Learn about configuring security for PI OPC HDA Server

The PI OPC HDA Server connects to a Data Archive server using both the PI SDK and PI API. The PI SDK is used to read data from the Data Archive server, and the PI API is used to write data to the Data Archive server.

The following connection options are available for the PI OPC HDA Server:

• [Recommended] Connect to the Data Archive server via Windows Security with a PI identity. The requirement for this option is to update PI API to PI API 2016 for Windows Integrated Security, as well as replacing any PI trusts with PI mappings to your PI Identities. This option provides the best security measures between the Data Archive server and the PI OPC HDA Server.

• Connect to Data Archive server using both a PI trust and Windows Security. Set up a trust for the PI API connection and use Windows Security for the PI SDK connection. This option is only recommended if Windows authentication is not feasible for your deployment. It is slightly more secure than using PI trusts only.

• Connect to the Data Archive server via a PI trust set up with a PI identity. This option is only recommended if Windows authentication is not feasible for your deployment. It is least secure option available between the Data Archive server and the PI OPC HDA Server.