Security best practices for PI Connector for Siemens SIMATIC PCS 7

Note: OSIsoft strongly recommends to use the highest available security profile. Employing the [NONE:NONE:BINARY] profile is not recommended for anything else than testing purposes.

• The OpenPCS 7 username, specified on the administration page, must have Browse and Read privilege in order for the Connector to successfully replicate the underlying OpenPCS 7 structures to PIand read the actual values.

• The Windows account, under which the Connector service runs, is not considered in communication with the OpenPCS 7 server.

• Because the OpenPCS 7 endpoint contains the TCP port number, firewalls can be used for enabling the communication through just the given port number.

Additional information sources

• Siemens SIMATIC PCS 7 process control system OpenPCS 7 (V8.1) Function Manual

• OPC UA specification part 2

• OPC UA specification part 13