# Research data storage # DCSR NAS (normal or personal data) # General information ### How to access the DCSR NAS If you don't have a DCSR NAS (Network Attached Storage) storage yet and you would like one, the PI (Principal Investigator) of your project needs to fill up a request application form on the following web interface: [https://requests.dcsr.unil.ch](https://requests.dcsr.unil.ch) Once the DCSR has accepted the request and the access has been granted to you by your PI, you will be able to access your DCSR NAS storage by one of the following method: ##### Access from a laptop [laptop <-> NAS instructions](https://wiki.unil.ch/ci/books/research-data-storage/page/data-management#bkmrk-accessing-dcsr-nas-f) ##### Access from the cluster If you have access to the compute clusters of the DCSR, the data stored on the NAS is directly accessible under /nas. See: [cluster <-> NAS instructions](https://wiki.unil.ch/ci/books/high-performance-computing-hpc/page/access-nas-dcsr-from-the-cluster) In case you have asked for the "**sensitive data**" special option for your storage, please follow the specific instructions for Tresorit: [Tresorit documentation (sensitive data)](https://wiki.unil.ch/ci/books/research-data-storage/chapter/sensitive-data-tresorit "How to manage sensitive data on UNIL NAS") ### General structure of the NAS The general structure of the directories on the DCSR NAS (Network Attached Storage) is: `nasdcsr.unil.ch/RECHERCHE/FAC////` ##### On mac `smb://nasdcsr.unil.ch/RECHERCHE/FAC////` ##### On Windows `\\nasdcsr.unil.ch\RECHERCHE\FAC\\\\` In case you have asked for the "**personal data**" special option for your storage, please use **RECHERCHE-P** with: `nasdcsr.unil.ch/RECHERCHE-P/FAC////` ##### On mac `smb://nasdcsr.unil.ch/RECHERCHE-P/FAC////` ##### On Windows `\\nasdcsr.unil.ch\RECHERCHE-P\FAC\\\\` In case you have asked for the "**sensitive data**" special option for your storage, please follow the specific instructions for Tresorit: [Tresorit documentation (sensitive data)](https://wiki.unil.ch/ci/books/research-data-storage/chapter/sensitive-data-tresorit "How to manage sensitive data on UNIL NAS") ### What are the /D1c, /D2c, and /LTS subdirectories? In your project directory you will see at least a **D2c** and a **LTS** directory, with the following meanings/purposes: #### <your\_project>/**D2c** **D2c** means "**data 2 copies**". This is where you can put your research data during the life time of your project. This NAS directory has an off-site backup (i.e the data is stored in two distinct locations). Snapshots are done on a daily basis for a rolling period of 1 month. Please note that in case you are using the HPC cluster and perform computations on this data, your are advised to copy this data to a fast storage (i.e. /scratch or /work) to speed up computations (see [this page](https://wiki.unil.ch/ci/books/high-performance-computing-hpc/page/storage-on-curnagl)). #### <your\_project>/**LTS** **LTS** means "**Long Term Storage**". This data will be kept for a very long time on the UNIL storage (a decade, on tapes). This is where you should put the part of your data that needs to be archived e.g. at the end of your project. When you reach this point, you will then be asked to make a description of your data ("meta-data"). See procedure for "Long-term storage" of research data here: [https://www.bium.ch/en/process-of-hosting-search-data-for-long-term-storage](https://www.bium.ch/en/process-of-hosting-search-data-for-long-term-storage) (french: [https://www.bium.ch/processus-dhebergement-donnees-de-recherche-stockage-a-long-terme](https://www.bium.ch/processus-dhebergement-donnees-de-recherche-stockage-a-long-terme)) Users who explicitly asked for it will also have a D1c directory: #### <your\_project>/**D1c** **D1c** means "**data 1 copy**". This data has no backup (and may be lost). This is where you can put e.g. some reference data that you downloaded from an external source, and that can easily be recovered again from the same external source, in case the data get lost in /D1c. ### Long term storage at DCSR and other data repositories Here is an overview of the options you have for Long Term Storage / Long Term Preservation (LTS/LTP) of your data (warning: french only) [Cycle\_vie\_Data\_support\_stockage.pdf](https://wiki.unil.ch/ci/attachments/539) # Recovering files from the DCSR NAS ## Introduction If you have deleted or corrupted a file you can recover it from the daily snapshots that are performed on the DCSR NAS ## From the Curnagl login node ```shell ssh username@curnagl.dcsr.unil.ch cd /nas/FAC/////D2c cd .snapshot ls daily_1month_CAMPUS_REC_2021-12-06_12:00 daily_1month_CAMPUS_REC_2021-12-31_12:00 daily_3month_CAMPUS_REC_2021-10-27_18:00 daily_3month_CAMPUS_REC_2021-11-21_18:00 daily_3month_CAMPUS_REC_2021-12-16_18:00 daily_1month_CAMPUS_REC_2021-12-07_12:00 daily_1month_CAMPUS_REC_2022-01-01_12:00 daily_3month_CAMPUS_REC_2021-10-28_18:00 daily_3month_CAMPUS_REC_2021-11-22_18:00 daily_3month_CAMPUS_REC_2021-12-17_18:00 daily_1month_CAMPUS_REC_2021-12-08_12:00 daily_1month_CAMPUS_REC_2022-01-02_12:00 daily_3month_CAMPUS_REC_2021-10-29_18:00 daily_3month_CAMPUS_REC_2021-11-23_18:00 daily_3month_CAMPUS_REC_2021-12-18_18:00 daily_1month_CAMPUS_REC_2021-12-09_12:00 daily_1month_CAMPUS_REC_2022-01-03_12:00 daily_3month_CAMPUS_REC_2021-10-30_18:00 daily_3month_CAMPUS_REC_2021-11-24_18:00 daily_3month_CAMPUS_REC_2021-12-19_18:00 daily_1month_CAMPUS_REC_2021-12-10_12:00 daily_1month_CAMPUS_REC_2022-01-04_12:00 daily_3month_CAMPUS_REC_2021-10-31_18:00 daily_3month_CAMPUS_REC_2021-11-25_18:00 daily_3month_CAMPUS_REC_2021-12-20_18:00 daily_1month_CAMPUS_REC_2021-12-11_12:00 daily_3month_CAMPUS_REC_2021-10-07_18:00 daily_3month_CAMPUS_REC_2021-11-01_18:00 daily_3month_CAMPUS_REC_2021-11-26_18:00 daily_3month_CAMPUS_REC_2021-12-21_18:00 daily_1month_CAMPUS_REC_2021-12-12_12:00 daily_3month_CAMPUS_REC_2021-10-08_18:00 daily_3month_CAMPUS_REC_2021-11-02_18:00 daily_3month_CAMPUS_REC_2021-11-27_18:00 daily_3month_CAMPUS_REC_2021-12-22_18:00 daily_1month_CAMPUS_REC_2021-12-13_12:00 daily_3month_CAMPUS_REC_2021-10-09_18:00 daily_3month_CAMPUS_REC_2021-11-03_18:00 daily_3month_CAMPUS_REC_2021-11-28_18:00 daily_3month_CAMPUS_REC_2021-12-23_18:00 daily_1month_CAMPUS_REC_2021-12-14_12:00 daily_3month_CAMPUS_REC_2021-10-10_18:00 daily_3month_CAMPUS_REC_2021-11-04_18:00 daily_3month_CAMPUS_REC_2021-11-29_18:00 daily_3month_CAMPUS_REC_2021-12-24_18:00 daily_1month_CAMPUS_REC_2021-12-15_12:00 daily_3month_CAMPUS_REC_2021-10-11_18:00 daily_3month_CAMPUS_REC_2021-11-05_18:00 daily_3month_CAMPUS_REC_2021-11-30_18:00 daily_3month_CAMPUS_REC_2021-12-25_18:00 daily_1month_CAMPUS_REC_2021-12-16_12:00 daily_3month_CAMPUS_REC_2021-10-12_18:00 daily_3month_CAMPUS_REC_2021-11-06_18:00 daily_3month_CAMPUS_REC_2021-12-01_18:00 daily_3month_CAMPUS_REC_2021-12-26_18:00 daily_1month_CAMPUS_REC_2021-12-17_12:00 daily_3month_CAMPUS_REC_2021-10-13_18:00 daily_3month_CAMPUS_REC_2021-11-07_18:00 daily_3month_CAMPUS_REC_2021-12-02_18:00 daily_3month_CAMPUS_REC_2021-12-27_18:00 daily_1month_CAMPUS_REC_2021-12-18_12:00 daily_3month_CAMPUS_REC_2021-10-14_18:00 daily_3month_CAMPUS_REC_2021-11-08_18:00 daily_3month_CAMPUS_REC_2021-12-03_18:00 daily_3month_CAMPUS_REC_2021-12-28_18:00 daily_1month_CAMPUS_REC_2021-12-19_12:00 daily_3month_CAMPUS_REC_2021-10-15_18:00 daily_3month_CAMPUS_REC_2021-11-09_18:00 daily_3month_CAMPUS_REC_2021-12-04_18:00 daily_3month_CAMPUS_REC_2021-12-29_18:00 daily_1month_CAMPUS_REC_2021-12-20_12:00 daily_3month_CAMPUS_REC_2021-10-16_18:00 daily_3month_CAMPUS_REC_2021-11-10_18:00 daily_3month_CAMPUS_REC_2021-12-05_18:00 daily_3month_CAMPUS_REC_2021-12-30_18:00 daily_1month_CAMPUS_REC_2021-12-21_12:00 daily_3month_CAMPUS_REC_2021-10-17_18:00 daily_3month_CAMPUS_REC_2021-11-11_18:00 