To add GSX Access for users in CheckIn: In the Taskbar, click the "More" button. Select "Admin," and then the "Employees" tab. Click on the triangle next to the employee. In the "Employee" window, select the "Information" tab, and then the "GSX" tab. Enter the Apple ID and Tech ID for the User.

Make sure the User is successfully logged into GSX on the web. Click the "Get Activation Token" button. Copy the token from GSX on the web, and paste it into the field next to the "Get Activation Token" button. Press the "Authorize New Token" button, and then the "Test Connection" button to confirm that GSX Access is working.


Web Services

It's important to confirm that each Technician who needs to use GSX Access in CheckIn have Web Services activated for their account. 

  • A GSX Administrator will need to log into the My Access account at https://myaccess.apple.com.
  • Select the "My Team" tab at the top of the window.
  • If you see only a short list of employees, click the "Switch View" button at the top right of the screen to reveal additional details.
  • Select the Technician, and at the right side of the listing, click on the small "pencil" icon under "Manage Access."
  • In the “Access Role Information” section, click on the "Optional Privilege(s)" menu, and make sure that "Web Services" has been checked. (You'll need to scroll down to the bottom of the drop-down window.)
  • When finished, click the "Submit" button in the bottom right.

You might run into unexpected issues with GSX Access with CheckIn if a Technician's Apple ID is was created before 2018, or if it's a "consumer" Apple ID. If Apple's GSX Web Services team reports that a working account “no longer has GSX access,” this could indicate that it has an outdated “Person Type of Developer,” and it will need to be updated to work with GSX Web Services. To resolve issues related to an Apple ID send an email to svc.authorize_amr@apple.com.


Renewing GSX Access in CheckIn

In the event that you need to renew your GSX access in CheckIn, or if you see a “Call Not Authorized” error message when attempting to connect to GSX: In the SRO Dashboard, click "More," and from the drop-down menu, select "Get New Token." (You can also do this through any SRO, by clicking on the small ‘gear’ icon in the lower right hand corner.) In the small pop-up window, click the “Get a New Token” button. A new window will appear.

If this is a troubleshooting step, you can click the “Test Connection” button, to establish that CheckIn has a working connection with GSX.

Note the GSX Tech User Name. If you need to retrieve a new Activation Token, click the “Get Activation Token” button. If the GSX Tech of record in CheckIn is already logged in to GSX on the web, a browser window with a new API Token will appear. (If not, that User will be prompted to log into GSX.) In the browser window, click the “Copy to clipboard” button, and paste that information into the “Enter GSX Activation Token” window in CheckIn.

Click the “Authorize New Token” button. You should see a dialog box indicating success. Click the “Test Connection” button, to establish that CheckIn has a working connection with GSX.


If you experience connection issues with GSX, or see an error message that indicates you might need to restart the FileMaker Script Engine

Have a look at the most recent Activity Log entry (assuming the attempt to connect to GSX was the most recent activity). That's in the Menu Bar: Checkin > Functions > Show Activity Log, or [Command-9]. Click on the small "word balloon" icon at the right of the last entry to show the details of the log. Look for the section "RESULT," and if you see no text (rather than an error message), it's possible this will be resolved by restarting the FileMaker Script Engine.

To do so, open Terminal on the FileMaker server and type the following:

fmsadmin restart fmse

Then type Y, and [Return]

This will restart the FileMaker Script Engine, but should not disrupt any other users.


GSX Connection Issues

If you encounter an error like this when checking the log files:

HTTP/1.1 403 Forbidden & X-Apple-Error-Codes: UNAUTHORIZED

If you are confident you have CheckIn configured correctly, this might be an issue that needs to be resolved by Apple. Email Apple's GSX Web Services team at gsxws@apple.com and copy your service Rep. Ask Apple if your IP address is not currently whitelisted, and ask them to whitelist it again, if necessary.

At the beginning of the email, include the following information:

GSX Sold-to account number:
GSX Ship-to account number:
Contact’s name: 
Contact’s email:
Apple ID for GSX Access:
Contact’s phone number: 


Supplier must be configured as Apple Service

GSX Access in CheckIn is configured to use "Apple Service" as the supplier for all service parts ordered through GSX. It's important that you not change this, as doing so will create issues with adding service parts with the appropriate coverage and pricing options.