...

1. Open the zip file in your file browser
2. Drag the teleport folder inside the file and drop into the directory of your choice (the main directory for your user, for example)

3. Open a Cygwin terminal. 

4. Add to the PATH variable the location of the teleport directory. For example, if you dropped it on your main user directory (C:\Users\yourwindowsuser):

   No Format
   echo 'export PATH=/drives/c/Users/$USER/teleport:$PATH' >> ~/.bashrc source ~/.bashrc

   
   

Authenticating yourself

Once every 12 hours, you will need to refresh your tokens with the tsh command. SSH connections may remain active for longer than 12 hours, but new connections will require re-authentication.

To authenticate yourself, Open a local terminal on your MobaXterm and run tsh, giving the location of our Teleport gateway:

Your default web browser will open. You should login with your email address, ECMWF password, and then the code from your Time-based One-Time-Password (TOTP) device or the 8-digit one-time passcode from your ActivIdentity (HID) security token if you have not configured your TOTP yet.

If the process is successful, you will see an output such as:

> Profile URL:        https://jump.ecmwf.int:443
  Logged in as:       user.address@somewhere.com
  Cluster:            jump.ecmwf.int
  Roles:              
  Logins:             ecmwfusername
  Kubernetes:         disabled
  Valid until:        2022-12-13 20:54:18 +0000 GMT [valid for 4h37m0s]
  Extensions:         permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty

...

Once you have logged int at least once, tsh will save your proxy settings so you can skip the extra argument next time: 

tsh login

Setup your SSH config

We strongly recommend setting up all the SSH options needed for the connection instead of passing them on the command line.

ln -s

Host jump.ecmwf.int a?-* a??-* hpc-* hpc2020-* ecs-*
  User ecmwfusername 
  IdentityFile /cygdrive/c/Users/%uyourwindowsuser/.tsh/keys/jump.ecmwf.int/user.address@somewhere.com
  CertificateFile /cygdrive/c/Users/%u/.tsh/keys/jump.ecmwf.int/user.address@somewhere.com-ssh/jump.ecmwf.int-cert.pub
  HostKeyAlgorithms +ssh-rsa*,rsa-sha2-512
  PubkeyAcceptedKeyTypes +ssh-rsa*
  ServerAliveInterval 60
  TCPKeepAlive yes

Host a?-* a??-* hpc-* hpc2020-* ecs-*
  ProxyJump jump.ecmwf.int

SSH connection

Once you have configured the appropriate settings, any SSH-based tools such as ssh, scp or rsync should work out of the box without any additional options.

To test the connection, from your Cygwin terminal you may ssh into hpc-login if you have access to ECMWF's HPCF:

ssh hpc-login

Or alternatively, if you only have access to ECMWF ECS service:

ssh ecs-login

Visit our HPCF User Guide for further information.

Troubleshooting

If you cannot connect via SSH and cannot manage to understand why, please raise an issue to our ECMWF Support portal and sending us the output of the commands:

tsh login
ssh -v ecs-login

 ~/

SSH connection

Troubleshooting