Umpio storage space | HELPDESK

Umpio storage space

The Umpio storage space is a secure network folder for class 1R data under the data classification model (in Flamma, requires login). Umpio is accessed via a remote desktop called Securedesk. Access is secured by two-factor authentication.

Umpio is a secure online storage service for high-risk research data. It is not necessary to transfer all data to Umpio, but depending on your working methods, it may be advisable.

Classify your data / research data in accordance with the data classification model. Then assess whether Umpio is a suitable solution for handling the data in question:

  • Data classified as 1R may be processed using the Umpio service. 
  • Other data sets, i.e. data classified as 2A–5W, can be stored in the group directory (P drive) or, depending on the nature of the data, in another suitable storage location.

Looking for other instructions or cannot find what you were looking for? Go back to “Saving and sharing information” landing page.

    Ordering the Umpio service

    If your group does not yet have a directory in the Umpio service, do the following:

    There is currently no charge for using the service; the WBS code is collected for statistical purposes. Should this situation change, customers will be informed in good time.

    Using the Umpio service

    When you have a Umpio storage space, do the following:

    See the “Detailed help” tab for more detailed instructions.

    Terms

    VDI (Virtual Desktop Infrastructure) is a virtual desktop that is accessed by either the Omnissa client program or a browser. Various desktops are available in the VDI service, with Umpio intended for storing sensitive data. It is recommended that virtual desktops are used with Omnissa Horizon Client, which is installed on computers administered by the University of Helsinki. Read more about virtual desktops in general in the VDI instructions.

    The securedesk.helsinki.fi address is the server address of the virtual desktop environment, where the Umpio service is available. 

    Umpio (W11) is a virtual desktop (VDI) that can be used to store files classified as class 1R under the data classification model. In Umpio, there is a limited number of software available and network connections are restricted, too: for example, it is not possible to use a browser in Umpio.

    Ordering the Umpio service

    If your group does not yet have a directory in the Umpio service, do the following:

    1. Place an Umpio order through the IT Helpdesk.
      • In the order, indicate the following:
        • The desired amount of storage space.
        • The group(s) that can administer and use the Umpio storage space that is being ordered. Use the IAM tool to check which groups are suitable or, if necessary, create a new group.
          • NOTE: The group owner is not automatically a group member, so if you want the owner to be able to use Umpio, add them as a member.
        • There is currently no charge for using the service; the WBS code is collected for statistical purposes. Should this situation change, customers will be informed in good time.
           
    2. When you receive a response to your support request, stating that the Umpio storage you ordered has been created:
      • Try logging in to the VDI virtual desktop environment at securedesk.helsinki.fi with Omnissa Horizon Client or a web browser. (For more detailed instructions, see “Using the Umpio service with Horizon Client”)
      • Note that the address is different from the address of most other VDI virtual desktops, which is vdi.helsinki.fi.
      • From the virtual desktops, select the Umpio desktop.
      • Check that your Umpio storage space is displayed with the disk drive letter U.

    Using the Umpio service with Horizon Client

    Using the Umpio service with Horizon Client is the recommended option.

    On your workstation, open the Omnissa Horizon Client application. On a University computer, you can open the application by, for example, selecting Open Virtual Windows in the University menu.

    If the application is not yet installed (it is a question of a home computer, for example), you can also download the application with a web browser from securedesk.helsinki.fi > select Install Omnissa Horizon Client.

     Configuring the server

    You only need to do this the first time.

    • Start configuring the new server in Horizon Client’s Add Server menu. (1)
    • In the new window, enter the address securedesk.helsinki.fi. Click Connect.
    • The securedesk.helsinki.fi icon appears in the application’s start menu (2).

     

    Logging in to the server

    • Enter your username using the short form (e.g. rkeskiva) and your password. Click Login.

    Please note that the login process will include two consecutive authentication dialogues, the first of which is an MFA authentication notification. The actual authentication is done after entering the credentials. 

    After entering the credentials, MFA authentication is performed by using the method you have chosen. If necessary, you can read more about MFA authentication in separate instructions.

     

    After successful login, the virtual desktops available to you will open.

    • Double-click the Umpio icon to access the desktop.

     

    The Umpio storage space appears in the File Explorer window (This PC) as the U: drive, and the Umpio backup appears as the V: drive.

