Duo Two-Factor Authentication (2FA)

Duo Two-Factor Authentication (2FA) is required to access HPC for all HPC users. If you have not already signed up for Duo on your USC NetID account, please go to itservices.usc.edu/duo/enroll to enroll.

Logging In

Using Duo with an Xterm client

If you are logging in from a Mac OSX, Linux or Unix system, go ahead and log in, as you normally would, using an xterm window.

After entering your USC NetID and password, you will be prompted to verify your identity through one of the options presented by Duo. Enter the number corresponding to the desired authentication method or enter the passcode provided by the Duo Mobile app.

$ ssh ttrojan@hpc-login3.usc.edu
Duo two-factor login for ttrojan
Enter a passcode or select one of the following options:
  1. Duo Push to XXX-XXX-1234
  2. Phone call to XXX-XXX-1234
  3. Phone call to XXX-XXX-1234
  4. SMS passcodes to XXX-XXX-1234
Passcode or option (1-2): 1
Pushed a login request to your device...
Success. Logging you in...

[ttrojan@hpc-login3 ~]$
Using Duo with a 3rd-party SSH client

Third-party SSH (secure shell) clients can be configured to use two-factor authentication. You can search the web for how to do this for your preferred client. X-Win32 (USC-licensed) and PuTTY are both popular SSH clients. These have been tested and appear to work seamlessly with Duo. If you have problems using either of these applications, please email <a “mailto:hpc@usc.edu”>hpc@usc.edu.

Using Duo with a third-party SFTP client

Similarly, third-party SFTP (secure file transfer protocol) clients can be configured to use Duo when transferring files between HPC and your personal laptop or desktop. FileZilla and Cyberduck are both popular SFTP clients. See Transferring Files Between Your Computer and HPC for information on how to configure these applications for use with Duo.

First Time Login

The first time you use SSH to log into HPC, you will see a prompt similar to the text below:

The authenticity of host 'hpc-login3.usc.edu (' can't be established.
RSA key fingerprint is cb:0e:06:3d:27:23:05:cf:04:9c:af:ae:28:52:7a:41.
Are you sure you want to continue connecting (yes/no)?

This message is displayed the first time you try to connect to a new computer. It is asking if you trust this computer before it sets up the configuration for a secure connection. Simply type yes to continue.

To verify that you have logged in, you can use the command hostname, which will output the name of the computer you are on. If you see hpc-login2 or hpc-login3, you have successfully logged in.

Successful Login

Once you have successfully logged in, you will see the following message:

demo1:~ ttrojan$ ssh hpc-login3.usc.edu
Last login: Mon Dec 11 12:53:23 2017 from demo1.usc.edu

      Thursday, November 9, 2017
      All users of this computer system acknowledge that activities on it
      may be subject to monitoring;  the privacy of activities on this
      system cannot be ensured.  All computer account users are required
      to read and abide by the ITS Computing and Usage Policies.  Please
      refer to the web page at:  https://policy.usc.edu/technology/

[ttrojan@hpc-login3 ~]$ hostname
[ttrojan@hpc-login3 ~]$ 

Getting help: If you need additional assistance using Duo, please email hpc@usc.edu.