UMIACS - User contributions [en]

AlternativePickup

2026-03-23T17:57:56Z

Vsammeta: Added alt text to map image

==Overview==
Please note that as of Fall 2021 with the University returning to fully onsite operation, you must have rationale other than COVID-19 precautions alone to make use of this service. Please pick up all other orders at our [[HelpDesk]].

==Procedure==
Please let us know that you want to pick up or drop something off by [[HelpDesk | contacting staff]] and letting us acknowledge and confirm your request '''before''' coming on-campus. We will not be able to service you if you arrive without letting us know beforehand.

Please provide in your initial request:
* Your name
* What you are looking to pick up or drop off. Note: For large or heavy items, we may request that they only be picked up using car transportation instead of allowing on foot pickup to prevent accidental damage.
* If applicable, the color, make, and model of vehicle that you are planning on stopping by in
* The rough 15-minute window that you are planning on stopping by in

During pickup:
* '''Please ensure you have a photo ID.''' Staff will be checking for ID before handing off any items.
* Call the Help Desk at [tel:+13014051775 (301) 405-1775] when you are physically standing (on foot) or parked (in a vehicle) at the loop in parking lot GG1 behind AVW.
* We will bring out your items either by hand or on a cart.
* We will verify your ID and give you the items.

==Map==
[[File:Curbside_pickup.png |alt=Map marking alternative pickup location behind AVW]]

'''From the main entrance to campus (off US Rt. 1):'''
# Make your first right to turn onto Paint Branch Drive.
# Continue straight past the Brendan Iribe Center and Wind Tunnel buildings on your right.
# Continue straight at the stop sign at Stadium Drive and straight past the Engineering Annex and A.V. Williams buildings on your right.
# Make a right at the stop sign immediately past A.V. Williams to enter lot GG1.
# Follow the path through the parking lot to reach the loop behind the A.V. Williams building.

'''From the Paint Branch Drive entrance (off MD Rt. 193):'''
# Continue straight past the Xfinity Center and recreational fields as well as parking lots RR2 and XX1 on your right.
# Continue straight at the stop sign at Regents Drive and straight past the Biomolecular Sciences and A. James Clark Hall buildings on your right.
# Make a left at the stop sign immediately past A. James Clark Hall to enter lot GG1.
# Follow the path through the parking lot to reach the loop behind the A.V. Williams building.

For a full campus map, please visit https://maps.umd.edu/map/.

Jira

2026-03-23T17:54:19Z

Vsammeta: added alt text to image

[https://www.atlassian.com/software/jira Jira] is a request and bug tracker that UMIACS uses to provide our [[HelpDesk]] functionality to our users. It can be accessed [https://intranet.umiacs.umd.edu/jira here].

It is a web based ticketing system that allows both users and staff to maintain greater control over their tickets and makes communication and resolution of issues a seamless process.

==Using Jira==
Jira automatically creates accounts for UMIACS account holders, using the account's @umiacs.umd.edu email address. '''If you have a UMIACS account, you can log in to Jira using the UMD Single Sign On service'''. Otherwise, when you email Jira, a ticket is created, and the email address your mail was sent from is added as a participant to the ticket -- this means that if you create a ticket using a non-UMIACS email address, you'll have to login to Jira using that email address to see the ticket.

===If you have a UMIACS account===
Simply login to [https://intranet.umiacs.umd.edu/jira/servicedesk/customer/portal/ Jira's Customer Portal] and select the UMD Single Sign On to login with your UMD credentials.

===If you do not have a UMIACS account or submitted/were included on a ticket with a non-UMIACS email address===
The first time you use a new email address to submit a ticket or are included as a participant on a ticket with a non-UMIACS email address, you will get an automated email containing a link to set a password for the newly-created Jira account. After you have set your full name and password, you can log in with this email address and password at the [https://intranet.umiacs.umd.edu/jira/servicedesk/customer/user/login?nosso external user page]. If you no longer have the automated email, you can also just go to the external user page, click <tt>Forgot your password?</tt>, and enter your email address as the username to set it.

[[Image:Jira_offsite.png |alt=Setting up a full name and a password for a new Jira account]]

PrinterTroubleshooting

2026-03-23T17:52:31Z

Vsammeta: Added alt text to images

==Common Printing Error Solutions ==
If you are having trouble trying to print a PDF, try the following:
<ol>
<li>Choose <tt>File >>> Print</tt>, and then click <tt>Advanced</tt>.</li>
[[File:print_menu.jpg | 200px |alt=Choosing advanced options in print settings]]
* Click to enlarge image
<li>Select the <tt>Print As Image</tt> check box, and click Ok. Then click print.</li>
[[File:select_image.jpg | 200px |alt=Selecting print as image in advanced printing settings]]
* Click to enlarge image
* For more information visit [http://helpx.adobe.com/acrobat/kb/quick-fix-print-pdf-image.html Adobe quick fix].
</ol>

For other printing errors try the following:
<ol>

<li>If using Windows, try using a pcl queue for MS/Office applications and a ps queue for Adobe applications.</li>
<li>Try using a different printer model.</li>
<li>Try using a different print queue.</li>

* New print queues can be added with directions for respective operating systems on our [https://wiki.umiacs.umd.edu/umiacs/index.php/Printing printing page].
</ol>

SecureShell

2026-03-23T17:49:41Z

Vsammeta: added alt text to images

Secure Shell (or [http://en.wikipedia.org/wiki/Secure_Shell SSH]) is a network protocol allowing two computers to exchange data securely over an insecure network. By default, use of SSH brings the user to a terminal, but the protocol can be used for other types of data transfer such as [[SFTP]] and [[SCP]].

