{"id":6673,"date":"2021-11-30T12:34:04","date_gmt":"2021-11-30T12:34:04","guid":{"rendered":"https:\/\/research.reading.ac.uk\/act\/?post_type=kbe_knowledgebase&p=6673"},"modified":"2026-02-06T14:34:36","modified_gmt":"2026-02-06T14:34:36","slug":"nx-authorization-code","status":"publish","type":"kbe_knowledgebase","link":"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/","title":{"rendered":"NX authorization code"},"content":{"rendered":"

When accessing the NX remote desktop service at nx.reading.ac.uk:4443<\/a> from off-campus, you may be prompted to enter a one-time \u201cAuthorization Code.\u201d This code is either generated by an authentication app (if configured) or sent to your University of Reading (UoR) email address.<\/strong><\/p>\n

 <\/p>\n

In this article, you will find key instructions on how to:<\/span><\/b><\/h4>\n
    \n
  • Section 1: Check if you need to apply for access.<\/span><\/li>\n
  • Section 2: Login to NX using a one-time authentication code emailed to your UoR email address.<\/span><\/li>\n
  • Section 3: Set up your authenticator app (optional, but recommended for experienced users).<\/span><\/li>\n<\/ul>\n

     <\/p>\n

    1. Determine if you need to apply for access<\/span><\/h1>\n

    Off-campus access to NX requires prior registration.<\/span> If you’re not registered, after entering your UoR credentials and they are verified<\/span>, you’ll receive an error message similar to:<\/p>\n

    \"Authentication<\/p>\n

    If you’ve entered your password correctly but still see this message, you need to request access.<\/span> Submit a ticket to the Digital Technology Services (DTS) to be added to the arc-remote-users group, which grants access to Linux\/ARC remote services, including NX.<\/span><\/p>\n

    Important:<\/strong> Use your UoR email address or the self-service portal to submit your request.<\/span> This ensures we can verify the authenticity of your application.<\/span> Additional verification steps may be necessary in some cases.<\/span><\/p>\n

    When connecting from the UoR campus network, via VPN, or through arc-ssh.reading.ac.uk, only your UoR password is required\u2014no additional authentication is needed.<\/span><\/p>\n

     <\/p>\n

    2. Logging in using one-time email codes<\/span><\/h1>\n

    After successfully entering your UoR password, you’ll be prompted for an authorization code, like in the following example:<\/span><\/b><\/p>\n

    \"\"<\/p>\n

    If you haven’t set up an authenticator app, a 6-digit code will be sent to your university email with the subject line: <\/span>arc-remote.reading.ac.uk off-campus access<\/strong><\/p>\n

    To proceed:<\/strong><\/p>\n

      \n
    1. \n

      Open the email and locate the 6-digit code.<\/span><\/p>\n<\/li>\n

    2. \n

      Enter this code into the \u201cAuthentication code\u201d field.<\/span><\/p>\n<\/li>\n

    3. \n

      If the code is mistyped or expires, a new code will be sent automatically.<\/span><\/p>\n<\/li>\n<\/ol>\n

      Note:<\/strong> The code is valid only for the current authentication attempt and expires after 60 seconds<\/strong>.<\/span> Ensure your email client is open and ready to receive the code to avoid delays.<\/span> If the code expires, you’ll need to restart the login process to receive a new code.<\/span><\/p>\n

      New users of UoR Linux systems can stop here and just use the email codes to login. However, we recommend that all users, once they have some experience in using our systems, set up a more robust method for two-factor authentication. The method of authentication following in the next section will replace the email code authentication.<\/span><\/p>\n

       <\/p>\n

      3. Setting up Google Authenticator (Recommended)<\/span><\/h1>\n

      For a more reliable and efficient authentication method, we recommend setting up an authenticator app on your mobile phone, such as Microsoft Authenticator (this is preferred because it is already used with other UoR services) <\/span> or Google Authenticator.<\/span> Once configured, these apps generate time-based codes, eliminating the need for email-based authentication.<\/span><\/p>\n

      We recommend to replace email codes with Google Authenticator codes<\/strong> because email is not a reliable way to deliver the authentication code on time. There is a risk you might not be able to login when there is some delay with your email delivery. Note the authentication code for NX is the same as the one as used by arc-ssh so if you have already setup arc-ssh you just use those codes.<\/span><\/p>\n

      Some additional information: <\/span>The general idea of Google Authenticator is as follows: A secret key is placed in a file on the server. On the ACT systems using this method of authentication the file is located at \/var\/authenticator\/<UoR username>\/.google_authenticator. The secret key is also transferred to your mobile device when you scan the QR code (you can also achieve this by copying the secret key by hand, or by using the URL to have the QR code displayed in a web browser), and it is stored in the authenticator app. The secret key plus the current time is used to generate time based verification codes. Comparing those verification codes confirms the identity of the device used to authenticate the connection.<\/span><\/p>\n

       <\/p>\n

      Setup Instructions:<\/strong><\/p>\n

        \n
      1. \n

        Install the Microsoft Authenticator or Google Authenticator app on your mobile device (both apps are compatible and the setup instructions are the same in both cases).<\/span><\/p>\n<\/li>\n

