giip

Security Settings Guide

Learn how to manage account security, access control, and data protection settings for the GIIP platform.

🚀 Go to Security Settings →

📋 Overview

The Security Settings define policies to ensure the safety of all users and systems accessing the GIIP platform. By implementing strong authentication and restricting access paths, you protect infrastructure management privileges from external threats.

🔍 Key Security Features

1. Authentication Security

  • MFA (Multi-Factor Authentication): Enforce additional authentication via OTP (e.g., Google Authenticator) in addition to username/password.
  • Password Policy: Set minimum length, special character requirements, and password rotation intervals (e.g., 90 days).

2. Access Control

  • IP Whitelisting: Restrict access to the GIIP management console so it only works from the internal office network or specific VPN IPs.
  • Session Timeout: Automatically terminate browser sessions with no activity for a set duration to prevent misuse.

3. Audit Logs

Records the history of all security configuration changes and key administrator action logs. Regularly check the [Audit Logs] tab for any abnormal access attempts.

🛠️ Setup Steps

  1. Navigate to the GIIP [System Management] > [Security Settings] menu.
  2. Decide whether to enforce company-wide MFA in the [MFA Setup] tab.
  3. In the [IP Control] tab, enter the IP ranges (CIDR format supported) to allow and save.
  4. Administrator re-authentication may be required when [Saving Changes].

💡 Tips

  • Principle of Least Privilege: Instead of granting all permissions to every user, grant access only to necessary projects as per the prjgrouplist guide.
  • Regular Audits: Periodically check for and delete accounts of former employees or long-unused API Keys (AK/SK).

🩺 Troubleshooting

SymptomCauseResolution
Password change is repeatedly rejectedThe new password does not meet the password policy (minimum length, special characters, etc.)Choose a password that satisfies every requirement in the policy (length and character mix) and try again.
OTP code is rejected when logging in after enabling MFAThe clock on the device running the authenticator app is out of sync with the serverSet the device clock to automatic (network) time sync; if it still fails, log in using one of your issued backup codes.
Console access is blocked right after saving the IP whitelistYour current IP is not included in the allowed range (CIDR)Connect via the office network/VPN, or ask another administrator to add your IP range.
Sudden logout on all devices or sessions expire frequentlyThe session timeout is set too short, or a password change invalidated all existing sessionsLog in again, and if needed adjust the session timeout value under [Security Settings] to suit your workflow.

Version: 1.0 Last Updated: 2026-03-19 Source: giipv3/public/help/security-settings.en.md

← Previous2FA Setup GuideNext →What is GIIP?