NOTE: This content is still in development.

CAC Portal

All CAC resources and projects are managed in the CAC Portal at portal.cac.cornell.edu. For login instructions, see CAC Portal Login. See Portal feature or project management for Portal usage. Click on the house icon to return to the main Portal page anytime. Log in CAC Portal

CAC Portal Login

  1. Go to CAC portal using a web browser. Click on the Login button in the upper right corner. Log in CAC Portal

  2. On the next Globus login screen, select your organizational login and then click on the Continue button. Please be aware that you should always use the same credentials to access the Portal.

    • Cornell users: Select Cornell University.
    • Weill Cornell Medicine: Select Weill Cornell Medical College. Globus Login diagram

  3. You will get forwarded to the CUWebLogin (Cornell users) or WCM Web Login (Weill Cornell users) page. Log in using your NetID or CWID and password.

  4. If you are redirected back to the Portal, you have successfully logged in, and you may proceed directly to step 8. If you are a new user or are accessing the Portal for the first time, you will see this page. Click on Continue. Do not choose Link to an existing account, the Portal authenticates with your Globus account's primary email, and linking another account could change the primary email. In this case, you will not be viewed as a Cornell/WCM user. Log in CAC Portal

  5. It will ask you to complete the Globus sign-up. Log in CAC Portal

  6. On this new page, click on Allow. Log in CAC Portal

  7. If you are redirected back to the Portal, you have successfully logged into the CAC Portal. Close the browser window and skip to the next step. If you are a new user, fill out your contact information. Log in CAC Portal

  8. Log into Horizon web console to get started if you are on a CAC project with Red Cloud subscriptions. To join CAC projects, see Request to Join an Existing CAC Project.

Portal Features

The portal provides several links to manage your CAC project access and update credentials.

Request to Join an Existing CAC Project

In Request or Join a CAC Project panel, click on Request to Join an Existing CAC Project to see a list of existing CAC projects. In the dropdown menu, choose the CAC project that the PI requested you to join and send request. An email is sent to the PI/Proxy about your request, and they can manage the requests in Review CAC Project Member Requests. Log in CAC Portal

Review CAC Project Member Requests

In Request or Join a CAC Project panel, click on Review CAC Project Member Requests to see all join requests made to CAC projects that the user is a PI/Proxy of. The PI/Proxy can accept or reject the requests on this page. Once a request is accepted, a confirmation email is sent to the requester, and if they do not have a CAC account, the email will also contain their CAC account ID and instructions on how to set it up. If a request is rejected, an email is also sent to the requester.

Request an Exploratory CAC Project

Exploratory CAC projects are available to anyone at Cornell and WCM who has never had access to Red Cloud resources. The exploratory project has 165 compute hours, 50 GB of storage, and 1 hour of free consulting, which may be used to help you build your image or install your software. If you are eligible for an exploratory project, click Request an Exploratory CAC Project and complete the form.

Create a New CAC Project

Cornell University faculty and staff can start new CAC projects by clicking on Create a New CAC Project in Request or Join a CAC Project panel. Upon completing the form, the designated Account Contact will receive an email with instructions for setting up the project. The new CAC project will be created once the Account Contact successfully completes the setup process.

Update Contact

On the navigation bar, click on Update Contact to update any of your contact information.

Update CAC Password

In Manage your CAC login credentials panel, click on Update CAC password to change your CAC account's password. This option is unavailable if you do not have a CAC account. Your CAC password expires every six months, so if you encounter invalid credentials when logging into private clusters, please update your CAC password and try again.

Generate SSH key pair (Cayuga Only)

In Manage your CAC login credentials panel, click on Generate SSH key pair to generate a new SSH key pair for logging into the Cayuga cluster.

Review Policies

In Manage your CAC login credentials panel, review CAC and Cornell University policies.

Manage CAC Projects

Users in a CAC project may belong to one or more roles, which determines their management permissions.

  • Member: the default role of all users
  • PI: can manage all aspects of the project
  • Proxy: same privilege as the PI
  • Account Contact: can manage project resources and account information

Description

All project members can view the project description. The PI/ Proxy can update the project description.

Resources

All project members can view project resources, including Red Cloud subscriptions, storage, and consulting hours. The PI, Proxy, or Account Contact can update project resources, such as purchasing more Red Cloud subscriptions, increasing Red Cloud storage, or adding more consulting hours.

Members

All project members can view current members on this project. The PI/Proxy can manage members, including accepting join requests (through Review CAC Project Member Requests), promoting members to Proxies, demoting Proxies to members, and removing members from the CAC project.

Account Invoices

The PI, Proxy, and Account Contact may view monthly invoices incurred by this project.

Account Update

The PI, Proxy, or Account Contact can update the billing account for this project. The Account Contact may also be changed on this page.

Remove Project

The PI/Proxy can remove a project by clicking on Remove Project, and the project will be scheduled for removal. Everything will be deleted, including Red Cloud instances, storage, and unused subscriptions.