Harvard-MIT Data Center

1. Open a web browser and navigate to https://help.hmdc.harvard.edu/account_manager/
   The login window for the Change HMDC Password function is displayed.
2. Enter the following:
   • In the Username field type your CGIS account username.
   • In the Password field type your current CGIS account password.
3. Click the Login button to log in to the Change Password function. (You can click Reset to clear the values you typed in this window and start again.)
   The Change HMDC Password window is displayed.
4. Enter the following:
   • In the Old password field type your current CGIS account password.
   • In the New password field type a new CGIS account password.
   • In the Retype password field type the same new CGIS account password.
5. Click the Submit button to change your network account password.
   If you did not type your current password correctly or did not enter a new password that meets the minimum requirements specified on this window, an error message is displayed and you must enter new values on this window.

We offer limited support for foreign language operating systems and applications.  We provide full support for the configuration and managment of foreign language settings within the English version of Microsoft Windows and Macintosh OS X operating systems. In essence, we can help configure your English based operating system to read and write in foreign languages.

If we set up your system for you, we'll make sure to include languages such as Japenese, Chinese (Simplified and Mandarin), German, French, and Spanish (International and Tradional Sort) keyboard and input.  To use any of these settings, either click the local selector in the System Tray (the lower-right corner of the screen)  or click the Start button, select the Settings menu, and choose the Control Panel's menu Regional Settings option.

Information about specific keyboard layouts can be found at the following URL:
       http://msdn.microsoft.com/en-us/goglobal/bb964651.aspx

We provide assitance with only the English language versions of our supported software.

The Desktop Support group supports clients in setting up and maintaining systems that are secure for use with confidential information. Consistent with University policy, all University laptops and all desktop systems with access to IQSS/HMDC file services must be configured securely.

For laptop and desktop systems, the following are required:

• A password protected screen saver, which activates in 15 minutes or less
• Complex passwords, which have a combination of letters, numbers, and special characters, and are at least eight characters in length following Harvard’s password complexity rules
• A host-based firewall
• Up to date virus scanning software and virus dictionaries, and regular operating system updates
• Any service that allows remote login or desktop access to the laptop must be disabled
• PGP Whole Disk Encryption (PGP WDE) [this is required for laptops, and optional but recommended for desktops]

To get PGP WDE installed on your laptop please contact us, or visit http://pgp.fas.harvard.edu/icb/icb.do for instructions.

For any portable storage device, the following is required:

Any portable media housing confidential information should be encrypted appropriately, either through hardware encryption (such as Ironkey devices) or with software encryption using PGP Desktop or Truecrypt.

Note: No high-risk confidential information (HRCI) should be stored on personal laptops or desktops or portable storage devices. HRCI may be stored on designated and approved servers only.

For assistance with secure system set up, please contact us.

Whenever a system, storage device, or storage procedure is disposed of, assigned to another client, or repurposed, it must be cleaned to eliminate Harvard confidential information (HCI) data.

To remove data securely from your laptop or desktop use one of the following applications, depending on your system:

• PCs - Use PGP Shredder
• Macs - Use PGP Shredder or SecureErase

Note: Deleting your files and or reformatting the hard drive will not be sufficient for this process.

To either erase the data on your system or to determine how to destroy the hard disk and recycle a laptop, please contact us.

All Harvard computers systems must be scanned annually for sensitive information. For CGIS affiliates, HMDC is using a software package called Identity Finder to assist in confidential data scanning.  If you are a CGIS affiliate, and have not yet had Identity Finder installed on your Harvard-owned computer, contact us to schedule an installation appointment.

To request a high-risk confidential information (HRCI) assessment of your department’s data, please contact the FAS Help desk (617) 495-9000 or help@fas.harvard.edu.

All Harvard systems used for remote access to confidential information must be securely configured. See Setting Up Secure Systems - Overview.

In addition:

• We recommend the use of the FAS VPN whenever connecting to Harvard from public networks.
• FAS Networking Operations offers customized firewall services for administrative and research purposes.  Network firewalls allow for a higher level of security by limiting the connections to a specific system or groups of systems from the outside network. If your interested in acquiring a firewall for your department, please contact the FAS Help desk at (617) 495-9000 or help@fas.harvard.edu.

For help with secure remote access, please contact us.

