Encrypt the service access token

EndpointURL is the base address for the data gateway endpoint. The data gateway is used as a web service through which the Measurement Advisor Client accesses the database to execute stored procedures.

Retrieve the access token from CONNECT and encrypt it as per the procedure below. The token completes the configuration of the following applications:

• Raw Data Monitor

  For more information, refer to Understand the Raw Data Monitor application.

• Data-tier Application package (DACPAC) Generator

• Data Access Layer (DAL)

To encrypt the service access token

1. On the AVEVA Measurement Advisor Cloud Data Connector for AVEVA Enterprise SCADA server, sign in as a member of the DNA Installers group.

2. On the desktop, double-click the Windows PowerShell for DNA shortcut.

   Windows PowerShell for DNA opens.

3. Execute the following commands:

   set-silo CloudData

   SecretProtector.exe protect "<Access Token Copied From CONNECT>"

   The above command creates the %DNADataRoot%/Shared/config/DataProtection directory and initializes the folder with key ring information. A key ring protects the access token by means of an encrypted key.

4. Copy the Protected String—the output of the command in the step above—and paste it into the EncryptedServiceAccessToken section of the CloudData.json and DALConfig_CloudDataConnector.json override files.

   For further information, refer to Customize DAL for AVEVA Measurement Advisor Cloud Data Connector for AVEVA Enterprise SCADA.

   For more information around installation, please contact AVEVA Customer Support.

5. In the event that you have a dual-hosted CloudData service, proceed as follows:

   1. Configure the same settings in the CloudData.json override file on the other server.

   2. Copy the contents of the following folder to the other server:

      %DNADataRoot%/Shared/config/DataProtection

6. To verify that everything is working as expected, proceed as follows:

   1. Sign in to the other AVEVA Measurement Advisor Cloud Data Connector for AVEVA Enterprise SCADA server as a member of the DNA Installers group.

   2. On the desktop, double-click the Windows PowerShell for DNA shortcut.

      Windows PowerShell for DNA opens.

   3. Execute the following commands:

      set-silo CloudData

      SecretProtector.exe unprotect "<Protected string that is generated as part of the encryption process>"

      The above command should produce the original, unencrypted access token.