daily_3month_CAMPUS_REC_2021-12-06_18:00 daily_3month_CAMPUS_REC_2021-12-31_18:00 daily_1month_CAMPUS_REC_2021-12-22_12:00 daily_3month_CAMPUS_REC_2021-10-18_18:00 daily_3month_CAMPUS_REC_2021-11-12_18:00 daily_3month_CAMPUS_REC_2021-12-07_18:00 daily_3month_CAMPUS_REC_2022-01-01_18:00 daily_1month_CAMPUS_REC_2021-12-23_12:00 daily_3month_CAMPUS_REC_2021-10-19_18:00 daily_3month_CAMPUS_REC_2021-11-13_18:00 daily_3month_CAMPUS_REC_2021-12-08_18:00 daily_3month_CAMPUS_REC_2022-01-02_18:00 daily_1month_CAMPUS_REC_2021-12-24_12:00 daily_3month_CAMPUS_REC_2021-10-20_18:00 daily_3month_CAMPUS_REC_2021-11-14_18:00 daily_3month_CAMPUS_REC_2021-12-09_18:00 daily_3month_CAMPUS_REC_2022-01-03_18:00 daily_1month_CAMPUS_REC_2021-12-25_12:00 daily_3month_CAMPUS_REC_2021-10-21_18:00 daily_3month_CAMPUS_REC_2021-11-15_18:00 daily_3month_CAMPUS_REC_2021-12-10_18:00 daily_3month_CAMPUS_REC_2022-01-04_18:00 daily_1month_CAMPUS_REC_2021-12-26_12:00 daily_3month_CAMPUS_REC_2021-10-22_18:00 daily_3month_CAMPUS_REC_2021-11-16_18:00 daily_3month_CAMPUS_REC_2021-12-11_18:00 SIQ-743c22b777679f9ed3c08b5b9ac6bceb-restore-latest daily_1month_CAMPUS_REC_2021-12-27_12:00 daily_3month_CAMPUS_REC_2021-10-23_18:00 daily_3month_CAMPUS_REC_2021-11-17_18:00 daily_3month_CAMPUS_REC_2021-12-12_18:00 SIQ-7b67c2c289b36a2d86a688ade445aa31-latest daily_1month_CAMPUS_REC_2021-12-28_12:00 daily_3month_CAMPUS_REC_2021-10-24_18:00 daily_3month_CAMPUS_REC_2021-11-18_18:00 daily_3month_CAMPUS_REC_2021-12-13_18:00 daily_1month_CAMPUS_REC_2021-12-29_12:00 daily_3month_CAMPUS_REC_2021-10-25_18:00 daily_3month_CAMPUS_REC_2021-11-19_18:00 daily_3month_CAMPUS_REC_2021-12-14_18:00 daily_1month_CAMPUS_REC_2021-12-30_12:00 daily_3month_CAMPUS_REC_2021-10-26_18:00 daily_3month_CAMPUS_REC_2021-11-20_18:00 daily_3month_CAMPUS_REC_2021-12-15_18:00 ``` Navigate to the date of the last known existence of the file and copy it to a directory of your choice ## From Windows Mount the project directory as described in [https://wiki.unil.ch/ci/books/research-data-storage/page/dcsr-nas](https://wiki.unil.ch/ci/books/research-data-storage/page/dcsr-nas) Navigate to the project directory and right click [![Screenshot 2022-01-05 at 11.37.37.png](https://wiki.unil.ch/ci/uploads/images/gallery/2022-01/scaled-1680-/screenshot-2022-01-05-at-11-37-37.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2022-01/screenshot-2022-01-05-at-11-37-37.png) Select Properties-> Previous Versions [![Screenshot 2022-01-05 at 11.46.19.png](https://wiki.unil.ch/ci/uploads/images/gallery/2022-01/scaled-1680-/screenshot-2022-01-05-at-11-46-19.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2022-01/screenshot-2022-01-05-at-11-46-19.png) You can then select the snapshot date and copy the missing files or directories. ## From MAC Install the "Owlfiles - File Explorer" free sofware from the Apple App store: Go to the App Store ("Apple" menu on the top left of your screen): [![Screenshot 2023-02-17 at 13.17.46.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-02/scaled-1680-/screenshot-2023-02-17-at-13-17-46.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-02/screenshot-2023-02-17-at-13-17-46.png) And search for "Owlfiles" and install it ("Get" button): [![Screenshot 2023-02-17 at 13.18.21.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-02/scaled-1680-/screenshot-2023-02-17-at-13-18-21.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-02/screenshot-2023-02-17-at-13-18-21.png) Start "OwlFiles - File Explorer" and create a new connection as described below: [![Screenshot 2022-01-05 at 11.09.48.png](https://wiki.unil.ch/ci/uploads/images/gallery/2022-01/scaled-1680-/screenshot-2022-01-05-at-11-09-48.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2022-01/screenshot-2022-01-05-at-11-09-48.png) Then navigate through the snapshots to the directories/files you want to restore. # Data management **Topic** Data transfer between a laptop, a virtual machine, or a lab server and the DCSR NAS

The DCSR NAS, or the "**N**etwork **A**ttached **S**torage of the Scientific Computing and Research Support Unit", is one of the several NAS solutions available at UNIL. The DCSR NAS is dedicated to the secure mid-term storage of **research** regular or personal data. The DCSR NAS does not comply to the current regulations for the storage of sensitive data, as defined by the [LPrD law Art. 4 al. 2](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01). For handling sensitive data, please refer to the corresponding [documentation](https://wiki.unil.ch/ci/books/research-data-storage/chapter/sensitive-data-tresorit).

**Organization** The first section explains how to access the DCSR NAS from the **UNIL network** with each of the most common operating systems (**Windows**, **MacOS** and **Ubuntu**) The second section explains how to access the DCSR NAS from the **CHUV network**

**Note:** If you work from home, you first need to connect to UNIL's Virtual Private Network (VPN), using the Pulse Secure software (see [VPN instructions](https://www.unil.ch/ci/reseau-unil-chez-soi "VPN instructions")).

## Access from the UNIL network ### From Windows **Step 1**: right click on Network in File explorer and choose "Map network drive…" [![image-1591798613766.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-06/scaled-1680-/image-1591798613766.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-06/image-1591798613766.png) **Step 2**: enter the address of the Samba server and click to finish

Replace **RECHERCHE** with **RECHERCHE-P** in the screen capture below to access the corresponding folder for a project that was created with the *personal data* flag

[![Ie9map01.PNG](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/scaled-1680-/Ie9map01.PNG)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/Ie9map01.PNG) `\\nasdcsr.unil.ch\RECHERCHE` **Step 3**: enter your Unil credentials and clikc "OK" - username: `ad\unil_username` (for example `ad\ulambda`) - password [![map02.PNG](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/scaled-1680-/map02.PNG)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/map02.PNG) **Step 4**: click on "This PC" and then on the new network drive [![map03.PNG](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/scaled-1680-/map03.PNG)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/map03.PNG) ### From MacOS **Step 1**: open the Finder, in Go menu, select "Connect to Server" [![image-1591856270964.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-06/scaled-1680-/image-1591856270964.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-06/image-1591856270964.png) **Step 2**: enter the NAS url (`smb://nasdcsr.unil.ch/RECHERCHE`), you also may add this server as a favourite by clicking on + symbol

Replace **RECHERCHE** with **RECHERCHE-P** in the screen capture below to access the corresponding folder for a project that was created with the *personal data* flag

[![image-1605528817646.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/scaled-1680-/image-1605528817646.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/image-1605528817646.png) **Step 3**: enter your credentials [![image-1605528837404.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/scaled-1680-/image-1605528837404.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/image-1605528837404.png) **Step 4**: navigate through the directories to find your working directory and push/fetch files as you see fit [![image-1605528863048.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/scaled-1680-/image-1605528863048.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-11/image-1605528863048.png) ### From Ubuntu It is possible to use a GUI but there are as much solutions as desktop managers. So here is a way to mount the NAS using command line interface.

