• State Not Answered
  • Replies 9 replies
  • Subscribers 3 subscribers
  • Views 150 views
  • Users 0 members are here
Options
Related

Hi All,

anguemamiko

Hi All,

I need assistance with PI Vison implementation. We must implement PI Vision in our PI System; we have PI DA & AF upgraded to the latest versions; the fact is that PI Vision we can`t implement PI Vision web server because the Active Directory is required to complete this task. I s there any Methode to deploy PI Visions out the Active Director infrastructure?

Pi vision Service Account should be created in AD, but this account can be created locally (Pi Vision Server)?

The main issue is with the PI Users authentication Methode.

 

Any advice please?

 

thanks

MIKO

Parents
  • 0

    If by latest version, you mean PI Server 2023, then yes you can do it that way by using OpenID. Otherwise, you'd need PI Vision on a domain as well and configure a trust between the two domains which should allow the SPNs & Kerberos Delegation to work, but users would still likely be prompted for credentials due to cross-domain actions.

     

    Short answer, if you have PI Server 2023, using OpenID should work for you. Otherwise, install PI Vision & PI Server on the same domain on your business network and bring the data up from your lower environment (or the less recommended solution - put PI Vision in the lower environment instead of the business network, but this is not a recommended approach from a cybersec standpoint).

Reply
  • 0

    If by latest version, you mean PI Server 2023, then yes you can do it that way by using OpenID. Otherwise, you'd need PI Vision on a domain as well and configure a trust between the two domains which should allow the SPNs & Kerberos Delegation to work, but users would still likely be prompted for credentials due to cross-domain actions.

     

    Short answer, if you have PI Server 2023, using OpenID should work for you. Otherwise, install PI Vision & PI Server on the same domain on your business network and bring the data up from your lower environment (or the less recommended solution - put PI Vision in the lower environment instead of the business network, but this is not a recommended approach from a cybersec standpoint).

Children