==Connecting to an SSH Server==
Under Linux and macOS, the following command from a terminal will connect a client computer to the UMIACS [[Nexus]].
# ssh username@nexusgroup.umiacs.umd.edu
'''Note: Your Nexus submission node will vary depending on your sponsorship. See [[Nexus#Access|Nexus Access]] for more information.'''
This will give you access to a terminal on any one of the [[Nexus]] servers. Note that by default you will not have access to applications that require X11 to run.

All UMIACS-supported Windows hosts are installed with [http://www.chiark.greenend.org.uk/~sgtatham/putty/ PuTTY]. If you are using a self-supported machine, you can either download and install PuTTY yourself, or if you are running a [https://docs.microsoft.com/en-us/lifecycle/products/windows-10-enterprise-and-education currently supported version of Windows], you can install the OpenSSH client natively in Windows by following Microsoft's instructions [https://docs.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse here]. Only the client is needed and not the server.

==X11 Forwarding==
By default, SSH only gives the user shell access to a host. Enabling X11 Forwarding allows users to run applications with Graphical User Interfaces.

Under Linux and macOS, the following command from a terminal will connect a client computer to the UMIACS [[Nexus]] using X11 Forwarding. Please note that under macOS, [http://xquartz.macosforge.org/landing/ xQuartz] is required on the client machine to forward X sessions from the remote session.
# ssh '''-Y''' username@nexusgroup.umiacs.umd.edu
'''Note: Your Nexus submission node will vary depending on your sponsorship. See [[Nexus#Access|Nexus Access]] for more information.'''

Under Windows, you will need to forward X through [http://sourceforge.net/projects/vcxsrv/ VcXsrv] or another X11 application.

If using PuTTY, you will need to enable X forwarding. The option is under Connection > SSH > X11, shown below.

[[Image:Putty-x-forwarding.png |alt=Enabling X11 Forwarding in PuTTY settings]]

If using the [https://learn.microsoft.com/en-us/windows/terminal/install Windows Terminal app], you will need to set an environment variable and then relaunch the app.
:<pre>setx.exe DISPLAY "127.0.0.1:0.0"</pre>

After this has been done, every time you want to use X forwarding, you need to make sure VcXsrv or your other application has been started. If using VcXsrv, there will be an icon in your system tray.

You will now be able to use Xwindow programs from your SSH client.

==SSH Tunneling==
You can tunnel one or more ports through an SSH connection such that your packets will look like they are coming from the host you are tunneling to. This is helpful for services that you would be normally blocked by a firewall.

Please see the [[SecureShellTunneling]] page for more information.

==SSH Keys (and Passwordless SSH)==
SSH can utilize public key encryption to authenticate and authorize users. This can be considered more secure especially if you secure your private key with a pass-phrase. The keys themselves are not susceptible to brute force attacks like normal passwords over SSH are.

Please see the [[SSH/Keys]] page for more information.

'''Note: UMIACS still requires multi-factor authentication if you are connecting from the public internet or a [[VPN]] for security reasons. SSH keys can only be used when connecting to a UMIACS-supported host from another host already within UMIACS' network border.'''

==Verify remote host SSH fingerprint==
The SSH protocol relies on host keys to verify the identify of a given host. Each host as a unique key for the various different protocols supported.

When connecting to a remove host for the first time, or when the remote host's local host key configuration has changed, you may see the following prompt:
<pre>
$ ssh username@nexusgroup.umiacs.umd.edu
The authenticity of host 'nexusgroup.umiacs.umd.edu (128.8.121.73)' can't be established.
RSA key fingerprint is 25:83:aa:df:f5:ad:5f:08:c9:8a:a3:5d:97:8b:48:1f.
Are you sure you want to continue connecting (yes/no)?
</pre>
It is considered best practice to verify the key fingerprint with the actual key of the host. UMIACS maintains a reference of SSH key fingerprints available at the following link:
https://intranet.umiacs.umd.edu/hostkeys

It is important to note that each key type has a different fingerprint. Depending on your local configuration, your client may prefer a specific type of key. The following commands can be used to determine the fingerprint of a given key type on a remote host:

<pre>
$ ssh-keyscan -t rsa nexusgroup.umiacs.umd.edu > key
# nexusgroup.umiacs.umd.edu:22 SSH-2.0-OpenSSH_8.0
$ ssh-keygen -l -E md5 -f key
2048 MD5:25:83:aa:df:f5:ad:5f:08:c9:8a:a3:5d:97:8b:48:1f nexusgroup.umiacs.umd.edu (RSA)
</pre>

If you have any questions, or notice a discrepancy, please [[HelpDesk | contact staff]].

