PI trusts

A PI trust compares the connection credentials of a connecting application to criteria specified in the trust. Each PI trust is defined against a PI identity, a PI group, or a PI user. The trust gives the connecting application the same access permissions as the associated identity, group, or user.

Before Data Archive 2016 R2, trusts were typically used to authenticate PI interfaces. Windows authentication extends to PI interfaces through PI API 2016 for Windows Integrated Security.

AVEVA does not recommend using PI trusts or explicit logins for authentication. For a more secure environment, AVEVA recommends Windows Integrated Security.

Note: PI API 2016 for Windows Integrated Security extends Windows authentication to API-based client applications. If you choose to install PI API 2016 for Windows Integrated Security, you can use only Windows Integrated Security for authentication. Both trusts and explicit logins will fail. For more information, see Security configuration.