Don't forget to adapt the `username=` field in the `sudo mount` command by replacing `unil_username` with your **username** at UNIL (ex. `mcurie` for Marie Curie)!

Replace **RECHERCHE** with **RECHERCHE-P** in the commands below to access the corresponding folder for a project that was created with the *personal data* flag

```shell # First install the packages # Debian/Ubuntu version $ sudo apt install samba cifs-utils # Fedora/RedHat version $ sudo dnf install cifs-utils # In the following, ~/nas is chosen as a mountpoint, but it could be elsewhere $ mkdir ~/nasdcsr $ sudo mount -t cifs -o username=unil_username,mfsymlinks,domain=ad,rw,iocharset=utf8,dir_mode=0700,file_mode=0700,uid=$(id -u) //nasdcsr.unil.ch/RECHERCHE ~/nasdcsr # Perform the reauired operations $ cd ~/nasdcsr … # When finished, don't forget to umount it $ sudo umount ~/nasdcsr ``` ## Accessing DCSR NAS from CHUV network Windows and Mac users can install the graphical desktop client from DataExpedition as well if they wish so: Download Expedat from [here](https://www.unil.ch/ci/distrisoft), installation instruction from [here](https://wiki.unil.ch/ci/books/distribution-de-logiciels/page/expedat-movedat), and product documentation from [there](https://www.dataexpedition.com/expedat/Docs/index.html?p=https://www.dataexpedition.com/expedat/Docs/Desktop/). Here is an example of ExpeDat session: [![image-1591796422909.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-06/scaled-1680-/image-1591796422909.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-06/image-1591796422909.png) On that screenshot you can see:
1. The server of the NAS 2. The user information (login and password) 3. The explorer for the files located on your laptop 4. The explorer for the files located on the NAS (note that the remote path must be set according to your personal working space) 5. The get button to fetch files from the NAS to your laptop 6. The push button to push files from your laptop to the NAS
# Sensitive data on DCSR NAS

Since november 2023, new research projects should store their data using Tresorit. Please see the detailed documentation : [https://wiki.unil.ch/ci/books/research-data-storage/chapter/donnees-sensibles-tresorit](https://wiki.unil.ch/ci/books/research-data-storage/chapter/donnees-sensibles-tresorit)

Current user of the NAS DCSR RECHERCHE-S/Boxcryptor can continue to use this solution until June 2024.

## Request a storage space for sensitive data To request storage of sensitive data please go to the CI/DCSR "Demande de ressources de recherche" web page [https://requests.dcsr.unil.ch](https://requests.dcsr.unil.ch) and log in with your **EDU-id account.** Click on "New request / Nouvelle demande" [![image-1600198383347.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600198383347.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600198383347.png) [![image-1600198806493.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600198806493.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600198806493.png)[![image-1600199651933.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600199651933.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600199651933.png) [![image-1600200172278.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600200172278.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600200172278.png) Don't forget you want to work with sensitive data by selecting the appropriate option above. [![image-1600200548256.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600200548256.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600200548256.png) This page allows you to select the options available at DCSR: - Storage resources - Computing resources - Computing resources for sensitive data [![image-1600200939342.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600200939342.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600200939342.png) You will then receive a confirmation e-mail that your resource request has been accepted. ## How to connect #### Mount the NAS to your laptop Mount the RECHERCHE-S volume of the NAS (see exact addresses below and [documentation](https://wiki.unil.ch/ci/books/research-data-storage/page/data-management#bkmrk-accessing-dcsr-nas-f)), and **then use a security software to access your data (mandatory, see next section)**: \- On MacOS: smb://nasdcsr.unil.ch/RECHERCHE-S or directly: smb://nasdcsr.unil.ch/RECHERCHE-S/<ENTITY>/<FAC>/<INSTITUTE>/<PI>/<PROJECT>/D2C example: smb://nasdcsr.unil.ch/RECHERCHE-S/FAC/SSP/ISS/username\_of\_your\_pi/project\_shortname/D2C \- On Windows: \\\\nasdcsr.unil.ch\\RECHERCHE-S or directly: \\\\nasdcsr.unil.ch\\RECHERCHE-S\\<ENTITY>\\<FAC>\\<INSTITUTE>\\<PI>\\<PROJECT>\\D2C example: \\\\ nasdcsr.unil.ch\\RECHERCHE-S\\FAC\\SSP\\ISS\\username\_of\_your\_pi\\project\_shortname\\D2C #### Mandatory: access the NAS using Boxcryptor (security software) Request a Boxcryptor password by sending an e-mail to with BoxCryptor password in the subject, you shall receive a temporary password to initialize the security software. Then download and install the Boxcryptor from: [https://www.boxcryptor.com/en/download/](https://www.boxcryptor.com/en/download/) ##### For Mac
1\) Install it by dragging it to your applications folder [![image-1600235716041.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600235716041.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600235716041.png) 2\) Confirm your installation by typing your workstation administrator password [![image-1600235979332.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600235979332.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600235979332.png)
##### For Windows
1\) Double-click on the installer you just downloaded (e.g. Boxcryptor\_v2.42.1333\_Setup.msi) [![image-1610546371006.png](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/scaled-1680-/image-1610546371006.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/image-1610546371006.png) 2) Allow installation, accept the terms in the License Agreement and in the Privacy Policy and complete the installation
Start Boxcryptor and sign in with your UNIL e-mail and the Boxcryptor password you received from helpdesk: [![image-1600236026508.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600236026508.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600236026508.png) You will have to change your password: [![image-1600236441357.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600236441357.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600236441357.png) #### #### On MacOS: Follow the wizard below to connect to your storage by selecting RECHERCHE-S (which should be already mounted before, see previous section): [![image-1600236700615.png](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/scaled-1680-/image-1600236700615.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2020-09/image-1600236700615.png) Then, the Boxcryptor access to RECHERCHE-S will look like below. You can navigate to your data. A green symbol with a lock indicates a crypted file or folder. The full documentation can be found at [https://www.boxcryptor.com/en/help/overview/macos/](https://www.boxcryptor.com/en/help/overview/macos/) : [![Screenshot_2021-01-15_at_09_19_12.png](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/scaled-1680-/Screenshot_2021-01-15_at_09_19_12.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/Screenshot_2021-01-15_at_09_19_12.png) #### On Windows: The official documentation is here: [https://www.boxcryptor.com/en/help/overview/windows/](https://www.boxcryptor.com/en/help/overview/windows/). To have your mounted NAS location handled by Boxcryptor you must proceed as follows: 1\. From the application tray, right-click on the Boxcryptor icon and select "Settings": [![image-1610711316901.png](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/scaled-1680-/image-1610711316901.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/image-1610711316901.png) 2\. Then, in "Locations", select the drive on which you mounted RECHERCHE-S: [![image-1610711505477.png](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/scaled-1680-/image-1610711505477.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/image-1610711505477.png) Finally, please refer to the official documentation in order to encrypt files and folders :[https://www.boxcryptor.com/en/help/work-with-files/windows/](https://www.boxcryptor.com/en/help/work-with-files/windows/) to gain some understanding on how Boxcryptor works. If you now open a FileExplorer you will see something like this: [![image-1610712923875.png](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/scaled-1680-/image-1610712923875.