Differences

This shows you the differences between two versions of the page.

--- security:addhealth [2026/07/08 18:40] – [Add Health Data Security] jnilsson
+++ security:addhealth [2026/07/08 22:45] (current) – jnilsson
@@ Line 49: / Line 49: @@
   * Supporting UCI and UNC incident response activities.
+===== Onboarding procedure =====
+When a new user is confirmed and approved by the PI:
+  - Notify System administrators, who will create the user account
+  - Authentication can be configured for new user accounts one of two ways:
+    - Provide an [[:howto:sshkey|SSH key]] to [[socit@uci.edu]]
+    - Schedule an on-boarding meeting (virtual or in-person) during which a password and MFA token will be configured.
+  - Accounts will be set to expire after 1 year. Annual confirmation of current active users is required to re-enable accounts.
+===== UCI Add Health server details =====
+^ Hostname | addhealth.socsci.uci.edu |
+^ IP address | 128.195.247.155 |
+^ Access Protocols | [[:howto:linux_basics#ssh|SSH]] |
+^ Session timeout | 30 minutes |
+==== Firewall Restrictions: Allowed Network Access ====
+Only connections from on-campus or from the [[https://www.oit.uci.edu/services/security/vpn/|Cisco AnyConnect VPN]] will be allowed to connect to the server. If you are off-campus or on a UCI-WiFi network, you must first connect to the VPN before attempting to connect to the Add Health server.
+Firewall restrictions in place on the server only allow connections from these subnets:
+^ Subnet name ^ CIDR ^
+| Campus Network 128.195 | 128.195.0.0/16 |
+| Campus Network 128.200 | 128.200.0.0/16 |
+| VPN | 172.23.0.0/20 |
+===== Maintenance and Backup Schedule =====
+^ Maintenance/Security updates | Monthly, on the 1st Monday, 9am-11am |
+^ Full System Backup | Weekly on Sunday |
+^ Differential file-level backup | Nightly |