===Windows / PuTTY Verification===
If you use PuTTY to connect to remote hosts, the prompt will be similar to the following:

[[File:Putty ssh host key prompt.png |alt=PuTTY SSH host key prompt]]

If the host key reported by PuTTY matches the [https://gitlab.umiacs.umd.edu/staff/ssh-fingerprints/blob/master/fingerprints Documented entry for that host], it is safe to click 'yes'. If you notice a discrepancy, please [[HelpDesk | contact staff]].

===Other Platforms===
* [https://winscp.net/eng/docs/faq_hostkey WinSCP]
* [https://mobaxterm.mobatek.net/ MobaXterm]

==Long Running Processes==
If you are dealing with a long running process that is inhibiting your ability to work regularly, you may want to run your processes inside a screen on the host that you're connecting to. This way, if the connection is dropped for any reason the screen session will automatically detach on the host and will continue running so that you can reattach it at a later time when you've connected again. Please see our documentation on [[Screen | GNU Screen]] for more information.

==Further Information==
* [https://www.openssh.com/ OpenSSH]
* [https://docs.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse OpenSSH on Windows]

S3Clients

2026-03-23T17:47:59Z

Vsammeta: Added alt text to all images

Many popular S3 desktop clients can be used to access the [[OBJ | UMIACS Object Store]]. These tools complement the [[UMobj]] command line utilities and the built-in web interface by providing integration with the native file explorer on your desktop machine.

'''Note''': Many of these clients have features that are not supported by our Object Store in UMIACS. One prominent example of this is permissions. We suggest you instead manage permissions from the [https://obj.umiacs.umd.edu/obj built-in web application] for the Object Store.

=Graphical Clients=

==Cyberduck==
https://cyberduck.io

This is a free Windows and Mac S3 browser (it is however nagware that asks for a donation). It supports our S3 Object Store using the "S3 (Amazon Simple Storage Service)" drop down menu choice in the add bookmark dialog.

[[Image:Cyberduck.png|400px |alt=Setting up Object Store access in Cyberduck]]

The following fields are required:
* '''Server''' - This is your object store (<code>obj.umiacs.umd.edu</code>)
* '''Access Key ID''' - This is your access key as provided to you in the object store
* '''Password''' - This is your secret key as provided to you in the object store

You will be prompted for your secret key when you connect and may choose to save the password.

==WinSCP==
* https://winscp.net/eng/index.php

This is a free Windows file transfer application. It supports our S3 Object Store using the "Amazon S3" drop down menu choice under File protocol when logging in.

[[Image:WinSCPS3.png|400px |alt=Setting up Object Store access in WinSCP]]

The following fields are required:
* '''Host name''' - This is your object store (<code>obj.umiacs.umd.edu</code>)
* '''Access key ID''' - This is your access key as provided to you in the object store
* '''Secret access key''' - This is your secret key as provided to you in the object store

==Transmit==
* https://panic.com/transmit/
This is a paid file transfer application for Mac. It supports our S3 Object Store using the "S3" menu choice after clicking the plus sign to add a favorite.

[[Image:Transmit.png|400px |alt=Setting up Object Store access in Transmit]]

The following fields are required:
* '''Server''' - This is your object store (<code>obj.umiacs.umd.edu</code>)
* '''Access Key ID''' - This is your access key as provided to you in the object store
* '''Secret''' - This is your secret key as provided to you in the object store

These settings can be saved as a favorite for easy access. Transmit also allows you to mount your Obj buckets as local disks, which will support easy drag-and-drop of files.

=Command Line Clients=
==s3cmd==
Command line client for accessing S3-like services.
* https://s3tools.org/s3cmd

You need to configure a file like <code>~/.s3cfg</code> that looks like the following with your ACCESS_KEY and SECRET_KEY substituted.

<pre>
[default]
access_key = <ACCESS_KEY>
host_base = obj.umiacs.umd.edu
host_bucket = %(bucket)s.obj.umiacs.umd.edu
secret_key = <SECRET_KEY>
use_https = True
</pre>

==mc==
The MinIO Client is a comprehensive single binary (Go) command line client for cloud based storage services.
* https://min.io/download

You can run this client on supported UMIACS systems through adding it via our software [[Modules|module]].
<pre>module add mc</pre>

You will need to setup a cloud provider for Obj by running the following command (substituting in your actual ACCESS_KEY and SECRET_KEY for your personal account or [[OBJ#LabGroups | LabGroup]] in the [https://obj.umiacs.umd.edu/obj/user/ Object Store]).

<pre>
mc config host add obj https://obj.umiacs.umd.edu <ACCESS_KEY> <SECRET_KEY>
</pre>

You can see what host(s) you have configured with the command <code>mc config host ls</code>.

<pre>
$ mc config host ls
...
obj
URL : https://obj.umiacs.umd.edu
AccessKey : (redacted)
SecretKey : (redacted)
API : s3v4
Path : auto
...
</pre>

You can then use the normal <code>mc</code> commands like the following to list the contents of a bucket.

<pre>
$ mc ls obj/iso
[2017-02-10 16:45:04 EST] 3.5GiB rhel-server-7.3-x86_64-dvd.iso
[2017-02-13 12:21:33 EST] 4.0GiB rhel-workstation-7.3-x86_64-dvd.iso
</pre>

There is also the ability to search for file globs of specific files using the <code>find</code> sub-command for <code>mc</code>.

