From the sub-accounts page, choose "Manage API" from the "Action" menu
Click the "Create API" button
In the Create APIs page, choose the sub-account you just created, making sure the Purpose is set to "API trading" and it has Read and Trade permissions. Add your TaaS server's IP address to the allowlist.