     

    Using the Umpio service with a browser

    If it is not possible to use Horizon Client, you can also use Umpio with a browser. 

    Please note that the login process will include two consecutive authentication dialogues, the first of which is MFA authentication notification. The actual authentication is done after entering the credentials. 

     

    After entering the credentials, MFA authentication is performed by using the method you have chosen. If necessary, you can read more about MFA authentication in separate instructions.

    After successful login, the virtual desktops available to you will open.

    • Click the Umpio icon to access the desktop.

     

    Securedesk settings and using the Umpio storage space

    If you plan to transfer or copy files between your computer and the virtual workstation, check the file sharing settings as follows:

    If you are using Horizon Client on a Windows computer:

    • Select Sharing behind the cog icon and click the Add button to add the folders you want to share from a local drive.
    • Also tick Share your local files and Allow access to removable storage.
       

    If you are using Horizon Client on a Mac computer:

    • Select Omnissa Horizon Client -> Preferences -> Sharing tab from the top menu and click the Add button to add the folders you want to share from a local drive. 
    • Also tick Share your local files and Allow access to removable storage.

    Please note: The Umpio storage space appears as the U: drive in the File Explorer window (This PC), and the Umpio backup appears as the V: drive.

    How to make a USB stick or external hard drive appear on a virtual machine

    Note! DO NOT USE the USB Devices button at the top of the Horizon window to connect storage devices. This may be recommended for transferring individual or small documents. Transferring files using the aforementioned function is extremely slow.  
    Here’s a faster way:

    • Connect the USB stick to the physical computer. 
      • Check which drive letter (e.g. D:) the USB stick is assigned.
    • Open the Umpio virtual machine. Wait patiently for the remote desktop to appear. 
    • Close the Umpio remote desktop window using the cross button in the top corner. 
      • Do not use the Logoff button, but simply close the window! 
      • Confirm by selecting “Disconnect desktop?” > Yes. 
    • After a short while, reopen Umpio from the Horizon Client.
    • The USB stick will now appear in the Umpio remote desktop’s File Explorer under This PC > Network Locations.
      • It will appear in the list as D* is yourcomputername T:** (e.g. D is LH4-123-456 (T:))
        *) or another drive letter from your physical machine; you can see the correct letter on your physical machine.
        **) may also be replaced by another random available drive letter, such as Z: (as the Z drive is not available in Umpio).

    FAQ

    Q: Why is the use of Horizon Client recommended even if there is a browser option?
    V: The browser option has some technical limitations, regarding the size of the files to be transferred, for example. In addition, experience has shown that browser updates may occasionally cause incompatibility problems.

    Q: Does the user need to take any action to ensure that their data is erased from the system?
    A: No, they do not. The data will be automatically erased after it has been removed from the backups.

    Q: Can the user (accidentally or intentionally) remove data from backups?
    A: No, they cannot.

    Q: Can the administrator (accidentally or intentionally) remove data from backups?
    A: No, they cannot. Administrators have the ability to delete everyone’s data, but never individual pieces of data. Typically, the deletion of backups is done at the end of the storage system’s life cycle.

    Q: How long are backups of Umpio (both home and group disk spaces) retained?
    A: 6 months.

    Q: If a group no longer needs storage space in Umpio, should they do something?
    A: The group should request deletion of its storage space from IT Helpdesk. Helpdesk will forward the deletion request to the capacity services who will delete the storage space.

    Q: If a group no longer needs the group disk space, should they do something?
    A: The group should delete its storage space with the Ryhti group disk space management tool. 
    If a group no longer needs the IAM group, the group can be deleted using the IAM group management tool.

    Q: Can a student use Umpio?
    A: The student can use Umpio if they purchase a Microsoft A5E license upgrade (instructions in Flamma, requires login).

    Q: Can someone from outside the University of Helsinki use Umpio? 
    A: If necessary, a non-university member can use the Umpio if they get an UH user account and purchase a Microsoft A5E licence upgrade.
    After that, the person in charge of the group must add this user account to the IAM group (see separate instructions for group management).

    Give feedback

    The instructions site of the University of Helsinki's IT Helpdesk helps you with IT-related issues related to your work. Let us know how we can improve our instructions. We greatly appreciate your feedback!

    How would you improve these instructions?
    Back to top