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/image-1610712923875.png) You can navigate to your data. A green symbol with a lock indicated a crypted file or folder: [![image-1610713306868.png](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/scaled-1680-/image-1610713306868.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2021-01/image-1610713306868.png) # Give access to DCSR NAS files to an external collaborator There are two administrative steps: 1. The external collaborator must ask a UNIL account using [this online form](https://www.unil.ch/ci/id) (go to "Obtenir un compte informatique personnel"). Warning: in the online form, the external collaborator have to write the name/email of the PI who is sponsoring the UNIL account in the comments section. 2. the PI (Principal Investigator) to whom the external collaborator is related must use [this application](https://requests.dcsr.unil.ch/) to add the collaborator into the appropriate project. Log into the application if necessary on the top right, and click on the "Manage members list / Gérer la liste de membres" icon for your project. The usernames always have 8 characters (e.g. Greta Thunberg username would be: gthunber) The external collaborator can then access the data of the project stored on the UNIL NAS using VPN: - [Install and use the UNIL VPN](https://www.unil.ch/ci/fr/home/menuinst/catalogue-de-services/reseau-et-telephonie/acces-hors-campus-vpn/documentation.html) - [Access the NAS from a laptop](https://wiki.unil.ch/ci/books/research-data-storage/page/data-management) # Moving data between different projects At some point, you might have to move data from one project to another one for various reasons. On NAS DCSR, such move is not possible by default because of a technical limitation. So depending on the volume of data to move, there are 2 options. But before going further, please check that quotas on destination projects are high enough to receive the data. ##### Low amount of data (less than hundreds of GB): copy the data Copying the data between two projects is possible. From MacOS/Windows computer you can just copy a folder from the source project and paste it in the destination project. From Linux computer, you can use cp or rsync commands. Once the copy is terminated, you can remove the data in the source project. **Note:** You have to keep in mind that in such situation the copy pass through your computer, so the speed will be limited by the weakest link (usually your upstream network link, especially if this is performed from home). Excepted for very small amount of data, this should be performed from UNIL network with wired connection, or from Curnagl cluster for those who can access it. ##### Large amount of data: ask DCSR DCSR can temporarily remove the technical limitation that prevents moving date between projects. If you need to move large amount of data, you can send a ticket to [helpdesk@unil.ch](mailto:helpdesk@unil.ch?subject=DCSR%20move%20NAS%20data) and write something like: > Dear DCSR, > I need to move data between the following projects on NAS DCSR: > > - FAC/FBM/ABC/ulambda/project1 > - FAC/FBM/ABC/ulambda/project2 > - FAC/FBM/ABC/ulambda/project3 > > Could you temporarily remove the limitation that prevent from moving data between the above projects? > Cheers, > Urusla Lambda Then, you will be able to cut and paste from MacOS/Windows computer, or tu use mv command from Linux computer. # Données sensibles (Tresorit) La solution Tresorit est sélectionnée par l'UNIL depuis octobre 2023 pour le stockage des données de recherche sensibles. Les lois suisses donnent une définition très précise des données sensibles (voir FAQ). Ce service est prévu pour le stockage et le partage de fichiers. Il a la particularité d'offrir une sécurité renforcée par un contrôle d'accès avancé et un chiffrement des données. # Description de Tresorit

[![en.png](https://wiki.unil.ch/ci/uploads/images/gallery/2024-01/scaled-1680-/en.png) English](https://wiki.unil.ch/ci/books/research-data-storage/chapter/sensitive-data-tresorit)

Tresorit est un **service de stockage et de partage de fichiers**. Il a la particularité d'offrir une sécurité renforcée par un contrôle d'accès avancé et un **chiffrement** des données (voir la [FAQ](https://wiki.unil.ch/ci/link/1564#bkmrk-que-signifie-%22chiffr)). Cette solution est sélectionnée par l'UNIL depuis octobre 2023 pour le stockage des **données sensibles de recherche** ([LPrD art. 4](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01)). Ainsi, les chercheur·e·s de l'UNIL sont encouragé·e·s à l'utiliser. L'utilisation est gratuite pour les chercheur·e·s jusqu'à **2 To** par utilisateur·rice. Il suffit de faire une demande à votre **spécialiste données de recherche (*data steward)*** comme indiqué dans la [FAQ](https://wiki.unil.ch/ci/link/1564#bkmrk-qui-contacter-pour-d). Notez que la demande doit être effectuée par un·e **chef·fe de projet** **/ porteur·euse de projet** (*Principal Investigator* comme désigné dans la [directive 4.5 art. 4](https://www.unil.ch/files/live/sites/central/files/textes-leg/4-rech/dir4-5-donnees-rech.pdf)). Chaque nouveau projet de recherche est associé à une nouvelle demande. En pratique, Tresorit se présente sous la forme d'une interface web, ou d'un logiciel à installer sur votre ordinateur qui permettent de déposer et partager, entre membres d'un projet, vos données de recherche. Les données sont stockées en ligne de manière chiffrée. Il est possible de les synchroniser sur le disque dur de votre ordinateur et d'y avoir accès localement. Un·e chef·fe de projet peut décider d'inviter des collaborateur·rice·s (interne ou externe à l'UNIL comme indiqué dans la [FAQ](https://wiki.unil.ch/ci/link/1564#bkmrk-puis-je-collaborer-a)). Une contrainte importante est que les collaborateur·rice·s doivent prendre **rendez-vous** avec le personnel du CI/DCSR afin d'obtenir leur compte. Un rendez-vous groupé est possible pour accélérer la procédure. Lors du rendez-vous nous activerons notamment le chiffrement de votre ordinateur. Notez que le rendez-vous est nécessaire aussi si votre ordinateur est déjà chiffré. Vue de l'interface web de Tresorit : [![Capture d’écran 2023-10-09 à 16.47.50.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-09-a-16-47-50.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-09-a-16-47-50.png) Vue du logiciel Tresorit installé sur l'ordinateur : [![Capture d’écran 2023-10-09 à 16.46.51.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-09-a-16-46-51.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-09-a-16-46-51.png) # Comment utiliser Tresorit ?

[![en.png](https://wiki.unil.ch/ci/uploads/images/gallery/2024-01/scaled-1680-/en.png) English](https://wiki.unil.ch/ci/books/research-data-storage/chapter/sensitive-data-tresorit)

#### Utilisation de l'interface web Avant d'utiliser Tresorit à l'UNIL, il faut suivre la procédure indiquée à la section « [Qui contacter pour demander l'accès à Tresorit](https://wiki.unil.ch/ci/link/1564#bkmrk-qui-contacter-pour-d) » de la FAQ. Cela inclut un rendez-vous en présentiel. Pour accéder à l'interface en ligne de Tresorit, connectez-vous à l'adresse : [https://web.tresorit.com](https://web.tresorit.com) - **Employé·e·s UNIL :** connectez-vous avec votre courriel UNIL et votre mot de passe Tresorit. - **Collaborateur·rice·s externes :** connectez-vous avec le courriel utilisé lors de votre rendez-vous Tresorit et votre mot de passe Tresorit. Si vous avez oublié votre mot de passe, contactez-nous en complétant [ce formulaire](https://www.unil.ch/ci/home/menuinst/calcul--soutien-recherche/contact-dcsr-fr.html). Vous pouvez aussi contacter le Helpdesk () **en précisant « DCSR » dans l'objet de votre courriel**. [![Capture d’écran 2023-10-09 à 16.05.32.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/vOmcapture-decran-2023-10-09-a-16-05-32.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/vOmcapture-decran-2023-10-09-a-16-05-32.png) Utilisez votre téléphone portable pour récupérer le code de validation associé à votre compte Tresorit (cette étape a été configurée lors de votre première connexion). [![Capture d’écran 2023-10-09 à 16.05.53.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/lhMcapture-decran-2023-10-09-a-16-05-53.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/lhMcapture-decran-2023-10-09-a-16-05-53.png) Vous atteindrez ensuite l'interface web de Tresorit

Veuillez noter que Tresorit vous proposera un tutoriel incluant l'installation d'applications Android ou iOS, ainsi que la possibilité de partager les fichiers par lien. Ces étapes sont à ignorer car interdites pour les comptes Tresorit UNIL.