<pre>
$ mc find dyarnell/dyarnell_support --name "*.log"
dyarnell/dyarnell_support/mds_20170918/ceph-mds.objmds01.log
dyarnell/dyarnell_support/satellite.log
dyarnell/dyarnell_support/umiacs-49168.log
</pre>

The full MinIO Client documentation can be found here: https://min.io/docs/minio/linux/reference/minio-mc.html.

==rclone==
Command line client for accessing S3-like services and much more.
* https://rclone.org/downloads

We maintain rclone documentation on a separate page found [[Rclone | here]].

SecureShellTunneling

2026-03-23T17:45:40Z

Vsammeta: Added alt text to all the images

==Port Forwarding==

===OpenSSH===
You can use OpenSSH port forwarding to forward a specific port on your local machine to a remote port on a UMIACS-supported machine with any modern version of a Linux, macOS, or Windows system.
<ul>
<li>This example will create a local port 9999 that will be forwarded to the remote host webserver.umiacs.umd.edu and its port 8000 through the host nexusgroup.umiacs.umd.edu.
<pre>ssh -NfL localhost:9999:webserver.umiacs.umd.edu:8000 <USERNAME>@nexusgroup.umiacs.umd.edu</pre>
</li>

<li>This example will create a local port 13389 that will be forwarded to a remote host that is running a [[Remote Desktop |RDP]] client like Windows through the host nexusgroup.umiacs.umd.edu
<pre>ssh -NfL localhost:13389:my-desktop.ad.umiacs.umd.edu:3389 <USERNAME>@nexusgroup.umiacs.umd.edu</pre>
</li>

<li>The following example outlines how to use SSH tunnel for printing to the UMIACS CUPS server.
<pre>ssh <USERNAME>@nexusgroup.umiacs.umd.edu -T -N -L localhost:3631:print.umiacs.umd.edu:631</pre>
</li>
<li>Once the tunnel is established you can follow the normal [[Printing | Printing]] instructions, substituting 'localhost:3631' in place of 'print.umiacs.umd.edu', or print via the a command such as the following:
<pre>lpr -H localhost:3631 -P <PRINTER NAME> <FILENAME></pre>
</li>
</ul>

===PuTTY===
All modern versions of Windows can use the OpenSSH method mentioned in the previous section. Windows users can also achieve the same types of tunnels using PuTTY or a similar SSH client. In PuTTY, the port forwarding configuration dialogue can be found under "Connection>SSH>Tunnels".

[[Image:PuTTYWin7Tunnel.png |alt=PuTTY config screen on Connection/SSH/Tunnels menu]]

This example will create a local port '''8889''' that is attached to the remote host '''clipsm301.umiacs.umd.edu''' on its port '''8000'''.

==SOCKS Proxy==

===OpenSSH===
[[SSH]] can also tunnel all traffic coming into a certain port through a SOCKS v5 proxy. Many browsers and some operating systems can be setup to then connect to this proxy to allow them again to look like they are coming from the host name you specify in your [[SSH]] command.

<pre>ssh -ND 7777 nexusgroup.umiacs.umd.edu</pre>

Please note: when you configure proxy settings for a browser (or your whole operating system) all the traffic for that browser (or the OS) will be sent through the proxy. This can have performance implications.

===PuTTY===
All modern versions of Windows can use the OpenSSH method mentioned in the previous section. Windows users can also tunnel traffic coming into a certain port through a SOCKS v5 proxy by using PuTTY or a similar SSH client. Many browsers and some operating systems can be setup to connect to this proxy to allow them to look like they are coming from the host name you specify.

In PuTTY under '''Sessions''' set the Host Name:

[[Image:Putty1.png |alt=Setting a host name in PuTTY config Session menu]]

Then under <code>Connection > SSH > Tunnels</code> enter a port number and set the type of forwarding to "Dynamic" and press add:

[[Image:Putty2.png |alt=Entering a port and configuring it in the Tunneling menu of the Config screen]]

Click Open and log into the host.
As long as this PuTTY window is open and you are logged in, you can use the SOCKS proxy.

Please note that when you configure proxy settings for a browser or your whole operating system, all the traffic for that browser or your OS will be sent through the proxy. This can have performance implications.

=== Example: SOCKS proxy, Browser configuration ===
There are too many variations here to cover them all, but they all follow the same general pattern and the following example should be generally applicable. We'll use Firefox for this example. Screenshots are from Firefox 37.0.2.

# Under <code>Preferences > Advanced > Network > Connection > Settings...</code>, choose <code>Manually proxy configuration:</code>.
# Enter <code>127.0.0.1</code> for the proxy.
# Enter the port you chose earlier for dynamic forwarding (7777 in the example above).
# Check <code>Use this proxy server for all protocols</code>, and then click OK.

'''NOTE:''' this will continue to send all browser traffic through your SSH tunnel until the configuration is reverted. The SSH connection must be established for traffic to pass through to the destination network. Firefox has a very useful plugin called "FoxyProxy" that allows conditional proxies to be set up, if you're interested in adding some intelligence/complexity to your proxy configuration.

