who graduate with a degree retain access to Google and My. Pack portal • All other access: Kerberos (AFS), AD Wolftech, github. ncsu. edu are disabled soon after graduation (1 month).

University File System/Storage • AFS: Andrew File System (distributed file system) – 2 GB – /afs/unity/users/a-z/Unity. ID/ • NCSU-Drive: 5 GB • • https: //oit. ncsu. edu/my-it/file-space/ncsu-drive/ SMB, CIFS connection – Google Drive: Unlimited

Additional File Storage Through Engineering • Personal file space (per request basis only): – To request: https: //www. eos. ncsu. edu/lockers/request/ – 2 GB – Non-Web path: /afs/eos/lockers/people/az/Unity. ID/private – Web path: /afs/eos/lockers/people/a-z/Unity. ID/www – Web address: http: //people. engr. ncsu. edu/Unity. ID • PHP enabled • My. SQL services if needed • Research Group file space (per request basis only): Faculty/advisor can request more file share space for Web and Non-Web via : https: //www. eos. ncsu. edu/lockers/request/

How do I get to AFS? • Access to AFS is possible from centrally managed machines (Realm Red. Hat, Windows AD, Mac OS X Casper) available in labs and remote servers • Third party clients: – Putty, Win. SCP, or other FTP client that supports SFTP Protocol. • Available remote hosts to connect to AFS: – remote. eos. ncsu. edu: COE “shared” remote servers not intended to run multiple jobs – ftp. ncsu. edu (SFTP only)

The Cloud, Software, Services

Cloud Solutions • • • Google Apps @ NC STATE http: //google. ncsu. edu – Gmail, Calendar, Drive, Talk, Sites, – You. Tube, Photos (formerly Picasa), Maps, Google+. 2 -Step Verification is Unlimited Drive storage To see storage usage: https: //www. google. com/settings/storage Video Conferencing – Google Hangouts – Zoom : https: //zoom 2018. wordpress. ncsu. edu/

Cloud Services • AWS Educate: https: //aws. amazon. com/education/awseducate/ • IBM Student Initiative: https: //ncsu. onthehub. com/Web. Store/Welcome. aspx (IBM Blue. Mix) • github. ncsu. edu – available to students and faculty • VCL: NCSU Virtual Computing Lab An On-demand remote access service to reserve a computer with a desired set of applications for yourself. • Overleaf: https: //www. overleaf. com/edu/ncsu

Cloud Services (Continued…) • IBM Q Hub: https: //quantum. ncsu. edu/ – center of quantum computing education, research, development and implementation. – Starting fall 2018, NC State gained access to IBM Q commercial quantum computing devices, including the most advanced and scalable universal systems available. The current 20 qubit IBM Q system will be followed by a next generation 50 qubit prototype, anticipated in 2019 – News related story: https: //www. csc. ncsu. edu/news/2199

Software • http: //software. ncsu. edu/ Examples: – Mat. Lab Student Version, – CISCO Any. Connect client for vpn (NCSU) • Microsoft Imagine (formerly Dream. Spark – available to CSC enrolled students: http: //www. csc. ncsu. edu/dreamspark/ – Download for free: Visual Studio, . NET Framework, Visio, Project, Win OS – VMWare Academic Program (VMAP) – available to CSC enrolled students: http: //www. csc. ncsu. edu/vmap/ • Download for free: Fusion, Workstation – MS Office 365 – free for students, faculty, & staff – Adobe Acrobat: Site license to be used on university owned computers (for faculty, staff, and lab use).

Services (continuation) • remote. eos. ncsu. edu has various compilers and applications such us java, fortran, python, Mat. Lab • svn. csc. ncsu. edu: Subversion server for CSC faculty & students. Faculty must submit request. Also available to external users who collaborate with NCSU faculty/researchers. • Virtualization: CSC IT maintains a virtualization cluster for researchers and instructors who do not have the hardware and system administration knowledge.

Services (continuation) • High Performance Computing (HPC): http: //hpc. ncsu. edu – Cluster resources to support research & instruction – recommended for long running jobs (e. g 100+ cores for up to 48 hours) – Advisor/Faculty creates a project with HPC – Advisor/Faculty grants students access • Other CSC Specific Resources: – Faculty-owned servers for research and teaching; – contact your faculty and advisor – Many hosted in CSC server rooms, – Also in VCL

PRINTING

Printing • Department does NOT support personal or coursework printing • For personal or coursework printing use Wolf. Print: http: //oit. ncsu. edu/wolfprint-welcome • Printing on CSC printers: – Contact your faculty or advisor.

NETWORKING

Networking • Wireless – Three main SSIDs • Eduroam (secured), NCSU, and NCSU-guest (web only) • Eduroam (education roaming) – Free & encrypted wireless service – Uses certificate enrollment – Certificate will allow you to securely connect both on NCSU campus and participating institutions worldwide – http: //go. ncsu. edu/eduroam • NCSU SSID - register your device via nomad. ncsu. edu • Wired – CSC registers only university/department owned computers on the wired network. • VPN - vpn. ncsu. edu (will require 2 FA as of September 2019)

MAILING LISTS

Mailing Lists • • csc-gradstd@lists. ncsu. edu (for general announcements) csc-gradstd-admin@lists. ncsu. edu (for official use by DGP) csc-phds@lists. ncsu. edu (for official use by DGP) csc-masters@lists. ncsu. edu (for official use by DGP)

A plug from our Finance Staff • Anyone traveling on behalf of NCSU must have a PRIOR approval from the department head (or his/her designee). If you are Faculty, Staff, or Current Student Worker, you must complete a Travel Authorization in My. Pack Portal. If you are a student or non-affiliate, you must get prior approval from your sponsor and the finance staff to ensure the funds are available. Once that is approved, you must complete an AP-104(hyperlink to the AP-104). ALL foreign national travelers must get preapproval from the Controller's Office Tax Specialist department.

QUESTIONS?