Configure PI AF server to use a UPN

To configure PI AF server (the machine hosting PI AF Application Service) so it uses a user principal name (UPN), edit the %PIHOME64%\AF\AFService.exe.config file. The file contains the following element in a default installation:

<identity>
<servicePrincipalName value="AFServer" />
<!-- <userPrincipalName value="username@domain"/> -->
</identity>

Note that the UPN setting (userPrincipalName) is commented out and the SPN (servicePrincipalName) setting is enabled.

To configure the PI AF server to use a UPN instead of an SPN, comment out the servicePrincipalName element and uncomment the userPrincipalName element. The value of the userPrincipalName would be the domain credentials under which the PI AF server is running. For example:

<identity>
<!--<servicePrincipalName value="AFServer" />-->
<userPrincipalName value="username@domain"/>
</identity>