Why a new security model?

The new Data Archive security model has the following major benefits:

• Improves Security

  You can now use Windows authentication to control user access to the Data Archive server. PI password authentication (typing in a PI user name and password) are nowhere near as secure as Windows authentication. If you configure your Data Archive server for Windows authentication, you will greatly improve security. Windows AD is preferable because it uses the more secure Kerberos protocol. However, you can use local Windows authentication if necessary.

• Simplifies Server Administration

  If you use Windows for authentication, then you do not need to manage individual PI users or PI groups. You can simplify your Data Archive server configuration by maintaining a much smaller set of PI identities. Each PI identity should define a unique set of access permissions on the Data Archive server. Both the audit trail and last change information preserve the Windows user ID, so you can keep a record of who is doing what on the Data Archive server.

• Provides Single Sign-on

  If you use Windows for authentication, your users no longer need to separately log onto the Data Archive server.