Set up your UB Box Restricted Data Account

Once UBIT approves and provisions your UB Box Restricted Data account,  you'll need to change the account's default password, configure Duo two-step verification, and share the restricted folder with your standard UB Box account.

Collect your account information

You will be sent an email with the new account credentials and other information. 

  • USERNAME for your UB Box Restricted Data Account - Use this to complete the instructions on this page (the password is sent separately as an added security measure)
  • Folder name for your UB Box Restricted Data Account - Starts with "SENSITIVE"
  • Email forward from your UB Box Restricted Data account - This is where you will receive notifications from UB Box

Step 1: Change the default password using a Windows machine

  1. Log on to a Windows machine (not a Mac) using your personal UBITName and password
  2. Press Ctrl-Alt-Delete and select Change a Password
  3. Change the username to:
    • usda.USERNAME@itorg.ad.buffalo.edu” (where USERNAME is the username you were assigned for your UB Box Restricted Data Account)
      or
    • usha.USERNAME@itorg.ad.buffalo.edu (where USERNAME is the username you were assigned for your UB Box HIPAA Data Account)
  4. Enter the new password in both the new password and confirm password fields

Step 2: Register the account with Duo

  1. Open a Private Browsing (Incognito) window and go to https://twostep.buffalo.edu/
  2. Login with the username usda.USERNAME@itorg.ad.buffalo.edu (or usha.USERNAME@itorg.ad.buffalo.edu for HIPAA) and the password you set
  3. Enroll a device. This can be the same device you use with your UBITName

Step 3: Share the SENSITIVE folder with your UBITName in UB Box

  1. Open a Private Browsing (Incognito) window and go to https://buffalo.account.box.com/login
  2. Log into UB Box with the username usda.USERNAME@itorg.ad.buffalo.edu (or usha.USERNAME@itorg.ad.buffalo.edu for HIPAA) and the password you set
  3. Click the share icon on the SENSITIVE FOLDER folder
  4. Add your UBITName and change Invite as Editor to Invite as Co-owner

Note: Do not invite others to the folder until monitoring has been set up.

UB Box notifications

When a restricted data folder is approved and provisioned, monitoring via Splunk is also established and access to Splunk is given to the restricted data stewards or their designees/data users. UBIT provides data stewards with a default monitoring configuration consisting of a Splunk dashboard and set of email alerts.  

It is the restricted data steward's responsibility to use the Splunk monitoring provided to insure security of restricted data.  The data steward may modify the monitoring configuration, but modification must be approved by the security/privacy official associated with the restricted data.

Learn more about how Splunk works with UB Box  Splunk and UB Box

Additional Help

If you require help with any of the above steps, please contact your departmental IT support for assistance.