Frequently asked questions (FAQs)

How can I tell which certificate AIM is using? 

1. Open PowerShell ISE on the AIM node.

2. Enter Get-RootCertificate.

   The following information is returned:

   • Certificate friendly name

   • Issued by/to

   • Expiration

   • Thumbprint fields

How do I find out or change the lifetime of a token?

Follow these steps to view the length of time an access token is valid:

3. Open PowerShell ISE on the AIM node.

4. Enter Get-IdentityManagerClient -HostBase <hostname> -Id <clientId>.

   The token lifetime is returned.

5. Optional: To update the access token's lifetime, follow these steps:

   1. To retrieve the existing client object, enter the following text in a command prompt/terminal: Get-IdentityManagerClient

   2. Save a copy of the current settings before making changes.

   3. Modify the AccessTokenLifetime property as needed.

   4. Enter Update-IdentityManagerClient and include all the parameters from the Get command with the modified AccessTokenLifetime.

   Important: If the parameters are not provided, the Update cmd reverts to using default values.

Are session timeouts supported?

Yes. If you use an Identity provider that supports condition-based access session settings, you can stop a user session that uses OpenID Connect (OIDC) with the AVEVA Identity Manager To configure a shorter session time, set a lower absolute time or a shorter expiration date on the access token through the AVEVA Identity Manager.

How do I create a client ID and secret for my Adapter/application? 

6. Open PowerShell ISE on the AIM node.

7. Enter Add-IdentityManagerClient,then enter the required parameters for this command (the required parameters have a ‘*’ next to them in the module window of PowerShell ISE):

   Add-IdentityManagerClient -HostBase <https://<fqdn> -Id <client id> -Enabled 1 -Secret $MySecret
   -AllowedGrantTypes ClientCredentials -ScopeRestrictions openid, system, profile

   The client is registered with AIM and the supplied ID and secret can be used. 

Where is the full list of PCS PowerShell cmdlets? 

8. Open PowerShell ISE on the AIM node.

9. To open the Commands pane, select Add-ons, then Commands.

   A list of PowerShell modules is shown. 

10. To view the available comdlets and parameters, select a command. For some commands, you may need to select Show Details.

How do I change the certificate that AIM uses? 

Open the Configurator utility, then select the System Management Server. When prompted, select a new certificate.