Register PI Server components with the AVEVA Identity Manager

To enable encrypted communications and claims-based authentication using OpenID Connect (OIDC), you must establish a trust connection between the AVEVA Identity Manager and PI Server 2024 R2 using a configured Certificate of Authority (CA). A client ID and secret must be issued so that the Data Archive can connect to the AVEVA Identity Manager and validate incoming access tokens. Secrets are stored in the following folder: C:\ProgramData\AVEVA\PIIdentityModel\Secrets.

You use the Identity Server Registration tool to register AVEVA PI Server 2024 R2 components and services with the AVEVA Identity Manager.

Prerequisites

Perform the following tasks before running the Identity Server Registration tool:

• Install and configure the AVEVA™ Identity Manager on a designated machine.

• Select the "Configure certificate for TLS Encryption" option in the install kit during your AVEVA PI Server 2024 installation.

• Install the required signed Certificate of Authority (CA).

• Use a user account that is a member of the "aaAdministrators" group on the AVEVA Identity Manager server during registration with the Identity Server Registration tool.

• Write down your AIM server's URL address.

If you selected "OpenID Connect Authentication requires configuration" on the last page of the AVEVA PI Server 2024 R2 Installer wizard, the Identity Server Registration tool opens automatically after rebooting your computer or exiting the installer.

1. Enter the URL of your Identity server in the AVEVA Identity Manager URL text box.

   

2. Optional. To register additional PI Server components, select the desired PI System component listed under the Components heading.

3. Select OK.

4. Upon successful registration of all selected PI Server components, the Confirmation message box opens.

5. Optional: Click Log to view details about the registration process.

6. Close the message box.

7. Restart Data Archive to apply changes and complete AIM registration.

   Tip: To open the utility and register AVEVA Identity Manager at a later time, search for the Aveva.PI.OIDCConfigurationTool.exe file on the machine where PI Server is installed. Double-click Aveva.PI.OIDCConfigurationTool.exe to open the utility. See Register and unregister PI Server components for a full list of parameters you can run from the command line.