laptop Set-Up session (October 2026)

Aims

To be able to connect to the IoA computer network by the command line (terminal) and graphically (remote desktop). This requires an internet connection (Eduroam preferred) and configuring the IoA VPN.

Pre-requisites

You have received your CRSid, and have set up the following: university account password; your self-service password recovery details, multi-factor authentication. Please ask for IT help to do these if you have not yet done so.

0) Complete the IoA user Application Form provided and collect the IoA account password

• Check for errors.

• Fill in missing information, and sign User Application Form. Return to us now.  We will swap it for the password to your IoA computer account.

1) Set up Eduroam

If you have Eduroam configured proceed to step 2. If you don't have Eduroam configured, connect to UniOfCam-Guest: 

• Select UniOfCam-Guest network in your laptop's Wireless settings and a sign-in screen may appear

• Accept the Terms by ticking the box

• Click Login 

• Eduroam set-up instructions can then be found here: https://help.uis.cam.ac.uk/service/wifi/connect-to-eduroam 

• You may also wish to set up Eduroam on your smartphone (in your own time).

2) Configure the IoA Managed Virtual Private Network (VPN) 

What do I need the IoA VPN for?

• To start a terminal session directly to one of the  IoA compute servers (eg cap001a)

• To connect to the remote desktop servers (calx011 and calx026) using the NoMachine client (Step 5). 

• To access the IoA intranet.

To set up the IoA VPN follow the instructions here: https://www.ast.cam.ac.uk/computing/vpn 

Please note:

You will need to create another token (in the same manner as you did for Eduroam)

Some of the set up instructions  refer to the university VPN rather than the IoA one. Remember the following differences....

• If asked to enter the Destination Name, change Cambridge VPN to Astronomy VPN 

• If asked to enter the server, enter vpn.ast.cam.ac.uk instead of vpn.uis.cam.ac.uk 

• On Apple iOS and MacOS use this connection profile (Use Safari to download the file): https://help.uis.cam.ac.uk/downloads/astronomy-vpn

• On Android use this server certificate: https://help.uis.cam.ac.uk/files/vpn_ast_cam_ac_uk_cert.cer 

Start the VPN and check it is working by browsing to https://myip.uis.cam.ac.uk/
and use the link at the bottom of the page to make sure your current IP address is shown as 172.16.43.x (where x is a number between 0 and 255). 

You will need to remain connected to IoA VPN to complete the rest of the set up. 

3) Access IoA Intranet pages using your university account credentials

• Browse to https://intranet.ast.private.cam.ac.uk/  

• Click the “Login” link (top left of page). 

• Enter your CRSid and university account password and confirm you are granted access 

4) Access your IoA Science Cluster account with a command line terminal and, for new accounts, change the password 

This method of connecting is simple and robust but only allows command line access. 

• Start a local terminal window on the laptop 

• Windows: MobaXterm Personal Edition 

Install from https://mobaxterm.mobatek.net/download-home-edition.html – be sure to save the installer zip file, expand it, and run the installer from the unzipped folder. Instructions are at: https://intranet.ast.private.cam.ac.uk/node/4717 

• Mac: From the Finder, choose Applications/Utilities/Xquartz 

(Install from https://www.xquartz.org if not already done) 

• Linux: Start any terminal program 

• If you have a non-English keyboard please check the password echoes correctly in the terminal first by typing characters on the command line; don’t hit return or your password may be saved in the command history, just delete it with the backspace key. 

• Log into any public compute server by typing:
  ssh -Y CRSid@cap001a.ast.cam.ac.uk 
  into the terminal window. Replace CRSid with your actual CRSid

• Answer “yes” if a first-time message like this (example compute server is cap002c) appears: 

The authenticity of host 'cap002c.ast.cam.ac.uk (131.111.69.11)' can't be established.
ED25519 key fingerprint is SHA256:9DzXwYufoHBHxTy49DKct/ieii02BRNqqQGnfc/CAkY.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])?

• When prompted for a password use the IoA Science Cluster password supplied to you in section 0 above. Note: it does not echo on the command line. You should be prompted to change it immediately.

• Read the prompts carefully – you first need to type the current password again! 

• Please choose a new strong password, not including a dictionary word in any language, and follow these rules: 

• Minimum length 8 characters, we recommend more though 

• At least one each of: upper case letter, lower case letter, digit, non-alphanumeric character 

• Not a password that you have used before, anywhere! 

• Run a simple toy graphics program by typing module load xv; xv in the terminal 

• Click the ‘x’ button on the xv window to close it 

• Type logout to logout or (exit or Ctrl-D) of your session

• Login/ssh again (perhaps to a different server) to verify that your new password works. 

5) Install and configure the NoMachine remote desktop client software 

This allows a full remote desktop session to be established to our server. Please follow instructions at: https://intranet.ast.private.cam.ac.uk/computing/remote-access-security/nx 

6) Send an Email to helpdesk@ast.cam.ac.uk 

At the end of the session please send us an email from your university email account with the Subject line “Laptop Status for xxx” where xxx is your name. Tell us if you successfully configured everything or what doesn't work. We'll get back to you if you still need help.