      2. \n

        Log in to the NX service and open a terminal window. Alternatively, you can also follow the same process on arc-ssh.<\/span><\/p>\n<\/li>\n

      3. \n

        Run the setup script \/usr\/local\/bin\/google-authenticator to generate a QR code (see the example below).<\/span><\/p>\n<\/li>\n

      4. \n

        Scan the QR code using your authenticator app to link your account.<\/span><\/p>\n<\/li>\n<\/ol>\n

        Once set up, your authenticator app will generate 6-digit codes required for future logins.<\/span> This method is also compatible with arc-ssh.reading.ac.uk,\u00a0allowing for a unified authentication approach across our remotely accessible servers.<\/span><\/p>\n

        EXAMPLE:<\/strong><\/h5>\n

        We initially login to https:\/\/nx.reading.ac.uk:4443 using the email code as the two-factor authentication method. Once we are connected, we run the script which replaces the email codes with Google Authenticator codes in a mate terminal, as follows:\u00a0 \u00a0 \u00a0<\/span><\/p>\n

        ab123456@nxnode3:~$ \/usr\/local\/bin\/google-authenticator \r\nWarning: pasting the following URL into your browser exposes the OTP secret to Google:\r\nhttps:\/\/www.google.com\/chart?chs=200x200&chld=M|0&cht=qr&chl=otpauth:\/\/totp\/ab123456@arc-remote.reading.ac.uk%3Fsecret%3DFOO3L3KAPLYPSA7WG3D6YSJBAA%26issuer%3Darc-remote.reading.ac.uk<\/pre>\n
        \"NX<\/p>\n
        Your new secret key is: FOO3L3KAPLYPSA7WG3D6YSJBAA\r\nYour verification code is 843654\r\nYour emergency scratch codes are:\r\n27275024\r\n33549668\r\n50127586\r\n91900156\r\n28478521<\/pre>\n
        It makes sense to save a copy of the <\/span>emergency\u00a0 <\/span>scratch codes. You can use them in case you are not able to login with the standard, time based, verification codes.<\/span><\/p>\n
        The URL, the QR code and the secret key contains the same secret, they should not be revealed, printed or stored in a file.<\/span><\/b>\u00a0<\/span><\/p>\n
        If you have problems with the QR code displayed in the text console, you can use the provided URL, or you can copy the secret key as text.<\/span><\/b> The configuration script is modified to store the Authenticator files in custom shared location, not in your shared home directory. This way, the secret used for off-campus authentication is more secure, and also setting it up on NX or arc-ssh will not affect how you login to other UoR services. <\/span><\/p>\n
        Note that every time you run the script, a new secret code is created and the old one is overwritten. That means that each time you run the script, you need to scan the QR code again.\u00a0\u00a0<\/span><\/p>\n
        If you want to revert to using email codes, you will need to remove the file <\/span>\/var\/authenticator\/<UoR login>\/.google_authenticator<\/span>.\u00a0<\/span><\/p>\n
         <\/p>\n","protected":false},"excerpt":{"rendered":"
        When accessing the NX remote desktop service at nx.reading.ac.uk:4443 from off-campus, you may be prompted to enter a one-time \u201cAuthorization Code.\u201d This code is either generated by an authentication app (if configured) or sent to your University of Reading (UoR) email address.       In this article, you will find key instructions<\/p>\n","protected":false},"author":364,"featured_media":536,"template":"","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"__cvm_playback_settings":[],"__cvm_video_id":"","_links_to":"","_links_to_target":""},"kbe_taxonomy":[101,81,80],"kbe_tags":[],"class_list":["post-6673","kbe_knowledgebase","type-kbe_knowledgebase","status-publish","has-post-thumbnail","hentry","kbe_taxonomy-linux-desktop","kbe_taxonomy-related-articles","kbe_taxonomy-user-guides"],"acf":[],"yoast_head":"\nNX authorization code - Academic Computing Team<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NX authorization code - Academic Computing Team\" \/>\n<meta property=\"og:description\" content=\"When accessing the NX remote desktop service at nx.reading.ac.uk:4443 from off-campus, you may be prompted to enter a one-time \u201cAuthorization Code.\u201d This code is either generated by an authentication app (if configured) or sent to your University of Reading (UoR) email address.    In this article, you will find key instructions\" \/>\n<meta property=\"og:url\" content=\"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/\" \/>\n<meta property=\"og:site_name\" content=\"Academic Computing Team\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-06T14:34:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/research.reading.ac.uk\/act\/wp-content\/uploads\/sites\/2\/2017\/07\/NMLogo-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"256\" \/>\n\t<meta property=\"og:image:height\" content=\"256\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/\",\"url\":\"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/\",\"name\":\"NX authorization code - Academic Computing