Confidential information must be encrypted whenever it is sent over any network. Never send confidential information unencrypted in e-mail, even if the connection to the e-mail server is encrypted.  High-risk confidential information may be sent only directly from one approved system to another.

Guidelines regarding secure file transfers comprise the following:

• If you are transferring files containing confidential information or if your files are simply too large to send over email, please use the Accellion Secure File Transfer System.  The Accellion server provides robust data security, and accommodates the transfer of files and folders up to 20 GB in size. For more info please visit: http://www.fas-it.fas.harvard.edu/services/catalog/browse/39/760
• PGP Desktop can be used to create encrypted files, which can be transferred securely between PGP users.  For more information, please contact us.
• WinZip Encryption, SFTP, and Ironkeys can be used for transferring files securely.

For help with secure file transfer, please contact us.

We provide network space for personal and shared file storage to all affiliates. To access your network space, you must have a CGIS account. If you do not have an account yet, contact us. If you already have an account, but are unable to remember the password, please contact us to request a password reset.

When logging in to our computers, your shared file space usually appears automatically by running a script (a small computer program) when you log in on your computer. The script creates two additional drives on your computer, usually the Q: drive and the N: drive. The Q: drive is space to be shared by your department, while the N: drive is for your personal files, and can be seen only by you.

Your files also are accessible from off-campus locations. For more information, see Accessing Remotely, Accessing Remotely Using SFTP, and Accessing Remotely Using VPN.

All computers must be registered for use before they are able to connect to the Harvard network. The registration process differs based on the type of connection you are trying to access.

Registering a Computer for Wired Network Access

We recommend our users to use wired network connection if its possible in the office or locations your working, you will have a faster and stable connection with in CGIS. Wired networking connections must be registered manually for network access, unless you are connecting from a building that has Roaming Ethernet, which behaves the same as wireless connections. If you are a staff or faculty member with permission to register network devices, use the autoreg.fas.harvard.edu page to register your computer manually.

If you do not have access to manually register devices in autoreg, please contact us and we will register your computer for you.

Registering a Computer for Wireless Network Access

To connect your computer to Harvard's wireless network:

1. For MacOS, select the wireless network icon in the top-right corner of your desktop.
   For Windows, right-click the wireless network icon in the lower-right coner of your screen, and then click View Available Wireless Networks.
   Select Harvard University, and then click Connect.
2. Launch a web browser.
   The browser opens to the Welcome to the FASTAccess Client Management System page.
   
3. Read the license agreement, check the I have read and understand the terms box, and then click Next.
   The Computer Registration page appears.
4. Enter your Harvard ID and PIN in the available fields, and then click Submit.
   The Personal Information page appears.
5. Enter your personal information in the fields provided, and then click Next.
   The Firewall Check page appears.
6. Click the Check Firewall button.
   You are prompted to select the operating system of your computer.
7. Select the appropriate operation system, and then click Finish.
   You receive a message that your computer is registered.
8. Restart all your browsers to begin using the Harvard wireless network.

Guide Overview

We provide access to your network drives directly from your Windows or Mac systems. You can access CGIS account drives or RCE account drives without logging in to those services. For example, you do not have to log in to your RCE account to access web publishing volumes or other files stored in the RCE.

Follow the connection instructions described in this guide to connect to the shared drives.

CGIS Account Connection Parameters

Use the following parameters to connect to your CGIS account drives:

• Server name - cifs.hmdc.harvard.edu
• Account - CGIS account username and password

RCE Account Connection Parameters

Use the following parameters to connect to your RCE account drives:

• Connection - See Accessing Remotely Using SFTP to connect to the RCE
• Server name - publish.hmdc.harvard.edu
• Account - RCE username and password

NetStorage has been phased out of production.

Users can access their group volumes and home direcotry by using SFTP tools.  Please see Accessing Remotely Using SFTP for detailed information about how to use SFTP to access your group volumes.

We provide access to various network drives through use of secure file transfer protocol (SFTP) tools, which provides a mechanism through which you can access network drives securely from any Internet-connected machine.

SFTP access is available from a wide variety of computer platforms. Read About File Access for a good introduction and links to step-by-step instructions.

Note: The server name for CGIS accounts is sftp://desktop.hmdc.harvard.edu  and the server name for RCE access is sftp://rce.hmdc.harvard.edu

For additional assistance, please contact us.

To access your network space while off campus:

1. Install Harvard's VPN Client. You can obtain this software from https://vpn.fas.harvard.edu
2. Log in with your Harvard ID and PIN.
3. Follow the on screen prompts to install the VPN software.

