Frontenac 2.0
We are updating our High-Performance Computing (HPC) Infrastructure, Frontenac.
Frontenac 2.0 will include a new storage system, additional compute nodes, and a new identity management system.
Table of Contents
We’ve made sure your existing access, data, and workflows remain unaffected during the upgrade. SSH and HTTPS access stay the same (login.cac.queensu.ca), directory paths like /home, /scratch, and /project are unchanged, and all project/group memberships are preserved. The documentation (Wiki) also remains at info.cac.queensu.ca.
👉 For full details, see the What will NOT Change section below.
⚠️ Frontenac HPC cluster will be unavailable from Friday, May 30 at 8:00 AM to Tuesday, June 3 due to the system upgrade.
Please note that any jobs pending at the time of the outage will not resume automatically and will need to be re-submitted once the cluster is back online.
Key Changes
Multi-Factor Authentication (MFA) is required
All users must enable Multi-Factor Authentication (MFA) when activating their account. This additional layer of security uses Time-based One-Time Passwords (TOTP).
To complete your account setup, please ensure you have an MFA application installed on your mobile device. You may already be using Microsoft Authenticator, Duo Mobile, Google Authenticator, or FreeOTP (Red Hat). Any OTP application should work.
After activating your account, when connecting to the Frontenac HPC cluster, you will be prompted to input your second factor (OTP) after supplying your password.
Account Activation for Existing Users
To continue accessing your projects and resources, all existing users must activate their account in the new ColdFront portal.
You will receive an email notification when the new system goes live and your account has been migrated.
To activate your account:
- Go to the ColdFront portal.
- Enter your username or email and click Sign In.
- On the password prompt screen, click Forgot Password.
- On the Forgot Password page, confirm your username or email, then click Submit.
- Check your registered email for a password reset link. Click the link to access the reset page.
Note: The password reset email will come from cadvcomp@queensu.ca — please check your spam or junk folder if you don’t see it.
- Set your new password.
- Complete Multi-Factor Authentication (MFA) setup to secure your account.
SSH Keys
Important changes are coming to SSH keys:
- SSH Server Key Update
The SSH host key forlogin.cac.queensu.cawill be updated. When connecting via terminal, you may receive a warning that the host key has changed (see examples here). This is expected and safe. - User SSH Key Re-Submission Required
Existing user SSH keys (e.g., in.ssh/authorized_keys) will no longer work. - Public Key Account Management
Going forward, access to Public Key Account Management will be granted only for approved use cases (e.g., automated workflow). IP address restrictions will be mandatory for all submissions.
To request access, please complete and submit the SSH Key Management Request Form. Once your request is approved, you’ll be able to upload your new SSH public key via the ColdFront portal.
- SSH Server Key Update
Slurm Partitions and Qos Updates
Frontenac 2.0 introduces a simplified job submission process—specifying --partition and --qos is no longer required. The job will be automatically assigned a partition based on the resource ask which includes time limit, resource type, and size of the job (CPU and memory).
Existing job scripts will continue to function without modification.
Thank you for your attention as we transition to this improved system.
Note: All official communications regarding your account, including activation details and approval notifications, will be sent from Centre for Advanced Computing (cadvcomp@queensu.ca). For your security, please ensure that you only trust messages originating from this address. If you do not see the email in your inbox, kindly check your spam or junk folder.
What will NOT change
We’ve worked hard to make the transition seamless for preserving your access, data, and workflows.
User Data
All existing user data will be retained and migrated without changes to directory paths (e.g., /home, /scratch, /project).
Project and Group Membership
User and group ownership, as well as project memberships, will remain unchanged.
SSH Hostname
The SSH hostname will remain the same: login.cac.queensu.ca.
HTTPS/Open OnDemand Access
Access via HTTPS and Open OnDemand will continue to use the same hostname: login.cac.queensu.ca.
Documentation (Wiki)
The Wiki will remain accessible at info.cac.queensu.ca.
Once logged into ColdFront or Open OnDemand, you can also access the Wiki by clicking the Help icon .
Cluster Access and Usage
There will be no changes to how you access or use the Frontenac HPC cluster—your existing workflows remain supported.
New Features
Interactive Apps via Open OnDemand
Interactive interface for running applications such as Jupyter and RStudio are now accessible through the Open OnDemand platform.
Once your account is approved, you’ll be able to launch these applications directly from the portal.
We will be adding more interactive applications over time, so stay tuned for updates.
Coldfront - Self-service User Portal
ColdFront is our new user portal where all Frontenac HPC cluster users can manage their accounts and projects.
Collaborators can access their assigned projects and update their account information.
Principal Investigators (PIs) can manage project memberships, approve applications, request resource allocations, and perform other administrative tasks related to their research project.
Account application and approval
Principal Investigator (PI) Application
Applicable to: Faculty, adjunct faculty, librarian, or a lead researcher
- Fill out the form and ensure you select Principal Investigator (PI) as your role.
- CAC will review and validate your request. We may contact you to confirm details before approval.
Collaborator Application
Applicable to: Undergraduate student, Master's student, Doctoral student, Postdoctoral fellow, External Collaborator, Researcher, Research Assistant, or a support staff.
- Fill out the form and ensure you select the Collaborator as your role.
- Enter your Principal Investigator's institutional email address that is registered in our system.
- Click the search icon to populate available projects linked to the PI.
- Select the correct Project ID for which you wish to apply the account.
- Once application is submitted, your PI will be notified and must approve your application.
- Once approved by the PI, CAC will finalize your account approval.
Principal Investigators are now required to approve user's application through the portal before CAC can approve the account.
Once the account application has been approved by the CAC, user should receive an email containing instructions on how to access their account for the first time.
Signing in for the first time - users will be required to change their password and set a multi-factor authentication.
Frequently Asked Questions
I am an existing user, will my data be copied to the upgraded system?
How will I know if my account is ready?
Existing users will receive an email after the upgrades are completed – please follow the Account Activation procedure.
What should I do when I receive warning when connecting through SSH?
Receiving a warning regarding the host key changes is expected after the updates. To be able to connect successfully, kindly accept the new server host key.
Below are sample screenshots of the warning:
MobaXterm
Putty
Whom can I contact for questions about the transition?
Please contact our support team at cac.help@queensu.ca.