Team\",\"isPartOf\":{\"@id\":\"https:\/\/research.reading.ac.uk\/act\/#website\"},\"datePublished\":\"2021-11-30T12:34:04+00:00\",\"dateModified\":\"2026-02-06T14:34:36+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/research.reading.ac.uk\/act\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Knowledgebase\",\"item\":\"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"NX authorization code\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/research.reading.ac.uk\/act\/#website\",\"url\":\"https:\/\/research.reading.ac.uk\/act\/\",\"name\":\"Academic Computing Team\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/research.reading.ac.uk\/act\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/research.reading.ac.uk\/act\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/research.reading.ac.uk\/act\/#organization\",\"name\":\"University of Reading\",\"url\":\"https:\/\/research.reading.ac.uk\/act\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/research.reading.ac.uk\/act\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/research.reading.ac.uk\/act\/wp-content\/uploads\/sites\/2\/2017\/08\/cropped-University_of_Reading_shield-1.png\",\"contentUrl\":\"https:\/\/research.reading.ac.uk\/act\/wp-content\/uploads\/sites\/2\/2017\/08\/cropped-University_of_Reading_shield-1.png\",\"width\":512,\"height\":512,\"caption\":\"University of Reading\"},\"image\":{\"@id\":\"https:\/\/research.reading.ac.uk\/act\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NX authorization code - Academic Computing Team","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/","og_locale":"en_GB","og_type":"article","og_title":"NX authorization code - Academic Computing Team","og_description":"When accessing the NX remote desktop service at nx.reading.ac.uk:4443 from off-campus, you may be prompted to enter a one-time \u201cAuthorization Code.\u201d This code is either generated by an authentication app (if configured) or sent to your University of Reading (UoR) email address.    In this article, you will find key instructions","og_url":"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/","og_site_name":"Academic Computing Team","article_modified_time":"2026-02-06T14:34:36+00:00","og_image":[{"width":256,"height":256,"url":"https:\/\/research.reading.ac.uk\/act\/wp-content\/uploads\/sites\/2\/2017\/07\/NMLogo-1.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/","url":"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/","name":"NX authorization code - Academic Computing Team","isPartOf":{"@id":"https:\/\/research.reading.ac.uk\/act\/#website"},"datePublished":"2021-11-30T12:34:04+00:00","dateModified":"2026-02-06T14:34:36+00:00","breadcrumb":{"@id":"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/nx-authorization-code\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/research.reading.ac.uk\/act\/"},{"@type":"ListItem","position":2,"name":"Knowledgebase","item":"https:\/\/research.reading.ac.uk\/act\/knowledgebase\/"},{"@type":"ListItem","position":3,"name":"NX authorization code"}]},{"@type":"WebSite","@id":"https:\/\/research.reading.ac.uk\/act\/#website","url":"https:\/\/research.reading.ac.uk\/act\/","name":"Academic Computing Team","description":"","publisher":{"@id":"https:\/\/research.reading.ac.uk\/act\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/research.reading.ac.uk\/act\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/research.reading.ac.uk\/act\/#organization","name":"University of Reading","url":"https:\/\/research.reading.ac.uk\/act\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/research.reading.ac.uk\/act\/#\/schema\/logo\/image\/","url":"https:\/\/research.reading.ac.uk\/act\/wp-content\/uploads\/sites\/2\/2017\/08\/cropped-University_of_Reading_shield-1.png","contentUrl":"https:\/\/research.reading.ac.uk\/act\/wp-content\/uploads\/sites\/2\/2017\/08\/cropped-University_of_Reading_shield-1.png","width":512,"height":512,"caption":"University of Reading"},"image":{"@id":"https:\/\/research.reading.ac.uk\/act\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/research.reading.ac.uk\/act\/wp-json\/wp\/v2\/kbe_knowledgebase\/6673","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/research.reading.ac.uk\/act\/wp-json\/wp\/v2\/kbe_knowledgebase"}],"about":[{"href":"https:\/\/research.reading.ac.uk\/act\/wp-json\/wp\/v2\/types\/kbe_knowledgebase"}],"author":[{"embeddable":true,"href":"https:\/\/research.reading.ac.uk\/act\/wp-json\/wp\/v2\/users\/364"}],"version-history":[{"count":11,"href":"https:\/\/research.reading.ac.uk\/act\/wp-json\/wp\/v2\/kbe_knowledgebase\/6673\/revisions"}],"predecessor-version":[{"id":7800,"href":"https:\/\/research.reading.ac.uk\/act\/wp-json\/wp\/v2\/kbe_knowledgebase\/6673\/revisions\/7800"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/research.reading.ac.uk\/act\/wp-json\/wp\/v2\/media\/536"}],"wp:attachment":[{"href":"https:\/\/research.reading.ac.uk\/act\/wp-json\/wp\/v2\/media?parent=6673"}],"wp:term":[{"taxonomy":"kbe_taxonomy","embeddable":true,"href":"https:\/\/research.reading.ac.uk\/act\/wp-json\/wp\/v2\/kbe_taxonomy?post=6673"},{"taxonomy":"kbe_tags","embeddable":true,"href":"https:\/\/research.reading.ac.uk\/act\/wp-json\/wp\/v2\/kbe_tags?post=6673"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}