Certificate auto-renewal with Platform Common Services

If you install and configure PI Web API through the administrative utility to operate on the same port as AVEVA Platform Common Services (PCS) 7.1, you can utilize the certificate auto-renewal feature that is a part of PCS. By sharing the same port, PI Web API seamlessly adopts the renewed certificate and also establishes a new SSL binding on the shared port.

Before PI Web API and PCS can share the same port, you must install and configure the PCS System Management Server (SMS) on the network through AVEVA Platform Common Services (PCS) 7.1 for the PI System. Then, install PCS for the PI System on the PI Web API node and point to the SMS node. PI Web API clients must also trust the root certificate of the SMS.

Note: Switching to a non-PCS issued certificate while maintaining the same port as PCS hinders the SSL binding and cancels the auto-renewal process. You can restore the binding by executing the PCS configurator. PI Web API then automatically integrates the new certificate into its system.