Frequently asked questions (FAQs)

How can I tell which certificate AIM is using? 

1. Open PowerShell ISE on the AIM node.

2. Enter Get-RootCertificate.

   The following information is returned:

   • Certificate friendly name

   • Issued by/to

   • Expiration

   • Thumbprint fields

How do I find out or change the lifetime of a token?

Follow these steps to view the length of time an access token is valid:

3. Open PowerShell ISE on the AIM node.

4. Enter Get-IdentityManagerClient -HostBase <hostname> -Id <clientId>.

   The token lifetime is returned.

5. Optional: To update the access token's lifetime, enter Update-IdentityManagerClient and then enter a new token lifetime value. 

Are session timeouts supported?

Yes. If you use an Identity provider that supports condition-based access session settings, you can stop a user session that uses OpenID Connect (OIDC) with the AVEVA Identity Manager To configure a shorter session time, set a lower absolute time or a shorter expiration date on the access token through the AVEVA Identity Manager.

How do I create a client ID and secret for my Adapter/application? 

6. Open PowerShell ISE on the AIM node.

7. Enter Add-IdentityManagerClient,then enter the required parameters for this command (the required parameters have a ‘*’ next to them in the module window of PowerShell ISE):

   Add-IdentityManagerClient -HostBase <https://<fqdn> -Id <client id> -Enabled 1 -Secret $MySecret
   -AllowedGrantTypes ClientCredentials -ScopeRestrictions openid, system, profile

   The client is registered with AIM and the supplied ID and secret can be used. 

Where is the full list of PCS PowerShell cmdlets? 

8. Open PowerShell ISE on the AIM node.

9. To open the Commands pane, select Add-ons, then Commands.

   A list of PowerShell modules is shown. 

10. To view the available comdlets and parameters, select a command. For some commands, you may need to select Show Details.

How do I change the certificate that AIM uses? 

Open the Configurator utility, then select the System Management Server. When prompted, select a new certificate.