Getting Started as a Non-Employee Off-Site Fermilab User

An off-site Fermilab user is a person affiliated with Fermilab or with one of the experiments in which Fermilab participates, but who is not employed by Fermilab, and whose work is currently and normally conducted off-site, typically at a university or another institution. Offsite users frequently require use of Fermilab computing resources.

Procedure to become a valid Off-site Fermilab User

Having a Fermilab Visitor ID (VID) number is prerequisite to obtaining computing privileges. Therefore, for your convenience, we have combined the processes for getting both of these items.

The procedure focuses on getting you authorized to use computing resources; your VID number is generated behind-the-scenes as part of the process. At some point your VID's expiration date will approach and you will be automatically notified by email that you must either renew it or lose your computing privileges. The same form and procedure are used to get started and to renew.

1. You must read the Fermilab Policy on Computing before Fermilab will grant you computing privileges.
    
2. Choose a computing username for yourself, and have an alternate in mind in case your first choice is already used. The username you choose will be used for your FNAL email address, for your Kerberos principal and for accounts on any computers administered by the Computing Division. It will be your permanent username at Fermilab. See the Guidelines for choosing a Kerberos Principal.
    
3. Fill out the form Apply to Use Fermilab Computers from Off-Site for Non-Employees . You will need to enter your desired username.
     
4. Unless you plan to use a CRYPTOCard exclusively, install Kerberos-aware software on your computer. See the Strong Authentication manual, chapter 6 and either part IV or part V.
     
5. An email from the Computing Division Help Desk should arrive within a week, saying that your Kerberos Principal has been created. If requested, you'll receive an email when your CRYPTOCard is ready; coordinate with your experiment or division to have it sent to you.
    
6. If you initially choose not to request a CRYPTOCard, but find later that you need one, use the form Request Additional Kerberos Items.