Enable the use of gMSA for PI Adapters running on Windows
In our environment, we plan to deploy PI Adapters on Windows Server class OS. We are in a strict minimum privileges environment hence we only make use of gMSA on all PI services.
We do not want to make use of a domain service account where the password is known (by a few) and can be impersonated. PI Adapters should be enabled to make use of such gMSA type of account to run the service in a secure manner.
20
votes
Christian Leroux
shared this idea
1 comment
-
Gabriel Verreault
commented
gMSA's can be used to run the PI Adapter service. That being said, if using PI Web API as an endpoint, the only supported authentication method is basic and would require entering credentials of user / service account with the required access on the destination AF/PIDA.