What's New in PI AF 2018 SP3 Patch 2

The PI AF 2018 SP3 Patch 2 (2.10.8.440) release is an update to the AF SDK which requires that all AF Plugins be digitally signed. The AF SDK .NET 3.5 is no longer shipped beginning with this release. OSIsoft recommends all customers migrate to the AF SDK .NET 4 and update their plugins accordingly. OSIsoft has no plans for additional development work on the .NET 3.5 version of the AF SDK.

Important Notes:

• It is a best practice that AF Plugins you provide to the AF Server be digitally signed. If you are unfamiliar with how to apply an Authenticode signature, reference this article from DigiCert: https://knowledge.digicert.com/solution/SO17631.html.
• Digitally signing your plugin increases the users’ confidence that it is from a trusted provider. Additionally, it supports application whitelisting strategies. For more information on application whitelisting, see these resources:
  • KB00994 - Whitelisting with AppLocker: https://customers.osisoft.com/s/knowledgearticle?knowledgeArticleUrl=KB00994
  • NIST SP 800-167, Guide to Application Whitelisting: https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-167.pdf
  • KB01892 Whitelisting with Windows Defender Application Control (Device Guard): https://customers.osisoft.com/s/knowledgearticle?knowledgeArticleUrl=KB01892
• Unsigned AF Plugins will be unable to load on PI AF 2018 SP3 Patch 2 systems.