Account Security

"Account Security" is designed for end users to manage personal passwords, SSH keys, API keys, and SFTP configuration.

Entry path: Left sidebar menu User Center > Account Security, page route /admin/user-center/security.

Page Menu

Page	Route	Description
Change Password	/admin/org/change-password	Change login password
SSH Keys	/admin/user-center/ssh-key	Personal SSH key management
API Keys	/admin/user-center/api-key	Personal API key management
SFTP Configuration	/admin/user-center/sftp-service	Personal SFTP service configuration

Change Password

1. Navigate to User Center > Account Security > Change Password.
2. Fill in:
   • Current Password: The input field is automatically hidden when there is no current password (first login).
   • New Password: Must comply with the platform password complexity rules.
   • Confirm Password: Must match the new password.
3. Click "Submit". After a successful change, you will need to use the new password for your next login.

The "Profile" entry in the user menu at the top-right of the navigation bar opens the same password change page.

SSH Keys

View SSH Keys

1. Navigate to User Center > Account Security > SSH Keys.
2. The list displays: key name/UUID, type (SSH / Account / Image Repository), description, access permissions, associated workspace, associated project, enabled status.
3. Use the top filter bar to search by name, access permissions, workspace, project, type, and enabled status.

Add SSH Key

1. Click "Add Key".
2. Fill in:
   • Type: Select SSH.
   • Name/Description: For easy identification.
   • Public Key Content: Paste the public key string from ~/.ssh/id_rsa.pub.
   • Workspace/Project: Select the scope the key belongs to.
3. Click "Create".

Manage Keys

1. Click "More Actions" in the list row:
   • Edit: Modify the key name, description, or public key content.
   • Delete: Keys associated with container instances or training tasks are protected and cannot be deleted.

API Keys

View API Keys

1. Navigate to User Center > Account Security > API Keys.
2. The list displays: key name, accessible models, source (Platform-issued / Externally imported), enabled status.
3. API keys are masked, showing only the first 3 and last 8 characters.

Create API Key

1. Click "Create API Key".
2. Fill in:
   • Name: For easy identification.
   • Accessible Models: Select the model scope this key is authorized to call.
3. Click "Create".
4. Copy the key value immediately after creation; the key value is only displayed once at creation time — please store it securely.

Manage API Keys

1. Click "More Actions" in the list row:
   • View: View the list of models accessible by this key.
   • Enable/Disable: Control whether the key can be used for API calls.
   • Delete: Delete keys that are no longer in use.

SFTP Configuration

Initialize SFTP Service

1. Navigate to User Center > Account Security > SFTP Configuration.
2. On first use, click "Initialize Account Password" to set the SFTP login username and password.
3. The page displays SFTP service connection information: address, port, username, password.

Link Data Storage

1. On the SFTP configuration page, view the "Linked Data Storage" list.
2. Click "Add Linked Storage", select an authorized data storage (name, alias, mount path, permissions).
3. Click "Confirm"; the storage will be mounted under the SFTP root directory and accessible via an SFTP client.

Link SSH Key

1. On the SFTP configuration page, view the "Linked SSH Key" list.
2. Click "Add Linked Key", select a previously created SSH key.
3. After adding, you can log in to SFTP using key-based authentication.

Upload Files via SFTP

1. Use any SFTP client (e.g., FileZilla, WinSCP, command-line sftp).
2. Enter the address, port, username, and password displayed on the page (or select SSH key authentication).
3. After a successful connection, you can upload/download large files in the linked storage directories.

FAQ

Q: Password change fails with a rule violation message? A: Please ensure the new password contains at least three of the following categories: uppercase letters, lowercase letters, numbers, and special characters, and meets the platform's length requirements.

Q: Cannot delete an SSH key? A: If the key is associated with a running container instance or training task, the system will prevent deletion; please remove the association first or wait for the task to complete.

Q: What if I didn't save the API key after creation? A: The key value is only displayed in full once at creation time; if you did not save it, please delete the key and create a new one.

Q: SFTP connection fails? A: Please confirm that the SFTP service has been initialized, the credentials are correct, the network is reachable, and at least one data storage has been properly linked.