Install PI Analysis Service

Confirm the following before installation:

• The computer that PI Analysis Service will be installed meets all the system requirements. See System requirements for PI Analysis Service 2024.

• PI AF server is installed. A connection is required to the AF server to complete the installation. We recommend adding additional individual features after the AF server has been fully configured.

This section provides details on installing PI Analysis Service through the install kit.

1. Navigate to the directory where you downloaded the PI Server install kit, then double-click the setup file to open the install kit.

   The Welcome page opens.

2. Click Next.

   The Feature Selection page opens.

3. In the Server Roles tab, select PI Analysis Service.

   A list of components to be installed is displayed in the Summary panel.

   

4. Click Next.

   The AF Server page opens.

5. Enter the AF server name to associate with the PI Analysis Service.

6. Click Next to proceed with the setup.

   The Certificates Selection page opens.

7. Take one of the following actions:

   • To enable TLS certificates encryption for OpenID Connect (OIDC), ensure that the Configure certificate for TLS Encryption option is selected.

     If you do not provide a certificate, a certificate will be selected after you click Select in step 8.

   Note: If you installed and configured the AVEVA Identity Manager using the PCS 8.0.2 for the PI System setup kit and opted to use the PCS-generated certificate, the PCS certificate’s SSL Certificate thumbprint will be selected automatically after selecting Configure certificate for TLS Encryption. This certificate applies to any PI Server services selected for installation. This selection configures automatic certificate rotation for PI Server services.

   • If you do not plan to use TLS, deselect the Configure certificate for TLS Encryption option and proceed to step 10.

   

8. Click Select to choose a new certificate or view details about the currently selected certificate.

   The Select Certificate dialog opens. Any certificate that is already installed and meets certificate requirements will be detected and displayed in this dialog.

9. Select OK.

   The SSL Certificate thumbprint is displayed in the TLS Certificate section. The TLS certificate thumbprint is required for encryption.

10. Click Next to continue with the setup.

    The Service Accounts window appears.

11. Specify the service account for PI Analysis Service.

    Select the default account NT SERVICE\PIAnalysisManager or specify a different service account. If AF Server is remote to PI Analysis Service, use a domain account or a Managed Service Account since service account credentials will be mapped to the PI Analysis identity on AF Server. If your computer is in a workgroup, the installation must be run silently and additional steps may be required to guarantee that PI Analysis Service has access to AF Server. Since PI Analysis Service also requires read permissions for input PI points as well as write permissions for output PI points, a domain account or Managed Service Account may also be needed for configuring Windows integrated security on Data Archive.

12. Click Next to proceed with the setup.

    The Summary window appears, listing the selected features and version numbers scheduled for installation.

13. Click Install to continue with the installation.

    The Installation Progress window appears, then the Complete page opens after the installation has completed.

    Note: If you cancel the installation before it is complete, the PI AF SQL database might have already been created and you will need to remove the database manually.

14. Take one of the following actions:

    • If you did not select to enable TLS certificates, click Close to exit the setup.

    • If you enabled TLS certificates encryption, ensure the OpenID Connect Authentication requires configuration option is selected and then select Yes to restart now or No to restart later.

    • To bypass running the OpenID Connect Configurator utility, deselect the OpenID Connect Authentication requires configuration option, then select Yes or No.

      See Register PI Server components with the AVEVA Identity Manager if you selected the "Configure certificate for TLS Encryption" option and want to use OIDC for claims-based authentication.