How to connect benchtop instruments and Local Run Manager to a network location

Introduction

Instrument control software contains several different Illumina Windows Services

• Illumina Universal Copy Service

• Illumina Local Run Manager Job Service

• Illumina Local Run Manager Analysis Service

By default, the Illumina Windows Services are configured to Log On As a predefined Windows service account called Local System. Successful data transfer from the instrument to a network output location requires that the Illumina Windows Services be reconfigured to Log On As a different local Windows account.

Services are usually reconfigured to Log On As the standard local sbsuser account, which exists on all instruments. You may also choose to run the services using a different account (on-domain or local).

Note: Illumina Universal Copy Service must be configured to log on as a standard (non-administrator) Windows account.

Prerequisites and Requirements

• The Log On As account (typically sbsuser) must have read/write access, or cached credentials with read/write access, to the network storage destination.

  • It must have at least “read only” or “list folder content” permissions to all parent folders within the UNC path.

  • In the example of \server\level1\level2, the account must have access to the “level1” folder.

• Do not use a mapped network drive path (such as Z:).

• Do use the full UNC path to the output folder (with preceding double backslashes and a trailing slash, such as \server\level1\level2\ )

• The network storage destination must have enough storage for the run. The amount of storage needed can vary by flow cell type and instrument. Reference the article Approximate sizes of sequencing run output folders for estimates.

WARNING: Illumina has updated the guidance for configuring LRM and UCS service accounts and now it should be done via the Windows Services if using Local Run Manager v3.xor via the Service Accounts tab directly on Local Run Manager if on v4.x.

If on LRM v3.x:

1. Search for Services in the taskbar and open the app with right-click and Run as administrator.
2. Enter administrator account credentials (by default this will be sbsadmin) in the pop-up window.

3. Locate the Illumina services.

4. Right-click on Illumina Universal Copy Service.

5. Select Properties and navigate to the Log On tab.
6. Select This account and browse to search for the account. In the Select User window, select Advanced and then Find Now. Select the desired Log On Account (generally sbsuser) from the search results.
7. Select OK to acknowledge both windows.

8. Enter the password for the selected account (typically the account is sbsuser), select Apply and OK.

9. Restart the service by right clicking and selecting Restart.

10. Repeat steps 4 - 8 for the Local Run Manager (LRM) services below (Note: some LRM modules may need to Log On As an administrator account)

• Illumina Local Run Manager Job Service

• Illumina Local Run Manager Analysis Service

If on LRM v4.x:

1. In Local Run Manager (LRM), configure the Illumina services to use the respective Log On As accounts via the admin account by accessing the Tools menu.

2. Go to System Settings, select Service Accounts and select the respective option for each Service (note that Illumina recommends that Universal Copy Service (UCS) is ALWAYS configured to use the sbsuser account).

STEP 1: Cache credentials for access to Network Storage

1. Log in to the instrument as the Log On As account configured above (typically sbsuser).

2. Open File Explorer and enter the network output location (in UNC format) into the address bar.
3. Enter the credentials of the desired user who has access to the desired network storage location into the Windows Security prompt. It may be necessary to work with the local/lab IT team for assistance with these credentials.

4. Select Remember my credentials, then select OK. This will add the network storage credentials to the Windows Credential Manager.
5. Open the Credential Manager application in Windows. Verify that the credentials entered above have been cached to in the Windows Credentials. Note: If these credentials change, the cached credentials must be updated in order to continue output to your network storage.

STEP 2: Verify Write Access to Network Output Location

1. In Windows File Explorer, right click within the intended Network Output location and select New > Text Document to create a new document called test.txt.
2. Delete the file just created.

3. If either of the actions above fails, the account does not have write permissions on the Network Output location. Work with the local/lab IT team to configure the Network Output location with appropriate permissions.

STEP 3: Configure output folder to the network

Instrument Control Software

• Set the Output Folder location as full UNC path (with trailing backslash) in the Instrument Control Software.

Local Run Manager

• Refer to the article Local Run Manager: How to requeue and import run data for reanalysis and the section To import data to a new analysis module. Import a run to be able to set the Base Output Folder to the network location. Enter the network location as the full UNC path.

FAQ

1. Changing Windows Account Passwords If the Windows account passwords change, the credential configurations will also need to be updated by repeating this process for all Illumina Windows Services using the new password. Failure to update the password can cause connectivity issues and failures during sequencing runs.

2. How to access the full UNC path of a mounted drive

• Launch the Windows Command Prompt app

• Enter the command net use

• This will display the full UNC path to all network drives mounted on the system

For any feedback or questions regarding this article (Illumina Knowledge Article #1934), contact Illumina Technical Support [e-mail].