Create a sub-access key to a shared folder

Edit online

As an administrator with the primary access key, you can generate sub-access key/secret pairs to use as transfer and access credentials for a folder in your cloud storage.

Use sub-access keys to delegate certain administrative tasks and contextual content access to another AoC admin or to a workspace manager without having to distribute the primary access key.

Note that the sub-access keys you create using the procedure in this article are for use only within Aspera on Cloud. Be sure to use the proper key type to avoid security implications. For details see Primary access keys and sub-access keys.

Note also that a folder sub-access key is a different access credential than the sharing permissions set on a shared folder. Access through a folder sub-access key is full access to folder contents;such access is not restricted to the actions allowed through sharing permissions.

To complete this procedure, you need either the secret to the node hosting the shared folder or a valid custom access key and secret.

To create a sub-access key for a shared folder, do the following:

  1. Go to Workspaces > workspaceName > Applications > Files > Shared folders.
  2. On the row of the shared folder, right-click and select Client access keys > Create new.
  3. Provide access credentials and log in using one of the following methods:
    • Enter the secret for the node hosting this shared folder and click Log in.
    • Click Use custom access key, enter the custom access key and secret, and click Log in.
    AoC creates the new sub-access key for the shared folder.
  4. Give this key a name and provide notes to add a description, purpose, expected use, or other info that will be useful to those using this key.

    This step is optional but highly recommended to make key management and use easier. If you add a name and notes, they'll be included in the file you download in a following step.

  5. Save the sub-access key by doing one of the following:
    • Click Download. AoC generates the file KeySecretPair.txt, containing the key and secret. Aspera recommends you rename the file to make it easier to track, and save it to a secure and accessible location.
    • Click Copy for both key and secret, saving them to a secure and accessible location.

    Store the key and secret in a secure and accessible location according to local site security practices. Aspera on Cloud does not store the secret. Once you click OK in the following step, you can no longer retrieve the secret.

  6. Click OK.
  7. Name the key pair file and click Save.
To use this key to set up a connection to this folder in the Aspera GUI client, do the following:
  1. Note the node URL.
  2. Deliver the key pair file to the user of the GUI client according to your local site security practice.
  3. In the Aspera GUI client, create a new connection, and enter data in the fields as follows:
    • Host: Enter the URL of the node hosting the shared folder.
    • User: Enter the access key.
    • Password: Enter the secret.
    Refer to the IBM Aspera High-Speed Transfer Server Admin Guide for more information.

Delete a sub-access key to a shared folder

To delete an existing sub-access key to a shared folder, do the following:

  1. Go to Workspaces > workspaceName > Applications > Files > Shared folders.
  2. On the row of the shared folder, right-click and select Client access keys.
  3. Right-click Delete, then confirm.