02 Jun, 2023
UPDATE: Beginning June 2, 2023 at 4 p.m. (Pacific Time), users will need to update their SUP client with the latest version 8.12 (available
here). While the updated file will be available beforehand, please note that this version of the client will not be usable until after the rollover.
Users will need to do either of the following to replace their SUP client manually:
- Follow the installation instructions for the SUP client.
or
- Run the following command directly on top of the old client, or to a new file:
ssh sup.nas.nasa.gov mesh-update --file=mc>sup
If downloading the client to a new location, use chmod 700 sup to make the client executable, then move it to a location in your $PATH.
To comply with NASA security regulations, certain elements of the SUP back-end architecture must be modified. These changes together with an updated hardware platform will go into effect on June 2 at 4:00 p.m. (Pacific Time).
At that point, all sessions through the SUP will be terminated, and existing SUP keys and the current version of the SUP client will no longer operate correctly with the new SUP systems. Additionally, the host keys for sup.nas.nasa.gov had to be upgraded to comply with current key length guidelines. All SUP users are required to do the following after June 2, but not before:
- Remove existing SUP host keys on your system:
ssh-keygen -R sup.nas.nasa.gov
ssh-keygen -R sup-key.nas.nasa.gov
- Remove existing SUP keys on your system:
rm ~/.ssh/meshkey*
-
Upgrade the SUP client to the latest version on any systems that currently use it. The easiest way to do this is to force a key generation using your existing client (if you use an absolute path or other options such as -u, modify this command appropriately) and answer "y" to upgrade:
sup -g
Alternatively, the new client can be downloaded directly from the HECC Knowledge Base. Please note, the new client will not be available until the system is switched over.
- Restart any processes that may have been terminated (as desired).
For users of Shift through the SUP, because the SUP client is also the Shift client, additional action is required. At 3:30 p.m. on June 2, all remote Shift transfers through the SUP will be stopped. Users will be notified of transfers affected. Once you have upgraded your SUP client, you must manually restart these transfers using (for transfer id N, again add any sup options as appropriate):
sup shiftc --restart --id=N
We apologize for any inconvenience. If you have any questions or need more information, please contact the Control Room at (800) 331-8737, (650) 604-4444, or support@nas.nasa.gov.
