Welcome to the SRE Getting Started page. This page is designed to support users new to the SRE with information about:

 For more information on the SRE, please visit the Secure Research Environment page.

How to Access the SRE:

  • Web Client

    Open your preferred browser

      1. Browse to the site: https://windows.cloud.microsoft/

      • For SOM researchers, please view the drop-down below for further sign-in instructions

      2. Sign-in using your umaryland.edu credentials 

     UMB SRE access icon

      3. Locate and select the UMB SRE AVD environment  

      4. Continue sign-in process following the prompts

  • Desktop App

    Using either the Windows App or Remote Desktop:

      1. Sign-in using your umaryland.edu credentials 

      • For SOM researchers, please view the drop-down below for further sign-in instructions

      2. Locate and select the UMB SRE AVD environment

    UMB SRE access icon

      3. Continue sign-in process following the prompts

    * Remote Desktop is in the process of being phased out.  Expected end date is late March, 2026.

When signing into the SRE, it's necessary for SOM researchers to use the umaryland.edu suffix instead of som.umaryland.edu or ihv.umaryland.edu.  For example, if your regular account is jsmith@som.umaryland.edu, it will be jsmith@umaryland.edu.  (Note: The @umaryland.edu credential is not an email address and cannot be used for sending or receiving email.  It is only for logging in to the SRE.)

Once you've accessed the Windows App or https://windows.cloud.microsoft/:

Screen shot of the SRE sign-in page which shows how SOM researchers need to sign-in using a different account

Access to the SRE is typically granted to individuals listed on an IRB protocol for a related research project.  If you need to add someone to your team, and your SRE-based project involves an IRB protocol, the new team member must first be added to the protocol. Afterward, contact the UMMS Research Informatics Core (RIC) team to have the additional team member added. To add new team members for SRE REDCap access, please contact the REDCap admins at redcap@umaryland.edu.

All users of the SRE must have an active UMID. External affiliates must be sponsored within the UMB Community System

Data Flow in the SRE

Data flows securely both in and out of the Secure Research Environment from two different points of entry - the researcher side and the data side. Below is a visual representation of how data moves through the SRE from the researcher's point of view:

Screen shot of the SRE process from both the researcher and data side.

  • The researcher signs into the SRE using the Windows App, Remote Desktop or the Windows web client.
  • Once inside the SRE, researchers can utilize tools such as REDCap, SAS, Excel, Python, R Studio, and others. They can also access authorized data through the designated Ingress Folder.

  • To remove data from the SRE, it must be transferred to the Egress folder, after which it is automatically sent to the data steward for approval.

Inside the SRE - Your desktop will have 2 folders labeled: 

  • "<project ID> Ingress"  
  • "<project ID> Egress"

These folders act as your data's landing zone and gateway out of the environment, respectively

The ingress folder is available to all team members and those added to the IRB protocol.  The entire team can work out of the ingress folder

 

Outside the SRE - You will use a dedicated Microsoft Teams team channel for your project. From the channels file tab, you can upload data to be ingressed, or download reviewed and approved egressed data. 

  • External data, whether from Epic or another source, must be requested and approved by a data steward. The data steward oversees the security of the data and manages its movement into and out of the SRE.

  • After approval, the data steward team delivers data to the project’s Ingress folder.

  • If/When researchers need to extract data from the SRE, it is placed in the Egress folder and automatically sent to the data steward for approval.

  • After approval, the data steward team delivers data to the project’s Ingress folder.

Additional notes about the Data:

  • EPIC data is sourced from UMMS and the Research Informatics Core – the group within the ICTR that administers the UMMS-controlled research data (RIC) is always the data steward. 
  • If data other than EPIC data need to be used, a data steward needs to be selected to be responsible for that data.
  • You are able to copy and paste text from your local computer into the SRE. However, please note that you can only copy and paste text. The feature does not work for images, rich text formats or files.  Additionally, you cannot copy and paste out of the SRE.  

FAQ's

To import data into the environment, contact RIC, or the designated data steward for your project. In most cases, the data will need to be transferred to your project's Teams channel. Once approval is granted, the data will be available in the project's ingress folder on the SRE desktop.

The Ingress folder is available to all team members and those added to the IRB protocol. Every member of the research entire team can work out of the ingress folder

To facilitate data egress from the SRE:

  1. Copy the required data into your project's designated egress folder on the SRE desktop.
    • Note: It's best to zip multiple files.
  2. Contact the data steward (RIC) to request required file review and approval.
    • Note: An automated egress pipeline operates daily (12am, 6am, 12pm, 6pm) and sends all files in the egress folder to a location where the Data Steward can review the file. 
    • Note: PHI/PII cannot leave the SRE.
  3. Access reviewed and approved egressed files in your project's Teams channel

Yes, the data steward (RIC) can assist with bringing data into the SRE.

You are able to copy and paste text from your local computer into the SRE. For example, you can copy cells from an Excel workbook outside of the SRE and into cells in an Excel document within the SRE. Please note that you can only copy and paste text; the feature does not work for images, rich text formats or files.  Additionally, you cannot copy and paste out of the SRE.  

EPIC data is sourced from UMMS. Any data from that system needs to be brought into the environment by the RIC. In other words, EPIC itself does not live in the SRE and RIC is always the data steward. 

If data other than EPIC data need to be used, a data steward need to be selected to be responsible for that data. Contact the SRE team at sre-support@umaryland.edu.

Disconnecting closes your session, but leaves an active connection to the host. You can disconnect and reconnect to the session later.

To Disconnect:

  • Close Windows App session window or tab
  • Or click Start > Power > Disconnect
  • Session remains running

 Signing Out removes your connection to the host. SRE IT may ask you to sign out entirely and back into the SRE desktop in order to gain access to additional resources.

To Sign Out:

  • Start > Your Name > Sign Out
  • Ends session

Get Help

 We're always here to help! 

To learn more about REDCap, please visit the REDCap page. For help with REDCap, please contact redcap@umaryland.edu.  

Contact eda-resarch@umm.edu for support relating to EPIC/UMMS data or data transfers.