[[Image:FF_Proxy_1.png|400px |alt=Firefox network config menu]] [[Image:FF_Proxy_2.png|400px |alt=Setting up HTTP proxy in Firefox network settings]]

ATL/ConferenceRooms

2026-03-23T17:39:10Z

Vsammeta: Added alt text to all the images

The following is the list of UMIACS-managed conference rooms in the Atlantic building. General topics:
* [[ConferenceRooms/Solstice | Using the Solstice Mersive Pods]]
* [[ConferenceRooms/Recording | Recording and Streaming]]
* [[ConferenceRooms/Zoom | Using Zoom]]

=ATL 3100A=
This conference room comes equipped with a touch panel that can be used to control the video and audio source(s) and level(s) being used to project to the displays in the room. There is a Room PC ("PC Main"), a Solstice Pod ("Solstice"), and an HDMI cable to use a laptop or external device ("Laptop").

There is also an "Audio Override" output device that you can project any of the input sources to. This decouples the source audio from the source video so that you can send audio from one source to the audio output while maintaining video from a difference source. The primary use of this is to be able to prevent echoing and have teleconferencing participants be able to hear the room audience when using both a laptop and the room PC to present. With both devices in the same teleconference session, leave "Laptop" as the source video and switch the audio override to "PC Main" to display what is on the laptop but use the microphones spread throughout the room to hear the audience.

[[File:TouchPanel_sources_ATL3100a_audiooverride.jpg |alt=ATL3100a Touch Panel Main Menu with Audio Override option]]

==Sources==
===Room PC===
Use the wireless keyboard/mouse combo on the desk in the room to use the room PC. Choose the Conference account to sign into, which does not need a password. Please be sure to log off when you are done using the room PC, as the account is fully wiped when you log off, ensuring the next group using the room does not have access to anything you may have signed into.

===Solstice===
This option will prompt you to look at the display in the room for instructions on how to display your device(s) to the room's display wirelessly. More specific instructions can be found [[ConferenceRooms/Solstice | here]]. Note that the IP address has been blacked out in the below photo for privacy reasons, but will show properly when you are physically in the room.

[[File:TouchPanel_solsticetv_ATL3100a.jpg |alt=Solstice TV showing connections settings and config]]

===Laptop===
Connect your device to the HDMI cable coming out of the middle of the desk in the room to display your device to the room's display over a wired connection.

==Shutting Down==
Please be sure to touch the "Shutdown A/V System" button when you are done using the room to save energy and give the next group using the room a clean slate. This will turn off the displays for the room and raise the projector screen.

[[File:TouchPanel_shutdown.jpg |alt=Touch Panel Shutting Down Screen]]

=ATL 3100C/3100D/3308/3373=
These conference rooms each come equipped with a simplified touch panel that can be used to control the video source being used to project to the display in the room as well adjust the audio level for the display. There is a Room PC ("Dedicated PC"), an HDMI cable to use a laptop or external device ("Table Laptop"), and a Solstice Pod ("Mersive Wireless").

[[File:TouchPanel_sources_ATL3373.jpg |alt=Simplified Touch Panel Home Screen]]

==Sources==
===Room PC===
Use the wireless keyboard/mouse combo on the desk in the room to use the room PC. Choose the Conference account to sign into, which does not need a password. Please be sure to log off when you are done using the room PC, as the account is fully wiped when you log off, ensuring the next group using the room does not have access to anything you may have signed into.

===Laptop===
Connect your device to the HDMI cable coming out of the middle of the desk in the room to display your device to the room's display over a wired connection.

===Solstice===
This option will prompt you to look at the display in the room for instructions on how to display your device(s) to the room's display wirelessly. More specific instructions can be found [[ConferenceRooms/Solstice | here]]. Note that the IP addresses have been blacked out in the below photo for privacy reasons, but will show properly when you are physically in the room.

[[File:TouchPanel_solsticetv_ATL3373.jpg |alt=Solstice TV showing connection settings and options]]

==Shutting Down==
Please be sure to touch the "System Power" button and select "Power Off" when you are done using the room to save energy and give the next group using the room a clean slate. This will turn off the display for the room.

[[File:TouchPanel_power_ATL3373.jpg |alt=Simplified touch panel power options screen]]

InputMethodEditors

2026-03-23T17:33:02Z

Vsammeta: Added alt text to all the images

Input method editors or IMEs make it easier to type in languages (usually but not limited to East Asian ones) that are made up of thousands of characters that can't fit on a standard keyboard

=Adding an IME=
IMEs are a per user setting and can be added/removed/customized without any need for administrative privileges. To add an IME to your account please follow these instructions.

#Click the Windows button and type in settings. [[File:Settngs.png|500px |alt=Searching for Windows Settings in the Start menu]] 
#Click "Time & Language". [[File:Time&Language.png|750px |alt=Selecting Time&Language on the Windows Settings sidebar]] 
#Click "Language & region". [[File:Language&Region.png|750px |alt=Selecting Language & Region in the Time & Language menu ]] 
#Click "Add a language". [[File:AddLanguage.png|750px |alt=Clicking "Add a language" in the Menu]] 
#A new dialogue box will open. Type in the language you want to add and click the corresponding option below. [[File:Type&Save.png|300px |alt=Searching Chinese in the menu and selecting Simplified Chinese]] 
#Another dialogue box will open with a list of language features, check the options you want to enable, then click install. [[File:Install.png|300px |alt=Selecting specific language features to install]] 
#The new IME should now be setup. To configure an IME or access the help pages about it to learn how to use it, click the "get help" button at the bottom of the page. [[File:GetHelp.png |alt=Clicking Get Help in the Language menu]]

ConferenceRooms/TouchPanel

2026-03-23T17:26:45Z

Vsammeta: Added alt text to all images on the page

All [[ConferenceRooms | conference rooms]] in the [[Iribe/ConferenceRooms | Brendan Iribe Center]] and some in the [[ATL/ConferenceRooms | Atlantic Building]] come equipped with touch panels that can be used to control the video and audio source(s) and level(s) being used to project to the display(s) in the room.

