Problem: Windows users of the FermiDash system, fermidash.fnal.gov, are not allowed to view the dashboards after connecting. They received a “permission denied” message. This situation happens almost exclusively while using the Internet Explorer (IE) or Edge browsers. In most cases, the user is no longer prompted with a login box, which would allow them to enter Services username and password.
Cause: This is caused by the implementation of the Fermilab “Single Sign On (SSO) feature in November 2018. The FermiDash system is in the “Services” domain, and the SSO feature automatically tries to log the user in to FermiDash using the “Fermi” domain and its associated password. This will not work for FemiDash, and therefore the dashboards are not shown.
Workaround: The following steps can be taken to remedy the situation:
- All users should make sure they are connected to the lab network either on-site or via VPN.
2. Microsoft Edge or IE users must enter the following command in the Windows command box and/or the Command Window (NOTE: Chrome and Firefox users do not have to perform this step.) Once you do this, your Services account will be the default.
cmdkey /add:cdv-fdashp.fnal.gov /user:services\username (space between cmdkey and / and .gov and /)
3. Depending on your browser, you may see different prompts. Follow the instructions for your browser and the prompt you are getting:
IE
a. Make sure you’re connected to the lab network/VPN.
b. When you attempt to login, by default, IE prompts you to use your Fermi (Windows logon) password. NOTE: This will get permanently overridden once you perform Step 2 above. To use your Services password instead:
o Click Use a different account, then click OK.
o Click More choices, then click OK:
o Enter services\yourusername and your Services password
o Click OK.
c. If you’re using a YubiKey on your computer, you will be prompted to enter a PIN. However, YubiKey is not used to authenticate to FermiDash. Click More choices:
- If you see your services\username account listed, select it and click OK:
o Enter your Services password, then click OK:
- If you do not see your services\username account listed, click Use a different account and click OK.
- Enter services\yourusername and your Services password.
- Click OK.
d. If you attempt to log in using your FERMI domain (Windows logon ) account, you will get an error:
Edge
a. Make sure you’re connected to the lab network/VPN.
b. When you attempt to login, by default, IE prompts you to use your Fermi (Windows logon) password. NOTE: This will get permanently overridden once you perform Step 2 above. To use your Services password instead:
o Click Use a different account, then click OK.
o Click More choices, then click OK:
o Enter services\yourusername and your password.
o Click OK.
c. If you’re using a YubiKey on your computer, you will be prompted to enter a PIN. However, YubiKey cannot be used to authenticate to FermiDash.
o Click More choices, then click OK:
-
- Click Use a different account, then click OK.
- Enter services\yourusername, then your Services password
- Click OK:
d. If you attempt to log in using your FERMI domain (Windows logon ) account, you will get an error:
4. If the above workarounds do not work, contact Desktop Support via the Service Desk.