Secure Shell (SSH) is the standard method for remote, encrypted command-line access to University of Florida Compute Infrastructure for Science and Engineering (CISE) systems. This evergreen explainer clarifies how SSH is used within UF CISE, covering authentication requirements, setup steps for common operating systems, VPN and Duo considerations, key management, and basic troubleshooting. It is intended for students, faculty, and researchers who need reliable and secure access to CISE clusters and services.
What Is UF CISE SSH Access
SSH provides encrypted remote login and file transfer for UF CISE research and instructional systems. It protects credentials and session data, supports public-key authentication, and works over most modern networks. Access is governed by university IT policies, CISE allocation rules, and security configurations that may require VPN or multi-factor authentication. Understanding how SSH integrates with these controls helps you maintain reliable, compliant access.
How SSH Authentication Works at UF CISE
SSH authentication at UF CISE typically combines public-key cryptography with institutional identity and access controls. You generate a key pair, upload your public key to approved systems, and sign challenges using your private key. Duo Two-Factor Authentication may be required at the VPN or identity layer before SSH access is granted. Keys must be properly protected; lost or compromised keys can be disabled and reissued through CISE support channels.
Supported Authentication Methods
- Public-key authentication with RSA, ECDSA, or Ed25519 keys
- Password authentication only when explicitly enabled and audited
- Multi-factor via Duo or other institutional MFA mechanisms
- SSH certificate authority (CA) tokens for advanced workflows
Setting Up SSH on Common Platforms
Proper configuration reduces connection issues and improves security. Use current system images, keep your SSH client updated, and follow CISE documentation for any custom flags or proxy settings. When connecting from off-campus, confirm whether your session must traverse the UF VPN or if modern access gateways provide direct connectivity.
Linux and macOS Setup Steps
- Open a terminal and ensure your SSH client is up to date.
- Generate a key pair if needed:
ssh-keygen -t ed25519 -C "your_email@ufl.edu". - Upload your public key to your CISE profile or designated authorized_keys location.
- Connect using:
ssh username@cise-host.ufl.edu. - Test connection and verify Duo or other MFA prompts if required.
Windows Setup Options
- Use OpenSSH built into Windows 10 and later:
ssh username@cise-host.ufl.edu. - Use Windows Terminal or a compatible SSH client for better key management.
- Configure key-based authentication and avoid storing passwords in plain text.
Common Connection Issues and Troubleshooting
If you cannot connect, first verify your network path and authentication requirements. Many issues stem from expired keys, incorrect usernames, VPN or firewall settings, and missing Duo enrollment. Check CISE status pages or support portals for scheduled maintenance. Avoid repeatedly failed attempts, which can trigger temporary locks and require manual reset by CISE staff.
| Attribute | Verified Detail | Source Type |
|---|---|---|
| Primary Access Protocol | SSH with public-key authentication | UF CISE documentation |
| Multi-factor Requirement | Often Duo or institutional MFA before SSH | UF IT security policy |
| Recommended Key Type | Ed25519 preferred; RSA ≥ 4096 bits accepted | UF CISE best practices |
| Off-Campus Access | May require VPN or secure gateway | UF network access guide |
| Key Revocation | Request via CISE helpdesk or portal | CISE support procedures |
Security Best Practices and Key Management
Protect your SSH private key with a strong passphrase and store it in a secure keychain when possible. Use hardware tokens or platform authenticators where supported. Rotate keys periodically and immediately report lost or compromised credentials. Follow CISE guidance on authorized hosts, allowed algorithms, and permitted uses for shared service accounts.
Everyday Key Hygiene Checklist
- Use a unique, strong passphrase for your key
- Do not share private keys or use them on public machines
- Prefer Ed25519 or modern RSA keys over deprecated algorithms
- Revoke unused keys from authorized_keys files promptly
- Back up keys in an encrypted, physically secure location
Alternatives and Complementary Tools
Depending on your workflow, you may also use SFTP for file transfer, VPN for broader network access, or JupyterHub and web-based terminals for interactive analytics. SSH is often integrated with these tools, but each has different performance, security, and usability characteristics. Consult CISE documentation to choose the right access method for your specific task.
Resources and Official Support
For current procedures, see the official UF CISE help site, IT security guidelines, and your lab or departmental system administrators. Policies and technologies can change as the university adopts new identity platforms and security standards. When in doubt, contact CISE support with reproducible error messages and your approximate time of connection attempts.