==Basic Usage==
Assuming the room was previously in a 'shut down' state, the display will look like this when you first come up to it.

[[File:TouchPanel_initial.jpg |alt="IRB Touch Panel Start Screen]][[File:TouchPanel_Initial_ATL.jpg |alt=ATL Touch Panel Start Screen]]

Touch the panel as directed to start it up. This will turn on the display(s) for the room and lower the projector screens if any are present.

[[File:TouchPanel_bootup.jpg |alt=Touch Panel Bootup Loading Screen]]

Once the startup completes, you will see a number of different options depending on what the capabilities of the room are:

===[[Iribe/ConferenceRooms/Moderated | Moderated Rooms]]===
[[File:TouchPanel_seminar.jpg |alt=Moderated Room Touch Panel Source Screen]]

These (larger) rooms have a number of options for sources to display and multiple places to display them to. All of the source options available in the smaller conference rooms are also available in these rooms. The exact options on each moderated room's panel may vary, as the capabilities vary room to room.

Of note in these rooms specifically is the "Device Control" option at the top of the source/destination menu, which takes you to another menu where you can manage volume, and (in some rooms) lighting, microphones, and settings for other integrated devices such as the room's Blu-ray player, TV tuner, or room cameras. This is also where you mute or unmute the lectern mic, if there is one.

[[File:TouchPanel_devicecontrol.jpg |alt=Device Control options screen]]

===[[Iribe/ConferenceRooms/AutoAccept | Auto-Accept Rooms]]===
[[File:TouchPanel_autoaccept.jpg |alt=Auto-Accept Room Touch Panel Source Screen]]

These rooms have the ability to display an external device's screen wirelessly using [[Iribe/ConferenceRooms/Solstice | Solstice]], an external device's screen wired via HDMI, or the room PC's screen (the room PC is attached to the back of the display in the room).

===[[Iribe/ConferenceRooms/HuddleRoom | Huddle Rooms]]===
[[File:TouchPanel_huddle.jpg |alt=Huddle Room Touch Panel Source Screen]]

These rooms have the ability to display an external device's screen wirelessly using [[Iribe/ConferenceRooms/Solstice | Solstice]] or wired via HDMI. They do not have room PCs, so you must bring your own device(s).

==Common Options==
The three source options you will commonly choose from on these panels are "Solstice", "Laptop Device" (just "Laptop" on some panels), and "Room PC" (the third option only in non-huddle rooms).

In auto-accept and huddle rooms, the volume control for each of these sources can be found one you select that source. In moderated rooms, the volume control is on the Device Control menu, as mentioned above.

===Solstice===
[[File:TouchPanel_solstice.jpg |alt=Solstice options screen]]

This option will prompt you to look at the display in the room for instructions on how to display your device(s) to the room's display wirelessly. More specific instructions can be found [[ConferenceRooms/Solstice | here]]. Note that the room-specific details (IP address, room code) have been blacked out in the below photo for privacy reasons, but will show properly when you are physically in a room.

[[File:TouchPanel_solsticetv.jpg |alt=TV showing soltice connection configuration settings]]

===Laptop Device===
[[File:TouchPanel_laptop.jpg |alt=Laptop connection options screen]]

Connect your device to either the HDMI cable or VGA/aux cables coming out of the middle of the desk in the room to display your device to the room's display over a wired connection.

===Room PC===
[[File:TouchPanel_roompc.jpg |alt=Room PC connection options screen]]

Use the wireless keyboard/mouse combo on the desk in the room to use the room PC. Choose the Conference account to sign into, which does not need a password. Please be sure to log off when you are done using the room PC, as the account is fully wiped when you log off, ensuring the next group using the room does not have access to anything you may have signed into.

==Shutting Down==
Please be sure to touch the "Shutdown A/V System" button when you are done using the room to save energy and give the next group using the room a clean slate. This will turn off the display(s) for the room and raise the projector screens if any are present.

[[File:TouchPanel_shutdown.jpg |alt=Touch Panel shutting down loading screen]]

BitLocker/PersonalUse

2026-03-23T17:18:50Z

Vsammeta: Added alt text to all images on page

==Overview==
[[BitLocker]] can be used on fixed hard drives (i.e. internal to your computer) as well as on portable hard drives (i.e. USB). If you want to hold a secure, offline copy of files that you want to be preserved, [https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-to-go-faq BitLocker To Go] with a portable hard drive with data to be stored and a hardware token as the key can be used together to do so.