We provide virus protection software and services, as well as virus removal assistance in cases of infection. There are many avenues that viruses and other malicious software (malware) can use to infect your computer. No computer attached to a network is ever completely secure, but there are steps you can take to make your computer's security much stronger. Some of things you can do are:

• Use good antivirus software
• Update your operating system software regularly
• Practice safe computing

Using Good Antivirus Software

One of the most important steps you can take is to install, and update regularly, good antivirus software. We recommend and support ESET Antivirus, which is provided to affiliates free of charges through FAS IT. For instructions on installing ESET Antivirus, please refer to the ESET Download and Installation Instructions page.

Running Your Operating System Software Updates

Running the updates for your operating system is one of the most important preventative measures you can take to protect against virus infection. To do this in Windows:

1. Launch Internet Explorer.
2. On the Tools menu, select Windows Update.
3. Follow the prompts to run your Windows updates.

On the Mac, click the Apple Menu and select Software Update. The Software Update application walks you through the rest of the process.

Practicing Safe Computing

One form of attack that is growing rapidly is the use of social engineering to infect your computer, or to gather sensitive information from you. These attacks can take the form of fake websites that prompt you to input sensitive data, or even emails from people posing as your IT support that ask for your password. To avoid being taken advantage of by these attacks, be sure not to give personal information to any websites with which you are unfamiliar. Also never give out your password, under any circumstances. We will never send you email asking for your password. If you receive such an email, it is not legitimate.

We provide ESET Antivirus to CGIS affiliates free of charge.  Follow the instructions below to download ESET, and install it on your computer.

Installing ESET Antivirus in Windows

1. Launch a web browser and navigate to http://www.fas-it.fas.harvard.edu.
2. Click the Software Downloads link at the top of the page.  Log in with your Harvard ID and PIN.
3. Select Antivirus from the software list. Click I accept on license agreement.
4. You will be prompted to download a file. Download it, and save it to a familiar location. When the download finishes, run the file. The installer will start.
5. The ESET Antivirus installer will automatically remove any version of McAfee antivirus you were running, and will install the new ESET Antivirus client.

Below are answers to some of the most common questions users have about virus protection. If you have a question about virus protection that is not answered below, feel free to contact us.

Why are my ESET Antivirus updates failing?

One of the easiest ways to repair common issues with ESET updates is to reinstall the program. For instructions on installing ESET Antivirus please contact us.

What should I do if I suspect my computer is infected?

If you suspect your computer ia infected, first (if possible) take your computer off the network by unplugging the network connection. This prevents viruses from further infecting your machine, as well as prevents the infection on your computer from spreading to other computers. Next, run a scan of whatever antivirus software you use (we recommend ESET Antivirus). If after the scan your computer still appears to be infected, call our support number to contact us.

How can I delete infected files?

If you run ESET Antivirus and it finds infected files, it will give you the option to delete these files.  In some cases ESET will delete the files for you.

Can I run two virus scan software apps?

We do not recommend running two different virus scan software applications concurrently. Often two different applications will each install their own automatic file scan utility, which can cause the applications to fight for the same resources, or even flag each other as malware. On the other hand, running anti spyware/adware applications at the same time as virus scanning applications usually works well. For example, having Spybot S&D or Ad-Aware installed at the same time as ESET Antivirus is fine.

We install, troubleshoot, maintain, and recycle printers for all affiliates. We support many brands and models of printers and are happy to assist with your printing needs.

Finding the solution to common printing troubles is often just a matter of knowing the correct steps to install or configure your printers. Please refer to the following how-to articles for help with every-day printing problems:

• Installing a Local Printer
• Printing From Home
• Configuring Duplexing
• Troubleshooting Network Printing

If you have any printers or printing trouble that you cannot resolve, please contact us.

The following instructions guide you through setting up printers that are connected directly to you computer.

