What is Happening?
UF is enabling multi-factor authentication (MFA) for HiPerGator and all ancillary services on October 18, 2021.
Why is This Happening?
UF is a high-value target for attacks designed to steal research data and intellectual discoveries. This change is part of our ongoing efforts to strengthen the university’s security posture: since adopting multi-factor authentication, UF has seen a 99.7% decrease in compromised accounts. MFA prevents unauthorized access to your HiPerGator account by requiring a second authentication method in addition to your GatorLink credentials.
How Does This Change the User Experience?
Once implemented, HiPerGator Secure Shell (SSH) connections (including SFTP, rsync, scp) will prompt for Duo MFA. Users will have to either use their GatorLink username and password or an SSH key (see below for port change) after which they will see a text menu asking them to select an MFA method. Available methods are based on what you have configured in the My Two-Factor page. Anyone who has used other UF services, like myUFL or the UF VPN, will be familiar with this process.
SSH Key-Based Authentication Will Change
Users of ssh keys will need to specify port 2222 in their SSH connection string or config file. See the UFRC Help Pages for details. You will still need to use Duo MFA for ssh key-based logins.
Any connections, including automated scripts, set to use key-based authentication will require MFA.
What is NOT happening?
Any web-based RC services and websites, such as OnDemand, JupyterHub, Galaxy, or Support site, are already using MFA via GatorLink web authentication, so there are no changes to those services.
Samba (SMB) services will not be impacted by the implementation of MFA, so you will not be prompted to authenticate when mounting shared drives via exasmb.rc.ufl.edu or cifs.rc.ufl.edu.
ResVault will be unaffected.
The UFIT Research Computing team is committed to making this transition as seamless as possible for our community. Visit it.ufl.edu/2fa or contact UFRC support (https://support.rc.ufl.edu) for assistance with changes to SSH key-based workflows or for issues with MFA for HiPerGator.