NOC Services
Welcome to the Network Operation Center (NOC) Services feedback page!
We created this forum to hear your ideas, feature suggestions and feedback. Please suggest your most important features and design change ideas on this site, and vote for your favorite ideas.
Please note that your ideas and comments posted here are visible to all other users.
- For bugs, please open a case with OSIsoft Tech Support through myOSIsoft Customer Portal (https://my.osisoft.com) instead of sharing them on this site.
- For documentation feedback and bugs, please report to documentation@osisoft.com instead of sharing them on this site.
-
Document how to set minimum permissions for each Managed PI service
I want to set give minimum permissions to the service accounts that run the Managed PI services. The solution proposed by tech support was to either use the Local System account or add the service account to the local Administrators group. The former approach would require giving the entire Managed PI computer permission to the PI Data Archive, since Local System takes the identity of the machine. The latter approach gives the service account excessive permissions on the Managed PI computer. A 3rd approach was described to me, but it was too vague to complete. Clearly, none of these approaches…
8 votesThe next release of Managed PI (due Q3 2021) utilizes virtual service accounts for Managed PI Services, and the documentation will reflect the updated best practices.
-
Improve the security of sis1.osieanoc.com
sis1.osieanoc.com is what receives customer data from the PI Agent service. The Qualys SSL Server Test shows that this connection suffers from more than a few security blunders. It scores a B out of a maximum of A+.
https://www.ssllabs.com/ssltest/analyze.html?d=sis1.osieanoc.comPlease make the necessary security improvements to bring this score up to A+ and ensure that no yellow text appears in the test results.
2 votes -
PI Agent should use TLS 1.2 or TLS 1.3 instead of TLS 1.0
PI Agent currently uses TLS 1.0 to communicate with other PI Agent services in the crosslink configuration. TLS 1.0 is known to be insecure. Please update PI Agent so that it uses TLS 1.2 or TLS 1.3.
1 vote -
Allow only HTTPS connections to the PI Diagnostics UI web pages
Please allow only HTTPS connections to the PI Diagnostics UI web pages, similar to the PI Connector administration pages. Not only is this more secure, but it would also open up the possibility of using the PI Diagnostics UI on a remote computer.
1 vote -
FIPS Compliant
I'd like the infrastructure that supports NOC services to be FIPS compliant.
0 votes
