# Workbench installation
This guide will help you to connect with your lab Workbench over a web browser.
Requirements
- Working VPN and SSH as configured in our Getting started guide.
- Certificate as described in the Workbench certificate transfer.
Time estimate
Allow for 30 minutes to complete this installation and some playtime in your new environment.
# 1. Edit hosts file
We are sending hosts record in onboarding email. You will need to make sure that your hosts file contains this line.
Example of hosts record:
10.42.130.X <lab_name>.lab.hdc.ntnu.no
Windows
Press the Windows key.
Type
Notepad
in the search field.In the search results, right-click Notepad and select Run as administrator.
From Notepad, open the following file:
C:\Windows\System32\Drivers\etc\hosts
.Start by selecting
File
>Open
.Find the directory, and then change
Text documents
to viewAll files
. When hosts file appears in the list select it and click Open:Add the line that you received from us on email.
Select
File
>Save
to save your changes.
OS X and macOS
On your local machine, edit /etc/hosts
file in your preferred text editor, and add the line that you received from us on email.
Example with text editor:
EDITOR='open -Wne' sudo -e /etc/hosts
Example with vim:
sudo vim /etc/hosts
Ubuntu Linux
On your local machine, edit /etc/hosts
file in your preferred text editor, and add the line that you received from us on email.
Example with gedit
sudo gedit /etc/hosts
Example with vim
sudo vim /etc/hosts
# 2. Install certificates
Windows
Open the p12 certificate. Make sure the store location is set to Current User and click next:
Continue clicking on next
Fill in the
TLS passphrase
that you received on signal, and make sure only the same option is checked exactly as in the image. Then click next:Keep the first option to Automatically select the certificate store based on the type of certificate. Click next:
Your client certificate is imported and you can hit finish:
Wizard will require additional confirmation for installation certification authority HCTS CA 1 (HUNT Cloud Trust Services). HUNT Cloud certificate is required to safely access Workbench in your lab. If you see LAB instead of
HCTS CA 1
skip to step 7. Usually you are asked to confirm only when setting up Workbench for the first time. Before clicking yes you should confirm that you see this thumbprint (fingerprint):ADD9DFEC C998BE44 AC2F254E 75E5EB98 D91879A6
Same step is required for your Lab CA, where your Lab name should appear:
Quit your browser and restart it again for the certificate to get recognized.
OS X and macOS
Open the system profile config (.mobileconfig) attached in archive.
In
System Preferences
open sectionProfiles
.NTNU managed Macbook
If your Macbook is managed by NTNU and you do not see section Profiles in your System Preferences you will need to request access to Profile through NTNU Hjelp. If you are not NTNU affiliated you can contact IT department of your organisation / university.
Confirm the installation of profile.
Enter the passphrase that you received on signal and then confirm.
Quit your browser and restart it again for the certificate to get recognized.
When opening Workbench for the first time you will be asked for macOS password, allowing the browser to access your client certificate stored in Keychain. After filling in the password you can confirm by clicking on
Always allow
/Tillat alltid
.
Ubuntu Linux
We recommend that you use the Google Chrome browser (opens new window) for predictability.
Open Google Chrome on your local machine.
Open url
chrome://settings/certificates
and click theImport
button on the right side of the screen.Browse and select your
.p12
file on your local machine and enter theTLS passphrase
that you got on Signal.Restart Chrome.
After the restart of Google Chrome the certificate is ready for network or secure web site client authentication.
# 3. Open your new Workbench
TIP
Make sure you are connected to the VPN before accessing Workbench.
Open your web browser (we recommend Google Chrome browser (opens new window)).
Type in the URL address to your lab in your browser.
# -- Principal example
https://<labname>.lab.hdc.ntnu.no
# -- Demo example
https://demolab.lab.hdc.ntnu.no
Click OK
if you get a User Identification Request
for your new certificate and ensure that the Remember this decision
is checked.
The certificates are to be issued by:
Organization: "HUNT Cloud"
Issued Under: "HUNT Cloud Trust Services"
Sign in with your HUNT Cloud lab username and lab passphrase. This is the passphrase that you made on your first login.
With a little bit of luck you should now see your new Workbench. Click around and explore your new world!
TIP
Read Principles and FAQ sections to learn more about Workbench.
# Immediate troubleshooting
This section includes only main questions regarding first time setup.
You should also look into FAQ and Troubleshooting if you do not find your answers here.
# I don't remember my passphrase
Read more
Don't worry. Contact us on email for an SSH passphrase reset.
# Firefox - Did Not Connect
Read more
Firefox may require manually importing HUNT Cloud Certificate Authority to consider it trusted.
If you see Error code: SEC_ERROR_UNKNOWN_ISSUER
when accessing Workbench follow these steps:
- Download our public CA certificate: https://pki.hdc.ntnu.no/hctsca1.crt (opens new window)
- Open Firefox url:
about:preferences#privacy
- Scroll down to section
Certificates
and click onView Certificates
: - Switch to tab
Authorities
and click onImport
: - Select
hctsca1.crt
and check optionTrust this CA to identify websites
:
# 502 Bad gateway
Read more
Something is wrong with configuration of the server, reach out in your lab channel on Slack or Contact us us for further investigation.