Access

Getting an Account

Access to NU HPC facilities is free of charge for all NU faculty, research assistants, and students. However, accounts for research assistants and students must be sponsored and authorized by their PI (Principal Investigator—typically a faculty member or lab head). Accounts cannot be created at the direct request of students or research assistants; the request must always be initiated by the PI. PIs are expected to take full responsibility for the proper use of HPC facilities by their group members, including compliance with cybersecurity and acceptable-use policies. All NU HPC users must have a valid nu.edu.kz corporate email address.

Below are step-by-step instructions for PIs to request new accounts for themselves and/or their group members:

1. To create a new group on NU HPC clusters (to which member accounts can later be added), the PI must complete the form in the NU IT Helpdesk ticketing system. Instructions for submitting this request are provided on the same Helpdesk page. If, at the time of submission, the PI already knows which research group members require accounts on Shabyt, their names, emails, and positions may be included directly in the form. Please note that only the PI may complete this form, regardless of how many accounts are requested or who they are for. Group members are not permitted to request accounts or submit forms on their own.
2. The NU HPC team will review the application form and approve or reject it based on the information provided.
3. Once approved, each new user will receive their username, a temporary password, and first-time login instructions directly from an HPC administrator.
4. If there is a need to add or remove group member accounts under a specific PI after the initial group has been created, the PI may submit a request through the NU Helpdesk ticketing system (select HPC User Management in the drop-down menu) or by contacting the HPC administrators at hpcadmin@nu.edu.kz. For new account requests, the PI must provide all required information about each group member (full name, email, position, and phone/messenger number).

Important notes:

• The PI assumes full responsibility for the proper use of HPC systems by their group members. If the PI cannot or does not wish to take this responsibility, they should not request accounts for them.
• Use of NU HPC resources must comply with the Acceptable Use Policy. Non-research activities, irresponsible actions that could damage or disrupt the system, or violations of NU cybersecurity policies may result in account suspension and further administrative action.
• As stated in the Acceptable Use Policy, account sharing is strictly prohibited. The PI must request a separate account for each group member—a process that is quick and straightforward. To facilitate collaboration, a shared directory is automatically created for each group on our HPC clusters: /zdisk/<groupname>. This directory can be used by group members to exchange files and data securely.

Access instructions

Use of VPN

Access to NU HPC facilities is currently restricted to connections originating from the internal campus network. Users connecting from outside the campus must use a VPN (Virtual Private Network). At NU, this requires the GlobalProtect VPN client.

To request VPN access:

• Visit the NU IT Helpdesk and type VPN in the search box.
• Fill out the VPN access request form (available for NU employees and research assistants; PI approval may be required).
• Follow the instructions provided on the Helpdesk page.

Please note:

• NU VPN policies are subject to change.
• The NU HPC team does not manage VPN accounts and is not responsible for their operation. For all VPN-related issues, contact the NU Helpdesk directly by submitting a support ticket.
• VPN access is required only when connecting from outside the NU campus network. On campus, VPN is unnecessary—and in fact, a VPN connection cannot be established.

GlobalProtect corporate VPN differs significantly from consumer services such as NordVPN, Surfshark, or ExpressVPN. Consumer VPNs typically route *all* of your internet traffic through an external server, which can reduce bandwidth and slow down general browsing. By contrast, GlobalProtect VPN only secures connections to hosts located on the NU internal network, making your device behave as if it were physically on campus. It does not affect regular internet traffic to external sites (e.g., YouTube, online news, or podcasts), nor does it interfere with SSH connections to non-NU hosts. Because of this, you may safely leave GlobalProtect VPN running in the background at all times without impacting your everyday internet activities.

Hosts

When a user is on the campus network or connected to it via VPN, he/she should use the SSH protocol (with the default port 22) to establish a connection with the interactive login/management node of the system they intend to use. The IP addresses of the login nodes are as follows:

System	Numeric IP address	Host name
Shabyt cluster	10.3.64.61	shabyt
Muon cluster	10.3.64.46	muon

Two-factor authentication

Access to NU HPC systems requires two-factor authentication, i.e. you will be prompted your password (first factor) and a six-digit PIN code (second factor). Before you login for the first time, you will need to add a token to your mobile phone. Each new user receives a username, password, and QR code through email by the NU HPC admin. Please follow the following steps:

1. Open the App Store on your iOS device or Google Play Store on your Android device.
2. Search for and install the Google Authenticator (App Store) or Google Authenticator (Google Play Store)
3. Once installed, open the app and follow the on-screen instructions to set it up.
4. After setup is complete, you will be able to use the Google Authenticator app to generate a verification code when prompted during the login process. Please scan the QR code that is sent to you.

SSH client software

There is a multitude of free and powerful third-party SSH clients available for any operating system. Moreover, Windows, Linux, and MacOS all have native SSH clients built directly into the command line. For example, in Windows, one can just launch the command prompt (press Windows+R keys, type cmd.exe, and hit enter) and initiate an SSH session from there by typing ssh yourusername@shabyt or ssh yourusername@10.3.64.61. You will be prompted to confirm the authenticity of the host (only when you connect for the first time) by typing yes, and then enter your first factor (password) and second factor (6-digit PIN shown in Google Authenticator app on your phone)

If you wish to use a SSH client with a graphical user interface on Windows, we can recommend PuTTY. Here is an illustration how you can connect with PuTTY:

• In the PuTTY configuration window, enter 10.3.64.61 (the IP address of the Shabyt login node) in field "Host Name"
• Choose the field "Connection type" choose SSH
• Press the "Open" button
• When connecting for the first time, PuTTY will show a security alert. Accept it by pressing the "Accept" button
• Next a terminal will prompt you to enter your username. After your entering your username press enter
• You will be prompted to enter your first factor (password) and second factor (6-digit PIN shown in Google Authenticator app on your phone)

Transferring files

You can transfer files between your personal computer and HPC clusters using the scp command in the terminal. This command operates similar to the standard Unix cp command, but it allows you to specify a remote address/location in place of the source or destination file. For example, if you wish to copy a file called myfile.dat located in directory /my/local/path/ on your computer to a directory called my/remote/path/ that is located inside your home directory on Shabyt cluster you can type the following command in the terminal:

scp /my/local/path/myfile.dat john.smith@shabyt:~/my/remote/path/

where john.smith is your Shabyt username and the tilde sign ~ is a short substitute for your remote home directory path (in the case of Shabyt the tilde is equivalent to /shared/home/john.smith so that the full path is read as /shared/home/john.smith/my/remote/path).

As an alternative to scp, you can invoke the sftp command line utility (similar to the standard and unencrypted ftp) that uses Secure File Transfer Protocol (SFTP) for remote file operations.

If you prefer a graphical user interface for file transfer, there is a multitude of free and commercial SFTP or SCP clients. One of the most popular clients with graphical interface that supports the SFTP protocol and is available for all major operating systems is FileZilla. If you use Microsoft Windows you may also consider WinSCP.