[![Capture d’écran 2023-10-09 à 17.06.43.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/ua1capture-decran-2023-10-09-a-17-06-43.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/ua1capture-decran-2023-10-09-a-17-06-43.png) ##### Déposer un fichier sur Tresorit Pour déposer un fichier sur Tresorit, double-cliquez sur le dossier correspondant à votre projet pour vous déplacer à l'intérieur. Ensuite cliquez sur le bouton « Importer » et sélectionnez le dossier ou les fichiers désirés. Vous pouvez aussi glisser-déposer vos fichiers vers l'interface web. Les données sont alors copiées sur le stockage en ligne Tresorit. [![Capture d’écran 2023-10-09 à 17.47.39.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-09-a-17-47-39.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-09-a-17-47-39.png) ##### Partager un fichier déposé sur Tresorit Pour partager un ou des fichiers avec vos collaborateur·rice·s de recherche, il est nécessaire de les placer dans un dossier et de configurer les options de partage de ce dossier. Survolez-le et cliquez sur le bouton « Partage » à droite de l'explorateur, puis sur « Inviter membres ». Il vous suffira ensuite d'ajouter les adresses courriel de vos collaborateur·rice·s et de leur attribuer les permissions adéquates. Notez qu'un compte Tresorit géré par l'UNIL est nécessaire (voir la [FAQ](https://wiki.unil.ch/ci/link/1564#bkmrk-qui-contacter-pour-d)) pour tous les collaborateur·rice·s. [![Capture d’écran 2023-10-09 à 17.52.24.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-09-a-17-52-24.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-09-a-17-52-24.png) [![Capture d’écran 2023-10-30 à 10.49.44.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-30-a-10-49-44.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-30-a-10-49-44.png) #### Utilisation du logiciel Tresorit installé sur l'ordinateur Si vous souhaitez installer le logiciel Tresorit localement sur votre ordinateur, cliquez sur votre nom d'utilisateur·trice en haut à droite et sélectionnez « Installer l'application d'ordinateur... » : [![Capture d’écran 2023-10-09 à 16.06.45.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/Mrgcapture-decran-2023-10-09-a-16-06-45.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/Mrgcapture-decran-2023-10-09-a-16-06-45.png) Vous pouvez lancer le logiciel Tresorit sur votre ordinateur en cliquant sur l’icône Tresorit. Par exemple dans le « launchpad » ou la barre de lancement sur Apple MacOS. [![Capture d’écran 2023-10-30 à 10.54.18.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-30-a-10-54-18.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-30-a-10-54-18.png)[ ![MicrosoftTeams-image.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/xrNmicrosoftteams-image.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/xrNmicrosoftteams-image.png) Ou sur le bureau ou le menu démarrer sur Microsoft Windows. [![MicrosoftTeams-image.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/RNvmicrosoftteams-image.png) ](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/RNvmicrosoftteams-image.png)[![MicrosoftTeams-image (1).png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/9Upmicrosoftteams-image-1.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/9Upmicrosoftteams-image-1.png) Vous devrez ensuite cliquer sur « Aller à la page de connexion ». [![Capture d’écran 2023-10-30 à 11.10.54.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-30-a-11-10-54.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-30-a-11-10-54.png) Entrez votre login (courriel UNIL) et mot de passe : [![Capture d’écran 2023-10-30 à 11.11.41.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-30-a-11-11-41.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-30-a-11-11-41.png) Puis vous accéderez à l'interface principale de Tresorit :

Veuillez noter que Tresorit vous proposera un tutoriel incluant l'installation d'applications Android ou iOS, ainsi que la possibilité de partager les fichiers par lien. Ces étapes sont à ignorer car interdites pour les comptes Tresorit UNIL.

[![Capture d’écran 2023-10-30 à 11.15.43.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-30-a-11-15-43.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-30-a-11-15-43.png)

Note pour les utilisateur·trice·s de BoxCryptor (ancienne solution de chiffrement à l'UNIL): Veuillez ne pas activer le bouton « Migrer vos données / Migrate your data » et ne pas suivre l'éventuel assistant de migration proposé par Tresorit. En effet, il est préférable de copier vos fichiers manuellement pour éviter des pertes de données.

#### Synchronisation des fichiers sur votre ordinateur Les dossiers et fichiers visibles dans le logiciel Tresorit installé sur votre ordinateur sont par défaut stockés uniquement sur les stockages en ligne de Tresorit. Il est possible d'activer la synchronisation des fichiers et dossiers entre les stockages en ligne et votre ordinateur en cliquant sur le bouton « Synchroniser ce dossier » (à droite ci-dessous). De cette manière les fichiers seront accessibles sur votre disque dur même hors connexion. Si le volume de vos données est très important, vérifiez d'avoir un espace disque libre suffisant. L'avantage de synchroniser en local est que la lecture et l'édition de certain gros fichiers (audio/vidéo) sera plus rapide. [![Capture d’écran 2023-11-14 à 15.47.25.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-11/scaled-1680-/capture-decran-2023-11-14-a-15-47-25.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-11/capture-decran-2023-11-14-a-15-47-25.png) #### Note sur les options d'intégration Pour éviter par erreur de répartir vos données à des emplacements non désirés (et potentiellement égarer des données), nous vous conseillons de désactiver les deux fonctionnalités suivantes : **Intégration** et **Tresorit Drive**. - Sur Apple MacOS : [![Capture d’écran 2023-10-09 à 17.10.48.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-09-a-17-10-48.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-09-a-17-10-48.png) - Sur Microsoft Windows : [![MicrosoftTeams-image.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/4QQmicrosoftteams-image.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/4QQmicrosoftteams-image.png) #### Note sur le travail collaboratif Parfois il est possible que plusieurs collaborateur·rice·s désirent modifier le même fichier. Certaines solutions d'édition collaboratives telle que Google Drive, Microsoft OneDrive ou OnlyOffice permettent à plusieurs collaborateur·rice·s de modifier simultanément le même document. Tresorit ne permet pas cela. Cependant, il offre un système de verrou (*lock*) pour prévenir vos collaborateur·ice·s que vous êtes en cours d'édition. Ceci permet d'éviter des conflits de version. Ouverture du fichier Projet.docx par la·le collaborateur·ice 1 : [![Capture d’écran 2023-10-30 à 11.31.27.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/capture-decran-2023-10-30-a-11-31-27.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/capture-decran-2023-10-30-a-11-31-27.png) Verrou (lock) visible sur le fichier Projet.docx pour la·le collaborateur·ice 2 : [![MicrosoftTeams-image (2).png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/scaled-1680-/microsoftteams-image-2.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-10/microsoftteams-image-2.png) Si vous souhaitez des informations complémentaires, vous pouvez consulter la [documentation officielle de Tresorit](https://support.tresorit.com). Notez bien que de nombreuses étapes qui y sont décrites ne s'appliquent pas aux spécificités de l'offre Tresorit UNIL. #### Fonctionnalité de demande de fichiers Il est possible pour les chercheur·e·s ayant un compte Tresorit d'utiliser la fonctionnalité « Demandes de fichiers ». Celle-ci permet de proposer à une personne n'ayant pas de compte Tresorit de déposer un fichier grâce à un simple lien envoyé par courriel. Le fichier est seulement copié dans l'espace du·de la chercheur·e·s après une étape de validation. La personne n'ayant pas de compte Tresorit n'a jamais accès au stockage Tresorit. # FAQ Tresorit

[![en.png](https://wiki.unil.ch/ci/uploads/images/gallery/2024-01/scaled-1680-/en.png) English](https://wiki.unil.ch/ci/books/research-data-storage/chapter/sensitive-data-tresorit)

##### Qu'est-ce que Tresorit ? Tresorit est un service de stockage et de partage de fichiers. C'est un service spécifique pour les données sensibles : il a la particularité d'offrir une sécurité renforcée par un contrôle d'accès avancé et un chiffrement des données. Plus de détails sur la page [Description de Tresorit](https://wiki.unil.ch/ci/books/research-data-storage/page/description-de-tresorit "Description de Tresorit"). ##### Qu'est-ce qu'une donnée sensible ? Dans le langage courant, les données sont parfois qualifiée de sensibles de manière vague. Cependant, les lois Suisses en donnent une définition très précise ([Art. 4, al. 1 et 2 de la LPrD](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01)) s'appliquant aux administrations cantonales vaudoises, y compris l'UNIL : « Toute donnée personnelle \[toute information qui se rapporte à une personne identifiée ou identifiable\] se rapportant : - aux opinions ou activités religieuses, philosophiques, politiques ou syndicales, ainsi qu'à une origine ethnique ; - à la sphère intime de la personne, en particulier à son état psychique, mental ou physique ; - aux mesures et aides individuelles découlant des législations sociales ; - aux poursuites ou sanctions pénales et administratives. » Notez qu'il existe aussi une définition marginalement différente dans la loi fédérale ([LPD art. 5](https://www.fedlex.admin.ch/eli/cc/2022/491/fr#art_5)). La loi fédérale s'applique aux personnes privées et organes fédéraux. La recherche sur les maladies humaines et sur la structure et le fonctionnement du corps humain fait l'objet d'une loi spécifique ([LRH](https://www.fedlex.admin.ch/eli/cc/2013/617/fr)). La solution retenue à l'UNIL pour stocker des données sensibles de recherche en conformité avec les lois ci-dessus est Tresorit (voir ci-dessous « Pourquoi utiliser Tresorit ? »). ##### Qui contacter pour demander l'accès à Tresorit ? Si vous pensez que vos données de recherche ont un caractère sensible ([LPrD art. 4](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01) ou [LRH art. 2](https://www.fedlex.admin.ch/eli/cc/2013/617/fr)), veuillez contacter