Access the server as a standard user

When accessing the server as a standard user, you cannot establish a secure SuiteLink channel. For a secure, encrypted communication workflow, ensure one of the following:

• Add standard user to the user group: The standard user should be added to the 'ArchestrAWebHosting' user group on the server side. For more information about adding users to user-groups, refer to the Windows-specific documentation.

• Run WindowViewer as a service: For InTouch tag-based applications in a Tag Server architecture, you can achieve a secure encrypted Suitelink communications by running InTouch WindowViewer as a service at the tag server node.

• Run WindowViewer in interactive mode with administrator privilege: This allows WindowViewer to run under a non-interactive user acting as a Suitelink Server with the necessary user privileges to access the private keys with which SuiteLink Server – Client communications are encrypted, something not possible when using an interactive user. This is necessary because the user under which WindowViewer is running provides the security context used to retrieve the private keys required by the SuiteLink server for secure communications. If WindowViewer is run as an interactive application, then the user is an interactive user which, as described previously, cannot access the private keys for secure encrypted Suitelink communications.

Running InTouch as a tag server as a service can be coupled with InTouch Tag Server Client licenses at the client nodes, which limit InTouch to communicate with a tag server only. Users working in this scenario commonly utilize PC virtualization technologies like HyperV or VMWare as examples, and run WindowViewer as a service within that VM, to reduce the Total Cost of Ownership of their solution.

Run WindowViewer as a standard user

WindowViewer is said to be running as a standard user without administrative privilege in the following scenarios:

• Launch System Platform IDE as a standard user without administrative privilege, edit $InTouchViewApp in WindowMaker, and then fast switch to WindowViewer.

• Launch WindowViewer either from AVEVA Application Manager or launch it directly as a standard user without administrative privilege .