Umpio storage space

The Umpio storage space is a secure network folder for high-risk sensitive data. It can only be used with a virtual computer using two-factor authentication.

Umpio was designed as the processing environment for materials requiring special protection, such as business secrets, inventions, labelled or identifiable special categories of personal data and authoritative information with categorised protection level, instead of the usual network drives and workstations.

It is not necessary to transfer all non-public materials to Umpio, but it may be advisable, depending on the working methods. The line is drawn case-by-case; should the materials have the potential to cause damage or considerable harm to the University or its reputation, to an external owner of the materials or to a person identifiable from the materials, if made public or accessed by unauthorised individuals, they belong in Umpio.

 

Looking for other instructions or cannot find what you were looking for? Go back to “Saving and sharing information” landing page.

    Ordering the Umpio service

    If your group does not yet have a directory in the Umpio service, do the following:

    Please note also: The pricing of the storage space corresponds to the price list of the group disk space, so make sure that you have your unit’s permission for the order. You can check this from your unit’s service coordinator, for example (the list can be found in Flamma).

    Using the Umpio service

    When you have a Umpio storage space, do the following:

    • Log in with VMWare Horizon Client or a web browser at securedesk.helsinki.fi
    • From the virtual desktops, select the Umpio desktop.
    • Save your files in the Umpio storage space on a disk drive indicated by the letter U.

    See the “Detailed help” tab for more detailed instructions.

    Terms

    VDI (Virtual Desktop Infrastructure) is a virtual desktop that is accessed by either the VMware client or a browser. Various desktops are available in the VDI service, with Umpio intended for storing sensitive data. It is recommended that virtual desktops are used with VMWare Horizon Client, which is installed on computers administered by the University of Helsinki. Read more about virtual desktops in general in the VDI instructions.

    The securedesk.helsinki.fi address is the server address of the virtual desktop environment, where the Umpio service is available. 

    Umpio is a virtual desktop (VDI) that can be used as a network folder for storing particularly sensitive (high-risk) data. In Umpio, there is a limited number of software available and network connections are restricted, too: for example, it is not possible to use a browser in Umpio.

    Ordering the Umpio service

    If your group does not yet have a directory in the Umpio service, do the following:

    1. Place an Umpio order through the IT Helpdesk.
    2. When you receive a response to your support request, stating that the Umpio storage you ordered has been created:
      • Try logging in to the VDI virtual desktop environment at securedesk.helsinki.fi with VMWare Horizon Client or a web browser. (For more detailed instructions, see “Using the Umpio service with VMWare Horizon Client”)
      • Note that the address is different from the address of most other VDI virtual desktops, which is vdi.helsinki.fi. 
      • From the virtual desktops, select the Umpio desktop.
      • Check that your Umpio storage space is displayed with the disk drive letter U.

    Using the Umpio service with VMWare Horizon Client

    Using the Umpio service with VMWare Horizon Client is the recommended option.

    On your workstation, open the VMWare Horizon Client application. On a University computer, you can open the application by, for example, selecting Open Virtual Windows in the University menu.

    If the application is not yet installed (it is a question of a home computer, for example), you can also download the application with a web browser from securedesk.helsinki.fi > select Install VMWare Horizon Client.

     Configuring the server

    You only need to do this the first time.

    • Start configuring the new server in Horizon Client’s Add Server menu. (1)
    • In the new window, enter the address securedesk.helsinki.fi. Click Connect.
    • The securedesk.helsinki.fi icon appears in the application’s start menu (2).

     

    Logging in to the server

    • Enter your username using the short form (e.g. rkeskiva) and your password. Click Login.

    Please note that the login process will include two consecutive authentication dialogues, the first of which is an MFA authentication notification. The actual authentication is done after entering the credentials. 

    After entering the credentials, MFA authentication is performed by using the method you have chosen. If necessary, you can read more about MFA authentication in separate instructions.

       

      After successful login, the virtual desktops available to you will open.

      • Double-click the Umpio icon to access the desktop.

       

      You can find the storage space indicated by the letter U.

       

      Using the Umpio service with a browser

      If it is not possible to use VMWare Horizon Client, you can also use Umpio with a browser. 

      Please note that the login process will include two consecutive authentication dialogues, the first of which is MFA authentication notification. The actual authentication is done after entering the credentials. 

       

        After entering the credentials, MFA authentication is performed by using the method you have chosen. If necessary, you can read more about MFA authentication in separate instructions.

        After successful login, the virtual desktops available to you will open.

        • Click the Umpio icon to access the desktop.

         

        Securedesk settings and using the Umpio storage space

        After accessing securedesk, check the file sharing settings between your computer and the virtual workstation if you plan to transfer or copy files:

        • If you are using VMWare Horizon Client on a Windows computer, select Sharing behind the cog icon in the top right corner and click the Add button to add the folders you want to share from a local drive. Also tick Share your local files and Allow access to removable storage.
           
        • If you are using VMWare Horizon Client on a Mac computer, select VMWare Horizon Client -> Preferences -> Sharing tab from the top menu and click the Add button to add the folders you want to share from a local drive. Also tick Share your local files and Allow access to removable storage.
        1. In the list of virtual computers, select Secure desktop & Umpio. Once it opens, you should see the Umpio group disk space in file management as a drive connected to the letter U and the folders shared from your computer as a Z drive. Use the Connect USB Device option in the top bar to connect and use USB devices.
        2. Umpio is shown as a U: drive in File Explorer and Umpio’s backup is shown as a V: drive in File Explorer.

        FAQ

        Q: Why is the use of Horizon Client recommended even if there is a browser option?
        V: The browser option has some technical limitations, regarding the size of the files to be transferred, for example. In addition, experience has shown that browser updates may occasionally cause incompatibility problems.

        Q: Does the user need to take any action to ensure that their data is erased from the system?
        A: No, they do not. The data will be automatically erased after it has been removed from the backups.

        Q: Can the user (accidentally or intentionally) remove data from backups?
        A: No, they cannot.

        Q: Can the administrator (accidentally or intentionally) remove data from backups?
        A: No, they cannot. Administrators have the ability to delete everyone’s data, but never individual pieces of data. Typically, the deletion of backups is done at the end of the storage system’s life cycle.

        Q: How long are backups of Umpio (both home and group disk spaces) retained?
        A: 6 months.

        Q: If a group no longer needs storage space in Umpio, should they do something?
        A: The group should request deletion of its storage space from IT Helpdesk. Helpdesk will forward the deletion request to the capacity services who will delete the storage space.

        Q: If a group no longer needs the group disk space, should they do something?
        A: The group should delete its storage space with the Ryhti group disk space management tool
        If a group no longer needs the IAM group, the group can be deleted using the IAM group management tool.

        Give feedback

        The instructions site of the University of Helsinki's IT Helpdesk helps you with IT-related issues related to your work. Let us know how we can improve our instructions. We greatly appreciate your feedback!

        How would you improve these instructions?
        Back to top