Working with your virtual desktop

Once a virtual desktop has been created, each CSC project member can securely access it from their browser.

Access virtual desktop

After log in, you will see all your virtual desktops listed at the front page, under All connections.

• All connections. Select project (e.g. project_NNNNN) and click the plus-sign. There you can see all desktops that belongs to this project (desktopname-NNNNNNNNNN). Access virtual desktop by clicking the name.
• Recent connections. Your recently used virtual desktops appear also here.

When you open the connection, a virtual computing environment will open in your browser. If you are accessing the virtual desktop for the first time, you will see the panel getting started, from which you can, for example, adjust the screen resolution.

You can work with your virtual desktop like with a standard computer, accessing several pre-installed programs from the applications menu bar (top left corner). Examples include Open Office, image-viewing applications, video and audio players, Jupyter Notebooks etc. You can also open a terminal and use Linux from the command line. For more information on accessing R-Studio, please check the paragraph below.

Security-related features of SD Desktop:

1. The computing environment i.e. virtual desktop (visible from your browser) is isolated from the internet. For example, you can open a Firefox web browser in your virtual desktop but not access any site online. At this moment, you will also not be able to access any repositories directly.

2. You can access or import files into the virtual desktop only by using the Data Gateway application;

3. Unencrypted files are not visible via the SD Desktop service. You can access and visualize only encrypted files. You can encrypt files with SD Connect or programmatically with the service's public encryption key. Read more about encryption.

4. The copy-paste function from your computer/laptop to your virtual desktop is limited for security reasons. Instructions how to copy-paste.

5. Only files saved in the shared-directory or the external volume are accessible to all project members via the virtual desktop. Read more about external volume.

You can close the connection to your virtual desktop in two ways:

1. Log out from the desktop (in the workspace view, top right corner of the browser, select your username and log out). This will close all applications and disconnect the work session. You can access the same desktop anytime after logging in to the services.

2. If you initiated an analysis programmatically (running a script), you can close the browser window. This doesn't interfere with the processes running. Thus, when you reconnect to your desktop, all your tools and interfaces are still open and you can continue working. However, log out from the desktop once the analysis is finished. If you leave more than ten connections open, you will be unable to re-access the services.

Note

• SD Desktop supports only 10 simultaneous connections.
• You will be automatically logged out from the virtual desktop if a connection has been left accidentally active for two days.

Accessing RStudio

Open the terminal and launch RStudio with:

start-rstudio-server

This will return a URL and a service-specific password:

RStudio Server - Sensitive Data Desktop Edition
---------------------------------------------------------------------------------------
Copy/Paste this URL into Firefox:

http://localhost:8787/

-----------------------------------------------------------------------------------------
Enter these at the RStudio Server sign-in screen
----------------------------------------------------------------------------------------
Username: accountname  Password: Example23241232
----------------------------------------------------------------------------------------
To stop RStudio Server: Ctrl+C

Next:

• paste the URL in Firefox
• after a few seconds, you can input the username and password (service-specific) and access the server.

Note

Only files saved in shared-directory or external volume are accessible to other project members using RStudio.

Copy-paste from your laptop to virtual desktop

The copy-paste function from your computer/laptop to your virtual desktop is limited for security reasons. However it is possible to copy-paste text with Clipboard. Copy-paste works only in one direction: from your computer to virtual desktop.

Step by step tutorial

1. Go to virtual desktop and open the Clipboard with a key combination Cntrl+Alt+Shift and click Paste.
2. Activate the copy-paste function by selecting input method Text input (the Clipboard panel will close automatically after the selection).
3. Now you can copy text normally from your computer (Cntrl+C or mouse right click).
4. Paste the text inside your virtual desktop (Cntrl+C).

Note: Don't close Clipboard panel with Cntrl+Alt+Shift, this might disable the copy-paste function. Please note you have to activate the copy-paste function again every time you use your virtual desktop.

Appearance of the Clipboard (Guacamole tools) may vary a bit depending on browser and local operating system.

Accessing encrypted sensitive data within SD Desktop

As the virtual desktop is isolated from the internet, the only way to access data for analysis is by utilizing a specific application called Data Gateway.

This application will allow you to establish a secure connection with two other Sensitive Data Service components and:

• Access and analyze encrypted files directly uploaded via SD Connect by any of the project members
• Reuse published data under controlled access via the Sensitive Data (SD) Apply service.

Encrypted files are visible in read-only mode (similar to opening a PDF file or streaming a YouTube video). This solution allows you to process large amounts of data without storing additional copies on your virtual desktop.

Note

In SD Desktop, you can access only encrypted files. Accessing unencrypted data or files encrypted only with your public encryption key will result in an error.

Accessing encrypted data stored in SD Connect using Data Gateway

You can access encrypted data stored in SD Connect by following these steps:

1. Open Data Gateway (you can find the application on your desktop)

2. Select SD Connect

3. Add your CSC credentials (username and password). Note: we disabled the copy/paste options for security reasons; thus, you need to type in your password

4. Click on Login and next click on Continue

5. In the new window, under Create secure access click on Create. The application will create a secure connection with SD Connect, and a new folder called Projects will be accessible from your desktop or programmatically from the terminal. Next, click on Open folder.

You can directly access all the files stored in SD Connect in read-only mode from the project folder. The application will automatically decrypt them. The current streaming speed can be up to 50 MB/s.

Note

The Projects folder is available only when the Data Gateway application is open. Thus, Data Gateway needs to be open during data processing in streaming mode.

Importing data inside the desktop

If during the analysis phase you need to edit or annotate files, you make a full copy of it on your virtual desktop following these steps:

1. Access the files of interest in the Project folder using Data Gateway

2. Select the files from the Project folder, make a copy and paste it in the virtual desktop home directory (the files will be visible only from your browser) or in the shared folder (in this case, the files will be accessible also by all the CSC project members).

The files are automatically decrypted by the Data Gateway application during the copy/paste process and are directly available for analysis or editing.

Note

Your private workspace in SD Desktop is completely isolated from the internet for security reasons. However, you can use the procedure described above if you need to import specific scripts into your desktop (for example, from GitHub or other trusted repositories).

Accessing published data for reuse via SD Apply

Data Gateway can also be used to access data published under controlled access via other Sensitive Data Service components. To access a specific dataset for reuse on your virtual desktop, you must first apply for it using SD Apply service. When the data owner (or Data Access Committee) has granted you access, you can access the dataset in SD Desktop for a limited time.

You will encounter an error message if you still need to apply for access or if the access period has ended.

SD Apply is currently in the pilot phase. Don't hesitate to contact CSC Service Desk (subject: sensitive data) for more information.

Do you find this page useful?

Yes

Thank you for your feedback!

No

Thank you! Your feedback is appreciated.

Please let us know how we could improve this page by contacting us or by creating an issue in GitHub. You can also edit this page yourself and contribute your improvements by creating a pull request.