Skip to content

CREATE TRE Guides

Table of Contents

CREATE TRE Egress Portal Guide

1. Accessing the Egress App

To request data egress please access any of the researcher's VMs associated with your project and click on the “Data_Egress_Request” icon.

2. Egress Request Process

  1. Copy the files you intend to egress to the project directory on your TRE project Virtual Desktop.

{EgressApp}

  1. Launch the app and click on Show File Picker to select the desired file.

{EgressApp}

  1. Complete the About this data… section providing all necessary details and then hit Submit Request.

{EgressApp}

  1. Now you can see the progress and status of the egress request.

{EgressApp}

3. Egress Approval and Rejection Process

  1. The egress authority group members will receive an email notification of the new data egress request.

{EgressApp}

  1. Log in to the TRE project, launch the Egress App, and under the tasks tab a list of egress requests along with an Approve/Reject button will be displayed.

{EgressApp}

  1. Review the egress requested file!. If it meets the criteria, Approve it, or Reject it with comments. An email containing a Verification Pin valid for 15 minutes will be sent to the egress authority group members.

{EgressApp}

  1. Verify the pin to confirm approval.

{EgressApp}

{EgressApp}

  1. The egress status will change to Complete.

{EgressApp}

  1. The user who requested the egress will receive a confirmation email.
  2. The egressed file will be copied to the RDS share accessible outside the TRE project (link will be provided separately).

{EgressApp}

{EgressApp}

4. Access Logs

  1. Navigate to the Logs tab. Here you'll find the Audit logs containing detailed records of all egress requests offering transparency and traceability.

{EgressApp}

Thank you for taking the time to review this guide. We are committed to ensuring that you have a smooth and efficient experience. In case of any challenges, uncertainties, or issues encountered while following this guide do not hesitate to reach out for support. For immediate assistance please contact: - Email: michal.rosiek@kcl.ac.uk - Support Team Email: support@er.kcl.ac.uk

CREATE TRE Ingress SSH/SFTP Guide

1. Obtaining an SSH Key

1.1 Windows

  1. To generate an SSH key on Windows, use WinSCP which includes PuTTYgen:

  • Download WinSCP from https://winscp.net/eng/download.php, for KCL laptops you can find it in the software centre.

  • Install WinSCP, including PuTTYgen.

  • Launch PuTTYgen from the Start menu or WinSCP tools.

    {PuTTYgen}

    {PuTTYgen}

  • Click Generate and move your mouse over the blank area.

    {PuTTYgen}

  • Create and save a passphrase for your keys!.

    {PuTTYgen}

  • Save the public and private keys!.

  • Share the public key with us via email support@er.kcl.ac.uk including your TRE project name.

    {PuTTYgen}

Warning

Only share your PUBLIC key. Never share your PRIVATE key with anyone!

1.2 macOS and Linux

  1. To generate an SSH key on macOS and Linux, use Terminal:

  • Open Terminal.

  • Run ssh-keygen -t rsa -b 4096.

  • Accept the default file location or specify a different one.

  • Enter a passphrase for your SSH key!.

  • The SSH keys will be saved in the specified or default ~/.ssh directory.

    {MacOS/Linux}

  • Share your public key by running cat ~/.ssh/id_rsa.pub and email it to us (support@er.kcl.ac.uk) with your TRE project name.

Warning

Only share your PUBLIC key. Never share your PRIVATE key with anyone!

2. Installing SFTP Clients

2.1 Windows

  1. Use WinSCP as an SFTP client:

  • Launch WinSCP and open the Login dialog.

    {WinSCP}

  • Fill in the Host name tre-sftp.er.kcl.ac.uk

  • Fill User name (this will be provided).

  • Click Advanced... and go to SSH > Authentication.

  • Select ... and navigate to your private key file.

    {WinSCP}

  • Click Login to start the SFTP session.

    {WinSCP}

2.2 macOS

  1. Install Cyberduck for macOS:

  • Download Cyberduck from https://cyberduck.io/download/.

  • Install Cyberduck and open it.

  • Click Open Connection and select SFTP.

  • Enter the server details and select your private key.

2.3 Linux

  1. Use the built-in SFTP client in Terminal:

  • Open Terminal.

  • Run sftp -i /path/to/private_key user@hostname.

  • Replace the placeholders with your private key path, username, and hostname.

  • Use commands like get, put, and to view current content ls to transfer files.

Note

  1. The private key file provided here should match the public key you've previously sent for access setup.
  2. We can incorporate an additional layer of security to the SFTP account by specifying the source IP address if required.
Document owner ResOps
Review signoff TRE/ResOps Lead
Review frequency Annual
Last review date 26/9/24
Reviewed build 6ae1e20e