Security

Showing 31

Implement High Availability in AVEVA Identity Manager (AIM)

A few limitations make difficult to architect AIM with PI 2023: No support for NLB No support for failover cluster No support for multiple independent AIM instances As of today, AIM is a single point of failure and so HA is required to preven...

FABIO VENTURUZZO 6 months ago in AVEVA™ PI Server / Security 0 No status

1 VOTE

OIDC authentication with federated accounts (through CONNECT) requires too many steps

Currently, it is a 5-step process to get authenticated. After the first authentication, it is only a 3-step process, but still clunky.

Laurie Dieffenbach 17 days ago in AVEVA™ PI Server / Security 0 No status

52 VOTE

Add configurable defaults for PI Point "Pointsecurity" and "Datasecurity"

Read access to the PIPOINT table is required for most identities. Pointsecurity and Datasecurity currently use the settings on the PIPOINT table as the default. New points will generally give read access to most identities because of these default...

Guest over 2 years ago in AVEVA™ PI Server / Security 2 No status

3 VOTE

Allow Federation of ClientIDs and tokens from Entra ID into AVEVA Identity Manager

For clients who previously relied on claims authentication with PI Web API, it would be useful to be able to reproduce a similar authentication flow with bearer authentication and the AVEVA Identity Manager in PI Server 2023. Currently, federation...

Housnat Aboubacar 2 months ago in AVEVA™ PI Server / Security 1 No status

23 VOTE

Increase the allowed password length for AF Linked Table "Supply Password" connections

Currently the maximum password length for AF Linked Table connections using the "Supply Password" option is 15 characters. This length limitation should be increased to at least 25 characters.

Guest over 2 years ago in AVEVA™ PI Server / Security 0 No status

16 VOTE

Move Auditviewer function away from local PI System access

I want to run the Auditviewer function as a unprivileged remote user, moving away from the current requirement to run as a local user on the PI Data Archive Server. This is so I can minimize security risk associated with local user access on...

Guest over 2 years ago in AVEVA™ PI Server / Security 1 Declined

14 VOTE

Officially test compatibility with Windows Security Baselines

As a PI System administrator, I need to harden the OS of my servers consistent with industry best practices so that they are resilient to attack and random disruption. Official testing of compatibility with industry standards such as the Windows ...

Guest over 2 years ago in AVEVA™ PI Server / Security 0 No status

13 VOTE

Provide a central point to manage the security for the whole PI System

Instead of having several admlin tools to manage the security for data archive, AF, PI Vision, PI Integrators Could you provide a centralized security management interface which could manage all the existing and upcoming OSIsoft tools

jerome.boudon over 2 years ago in AVEVA™ PI Server / Security 1 No status

11 VOTE

Add Kerberos Authentication for PI Asset Analytics

Currently, PI Asset Analytics utilizes NTLM authentication. My customer's MSFT Windows Ops team does not recommend using NTLM and by default have this deactivated. Request is to add support for Kerberos authentication for PI Asset Analytics as ...

Guest over 2 years ago in AVEVA™ PI Server / Security 0 No status

9 VOTE

Have pre-made PI Identities with minimum permissions by default

It currently takes more effort to follow AVEVA's recommendation of setting minimum permissions for all PI service accounts than it is to use fewer service accounts with more permissions. To help steer PI administrators in the right direction, plea...

Kenneth Barber over 2 years ago in AVEVA™ PI Server / Security 2 No status

Please enter your email address

FILTER BY CATEGORY