==Prerequisites==
* A portable hard drive formatted with an NTFS (preferred), FAT16, FAT32, or exFAT file system.
* Any desktop edition of Windows 11 '''except Home'''. BitLocker encryption is not included as a feature of Windows 11 Home, though encrypted drives can still be accessed via Windows 11 Home.
* A [https://www.yubico.com/product/yubikey-5-nfc YubiKey security token]. Other security tokens may work, but this procedure will focus on using a YubiKey.
* (optional) One or more blank USB flash drives at least 500MB in size, formatted with any Windows-writable file system.

==Initializing the YubiKey and hard drive==
# Log in locally to the machine you wish to use for encryption. This procedure will not work over [[Remote Desktop]].
# Download and install the [https://www.yubico.com/support/download/yubikey-personalization-tools/ YubiKey personalization tool]. Choose the first option ('''not''' the command line interface version). If you are using a UMIACS-supported workstation, please contact [[HelpDesk | UMIACS Staff]] to install this on your machine.
# Insert your YubiKey into any USB slot on the machine you wish to use for encryption and launch the personalization tool. Select Static Password at the top and then Advanced.
#: [[File:Yubikey1.png |alt=Setting up a static password in YubiKey]]
# Select Configuration Slot 2(*) and change the password length to 48 chars. Then click all three Generate buttons in order to generate the identities and the secret key and finally Write Configuration. '''Click cancel (do not save) on the prompt that pops up to save the .csv file, as this saves the Public Identity, Private Identity, and Secret Key in plaintext.''' Ensure that "YubiKey has been successfully configured" is output in the Results window, and then click Exit in the top right to exit the tool.
#: (*) NOTE: The YubiKey token has two configuration slots. These are nearly functionally identical, but the key difference for the sake of this document is that Slot 2 requires you to hold the sensor on the device down for 2 seconds in order to activate, whereas Slot 1 instantaneously activates when you touch the sensor. We recommend using Slot 2 so that you do not mistakenly emit the password configured below. If you are already using Slot 2 on your YubiKey, slot 1 can still be used.
#: [[File:Yubikey2.png |alt=Advanced Configuration of YubiKey static password]]
# Insert your portable hard drive into any USB slot and search BitLocker in the start menu to open the Manage BitLocker control panel item.
#: [[File:Bitlockertogo1.png |alt=Opening Bitlocker in the Windows Start menu]]
# Expand Removable data drives - BitLocker To Go by clicking the arrow on the right and then click Turn on BitLocker on the portable hard drive.
#: [[File:Bitlockertogo2.png |alt=Turning on BitLocker in the BitLocker drive encryption window]]
# BitLocker will initialize for a few seconds and then pop up with a menu asking how you want to unlock the drive. Choose Use a password to unlock the drive and physically touch the YubiKey's sensor for 3 seconds to get it to output the password you configured previously in each password field.
#: [[File:Bitlockertogo3.png |alt=Entering a password for Bitlocker encryption using YubiKey]]
# The menu should automatically advance to asking how you want to back up the recovery key. '''The recovery key is the only way to get into the encrypted drive if you lose the YubiKey.''' We strongly recommend the Save to a file option for reasons that we will get into. If you choose to print out the recovery key, store it somewhere safe such as a safe deposit box.
#: [[File:Bitlockertogo4.png |alt=Saving a drive recovery key to a file in the Backup menu]]
# Plug in your first USB flash drive and choose to save the file on it.
#: [[File:Bitlockertogo5.png |alt=Saving the recovery key to the flash drive]]
# If you previously had anything saved on your portable hard drive before formatting it as part of the prerequisites, choose to Encrypt entire drive. This is the safest way to ensure everything on the drive is protected. Otherwise (if this is a brand new blank drive), leave the default option of Encrypt used disk space only.
#: [[File:Bitlockertogo6.png |alt=Menu for choosing whether to encrypt whole drive or only the part that is used]]
# Leave the default of Compatible mode to better ensure the files on the encrypted drive will be readable from other devices (which may be running earlier versions of Windows) if need be.
#: [[File:Bitlockertogo7.png |alt=Choosing Compatible mode in the encryption mode menu]]
# Continue through the menus and finally choose to Start encrypting.
#: [[File:Bitlockertogo8.png |alt=Starting the drive encryption from the menu]]
# BitLocker will begin encrypting and a separate window will pop up to show you the status. This step will either take a long time if you chose to Encrypt entire drive, or complete very quickly if you chose to Encrypt used disk space only. You do not have to wait for encryption to complete to proceed with the remaining steps, but you do need to wait for encryption to complete before disconnecting the portable hard drive from the machine.
#: [[File:Bitlockertogo9.png |alt=Encryption progress bar and pausing window]]
# Download the '''portable version''' of [https://keepassxc.org/download/ KeePassXC Password Manager]. Then extract it to your USB flash drive.
#: [[File:Keepassxc0.png |alt=Extracting KeePassXC files from the ZIP archive]]
# Launch KeePassXC.exe from the extracted folder and choose to Create new database.
#: [[File:Keepassxc1.png |alt=KeePassXC home page]]
# Choose descriptive phrases for the Database Name and Description and click Continue.
#: [[File:Keepassxc2.png |alt=Entering a name and description for KeePassXC database]]
# Leave all the options on the next menu at default unless you know what you are doing and have good reason to change them and click Continue.
#: [[File:Keepassxc3.png |alt=Encryption settings window]]
# '''Choose a memorable password''' and click Done.
#: [[File:Keepassxc4.png |alt=Entering a password on the encryption window]]
# Choose to save the file on your USB flash drive.
#: [[File:Keepassxc5.png |alt=Saving the encryption file to a USB flash drive]]
# In your newly created database, choose to Add a new entry from the top pane.
#: [[File:Keepassxc6.png |alt=Adding a new entry to the created database]]
# Make the Title something memorable. Open the recovery key text file saved earlier, copy the Identifier into the Username field and the Recovery Key into the Password/Repeat fields. Leave some descriptive text in the Notes section to help clarify which fields are which of the BitLocker attributes. Click OK and then exit out of the database back on the main menu.
#: [[File:Keepassxc7.png |alt=Finding the identifier and key in the recovery key text file]][[File:Keepassxc8.png |alt=Adding the identifier and key in the Add Entry KeePassXC Window]]
# '''Delete the recovery key text file permanently (NOT the database file you just created).''' If you leave the recovery key text file on the USB drive, your encrypted portable hard drive is only as secure as that USB flash drive is, rather than needing both the USB flash drive and the password for the database to access the recovery key.
#: [[File:Cleanup1.png |alt=Deleting the recovery key text file]]
# (Optional) Copy the contents of the first USB flash drive onto one or more additional USB flash drives to safeguard against loss of both the YubiKey and any single USB flash drive.
# Clearly label the USB flash drive(s) and store them somewhere secure, such as a safe deposit box. If you have multiple USB flash drives, store them separately.
# Your portable hard drive is now securely BitLocker-encrypted, with one or more USB drives serving as access to the recovery key.

