Sensitive data security

Passwords

Passwords may be used by connectors to access data sources. These passwords are located in the data source configuration files on the connector and PI Data Collection Manager hosts.

• On the connector host, the data source configuration file Datasource.config.json is stored in the %PIHOME64%\Connectors\ConnectorName\Configuration folder.

• On the PI Data Collection Manager host, the data source configuration information is stored in the NodeMap.config.json file in the %PIHOME64%\Data Collection Manager\DataCollectionManager\Configuration folder.

  Note: The Microsoft Data Protection API (DPAPI) is used to perform encryption for connectors that encrypt confidential information such as passwords.

Cryptographic keys

Connectors create two X.509 certificates at installation time for each connector application (connector, PI Connector Relay, and PI Data Collection Manager). The first X.509 certificate is used to secure an HTTPS connection used for application administration. The second X.509 certificate is used to secure AMQPS communication. The private keys for these certificates are stored in the Windows Certificate Store.