Configure the System Management Server

AVEVA Batch Management incorporates new security measures, including support for the TLS 1.2 protocol for secure encrypted communications between nodes, single sign on (SSO), and certificate management. These features are enabled through a component of the ASB Runtime called the System Management Server. To enable security, every AVEVA Batch Management node must communicate with the System Management Server, and there should only be a single System Management Server in your AVEVA Batch Management topology. The System Management Server stores shared security certificates and establishes a trust relationship between machines.

If some nodes have not been upgraded to the latest version of Batch Management, communication with those older nodes will continue to utilize unsecured communication. However, communication between the Batch Management nodes will be encrypted, as long as the nodes are configured to communication with the System Management Server.

Note: From the Batch Management 2017 Update 1 release, System Management Server is used instead of Certificate Management.

To configure the System Management Server

1. In the Configurator, select System Management Server under Common Platform in the left pane.

   Note: If you are prompted for user credentials for the System Management Server, use the following format to enter the user name: DomainName\UserName. The prompt for user credentials may be displayed if you have domain admin privileges but are not an admin on the local machine. You must be a member of the Administrators or aaAdministrators OS group to configure the System Management Server.

   

   Note: The Configurator is automatically invoked when installation completes. You can also start the Configurator at any time after from the Windows Start menu on AVEVA Batch Management.

2. You are presented with three choices:

   • Connect to an existing System Management Server: This is the default option. The AVEVA Batch Management discovery service looks for any existing System Management Servers on its network. If any are found, they will be displayed in a drop down list. Select the server you want to use, or enter the machine name of the server.

   • This machine is the System Management Server: Select this option if this computer will be the System Management Server.

   • No System Management Server configured. (NOT RECOMMENDED): Select this option to set up your computer without encryption and secure communications. You can still configure other computers in the topology to use a System Management Server.

3. Advanced settings: This opens the Advanced Configuration dialog window. See Advanced Configuration Options to configure advanced settings.

4. Click the Configure button. A Security Warning window is displayed:

   

   By establishing trust between machines, communications can pass freely. This will be a security concern if you are not sure of the identity of the remote computer. If you have any doubt about the computer you are connecting to, verify the security code and certificate details by selecting the Details button in the Advanced Configuration dialog to open the certificate.

   

5. Select the next item in the left pane that requires configuration. When all required items have been configured, click the Close button to complete installation. See System Restart after Configuration.