Perform data egress#

This task is the responsibility of Trusted Research Environments Service Area (TRESA).

The Trusted Research Environments Service Area (TRESA) should ensure that the authorised egress contact follows these instructions:

Perform data egress as authorised egress contact#

The Safe Haven is built on the Microsoft Azure platform. The most convenient way of safely transferring data from the TRE is to use Azure Storage Explorer. You will not need log-in credentials, as your Trusted Research Environments Service Area (TRESA) will provide a short-lived secure access token which will let you upload data.

Prerequisites#

Important

  • You must be able to receive a secure email. We recommend the Egress secure email service, which is free to setup for receiving secure emails.

  • You must know the public IP address(es) that are used by the people in your organisation who will be downloading the data. Talk to your IT team if you’re not sure what these are.

You will send your Trusted Research Environments Service Area (TRESA) the IP address(es) and they will respond by sending a secure email to the designated downloader. This will contain the secure access token, which has read and list privileges, allowing the downloader download the files.

Downloading your data#

  1. Open Azure Storage Explorer (download it if you don’t have it)

  2. Click the socket image on the left hand side

    Azure Storage Explorer connection

  3. On Select Resource, choose Blob container

  4. On Select Connection Method, choose Shared access signature URL (SAS) and hit Next

    Connect with SAS token

  5. On Enter Connection Info:

    • Set the Display name to “egress” (or choose an informative name)

    • Copy the Blob SAS URL from your Azure portal session into the Blob container SAS URL box and hit Next

  6. On the Summary page, hit Connect

  7. On the left hand side, the connection should show up under Local & Attached > Storage Accounts > (Attached Containers) > Blob Containers > ingress (SAS)

  8. You should now be able to securely download the data from the Safe Haven’s output volume by highlighting the relevant file(s) and hitting the Download button

  9. Alert the Trusted Research Environments Service Area (TRESA) team if egress was successful by emailing trustedresearch@turing.ac.uk, or ask for help if something went wrong