Configure PI Vision application pools to use the PI Vision service account

Note: This section doesn't apply if installing in an environment whose end users only use OpenID Connect authentication and you selected the authentication option OpenID Connect with Process Identity Client ID for the PI Vision Connection to PI Data Archive and AF Servers in the security settings. (This is the only valid option if your PI Vision server is not installed on a domain.)

If you are using a domain account for the AVEVA PI Vision service account, then you must configure the application pools to use this identity as described below. If you plan to use the machine account for the AVEVA PI Vision service, then you do not need to configure the application pools, though you must verify the application-pool settings described in step 4. The application pools are configured during Install PI Vision. If needed, follow the procedure below to change the configuration of the application pools.

Note: We strongly recommend that you create a domain account for the AVEVA PI Vision service. If you use the machine account (the default), then all the applications running on the application server computer will have the same access as the AVEVA PI Vision service to the SQL, Data Archive, and PI AF servers. This is a security risk. At a minimum, consider removing some or all of the other applications running on this computer. For more information, see Create a service account and set up permissions.

1. Run Internet Information Services (IIS) Manager.

2. Under Connections, select Application Pools to display the list of application pools.

   The list includes the three AVEVA PI Vision application pools:

   • PIVisionAdminAppPool runs the Administration website, located at: https://webServer/PIVision/Admin

   • PIVisionServiceAppPool runs the main AVEVA PI Vision application website, located at https://webServer/PIVision

   • PIVisionUtilityAppPool runs the AVEVA PI Vision utility services, located at https://webServer/PIVision/Utility

3. In the application pools list, right-click on an AVEVA PI Vision application pool, and then select Advanced Settings to open the Advanced Settings window.

4. Verify settings for the application pool:

   1. Under General, verify that the Enable 32-bit Applications setting is False.

      AVEVA PI Vision is a 64-bit application and will not work properly in a 32-bit application pool.

   2. Under Process Model, verify that the Maximum Worker Processes setting is 1.

      Other values can cause errors with AVEVA PI Vision.

5. Set the identity for the application pool:

   1. Under Process Model, select the Identity field and then select Browse to open the Application Pool Identity window.

   2. Select Custom account and then select Set to open the Set Credentials window.

   3. Enter the domain and user name, in the format <domain>\<user name>, and password for the custom AVEVA PI Vision service account, and then select OK to close the open windows.

6. Repeat steps 3 through 5 for the other AVEVA PI Vision application pools.