Welcome to the IQ computing environment. By finding the IQwiki you have already finished the first step to get started. The IT section contains most necessary information information concerning computers in our institute. This page will give you some basic information about our computers and servers.

With an IQ-account, you will gain access to to our IT services hosted at the IQ, so in principle, everything that ends with *.iqo.uni-hannover.de.
Some groups might use additional IT services that are not hosted by the IQ. For this, you address your respective group leader directly. Below, you find a short list of additional IT services that are commonly used.

What account do I need for which IT service?

What account do I need for which IT service?

	IQ-Account	E-Mail [1]	LUH-ID [2]
*.iqo.uni-hannover.de
*.projekt.uni-hannover.de (Gitlab, Seafile, etc)
*.cloud.uni-hannover.de (Gitlab, Seafile, etc)

[1] Invitation by a respective “Projektablage” admin of your group
[2] Must be enlisted at the LUH as student or employee.

• Get an IQ-account: Ask one of the IQ-Admins to get one. Best practice is to drop by in person. If this does not work for you, provide the admin with at least the following mandatory information via mail (put your supervisor in CC!)
  • Did you already had an IQ-Account? If so, communicate this.
  • Your full name
  • A valid email address: Preferably, your mail address at the institute for quantum optics. Alternatively private mail. If you get an institute mail later (M.Sc. and above), get back in contact with an admin, once you received it.
  • Your mobile phone number used for password delivery via SMS
  • Your group & supervisor
  • Your status in the group (B.Sc, M.Sc, PhD, external, …)
• Please read the Password Policy: Our servers are accessible worldwide. So the choice of a secure password is crucial. No re-use of an existing password of yours. Make up a unique password for your IQ account.
• Get an email account: This should be part of your Laufzettel, handed out to you by Frau Kaisik. If you urgently needed, we can sideline the process and manually activate your IQ account with your private email address. However, once you have a valid institute email address, reach back to us so we can update the account. For information about mail configuration read the IQwiki page on Mail Configuration.

Once you have an account, you might want to read about certain internals like…

• Read the Introduction to AFS: AFS is a distributed file system, which allows access to your files on the server. This will give you an overview over the basic features of our file server.
• Printing: We provide several printers in our institute and can also use some RRZN printers. For more information read the printer setup and poster printing article.
• Software: We offer automatic distribution of common software via WPKG
• Mailing lists: You are automatically subscribed to several mailing lists of your group, once you have an IQ account.
• General safety: You will require general safety instructions, when working at the IQ.
• VPN (Access from outside): To access our servers from e.g. home, you can use the VPN service of our institute.

In order to connect your computer to our network, you need to perform the following steps:

It is highly recommended to use dedicated anti-virus software on your Windows machine. You can use the university's license for Bitdefender. See Anti-virus software for details and drawbacks.

• You need a valid MAC address to connect your device to the institute's network. See here, how to find your MAC Address.
• Communicate the following information to one of our admins.
  • MAC Address: Use colons for separation of tuples. I.e., AB:CD:EF:01:23:45 or ab:cd:ef:01:23:45 notation. Alternatives such as “AB-CD-EF-01-23-45” or “ABCDEF012345” are an additional hassle for the admin.
  • Experiment / Workgroup
  • Computer Type. Must be one of:
    • Lab (lab computers & devices)
    • Office (permanent Desktop PCs)
    • Laptop (laptops owned by the )
    • Private (your private device)
    • Guest (a device operated by a temporary guest of the institute)
    • Server (computing devices & Servers)
    • Printer
    • USB Ethernet Adapter
  • Computer Name
    • For computer types “Lab”, “Office”, “Laptop”, “Server”: The exact host name that the computer announces itself to the network. You need to set this string in the system section of your computer.
      • Make sure to choose a name that can be interpreted by human minds. Please avoid MS windows generated names like desktop-1gk4d65 or unmeaning strings like rasel-mbp (“Apple generic”. mbp = MacbookPro).
      • Stick to the naming convention of your research group when applicable. E.g.: vlbai-oc-05 or qc-oc-13
    • For private devices, the communicated hostname should be: “YourName-PRIV” (No need to change your computers name to this!)
    • For USB Ethernet Adapter: “YourName-USB” or “Hostname-USB” (No need to change your computers name to this!)
  • User
    • The name of the person responsible for the device.
    • For Guest devices: If the guest gets an IQ account, use their name. Otherwise: The person, who invited the guest
  • Building number & Room number (Use this sitemap)
    • Some common building numbers:
      • LUH: 1101
      • HITec: 3402
      • HITec Offices: 3406
      • LNQE: 3430
  • Confirmation, that you will install the inventory agent inventory agent on your system (happens automatically, if you intend to use WPKG)

• Mandatory: Install the inventory agent. If you intend to use WPKG, the inventory agent will be automatically deployed to your machine.
• Consider using WPKG to deploy and automatically update common software to your Windows device.
• Configure Kerberos and AFS: On Windows ideally use WPKG to get AFS installed and configured automatically. Otherwise see Install AFS on your computer for more details.
• Get your computer domain joined: Optional but highly recommended. If your computer is of type Lab, Office or Laptop (LUH payed), joining the IQO domain will allow you and everyone else to login with IQO credentials. Computers in the IQO domain benefit from SingleSignOn (SSO): Less password-typing except for when you login to your Windows Machine. To have the computer join the IQO domain, an admin needs to physically drop by and perform their magic.