# HUNT Workbench installation
This guide will help you to connect to your HUNT Workbench over a web browser.
# 1. Before you start
You will need the following to complete this guide:
Requirements
- A working VPN and SSH configuration as described in our Getting started guide.
- A HUNT Workbench TLS certificate as described in the HUNT Workbench certificate request.
Without these it's impossible to complete this guide.
Time
Allow for 30 minutes to complete this installation and some playtime in your new environment.
# 2. Edit your hosts file
First, let's set up your hosts file on your local computer. This allows you to connect to HUNT Workbench
in your lab using a URL name, for example demolab.lab.hdc.ntnu.no
, in your web-browser.
Your host file record
consists of IP address of your lab entry machine and your lab host name. You can find it included in your onboardig email. Example of a hosts record:
# -- Principal example of a host record
10.42.X.Y <lab_name>.lab.hdc.ntnu.no
Select steps for your operating system:
Windows
Press the Windows key.
Type
Notepad
in the search field.In the search results, right-click Notepad and select Run as administrator.
From Notepad, open the following file:
C:\Windows\System32\Drivers\etc\hosts
.Start by selecting
File
>Open
.Then find the (1.) directory and change
Text documents
to view (2)All files
. When a file namedhosts
appears in the list (3), select it and clickOpen
(4):Add your
hosts record
to the text file. This is the line that you received from us in your HUNT Workbench onboarding email (see above).Select
File
>Save
to save your changes and close theNotepad
application.
OS X and macOS
- On your local computer, open your
/etc/hosts
file in your preferred text editor.
Example with text editor:
EDITOR='open -Wne' sudo -e /etc/hosts
Example with vim:
sudo vim /etc/hosts
Add (append) the
host record
line that you received from us on email.Close your text editor.
Ubuntu Linux
- On your local computer, open your
/etc/hosts
file in your preferred text editor.
Example with gedit:
sudo gedit /etc/hosts
Example with vim:
sudo vim /etc/hosts
Add (append) the
host record
line that you received from us on email.Close your text editor.
# 3. Install your certificates
Let's install the certificates that is required to allow traffic with your HUNT Workbench that is located in your lab.
Windows
Open your
p12 certificate
that you downloaded from Filesender. Make sure the store location is set toCurrent User
and clickNext
:Click
Next
one more time.Fill in the
TLS passphrase
that you received on signal, and make sure the options are checked exactly as in the image. Then clickNext
:Check the first option: Automatically select the certificate store based on the type of certificate. Click
Next
:You should now get a Completing the Certificate Import Wizard message. Click
Finish
to complete the the iport:The wizard will require a confirmation to install a certification from us:
HCTS CA 1
(HUNT Cloud Trust Services). Our certificate is required to safely access your workbench environment.You will normally be asked to confirm our certificate only when you set up the HUNT Workbench for the first time. Thus, if you see
LAB
instead ofHCTS CA 1
skip to step 7.Before clicking
YES
, confirm that you see our thumbprint (fingerprint):ADD9DFEC C998BE44 AC2F254E 75E5EB98 D91879A6
Similar to Step 6, you will also need to install a certificate for your lab (
Lab CA
), where your Lab name should appear. ClickYES
.Now quit your browser and restart it for the certificate to get recognized.
OS X and macOS
Open your system profile config file that you got from Filesender (
<your_user_name>.mobileconfig
).In
System Preferences
open sectionProfiles
.NTNU managed Macbook
If your Macbook is managed by NTNU and you do not see section Profiles in your System Preferences you will need to request access to Profile through NTNU Hjelp. If you are not NTNU affiliated, can contact your IT department for assistance.
Click
Continue
to confirm your profile installation.Enter the
TLS passphrase
that you received on Signal and the clickInstall
to confirm.Quit your browser and restart it again for the certificate to get recognized.
When you open your HUNT Workbench for the first time you will be asked for your local macOS password. This allows the browser to access your client certificate stored in your local Keychain. After filling in the password, confirm by clicking
Always allow
/Tillat alltid
.
Ubuntu Linux
We recommend that you use the Google Chrome browser (opens new window) for predictabe access to your HUNT Workbench.
Open
Google Chrome
on your local computer.Download our public CA certificate from https://pki.hdc.ntnu.no/hctsca1.crt (opens new window)
In Google Chrome, open the URL
chrome://settings/certificates
and navigate to sectionAuthorities
then click theImport
button on the right side of the screen to importhctsca1.crt
certificate file. Select first optionTrust this certificate for identifying websites
.
Within
chrome://settings/certificates
navigate to sectionYour certificates
and click theImport
button on the right side of the screen.Browse and select your
.p12
file that you downloaded to your local computer, and enter theTLS passphrase
that we sent you on Signal.Restart Chrome.
# 4. Open your HUNT Workbench
TIP
Make sure you are connected to the VPN before you access your HUNT Workbench.
Open your web browser (we recommend Google Chrome browser (opens new window)).
Type in the URL address to your lab in your browser.
# -- Principal example
https://<labname>.lab.hdc.ntnu.no
# -- Demo example
https://demolab.lab.hdc.ntnu.no
You may get a User Identification Request
for your new certificate. Verify that the certificates are issued by:
Organization: "HUNT Cloud"
Issued Under: "HUNT Cloud Trust Services"
Ensure that the Remember this decision
box is checked, and click OK
.
Sign in with your HUNT Cloud lab username and lab passphrase. This is the passphrase that you made on your first login.
With a little bit of luck you should now see your new HUNT Workbench. Click around and explore your new world!
Further reading
See our HUNT Workbench principles section to learn more about your new environment. For more practical advices on how to install your Python/R packages head over to Workbench FAQ.
# Immediate troubleshooting
This section includes issues that you might encounter during your first setup. See our HUNT Workbench FAQ and HUNT Workbench Troubleshooting if you do not find your answers below.
# This site can’t be reached
Read more
If you are getting DNS_PROBE_FINISHED_NXDOMAIN
error you need to repeat the Step 2 of this guide.
On MacOS or Linux you can also assure hosts return IP address using the command below:
# -- Principal example
getent hosts <labname>.lab.hdc.ntnu.no
# -- Demo example
getent hosts demolab.lab.hdc.ntnu.no
# I don't remember my passphrase
Read more
Don't worry. Request a SSH passphrase rest in our do-science service desk.
# Firefox - Did Not Connect
Read more
(We recommend to use Google Chrome as your HUNT Workbench browser.)
Firefox may require that you manually import the HUNT Cloud Certificate Authority
to consider it trusted.
If you see Error code: SEC_ERROR_UNKNOWN_ISSUER
when accessing Workbench follow these steps:
Download our public CA certificate from https://pki.hdc.ntnu.no/hctsca1.crt (opens new window)
Open the following Firefox URL:
about:preferences#privacy
Scroll down to section
Certificates
and click onView Certificates
.Switch to tab
Authorities
and click onImport
.Select
hctsca1.crt
and check optionTrust this CA to identify websites
.
# Chrome on Ubuntu
Read more
If you are getting ERR_CERT_AUTHORITY_INVALID
error:
In Google Chrome, open the URL
chrome://settings/certificates
and navigate to sectionAuthorities
Search for HUNT Cloud certificates (
org-HUNT Cloud Trust Services
)Edit the HCTS CA 1 certificate and select first option
Trust this certificate for identifying websites
.
# 502 Bad gateway
Read more
A 502 Bad gateway
error is an indication that something is wrong with the configuration on the server side. Contact us in your lab channel on Slack or email further investigations.