SK (Secret Key) Issuance Guide

This guide explains how to issue an SK (Secret Key) — the secret key agents and APIs use to access a specific project (CSN) — from the Service List screen.

🔑 Go to the Service List page →

📋 Overview

An SK (Secret Key) is the secret key that giipAgent, the giip-fde-agent scheduler, and the APIs use to prove "this request belongs to that project." Issue this key right after creating a project, before installing an agent.

• An SK is issued per combination of a project (CSN) and a group within that project.
• An issued SK is valid only within that project's scope and cannot access other projects.

🛠️ Issuance Steps

1. Sign in to GIIP and select the project you want to issue an SK for, at the top of the screen.
2. Go to the Service List screen. The groups belonging to the current project are listed.
3. Click the [SK生成] button on the row of the group you want to issue an SK for. An SK is issued for that group and its SKEY value appears in the row.
4. Deliver the issued SK securely to where it will be used. For example, the giip-fde-agent scheduler reads this key as the sk= value in the giipAgent.cnf (or giipAgent.cfg) file on the PC.

⚠️ Notes

• Reissuing immediately invalidates the existing SK. If you click [SK生成] again for a group that already has an SK, a new SK is issued and the previous SK fails authentication from that moment (401 Invalid session). When reissuing for a group whose agents are already running, replace the key at every place that uses it as well.
• Never leave an SK value in chats, documents, or logs. If an SK leaks, access to that project goes with it.
• If you do not have permission to issue an SK, ask the project's administrator to issue one for you.

➡️ Next Step

Once the SK is issued, install giip-fde-agent on your work PC and register the gissue scheduler so issues are processed automatically.

🤖 Next step: Install giip-fde-agent · Register the gissue scheduler →

---

Version: 1.0 Last Updated: 2026-11-14 Source: giipv3/public/help/secret-key.en.md