Define a PI trust against a PI group

When you define a PI trust against a PI group, Data Archive authenticates all applications that use that PI trust as that PI group.

You can define trusts against a PI group using the Identities, Users, & Groups tool or the Mappings & Trust tool. If you use the Identities, Users, & Groups tool, you cannot use the Add Trust Wizard. To use the wizard, use the Mappings & Trusts tool to create the trust.

1. Under Collectives and Servers, select the server or collective.

2. In the System Management Tools pane, select Security > Identities, Users, & Groups.

3. Select the PI Groups tab.

4. Double-click the group against which you want to define the trust. That group's Properties dialog box opens.

5. Click the Mappings & Trusts tab. The top portion shows all existing mappings for this PI group. The bottom portion shows all existing PI trusts for this PI group.

6. Click Add under the trusts to open the Add New Trust dialog box.

   (There is also an Add button under the mappings; be sure to click the correct button.)

   Note: The Add button is disabled if the selected PI group is disabled or not usable in a trust.

7. Enter the appropriate information for the PI trust.

   At a minimum, you need to specify a name for the trust. You can also specify optional information. The more specific you make the trust, the more secure it will be. See Manage trusts for more information.

   You can enter the following optional trust specifications:

   • IP Information: Specify which computer to trust. Enter either a network path or an IP address and netmask:

     • Network path: Fully-qualified domain name of the trusted computer, such as an interface node (for example, my_laptop.my_company.com).

     • IP Address: The IP address of the trusted computer, such as the interface node.

     • Net Mask: The netmask of the trusted computer (for example, 255.255.255.255).

   • Windows Account Information: For SDK trusts only, specify a trusted Windows domain and account:

     • Domain: Windows domain of the user who runs the trusted application (for example: osi).

     • Account: Windows user name of the user who runs the trusted application (for example: my_account).

   • Application Information: Specify the Name of a trusted application. Enter the name differently for API and SDK connections.

     • API connection: Enter an identifier called an application process name, or procname. This is a four-character string with an E appended (for example, PIPeE for the Perfmon Interface).

     • SDK connection: Enter the full name of the connecting application, including the extension, but not the path (for example: PI-ICU.exe).

8. Click OK to create the new trust.