Regulated Research, Installing and Activating Globus for a Virtual Machine
In order to have an operational collection for Globus, you must be a part of the University of Illinois Globus Subscription. Without access to this, you can still establish your endpoint, but it won't be functional in any way. To check your status, go to app.globus.org/groups in your browser and authenticate with your NetID.
If you do not see the University of Illinois at Urbana Champaign in groups, please contact the Regulated Research Program Manager so that the proper resources at NCSA can be engaged. If you do see UIUC as is shown below, please follow the numbered steps below.
- Follow the steps in this KB article up to and including step 6. The app you want to install in step 6 is Globus Connect Personal. An example is shown below.
2. Follow the remaining steps in the linked KB article in step 1. When you have finished installing, launch Globus from the Start Menu
3. When you launch, you should get this page. Select log in, and in the browser window that opens, authenticate with your University of Illinois at Urbana Champaign credentials.
4. When presented with the permissions page, provide a label and press 'Allow.' The label name you provide is arbitrary. However, for simplicity, you may elect to use the name of your VM, which can be found by opening Windows settings and using the name in bold that shows up on the dashboard.
5. Afterwards, you will be redirected back to the setup. Collection Name and Description are your choice, though something similar to the below is ideal for future management and support.
NOTE: It is your responsibility to ensure that you check the High Assurance checkbox. Several critical security controls are packaged with the High Assurance mode, and leaving it off prevents them from being used. If you accidentally deploy Globus without this, please contact the Regulated Research Program Manager and your Unit IT Contact so they can assist you in uninstalling the Globus Agent and re-provisioning it correctly.
The re-authentication timer can be set at any time equal to or less than 60 minutes. This timer will determine how often you have to provide MFA such as DUO when executing privileged actions related to your collections.
6. You will see both this screen from Globus and a toast notification in the bottom right once the setup is complete. You can press exit setup.
7. At this point, your collection is active but not usable. To associate your collection with the UOFI, go to app.globus.org/collections and then select the collection you just created.
8. On the Overview page, select Edit Subscription Status on the right, and switch the radio button selection from None to University of Illinois at Urbana-Champaign. Then press save. You will know this has been executed correctly when your collection looks like the second row in the screenshot of Step 7.
At this point, you should have a functional Globus Connect Personal endpoint that functions similarly to an NCSA Nightingale instance or other Globus-backed services on campus.