SLIDE 1
Presented by
Tips from the Trenches
Tony Yan Jian and Karn Udomsangpetch
2
Tips from the Trenches Presented by Tony Yan Jian and Karn - - PowerPoint PPT Presentation
Tips from the Trenches Presented by Tony Yan Jian and Karn - - PowerPoint PPT Presentation
Tips from the Trenches Presented by Tony Yan Jian and Karn Udomsangpetch Tech Support and Field Service 2 Proactive Disciplined Aware Protect Licensing Architecture From Diagrams PI Buffer Viruses Learning Subsystem
SLIDE 2
SLIDE 3
3
Proactive
- Protect
From Viruses
- Windows
Integrated Security
Disciplined
- Licensing
- PI Buffer
Subsystem
- Logs
Aware
- Architecture
Diagrams
- Learning
SLIDE 4
4
Proactive
- Protect
From Viruses
- Windows
Integrated Security
Disciplined
- Licensing
- PI Buffer
Subsystem
- Logs
Aware
- Architecture
Diagrams
- Learning
SLIDE 5
5
Proactive
- Protect
From Viruses
- Windows
Integrated Security
Disciplined
- Licensing
- PI Buffer
Subsystem
- Logs
Aware
- Architecture
Diagrams
- Learning
SLIDE 6
6
Virus Infection at an Electric Utility
(Continued on next slide)
SLIDE 7
7
Virus Infection at an Electric Utility
(Continued on next slide)
SLIDE 8
8
Scan USB Sticks Regularly
- OSIsoft uses endpoint protection
- 3rd parties always have the option to
scan the device themselves
- Always scan thumb drives
SLIDE 9
9
Small steps to a more secure user authentication model
SLIDE 10
10
Explicit Login and PIadmin
- Do not use explicit login anymore
– Especially for the piadmin user!
- Security Alert: PI Authentication
Weakness
– October 2009 – Encryption Algorithm is no longer safe
SLIDE 11
11
Public security bulletin
SLIDE 12
12
SLIDE 13
13
Explicit Login: How To
SLIDE 14
14
Security Take Home Points
Using long and complex passwords for explicit login protects me?
False
Windows Integrated Security will have the same weakness?
False
SLIDE 15
15
A Case from the Tech Support Trenches
SLIDE 16
16
My PI Server will not Start!
Check the PI Server Message Logs Check the Event Viewer Logs
SLIDE 17
17
My PI Server will not Start!
SLIDE 18
18
Licensing
Need highest percent match Field Service Standards
SLIDE 19
19
PI Buffer Subsystem Example
- Windows Integrated Security
- Everyone group has read access
- Machines map to the Everyone group
- PI Buffer Subsystem may connect as a read-
- nly user
SLIDE 20
20
PI Buffer Subsystem Example
- Use Windows Integrated Security
- Allow the buffer to connect as a PI Identity
with write access to the Points which it owns
SLIDE 21
21
PI Buffer Subsystem: How To
SLIDE 22
22
Listen to your system: PI Message log
SLIDE 23
23
Listen to your system: PIPC log
SLIDE 24
24
Listen to your system: PI Message log
SLIDE 25
25
Listen to your system: PI Message log
SLIDE 26
26
Listen to your system: PIPC log
SLIDE 27
27
Listen to your system: PIPC log
SLIDE 28
28
Listen to your system: eventvwr
SLIDE 29
29
Know your system
SLIDE 30
30
We start simple …
Knowing Your System
SLIDE 31
…and we build
31
Knowing Your System
SLIDE 32
32
…and build
Knowing Your System
SLIDE 33
33
…and build
+12?
Knowing Your System
SLIDE 34
34
…and build
+12? 36 instances
Knowing Your System
SLIDE 35
35
…and build
+12? 36 instances WAN links
Knowing Your System
SLIDE 36
36
Available Resources Online
SLIDE 37
37
Available Resources
SLIDE 38
38
Livelibrary.osisoft.com
Available Resources
SLIDE 39
39
Quickstart Series
Available Resources
SLIDE 40
40
community.osisoft.com vcampus.osisoft.com
Available Resources
SLIDE 41
41
PI System Admins
Developers
Power Users
System Integrators
Anyone technical
OSIsoft Partners
Get hands on knowledge of how to use and get value from the PI System
SLIDE 42
42
Tony Yan Jian
tyan@osisoft.com
Customer Support Engineer
OSIsoft Asia Pte. Ltd.
Karn Udomsangpetch
karn@osisoft.com
Customer Support Engineer
OSIsoft Asia Pte. Ltd.
SLIDE 43