la·le spécialiste données de recherche (*data steward)* de votre faculté qui vous aidera à faire une demande à la division calcul et soutien à la recherche ([DCSR](https://www.unil.ch/ci/fr/home/menuinst/calcul--soutien-recherche.html)). Voir « Aide et renseignement » à la page [Protection des données](https://wiki.unil.ch/ci/books/synchronisation-de-fichiers-onedrive/page/protection-des-donnees#bkmrk-aide-et-renseignemen "Protection des données"). À la suite de cette demande, un rendez-vous en présentiel vous sera proposé afin d'installer et configurer Tresorit d'une part, et de chiffrer votre ordinateur d'autre part. ##### À qui s'adresse Tresorit ? Tresorit s'adresse exclusivement aux chercheur·e·s de l'UNIL et à leurs collaborateur·rice·s scientifiques (internes ou externes). La demande d'utilisation de ce service doit être obligatoirement effectuée par un·e **chef·fe de projet / porteur·euse de projet** affilié·e à l'UNIL. Voir la [directive 4.5 art. 4](https://www.unil.ch/files/live/sites/central/files/textes-leg/4-rech/dir4-5-donnees-rech.pdf) pour la définition de la désignation de **chef·fe de projet / porteur·euse de projet** (*Principal Investigator*). ##### Où sont stockées mes données ? L'UNIL a un contrat spécifique avec Tresorit AG qui garantit la localisation des données en Suisse. Tresorit utilise des stockages en ligne de la plateforme Microsoft Azure (Voir ci-dessous, Comment mes données sont-elles protégées ?) ##### Comment mes données sont-elles protégées ? Les données déposées par les chercheur·e·s depuis leur ordinateur vers le stockage en ligne le sont via le logiciel ou l'interface web Tresorit. L'un et l'autre effectuent un chiffrement préalable à la transmission des données vers le stockage en ligne. Ils nécessitent une vérification de votre identité par mot de passe et par code sur téléphone portable. Dans l'hypothèse où les données seraient volées directement sur le stockage en ligne, le chiffrement qu'ont subi les données rend impossible leur lecture en clair sans la clé de déchiffrement. Dans l'hypothèse où votre ordinateur est perdu ou volé, l'accès aux données sur Tresorit depuis votre ordinateur sera impossible sans votre mot de passe et votre téléphone portable. Les données sensibles synchronisées sur votre ordinateur seront elles aussi inaccessibles car chiffrées lors du rendez-vous avec la DCSR. ##### Que signifie « chiffrement » ? Le chiffrement (parfois appelé cryptage) est un procédé algorithmique grâce auquel on souhaite rendre impossible la compréhension d'un document à toute personne n'ayant pas accès à la clé de déchiffrement. ##### Pourquoi utiliser Tresorit ? Les chercheur·e·s de l'UNIL qui travaillent avec des données sensibles ([LPrD art. 4](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01)) ou des données sensibles LRH ([LRH art. 2](https://www.fedlex.admin.ch/eli/cc/2013/617/fr)) soumettent leur projet de recherche à la commission cantonale d'éthique de la recherche sur l'être humain (CER-VD). Afin que les projets soient acceptés par la CER facultaire, la CER UNIL ou la CER-VD, des mesures techniques et organisationnelles doivent être mises en place : - L'accès aux données doit être restreint aux chercheur·e·s concerné·e·s ([Guide du PFPDT 2015 p11](https://www.edoeb.admin.ch/dam/edoeb/fr/Dokumente/aDSG/guideTOM_fr.pdf.download.pdf/guideTOM_fr.pdf)). - Les données doivent être stockées de manière chiffrée ([Guide du PFPDT 2015 p20](https://www.edoeb.admin.ch/dam/edoeb/fr/Dokumente/aDSG/guideTOM_fr.pdf.download.pdf/guideTOM_fr.pdf)). - Une traçabilité des accès et modifications des données doit être assurée ([ORH art. 5c](https://www.fedlex.admin.ch/eli/cc/2013/642/fr)). Toutes ces mesures ont pour but de protéger les personnes contre l'utilisation abusive des données les concernant ([LPrD art. 1](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01)). Tresorit est un service offrant ces trois fonctionnalités. ##### Qui peut accéder à mes données ? Seules quatre personnes disposent du rôle d'administrateur Tresorit à l'UNIL. Tous ces administrateurs Tresorit sont employés du Centre Informatique. Les administrateurs Tresorit ont la possibilité de changer le mot de passe d'un utilisateur en cas d'oubli (protection contre la perte/destruction des données, [LPrD art. 10](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01)). Lors de ce changement de mot de passe, qui fait l'objet de traçabilité et se fait sur demande du·de la **chef·fe de projet** **/ porteur·euse de projet** (*Principal Investigator* comme désigné dans la [directive 4.5 art. 4](https://www.unil.ch/files/live/sites/central/files/textes-leg/4-rech/dir4-5-donnees-rech.pdf)), l'accès aux fichiers par l'administrateur Tresorit est temporairement possible. La solution Tresorit est conçue pour que ni l'entreprise Tresorit ni le prestataire de stockage ne puissent accéder aux données déchiffrées. ##### Quel est le volume disponible ? L'offre UNIL propose jusqu'à 2 To par **chef·fe de projet** **/ porteur·euse de projet** (*Principal Investigator, PI*) quel que soit le nombre de projets sous sa supervision. ##### Puis-je collaborer avec des personnes hors de l'UNIL ? Oui. Le centre informatique de l'UNIL prend en charge le coût de toutes les licences Tresorit pour les membres de l'UNIL (gratuit). Si un projet de recherche a besoin de donner accès à des personnes hors de l'UNIL, trois licences gratuites sont mises à la disposition du·de la **chef·fe de projet** **/ porteur·euse de projet** (*Principal Investigator, PI*). Si plus de trois personnes externes sont nécessaires, un coût de 150 CHF par an et par personne est à la charge du·de la PI. Dans le cas où une personne externe à l'UNIL possède déjà un compte Tresorit non affilié à l'UNIL, il est pour l'instant impossible d'utiliser ce compte pour accéder aux données de recherche UNIL. ##### Quelle est la stratégie de sauvegarde (backup) de Tresorit ? Étant donné que le stockage en ligne utilise la plateforme Microsoft Azure, il existe contractuellement trois copies physiques des données. # Sensitive Data (Tresorit) The Tresorit solution has been selected by UNIL since October 2023 for the storage of sensitive research data. This service is designed for storing and sharing files. It offers enhanced security through advanced access control and data encryption. # Description of Tresorit

[![fr.gif](https://wiki.unil.ch/ci/uploads/images/gallery/2024-01/fr.gif) Français](https://wiki.unil.ch/ci/books/research-data-storage/chapter/donnees-sensibles-tresorit)

Tresorit is a **file storage and sharing service**. It offers enhanced security through advanced access control and data **encryption** (see [FAQ](https://wiki.unil.ch/ci/books/research-data-storage/page/faq-tresorit-h5G)). This solution has been selected by UNIL since October 2023 for the storage of **sensitive research data** ([LPrD art. 4](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01)). UNIL researchers are therefore encouraged to use it. Use is free for researchers up to **2 TB** per user. Simply make a request to your **data steward** as indicated in the [FAQ](https://wiki.unil.ch/ci/books/research-data-storage/page/faq-tresorit-h5G). Please note that the request must be made by a **project leader** (Principal Investigator as designated in [directive 4.5 art. 4](https://www.unil.ch/files/live/sites/central/files/textes-leg/4-rech/dir4-5-donnees-rech.pdf)). Each new research project is associated with a new application. In practice, Tresorit takes the form of a web interface, or software to be installed on your computer, which enables you to deposit and share your research data between project members. The data is stored online in encrypted form. It can be synchronised on your computer's hard drive and accessed locally. A project leader can decide to invite collaborators (from within or outside UNIL). The only constraint is that employees must make an **appointment** with CI/DCSR staff to obtain their account. A group appointment is possible to speed up the procedure. During the appointment, we will activate your computer's encryption. Note that the appointment is also necessary if your computer is already encrypted. View of the Tresorit web interface: [![Screenshot 2023-12-22 at 18.08.17.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-18-08-17.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-18-08-17.png) View of the Tresorit software installed on your computer: [![Screenshot 2023-12-22 at 18.10.04.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-18-10-04.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-18-10-04.png) # How do I use Tresorit?

[![fr.gif](https://wiki.unil.ch/ci/uploads/images/gallery/2024-01/fr.gif) Français](https://wiki.unil.ch/ci/books/research-data-storage/chapter/donnees-sensibles-tresorit)

##### Using the web interface Before using Tresorit at UNIL, you must follow the procedure indicated in the "[Who should I contact to request access to Tresorit](https://wiki.unil.ch/ci/link/1625#bkmrk-who-should-i-contact)" section of the FAQ. This includes a face-to-face appointment. To access the Tresorit online interface, log in at: [https://web.tresorit.com](https://web.tresorit.com) - **UNIL employees**: log in with your UNIL e-mail address and your Tresorit password. - **External employees**: log in with the e-mail address you used for your Tresorit appointment and your Tresorit password. If you have forgotten your password, contact us using [this contact form](https://www.unil.ch/ci/home/menuinst/calcul--soutien-recherche/contact-en.html). You can also contact the Helpdesk (), **specifying "DCSR" in the object of your e-mail**. [![Screenshot 2023-12-22 at 18.15.12.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-18-15-12.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-18-15-12.png) Use your mobile phone to retrieve the validation code associated with your Tresorit account (this step was configured when you first logged in). [![Screenshot 2023-12-22 at 18.17.42.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-18-17-42.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-18-17-42.png) You will then reach the Tresorit web interface

Please note that Tresorit will offer you a tutorial including the installation of Android or iOS applications, as well as the possibility of sharing files by link. These steps should be ignored as they are prohibited for UNIL Tresorit accounts.

