Windows Credential Manager for authentication
- Last UpdatedNov 09, 2023
- 2 minute read
As a security best practice, Rockwell FactoryTalk Batch stores any credentials that you enter during interface configuration to Windows Credential Manager. Rockwell FactoryTalk Batch uses these credentials to authenticate with:
-
PI Data server
-
PI Asset Framework
Storage of credentials within Windows Credential Manager benefits you by:
-
Caching credentials for future authentication, so that you do not have to re-enter them.
-
Removing any reference to passwords within the interface instance .ini file.
-
Encrypting the credentials.
Tip: For more information on where to configure credentials that Rockwell FactoryTalk Batch uses for authentication, see Server Information tab.
Credential creation
When you configure an interface using the PI Event Frames Interface Manager (see link in tip above), Rockwell FactoryTalk Batch temporarily writes the credentials that you enter to the applicable .ini file. These settings remain in the .ini file until you start the interface.
After you start Rockwell FactoryTalk Batch, it makes the following updates:
-
All credentials within the .ini file are saved to Windows Credential Manager.
-
Within the interface .ini file, any reference to passwords are removed.
Credential storage
After you start Rockwell FactoryTalk Batch, the credentials that it uses for authentication with PI components and data sources are listed in Windows Credential Manager.
The following table lists credentials for Rockwell FactoryTalk Batch:
|
Credentials |
Name |
|---|---|
|
PI Data server |
FTBInt_X_PI |
|
PI Asset Framework |
FTBInt_X_AF |
Note: X is a placeholder for an interface instance Service ID.
To update credentials
If you need to update the credentials that the interface uses for authentication, edit the configuration settings for the instance using PI Event Frames Interface Manager.
-
From Interface Selection, select the applicable Rockwell FactoryTalk Batch instance.
-
From Server Information, update the credentials used to authenticate with PI Data server or PI Asset Framework.
-
Select Save Settings.
Result: The credentials are updated within the instance configuration. Restart the interface to update the credentials within Windows Credentials Manager.