Client User Quickstart

This Client User Manual helps you get started with the Cloud Services Portal and is aimed at users of customers. It provides you with useful tips and information. Furthermore, you will learn step-by-step how to, for example, create a new user, use the integrated S3 Service Panel, or create additional OpenStack projects.

Important

The menu items displayed depend heavily on your order and permissions and may therefore vary. User permissions for the Cloud Services Portal are located in Organisation Management. All other permissions are located in the respective panel sections, such as Quota, Usage dashboard, OpenStack or S3 Storage Management. If you have any questions, please contact your Enterprise Partner.

User Interface Overview

In the Cloud Services Portal, you manage your cloud services from a central location. Cloud services here refer to OpenStack Projects (Accounts) and User Management (IAM).

1. This area shows the name of the currently logged-in user and the version of the Cloud Services Portal currently in use. The user can change their user account settings and set a new password. The Sign-Out menu, via which you can correctly log out, and the documentation are also located here.
2. This area displays the name of the client you are currently managing.

3. This section contains the navigation area with various elements that structure the Cloud Services Portal user interface. The main items are grouped by function. The management of user permissions for the Cloud Services Portal is on the Dashboard Management page. The following pages are available in the navigation menu:

   • Organization Management. In this menu item, you can add or remove new user accounts for users and manage the Cloud Services Portal permissions for users. You can also reset a user's password here. User accounts allow other users to log in to the Cloud Services Portal as well.
   • Services. Here, under Manage services, you can see the list and status of your Cloud Services (e.g., OpenStack). For a service to be usable, its status must be ACTIV.
   • My Settings. Here you will find your user and organization data. You can also reset your password here.
   • S3 Object Storage. With the help of this panel, you manage your S3 storage and objects. You can add or remove new buckets, upload or download objects. You can also manage your EC2 Credentials for accessing the buckets.
   • Dashboard Management. Here you centrally manage all permissions of the Cloud Services Portal using User Profiles.
   • Quota. In this main menu, you have an overview of the configured quotas for your available OpenStack resources, such as the number of allowed OpenStack projects, Compute, Volumes, and Network. For easy management of your quotas, you can create profiles, which give you full control over your project resources.
   • Usage dashboard. Here you have access to your USAGE data. Two predefined reports, Previous month and Current month, list all USAGE data for the respective period. With the Custom Usage Query function, you can create any individual queries. An integrated export function allows you to save the report data locally.
   • User error. Should an error occur unexpectedly in the Cloud Services Portal, the Error detection function automatically saves the error under this item. The entry stores important information about the error's occurrence for analysis. The error's status indicates when it was resolved.
   • OpenStack. With the functions under this panel, you can autonomously add or remove OpenStack projects and manage their permissions.

Note

Throughout this document, instructions will be provided on how to perform the most common daily tasks. Users will typically be directed to open one of the sections in the navigation and click on one of the controls available there. If the respective navigation item or the control concerned cannot be found in the panel, the feature is very likely disabled for the user in question. In addition, Enterprise Partners can disable some advanced features to make your customer panel simpler and more user-friendly. If you require one of these advanced options, you should contact your Enterprise Partner.

Filter Functions

Most pages in the Cloud Services Portal that display a list have a filter function at the top of the screen, which searches across all columns when a search term is entered and filters accordingly.

Logging into the Cloud Services Portal

To log in, you need an activated account, which includes the following information:

• Identity Provider - This is the Enterprise Partner Name (Realm)
• User Name / Email Address - With which you authenticate
• Password - Your initial user password, which you must change upon first login

The login process differs between a new and an existing user. Please follow the appropriate steps:

New User Login

For the first login of a newly created user, the following steps are usually required, depending on the policy:

• Please click the following link in your browser to log in.

[SSC-Cloud Services Portal URL Address]

• Next, enter your Username and Password and click Log in.
• You will then be prompted to change your password.
• Finally, please configure 2-Factor Authentication - for this, you need an Authenticator app on your smartphone. Please follow the instructions on the screen.

Scan the QR code with the Mobile Authenticator App, and then enter the generated code.

Upon successful login, you will then be on the overview page in the Cloud Services Portal.

Existing User Login

To log in to the Cloud Services Portal, please proceed as follows:

• Open your browser and enter the Cloud Services Portal address you received with your documents, or click the link below.

• You will now be automatically redirected to the Authentication-Login Mask of the Identity and Access Management System.

• Please enter your User Name or the registered Email Address and your Password here.
• Then click Log in.

Cloud Services Portal Address: [SSC-Cloud Services Portal URL Address]

Warning

To counteract phishing attempts, please check the URL of the login window. If the URL is correct, you will see the name of your Identity Provider and the DOMAIN .ewcs.ch after realms/.

Note

Please observe the password policies.

• You will then be on the main menu of the Cloud Services Portal.

Logging out of the Cloud Services Portal

Warning

Since a successful login to the Cloud Services Portal automatically authenticates you for all your registered Cloud Services (SSO), it is important to also log out correctly afterwards.

To do this, please proceed as follows:

• In the upper right corner, next to your User Name, click on the small arrow.
• Click on Sign Out there.

Change Password

To reset the password for your user, please proceed as follows:

• Navigate to My Settings >> Change password on the left and enter the new password in the two fields.
• Confirm your entry by clicking the Change password button.

Note

Please observe the password policies.

• A confirmation message will appear.

Password Policies for Cloud User Accounts

The password for cloud user accounts must meet at least the following conditions:

Condition	Qty
Password Length (min)	12
Special Characters	1
Numbers	1

Note

To meet these criteria, the password does not necessarily have to consist of a cryptic string of characters. Tip: Think of a few words, which you combine with hyphens, for example, and supplement with a few numbers. Example: Ab-in-die-Cloud-2019 would meet the criteria.

The following table describes the characters allowed by the password policy that can be applied to user accounts:

Property	Requirements
Allowed Characters	- A – Z a - z - 0 – 9 @ # $ % ^ & * - _ ! + = - [ ] { } : ‘ , . ? / == ~ “ ( ) ;
Forbidden Characters	- Unicode characters - Spaces - User Name

Multiple Cloud Services Portal Sessions

If you wish to log in to the Cloud Services Portal multiple times, you can do so either in different browsers (e.g., 1st session Chrome, 2nd session Firefox), or in a "new incognito window".

Note

Multiple logins in the same browser are NOT supported and will result in an error message (e.g., Forbidden (403) CSRF verification failed. Request aborted.)

---