Create a sub-access key to a workspace

As an administrator with the primary access key, you can generate sub-access key/secret pairs to use as transfer and access credentials for a folder in your cloud storage.

Use sub-access keys to delegate certain administrative tasks and contextual content access to another AoC admin or to a workspace manager without having to distribute the primary access key.

Note that the sub-access keys you create using the procedure in this article are for use only within Aspera on Cloud. Be sure to use the proper key type to avoid security implications. For details see Primary access keys and sub-access keys.

To complete this procedure, you need either the secret to the node hosting the shared folder or a valid custom access key and secret.

To create a sub-access key for a workspace, also sometimes called a client sub-access key, do the following:
  1. Go to Nodes and storage > Nodes > nodeName.
  2. Provide access credentials and log in, using either of the following methods:
    • Enter the secret for the node hosting this shared folder and click Log in.
    • Click Use custom access key, enter the custom access key and secret, and click Log in.

    AoC creates the new access key for the shared folder.

  3. Click Workspaces.
  4. On the row of the intended workspace, right-click and select Workspace keys.
  5. Click Create new.
  6. Give this key a name and provide notes to add a description, purpose, expected use, or other info that will be useful to those using this key.

    This step is optional but highly recommended to make key management and use easier. If you add a name and notes, they'll be included in the file you download in a following step.

  7. Save the access key by doing one of the following:
    • Click Download. AoC generates the file KeySecretPair.txt, containing the key and secret. Aspera recommends you rename the file to make it easier to track.
    • Click Copy for both key and secret.
    Note: Note that Aspera on Cloud does not store the secret. Once you click OK in the following step, you can no longer retrieve the secret. Store the key and secret in a secure and accessible location according to local site security practices.
  8. Click OK.
  9. Name the key pair file and click Save.

Delete a workspace sub-access key

  1. Go to Nodes and storage > Nodes > nodeName.
  2. Provide access credentials and log in, using either of the following methods:
    • Enter the secret for the node hosting this workspace and click Log in.
    • Click Use custom access key, enter the custom access key and secret, and click Log in.

    AoC creates the new access key for the workspace.

  3. Click Workspaces.
  4. On the row of the intended workspace, right-click and select Workspace keys.
  5. On the row of the intended key, right-click Delete, then confirm.