[![Screenshot 2023-12-22 at 18.20.59.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-18-20-59.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-18-20-59.png) ##### Uploading a file to Tresorit To upload a file to Tresorit, double-click on the folder corresponding to your project to move inside. Then click on the "Import" button and select the folder or files you want. You can also drag and drop your files to the web interface. The data will then be copied to Tresorit online storage. [![Screenshot 2023-12-22 at 18.31.57.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-18-31-57.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-18-31-57.png) ##### Share a file uploaded to Tresorit To share one or more files with your research colleagues, you need to place them in a folder and configure the sharing options for this folder. Hover over the folder and click on the 'Share' button on the right of the explorer, then on 'Invite members'. All you then need to do is add the email addresses of your colleagues and assign them the appropriate permissions. Please note that a Tresorit account managed by UNIL is required (see [FAQ](https://wiki.unil.ch/ci/books/research-data-storage/page/faq-tresorit-h5G)) for all employees. [![Screenshot 2023-12-22 at 18.39.48.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-18-39-48.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-18-39-48.png) [![Screenshot 2024-01-08 at 09.30.31.png](https://wiki.unil.ch/ci/uploads/images/gallery/2024-01/scaled-1680-/screenshot-2024-01-08-at-09-30-31.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2024-01/screenshot-2024-01-08-at-09-30-31.png) ##### Using the Tresorit software installed on your computer If you wish to install the Tresorit software locally on your computer, click on your username at the top right and select "Download desktop app" : [![Screenshot 2023-12-22 at 18.41.45.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-18-41-45.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-18-41-45.png) You can launch the Tresorit software on your computer by clicking on the Tresorit icon. For example, in the launchpad or launch bar on Apple MacOS. [![capture-decran-2023-10-30-a-10-54-18.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/capture-decran-2023-10-30-a-10-54-18.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/capture-decran-2023-10-30-a-10-54-18.png) [![xrNmicrosoftteams-image.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/xrnmicrosoftteams-image.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/xrnmicrosoftteams-image.png) Or on the desktop or start menu on Microsoft Windows. [![RNvmicrosoftteams-image.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/rnvmicrosoftteams-image.png) ](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/rnvmicrosoftteams-image.png)[![9Upmicrosoftteams-image-1.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/9upmicrosoftteams-image-1.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/9upmicrosoftteams-image-1.png) And enter your login and password: [![Screenshot 2023-12-22 at 19.08.22.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-19-08-22.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-19-08-22.png) You will then be taken to the main Tresorit interface:

Please note that Tresorit will offer you a tutorial including the installation of Android or iOS applications, as well as the possibility of sharing files by link. These steps should be ignored as they are prohibited for UNIL Tresorit accounts.

[![Screenshot 2023-12-22 at 19.10.44.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-19-10-44.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-19-10-44.png)

Note for BoxCryptor users (former encryption solution at UNIL): Please do not activate the "Migrate your data" button and do not follow the migration wizard offered by Tresorit. It is preferable to copy your files manually to avoid data loss.

##### Synchronizing files on your computer The folders and files visible in the Tresorit software installed on your computer are by default stored only on Tresorit's online storage. You can activate synchronisation of files and folders between online storage and your computer by clicking on the "Sync this folder" button (on the right below). This way, your files will be accessible on your hard drive even when you're offline. If the volume of your data is very large, make sure you have enough free disk space. The advantage of synchronizing locally is that reading and editing certain large files (audio/video) will be faster. [![Screenshot 2023-12-22 at 19.12.27.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-19-12-27.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-19-12-27.png) ##### Note on integration options To avoid accidentally distributing your data to unwanted locations (and potentially misplacing data), we recommend that you disable the following two features: **Integration** and **Tresorit Drive**. - On Apple MacOS : [![Screenshot 2023-12-22 at 19.13.57.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-19-13-57.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-19-13-57.png) - On Microsoft Windows : [![4QQmicrosoftteams-image.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/NS24qqmicrosoftteams-image.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/NS24qqmicrosoftteams-image.png) ##### Note on collaborative working Sometimes several collaborators may wish to edit the same file. Some collaborative editing solutions such as Google Drive, Microsoft OneDrive or OnlyOffice allow several collaborators to edit the same document simultaneously. Tresorit does not allow this. However, it does offer a lock system to warn your collaborators that you are editing a document. This prevents version conflicts. Example: "Project.docx" file opened by the collaborator 1 : [![Screenshot 2023-12-22 at 19.21.38.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/screenshot-2023-12-22-at-19-21-38.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/screenshot-2023-12-22-at-19-21-38.png) Lock visible on the Project.docx file for user 2: [![microsoftteams-image-2.png](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/scaled-1680-/microsoftteams-image-2.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2023-12/microsoftteams-image-2.png) For further information, please consult the [official Tresorit documentation](https://support.tresorit.com/). Please note that many of the steps described there do not apply to the specific features of the Tresorit contract with UNIL. ##### File request function Researchers with a Tresorit account can use the "File requests" function. This enables anyone who does not have a Tresorit account to submit a file using a simple link sent by e-mail. The file is only copied into the researcher's space after a validation stage. The person who does not have a Tresorit account never has access to the Tresorit storage. # FAQ Tresorit

[![fr.gif](https://wiki.unil.ch/ci/uploads/images/gallery/2024-01/fr.gif) Français](https://wiki.unil.ch/ci/books/research-data-storage/chapter/donnees-sensibles-tresorit)

##### What is Tresorit? Tresorit is a file storage and sharing service. It is a specific service for sensitive data: it offers enhanced security through advanced access control and data encryption. More details on the [Tresorit description page](https://wiki.unil.ch/ci/books/research-data-storage/page/description-of-tresorit). ##### What is sensitive data? In everyday language, data is sometimes described as sensitive in a vague way. However, Swiss law gives a very precise definition ([Art. 4, paras. 1 and 2 of the LPrD](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01)) that applies to the Vaud cantonal administrations, including UNIL: "Any personal data \[any information relating to an identified or identifiable person\] concerning : - religious, philosophical, political or trade union opinions or activities, or ethnic origin ; - the private sphere of the individual, in particular his or her psychological, mental or physical state; - individual measures and assistance arising from social legislation; - criminal or administrative proceedings or sanctions". Note that there is also a marginally different definition in the federal law ([LPD art. 5](https://www.fedlex.admin.ch/eli/cc/2022/491/fr#art_5)). Federal law applies to private individuals and federal organizations. Research into human diseases and into the structure and function of the human body is covered by a specific law ([LRH](https://www.fedlex.admin.ch/eli/cc/2013/617/fr)). ##### Who should I contact to request access to Tresorit? If you think your research data is sensitive ([LPrD art. 4](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01) or [LRH art. 2](https://www.fedlex.admin.ch/eli/cc/2013/617/fr)), please contact your faculty data steward, who will help you make a request to the Computing and Research Support Division ([DCSR](https://www.unil.ch/ci/fr/home/menuinst/calcul--soutien-recherche.html)). See "Aide et renseignements" on the [Data Protection page](https://wiki.unil.ch/ci/books/synchronisation-de-fichiers-onedrive/page/protection-des-donnees#bkmrk-aide-et-renseignemen). Following this request, you will be offered a face-to-face appointment to install and configure Tresorit and to encrypt your computer. ##### Who is Tresorit for? Tresorit is intended exclusively for UNIL researchers and their scientific collaborators (internal or external). The request to use this service must be made by a project leader affiliated to UNIL. See [directive 4.5 art. 4](https://www.unil.ch/files/live/sites/central/files/textes-leg/4-rech/dir4-5-donnees-rech.pdf) for the definition of the designation of Principal Investigator. ##### Where is my data stored? UNIL has a specific contract with Tresorit AG which guarantees that the data is stored in Switzerland. Tresorit uses online storage on the Microsoft Azure platform (see below, How is my data protected?). ##### How is my data protected? Data uploaded by researchers from their computer to online storage is done using the Tresorit software or web interface. Both encrypt the data before it is sent to online storage. They require verification of your identity using a password and a code on your mobile phone. If the data is stolen directly from online storage, the encryption applied to the data makes it impossible