Skip to content

Security Best Practices Guide – Cenaero HPC Infrastructure

To ensure the security of the computing infrastructure and the protection of your data, we ask that you adhere to the following security rules when using our resources.

Identity and Password Management

Your account security is your responsibility.

  • Complexity: Use long passwords. Use long passwords (minimum 12 characters) combining uppercase/lowercase letters, numbers, and special characters. On Lucia :

    • Password is valid for 365 days, after this period, a new password must be set;
    • You cannot reuse any of your last 3 passwords;
    • After 5 failed attempts, your account will be locked for 10 minutes.

  • Uniqueness: Never use the same password for this account as you do for your other services (email, social media, etc.).

  • Confidentiality: Never share your password, even with your colleagues. Our system administrators will never ask for your password via email, phone, or ticket.
  • Rotation: Change your password regularly, especially if you suspect any compromise.

Access Security (SSH Keys & MFA)

For remote connections, we prioritize the use of SSH keys over passwords (see SSH Key Authentication into Non-Academic User section).

  • Key Generation: If you use SSH keys, generate them locally and never share your private key (id_rsa or id_ed25519);
  • Key Protection: Protect your private key with a passphrase;
  • Revocation: If you lose your key or if your computer is compromised (hacked, stolen), contact the Lucia's support immediately to revoke your access.

Risky Behaviors and Social Engineering

  • Phishing: Be vigilant against emails or messages asking you to click on a suspicious link or provide your credentials. Always verify the sender.
  • Do not share credentials: It is strictly forbidden to share your credentials or keys with third parties (other users, non-approved external vendors). Each user is responsible for their own actions.
  • Unauthorized Software: Do not install software from unverified sources on your environment. Use only the modules and environments available via module managers.

Data Protection

  • Sensitive Data:

    • Do not store sensitive data on shared storage systems without prior specific agreement.
    • Linux Best Practice (rwx Permissions):
      • Check who can access what: check files/directories read ®, write (w), and execute (x) permissions.
      • Keep access strictly necessary: Never leave a confidential file accessible to "Others" (everyone). By default, restrict permissions to the absolute minimum required.

  • Backup: The HPC infrastructure is not a personal backup system. Ensure you keep copies of your critical data on your own systems.

Incident Reporting

If you suspect abnormal activity on your account (login from an unknown location, files modified without your action, etc.):

  • Change your password immediately;
  • Contact technical support via the ticketing system or at: it@cenaero.be;
  • Do not attempt to resolve the issue alone if you suspect an intrusion.