Register PI AF Server with AIM

To enable encrypted communications and claims-based authentication using OpenID Connect (OIDC), you must establish a trust connection between the AVEVA Identity Manager and PI AF Server 2024 R2 using a configured Certificate of Authority (CA). A client ID and secret must be issued so that AF Server can connect to the AVEVA Identity Manager and validate incoming access tokens. Secrets are stored in the following folder: C:\ProgramData\AVEVA\PIIdentityModel\Secrets.

You can use the Identity Server Registration tool to register PI AF Server components and services with the AVEVA Identity Manager.

Prerequisites

Perform the following tasks before running the Identity Server Registration tool:

• Install and configure the AVEVA™ Identity Manager on a designated machine.

• Select Configure certificate for TLS Encryption in the install kit during your AF Server installation.

• Install the required signed Certificate of Authority (CA).

• Use a user account that is a member of the "aaAdministrators" group on the AVEVA Identity Manager server during registration with the Identity Server Registration tool.

• Write down your AIM server's URL address.

If you selected the OpenID Connect Authentication requires configuration option on the last page of the AVEVA PI Server 2024 R2 Installer wizard, the Identity Server Registration tool opens automatically after rebooting your computer or exiting the installer.

1. Open the Identity Server Registration utility.

2. Enter the URL of your Identity server in the AVEVA Identity Manager URL text box.

3. Select AF Server under the Components heading, then select OK.

   Upon successful registration of all selected PI Server components, the Confirmation message box opens.

4. Optional: Click Log to view details about the registration process.

5. Close the message box.

6. Restart AF Server to apply changes and complete AIM registration.

   Tip: To open the utility and register AVEVA Identity Manager, search for the Aveva.PI.OIDCConfigurationTool.exe file on the machine where AF Server is installed. Right-click the file, then select Run as administrator. See Register and unregister PI Server components for a full list of parameters you can run from the command line.