// Logging-In & Passwords

PASSWORD CHANGE/RECOVERY

If you do not change your NCCS password before your current one expires, the system will prompt you to change your password immediately upon login. Otherwise, you may change your NCCS password by one of two methods:

1. NCCS Password Change Interface.
2. Log in to any of the linux-based NCCS Systems and run the "passwd" command.

If your password is locked or you are having another issue, you must open a ticket to reset it with NCCS User Services.

⚠️
For security reasons, NCCS User Services will not e-mail passwords. If you need a temporary password, User Services will ask for your NASA Security Questions over the phone. These measures are to ensure someone is not pretending to be you. Note that User Services will NEVER ask you for your password(s). Never volunteer your passwords under any circumstances.

PASSWORD REQUIREMENTS

  • Minimum of 12 characters.
  • Maximum of 64 characters.
  • Contains at least:
    • One number.
    • One uppercase letter.
    • One lowercase letter.
    • One special character.
  • Must start with a letter or a number, and never a special character.
ℹ️
Password Info
  • Passwords are valid for 60 days.
  • Passwords may not be reused.
  • After five failed login attempts, your account will lock and you must open a ticket to unlock it.
  • Passwords can be changed once every 24 hours. If you need your password changed sooner, open a ticket.

LOGGING IN

Most NCCS systems are accessed via an intermediary "bastion" host referred to as login.nccs.nasa.gov.

Step 1: Getting Connected

From your workstation or a resource outside the NCCS environment, you may log in by:

$ ssh USERID@login.nccs.nasa.gov
By accessing and using this information system, you acknowledge and consent to the following:

You are accessing a U.S. Government information system, which includes: (1) this computer; (2) this computer network; (3) all computers connected to this network including end user systems; (4) all devices and storage media attached to this network or to any computer on this network; and (5) cloud and remote information services. This information system is provided for U.S. Government-authorized use only. This system contains Controlled Unclassified Information (CUI). You have no reasonable expectation of privacy regarding any communication transmitted through or data stored on this information system. At any time, and for any lawful purpose, the U.S. Government may monitor, intercept, search, and seize any communication or data transiting, stored on, or traveling to or from this information system. You are NOT authorized to process classified information on this information system. Unauthorized or improper use of this system may result in suspension or loss of access privileges, disciplinary action, and civil and/or criminal penalties.

Step 2: Verify the host fingerprint

When connecting to an SSH host for the first time, you will be prompted to verify its SSH fingerprint. Make sure it matches one of these fingerprints.

The authenticity of host 'login.nccs.nasa.gov (169.154.151.134)' can't be established.
ECDSA key fingerprint is SHA256:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])?
⚠️
If the authenticity of a host cannot be established, ALWAYS verify its fingerprint against this list: ssh host fingerprints.

Step 3: Authenticate Your Session

Once you are connected, you will need to authenticate. The default authentication method is with an RSA SecurID Token you would enter at the "PASSCODE" prompt. If you do not have a token or would prefer to authenticate using the PIV PIN from your PIV card, follow the instructions to streamline your connections. Information on RSA Tokens is available here.

PASSCODE: <input your RSA Token here>
- or -
PIN: <input your PIV PIN here>
ℹ️
On Windows and some MacOS systems an additional window may prompt you for your PIV PIN.

Step 4: Connect to a Service

The following table outlines the potential hosts you may enter for the "host" prompt. The hosts you have access to were outlined in your "Welcome" e-mail.

SYSTEM Host
ADAPT/Explore adapt
Dataportal dataportal
Dirac dirac
Discover discover
Discover NASTRAN Project discover-nastran


If you prefer not to enter a "host" you may follow the instructions to streamline your connections. This is also necessary for using file transfer utilities like scp/rsync/sftp.

Creating directory '/home/<username>'.
Last login: Fri Dec 13 XX:XX:XX 2024 from XX.XX.XXX.XXX
Host: <input the host to connect to>
Password: <input your NCCS password>