Understand how to configure security for PI OPC DA Server

PI OPC DA Server 2015 and later connects to PI Data Archive using PI AF SDK. PI AF SDK fully supports Windows Integrated Security (WIS), which provides security over the connection to PI Data Archive. WIS can be configured for PI Data Archive using PI System Management tools, including mapping the Windows identity (account/group) to the appropriate PI identity. Determining which Windows identity to map depends upon how PI OPC DA Server is launched, as follows:

• PI OPC DA Server is launched as a Windows Service - In this configuration, all access to PI Data Archive is granted using the Windows identity configured for the service. The Windows identity of the OPC DA client application is not considered.

• PI OPC DA Server is launched as a process launched by the OPC DA client - By default, all access to the PI Data Archive is granted using the Windows identity of the user launching the OPC DA client application. This Windows identity can be changed using the Windows DCOM Configuration Utility.

  Note: PI OPC DA Server 2010 and earlier used both the PI SDK and PI API. We recommend upgrading to the current release of PI OPC DA Server to improve security.