Security considerations for a remote IDAS

If you set up a remote IDAS, you need to configure security settings that allow access permissions between the remote IDAS and the Historian. For example, the Historian needs to access the remote computer to start and stop the IDAS. Also, the remote IDAS needs to access the Historian computer to send data. These are administrative tasks, which require administrative permissions.

When you install the Historian, you must specify an administrative user account under which all of the Historian services run. Make sure that this same user account is added to the Administrators security group on the remote IDAS computer. The existence of the same administrative user account on both the computers, allows the Historian to access the remote IDAS, and vice versa.

Note: A remote IDAS only requires the same administrative account to exist on the local computer and the Historian. It is not required for you to log on to the remote IDAS computer using the administrator account.

If you change the Windows login using the Operations Control Management Console, after installing the Historian, make sure that the user account change is reflected on the remote IDAS computer.

If you are running the Historian in a domain environment (recommended), you can create the administrative user account on the domain controller and add the account to the Administrators group on the Historian computer and the remote IDAS computer. Do not create a local user on any computer with the same name and/or password as the administrative user account.

If you are running a remote IDAS in a workgroup environment, there is no centralized management and authentication of user accounts (no domain controller). Create the same administrative user account on each individual computer running a historian component. For example, if you have a computer running the Historian and plan to install remote IDASs on two other computers, create the user account (that is, matching user names and passwords) on all three computers.

For information on workgroups, domains, creating user accounts, and adding accounts to the Administrators security group, see your Microsoft operating system documentation.