==Unlocking the drive==
===Unlocking the drive with the YubiKey===
To later unlock the drive from the same or a different computer:
# Physically plug the drive and YubiKey in. Click on the notification you get in the notification area, which will open the unlock menu.
#: [[File:Cleanup3.png |alt=Bitlocker protected drive plugged in notification]][[File:Cleanup4.png |alt=Bitlocker password entry prompt]]
# Physically touch the YubiKey's sensor for 3 seconds to get it to emit the password. It will automatically unlock afterwards.
#: [[File:Cleanup5.png |alt=Password entered automatically by touching the YubiKey]]
# The drive is now unlocked until it is unplugged again.

===Unlocking the drive with the recovery password===
To later unlock the drive from the same or a different computer if you are not in possession of your YubiKey:
# Physically plug one of your USB flash drives containing a database with the recovery key in.
# Open the recovery database using the password you set for it and then copy the password for the entry inside of it. This is the recovery key.
#: [[File:Cleanup2.png |alt=Copying Password from KeePassXC database]]
# Physically plug the drive in. Click on the notification you get in the notification area, which will open the unlock menu.
#: [[File:Cleanup3.png |alt=Bitlocker protected drive plugged in notification]][[File:Cleanup4.png |alt=Bitlocker password entry prompt]]
# Click on More options and then Enter recovery key.
#: [[File:Cleanup6.png |alt=Clicking enter recovery key in the password entry prompt]]
# Enter the copied recovery key from your database file and click Unlock.
#: [[File:Cleanup7.png |alt=Entering the recovery key into the key window]]
# The drive is now unlocked until it is unplugged again. If you have lost your YubiKey, we strongly recommend buying a new YubiKey, decrypting BitLocker on the drive, and then repeating the initial procedure to re-encrypt it with the new YubiKey.

==Extra configuration==
===Set up Auto-unlock===
BitLocker has the ability to auto-unlock an encrypted drive for a specific user(s) when plugged into a specific computer(s) if so desired. This creates an entry in the Windows registry on each computer's local data storage for each user you turn it on for. The entry stores a copy of the volume master key for the encrypted drive that is itself encrypted with a combination of the user's username and either the user's password, if there is one, or computer credentials.

'''We do not recommend turning this on as it undermines the concept of separation of the unlock methods for the drive from any specific computer.''' If you do want to turn this on, please ensure the user account(s) that you turn it on for are secure (i.e. have sufficiently complex passwords) and the computer(s) that you turn it on for are in secure locations.

To enable auto-unlock for a drive (per user per computer):
# Insert your already-encrypted portable hard drive into any USB slot, unlock it, and search BitLocker in the start menu to open the Manage BitLocker control panel item.
#: [[File:Bitlockertogo1.png |alt=Searching for Manage BitLocker in the start menu]]
# Expand Removable data drives - BitLocker To Go by clicking the arrow on the right and then click Turn on auto-unlock on the portable hard drive.
#: [[File:Bitlockertogo10.png |alt=Clicking on Turn On Auto-unlock in the Bitlocker management window]]
# The drive will now auto-unlock when plugged into the computer you are currently on for your user account only. You can turn it off again by clicking on the Turn off auto-unlock option that appears in the same location after clicking the turn on button.

===Use an encrypted drive as a backup drive===
One of the more useful things you may want to do with a BitLocker-encrypted portable hard drive is set up automatic backup to it. This can be done by following the procedure on [[Windows Personal Backups | this page]], though please note you will need to unlock the drive each time when plugging it into a computer, or have configured auto-unlock for that computer, before it is accessible by backup software.