Understand advantages of Windows Integrated Security (WIS)

Windows Integrated Security (WIS) provides substantial advantages in security, efficiency, and flexibility:

• Less work for Data Archive administrators

  There is no need to create and manage individual user accounts on the Data Archive server. When a user enters, leaves, or changes roles, you only need to modify the Windows configuration. Data Archive security automatically reflects these changes. You also get complete traceability of the specific Windows account in the Data Archive log and audit trail records.

• Single-sign on for users

  Users need only log on to their Windows account. PI clients will automatically authenticate through the PI SDK. No additional Data Archive login is required.

• Improved Security:

  • Secure authentication

    Connections are authenticated through Microsoft's Security Support Provider Interface (SSPI). If you're using AD, then this means the most secure Kerberos authentication, which greatly improves your Data Archive security.

  • Control over server-side authentication policies

    You have control over the authentication protocols that client applications can use to connect to the Data Archive server. You can disable authentication methods that are less secure and keep only the connection methods that you need.