to read it in clear text without the decryption key. If your computer is lost or stolen, it will be impossible to access the data on Tresorit from your computer without your password and your mobile phone. Sensitive data synchronized on your computer will also be inaccessible as it will be encrypted during the meeting with the DCSR. ##### What does "encryption" mean? Encryption is an algorithmic process used to make a document impossible to understand for anyone who does not have access to the decryption key. ##### Why use Tresorit? UNIL researchers working with sensitive data ([LPrD art. 4](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01)) or LRH-sensitive data ([LRH art. 2](https://www.fedlex.admin.ch/eli/cc/2013/617/fr)) submit their research project to the cantonal human research ethics committee (CER-VD). Technical and organisational measures must be put in place to ensure that projects are accepted by the CER facultaire, CER UNIL or CER-VD: - Access to data must be restricted to the researchers concerned ([Guide du PFPDT 2015 p11](https://www.edoeb.admin.ch/dam/edoeb/fr/Dokumente/aDSG/guideTOM_fr.pdf.download.pdf/guideTOM_fr.pdf)). - Data must be stored in encrypted form ([Guide du PFPDT 2015 p20](https://www.edoeb.admin.ch/dam/edoeb/fr/Dokumente/aDSG/guideTOM_fr.pdf.download.pdf/guideTOM_fr.pdf)). - Data access and modification must be traceable ([ORH art. 5c](https://www.fedlex.admin.ch/eli/cc/2013/642/fr)). The aim of all these measures is to protect individuals against the misuse of data concerning them ([LPrD art. 1](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01)). Tresorit is a service offering these three functions. ##### Who can access my data? A group of four people are Tresorit administrators at UNIL. All these Tresorit administrators are employees of the IT Centre. Tresorit administrators can change a user's password if they forget it (protection against loss/destruction of data, [LPrD art. 10](https://prestations.vd.ch/pub/blv-publication/actes/consolide/172.65?key=1543934892528&id=cf9df545-13f7-4106-a95b-9b3ab8fa8b01)). When the password is changed, which is subject to traceability and is done at the request of the **project leader** (Principal Investigator as designated in [directive 4.5 art. 4](https://www.unil.ch/files/live/sites/central/files/textes-leg/4-rech/dir4-5-donnees-rech.pdf)), access to the files by the Tresorit administrator is temporarily possible. The Tresorit solution is designed so that neither the Tresorit company nor the storage provider can access the decrypted data. ##### What volume is available? UNIL offers up to 2 To per Principal Investigator (PI), regardless of the number of projects under his/her supervision. ##### Can I collaborate with people outside UNIL? Yes, the UNIL IT Centre covers the cost of all Tresorit licences for UNIL members (free of charge). If a research project needs to give access to people outside UNIL, three free licences are made available to the **project leader** (Principal Investigator, PI). If more than three external persons are required, a fee of CHF 150 per year and per person will be charged to the PI. If a person from outside UNIL already has a Tresorit account that is not affiliated to UNIL, it is currently impossible to use this account to access UNIL research data. ##### What is Tresorit's backup strategy? As the online storage uses the Microsoft Azure platform, there are three physical copies of the data. # S3 storage # Introduction ## What is S3? Amazon S3 (Simple Storage Service) is a scalable object storage service used for storing and retrieving any amount of data at any time. It organizes data into containers called “buckets.” Each bucket can store an unlimited number of objects, which are the fundamental entities stored in S3. ## Understanding S3 Bucket structure - Buckets: These are the top-level containers in S3. Each bucket has a unique name and is used to store objects. - Objects: These are the files stored in a bucket. Each object is identified by a unique key (or ID) within the bucket. - Object Keys: While S3 does not have a traditional file system hierarchy, it uses a flat namespace. The / character in object keys is used to simulate a directory structure, making it easier to organize and manage objects. However, these are not actual directories but part of the object’s key. ## S3 Endpoint Access Accessing S3 is similar to accessing any other web service over HTTP, which most users are already familiar with. The endpoint URL follows the same structure as a typical web address, making it straightforward to understand and use. An S3 endpoint address typically looks like this: https://dnsname.com/bucket-name/object-key - Endpoint: [https://dnsname.com](https://dnsname.com) - Bucket Name: bucket-name - Object Key: object-key For example, if you have a bucket named my-bucket and an object with the key folder1/file.txt, the S3 URL would be: https://dnsname.com/my-bucket/folder1/file.txt ## IAM Key Pairs To access and manage your S3 resources securely, you will use IAM (Identity and Access Management) key pairs instead of a traditional login and password. An IAM key pair consists of an Access Key ID and a Secret Access Key. These keys are used to authenticate your requests to AWS services: - Access Key ID: this is similar to a username - Secret Access Key: this is similar to a password and should be kept secure. Unlike a traditional login and password, different IAM key pairs can be attached to different sets of permissions defined in their policy files. These policies control what actions the keys are allowed to perform, enhancing security by ensuring that each key pair has only the necessary permissions for its intended tasks. # Request S3 bucket To request S3 bucket you have two options. Either you want to attach it to an existing project or you want to create a new project with S3 storage. ## Attach S3 bucket to an existing project In that case send an email to (with subject starting with "DCSR add S3 bucket to project") and providing the following information: - project name - size of the bucket in GB - access allowed from outside UNIL (in read only mode only?) or not - if access is allowed from outside UNIL, should it be limited to a set of IP or network ranges? ## Add S3 bucket to new project When requesting a new project using the dedicated [web application](https://requests.dcsr.unil.ch/), on the resource information selection screen, click on advanced selection as follows: [![image.png](https://wiki.unil.ch/ci/uploads/images/gallery/2025-03/scaled-1680-/yYsimage.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2025-03/yYsimage.png) Then choose "Object Storage, NO BACKUP" article : [![image.png](https://wiki.unil.ch/ci/uploads/images/gallery/2025-03/scaled-1680-/Oj8image.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2025-03/Oj8image.png) Finally, specify your requirements: [![image.png](https://wiki.unil.ch/ci/uploads/images/gallery/2025-03/scaled-1680-/Bl2image.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2025-03/Bl2image.png) # Software to access S3 bucket ## From Curnagl cluster (command line tools) #### Rclone #### awscli ## From your laptop or a workstation #### Command line tools Following the official documentation, you can install Rclone ([https://rclone.org/install/)](https://rclone.org/install/)) or awscli (https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) on your laptop/workstation. Then both tools can be used as described in the above part dedicated to use from Curnagl cluster. #### Cyberduck Cyberduck can be installed from [https://cyberduck.io/download/](https://cyberduck.io/download/). # Share files from a bucket with presign keys ## Purpose AWS presigned URLs (or presign keys) are used to grant temporary access to objects in Amazon S3 without requiring the recipient to have AWS security credentials. Here are the main purposes: - **Download Access**: You can generate a presigned URL to allow someone to download an object from your S3 bucket without needing their own AWS credentials - **Upload Access**: Similarly, you can create a presigned URL to permit someone to upload a specific object to your S3 bucket - **Time-Limited Access**: The access provided by a presigned URL is time-limited, meaning it will expire after a specified duration This is particularly useful for sharing files securely or allowing temporary uploads without exposing your AWS credentials. **Warning: only files can be shared this way, so if you want to share a folder, you have to create an archive of this folder first.** ## Prerequisite The bucket has to be opened on the outside, if it's not the case, send an email to with the subject starting with "DCSR S3 bucket". ## Create a presign key with `aws-cli` You can either install awscli on your laptop since it's a simple Python package, or use it from the cluster (there is a module called `awscli-v2` that you can simploy load). #### Configuration If it's not configured yet, you can run `aws configure` command. This will ask you for: - AWS Access Key ID: you have to provide the read/write access key corresponding to your bucket - AWS Secret Access Key: you have to provide the read/write secret key corresponding to your bucket - Default region name: you can put `us-east-1` - Default output format: you can put `json` This will create two files: - ~/.aws/config - ~/.aws/credentials #### Presign key creation Let's consider that you want the file `to_share/important_file.gz` from the bucket `recn-fac-fbm-dep-greatpi-data`, you can use the following command: ```bash aws --endpoint-url=https://s3.unil.ch s3 presign \ s3://recn-fac-fbm-dep-greatpi-data/to_share/important_file.gz \ --expires-in 604800 ``` The value defined with --expires-in parameter is the validity of the link expressed in seconds. The maximum validity is 7 days. This command will return a link that can be shared with your external collaborator. ## Create a presign key with Cyberduck Once your connection to the bucket is configured with Cyberduck, you can browse it. Then right click to file you want to share, then choose "Copy URL", and choose one of the 3 expiration options (1 hour, 1 day, 1 week). Finally, just paste the result somewhere to get the link. [![image.png](https://wiki.unil.ch/ci/uploads/images/gallery/2025-03/scaled-1680-/aosimage.png)](https://wiki.unil.ch/ci/uploads/images/gallery/2025-03/aosimage.png)