Prepare your PI server for receiving replication data

Before you can add your AVEVA PI Server as a replication server, you need to prepare your PI Server to receive replication data.

To prepare your PI Server for receiving replication data

The PI server must have the PI Web API installed with Open Message Format (OMF) enabled. (OMF is enabled by default.)

Replication to PI supports two different types of authentication: Basic and Kerberos.

The authentication type must be enabled in the PI Web API. Then the Historian replication server settings select which authentication type to use for replication.

The PI Web API configuration can be accessed through PI System Explorer. For more information, see Configuration at runtime in the PI Web API documentation.

Configuring the PI System for the user/computer accessing it

The user or computer accessing the PI system needs access to both of the following:

• The PI Asset Framework server

• The PI Data Archive server

Configure authentication as follows:

• Basic authentication: Give the user that will be entered into the Replication Server configuration interface access to the PI System.

• Kerberos authentication: By default, Replication runs as a virtual service account (NT SERVICE\InSQLConfiguration). If you cannot give the virtual service account access (because your IT policy prohibits giving a machine account access, for example), use the Windows MMC snap-in for Services to configure the AVEVA Historian Configuration service to run as a Windows user account. That account must be given appropriate permissions in the aaReplicationUsers and aaAdministrators user groups.

  Note: The replication server configuration UI still requires a value in the username and password fields, even though those values won’t be used for Kerberos authentication. Enter any values.

Configuring the PI Asset Framework (PI AF) Server

To create a user mapping for the PI Asset Framework server:

1. Open PI System Explorer.

2. Select File > Server Properties to launch the PI AF Server Properties dialog.

3. Select the Identities tab.

4. Choose an identity with sufficient permissions and double click it. The Security Identity Properties dialog opens.

   For more details on configuring permissions in the PI Asset Framework Server, see Security configuration in PI AF in the Asset Framework and PI System Explorer documentation.

5. Select the Mappings tab.

6. Click the Add button and select the user or computer.

   Note: When adding a computer for Kerberos, the object type must be Computers.

Configuring the PI Data Archive Server

To create a user mapping for the PI Data Archive server:

7. Open PI System Management Tools.

8. Under Security go to Mappings & Trusts, right-click and select New Mapping… to open the Add New Mapping dialog.

9. For Windows Account, select the user (or computer) required

10. For PI Identity, select an identity with sufficient permissions to create tags and write data to the PI Data Archive.

    For more details on configuring permissions in the PI Data Archive Server, see Data Archive security in the Data Archive Administration documentation.

Note: When adding a computer for Kerberos, the object type must be Computers.