Installing a Local Printer in Windows

1. Turn your printer on, and attach the data cable (usually a USB cable) to both your computer, and to your printer.
2. Click the Start button in the lower left, and then select Control Panel. The Control Panel will appear.
3. Double-click the Printers icon.
4. Click Add a Printer. The Add Printer wizard will open.
5. Accept the defaults, and then click Next. The wizard will attempt to find and install the appropriate software for your printer.
6. If the wizard is unable to find an appropriate driver for your printer, download the appropriate driver for your printer from the manufacturers web site, and save it to a known location.
7. The Add Printer wizard will ask you if you want to manually install the printer. Click Next.
8. Choose the port that is appropriate for your printer (usually this is USB). Click Next to continue.
9. Click Have Disk, and navigate to the location that you saved your printer driver. Double click on the driver, then click OK.
10. Click Next, accepting the defaults, through the next series of windows. Your printer will print a test page confirming that it is installed correctly.

Installing a Local Printer in Mac OS X

1. Open a document you would like to print, and then click the File menu and select Print.
2. Choose the printer from the Printer pop-up menu. The Printer pop-up menu contains all USB, FireWire, Bluetooth, and Bonjour printers that are available to your computer, as well as all printers that you have added to the Printer pop-up menu. Be sure to check the Shared Printers, Bluetooth Printers, and Bonjour Printers submenus. If you just set up a printer, it may take a short while before it appears in this list.
3. If you don't find your printer, choose Add Printer from the Printer pop-up menu, select the printer in the dialog that appears, and click Add. The dialog lists additional printers that are available to your computer, including AppleTalk and Open Directory printers. You may need to wait a short while before your printer appears. If you press Add, the printer you just added is the default printer.
4. If you don't see your printer, click More Printers, choose your printer's type from the pop-up menu in the dialog that appears, select the printer, and then click Add. If the specific type of printer you're using is listed, choose that type. For example, if you're using an Epson USB printer, you may be able to choose Epson USB. If you choose AppleTalk, another pop-up menu appears that lets you choose the AppleTalk zone for the printer.
5. If your computer cannot determine the options that are installed on your printer, a dialog appears that lets you choose those options. Make sure the settings in that dialog accurately reflect your printer's installed options so you can take full advantage of them. Then click Continue.

Printing on both sides of a sheet of paper is commonly referred to as duplex printing. If the printer is equipped with a duplexer (currently our public printers and some program printers are equipped with a duplexer), follow the steps below to configure your computer for duplexing.

Duplexing From a Windows Computer

1. From the Windows Desktop, click Start button, then click Settings, and choose Printer.
   
2. Right-click the printer that you choose to use, and choose  the Properties option.
   
3. On the Configure tab, check the duplexing check box.
   
4. Click OK to close the Properties window.
5. Repeat steps 2 and 3 for other printers if necessary.

Duplexing From a Mac

1. Click on System Preferences on the Mac dock, then click Print & Fax.
2. Select the print queue you want to duplex with, then click the Option & Supplies button.
3. Click Driver, then check the box next to "Duplex Unit".

The above steps allow your computer to "see" the duplexing option installed on the printer. In most applications like Microsoft Word or Netscape, you should be able to select double-sided printing via the Page Setup or Print options on the File menu.

In addition to using Harvard printers on campus, you should be able to print to any networked printers from your home machine. This works by using the FAS VPN (virtual private network), which makes your home computer think it is on a Harvard network, bypassing any security measures that would normally prevent you from seeing your networked printers.

Installing the FAS VPN Client

1. Open a web browser, and navigate to https://vpn.fas.harvard.edu
2. Log in with your Harvard ID and PIN.
3. Follow the on screen prompts to install the VPN software.

HMDC supports network printing through the HMDC print servers. By design, once a computer has been added to the HMDC network, the appropriate printers for a user should be added automatically at login. If you would like to install additional printers contact us.

If you are trying to print to a network printer and you are not receiving any response from the printer, try the following steps:

1. Delete the printer from your list of available printers.
   1. Click on Start, and then select Control Panel.
   2. Double-click Printers.
   3. Choose the printer in question and press the Delete key.
2. Turn your computer off and then on again.
3. Login normally. During the login process, windows should recreate your printer object. This process could take up to several minutes. If after 5 minutes, your printer has not reappeared, contact the HMDC Help Desk at contact us.

We recommend HP printers for both desktop and network printing.

We do not supply printer toners for CGIS affiliates. To order printer supplies please contact your local purchasing agent or administrator for help. We are happy to offer advice on which supplies best fit your particular printer. Please contact us at contact us if you have questions about supplies for your printer.

Helpful Links

These resources provide useful information about printers and supplies:

• Hardware Purchasing & Recommendations
• Supplies & Accessories for HP printers
• Staples.com Ink and Toner finder