Edit Place Overview Page

Choose a layout and drag widgets onto your Overview Page to customize it. Widgets placed on the page below can be configured by selecting the symbol.

Dismiss this customization messageDon't show me this again.

All Places >

Security

Actions

About Security

Overview
Content
People
Projects
Events
More

Share group

Manage

Security Links

Loading...

Ethical Disclosure Policy

PI Security Tech Support

YouTube: Securing PI

Recently Joined

Loading...

jmalmeida Joined Dec 17, 2018
Octopian Joined Sep 25, 2018
AndyILOTT Joined Mar 21, 2018

View all members

Welcome to the OSIsoft Security Group!

Loading...

This user group is here to exchange information and best practices related to mitigating security risks and tightening security. We hope to share and learn. We will be making regular posts about PI System security. If you would like to be notified about new posts, please Follow this site or join the group. We look forward to your feedback. And please, feel free to share your thoughts and questions through your own blogs or status posts.

Ask Security

Loading...

Ask a question in this group

Loading...

Recent Activity

Filter

Set as default view

Filtered by:All Items

lmlcoch

in Security9 months ago (Show more Show less)

Introduction to group Managed Service Accounts

Although introduced in Windows Server 2012, the Group Managed Service Account (gMSA) still has low adoption within our customer base. This blog post aims to highlight benefits of gMSAs, discuss how to deploy and use them, and offer some tips & tricks. Built-in accounts such as Network Service or Local System are simple to use and can run a… (Show more Show less)

in SecurityLike Show 8 Likes(8)

9 commentsShow more activityShow more activity

lmlcoch

(to Floris Zwaard) 2 months ago (Show more Show less)

Ad 2) Not true. RBCD requires a valid SPN set assigned to service accounts to which you're delegating (back ends), unless the connection properties to the back-end service specify the use of UPN instead of SPN for Kerberos. As I said, it's an easy test you can do yourself - Kerberos requests are clearly made for SPNs when RBCD is used…

Like Show 0 Likes(0) Actions

Ruxana in Security3 months ago (Show more Show less)

Enable the SMB signing on PI server

Hi, Does enabling the SMB signing on PI server cause any problem? Thanks, Ruxana

in SecurityLike Show 0 Likes(0)

3 repliesShow more activityShow more activity

Ruxana (to Lal_Babu_Shaik) 2 months ago (Show more Show less)

Thank you

Like Show 0 Likes(0) Actions

hpaul

in Security2 years ago (Show more Show less)

Check out the PI Security Audit Tools on GitHub

In an effort to demystify PI security and help our customers assess the security posture of their systems, we’ve developed a tool to help baseline the security configuration of PI System components in the form of a PowerShell module. The tool performs validation checks for the machine, PI Data Archive, PI AF Server, SQL Server and PI Coresight,… (Show more Show less)

in SecurityLike Show 16 Likes(16)

16 commentsShow more activityShow more activity

taterhead247 3 months ago (Show more Show less)

Harry Paul, would you be agreeable to adding some extra language to the Recommendations section for AU10008. I just spent the last hour back engineering the scripts to find out that software updates are checked by looking for System logs with an ID of 19. If I had known that up front my investigation would have taken 2 seconds instead of an hour.…

Like Show 0 Likes(0) Actions

Brian

in Security3 months ago (Show more Show less)

Security Workshop, Take 2 in Dallas!

We're doing it again. This time in Dallas! On November 13th, OSIsoft is hosting the Texas Regional Seminar in Dallas, TX. There will a be a good mix of talks on our product roadmap and customer success stories. As a FREE pre-event session on November 12th from 1:00 to 5:00 PM, we are hosting a Cyber Security workshop on the PI System with… (Show more Show less)

in SecurityLike Show 1 Like(1)

0 comments

hpaul

in Security10 months ago (Show more Show less)

Cyber Activity Targeting Energy and Other Critical Infrastructure Sectors

US-CERT released the alert, Russian Government Cyber Activity Targeting Energy and Other Critical Infrastructure Sectors, on Thursday, March 15th. The technical alert includes indicators of compromise (IOCs), technical details on the tactics, techniques, and procedures (TTPs) used by the actors, and security best practices relevant to the… (Show more Show less)

in SecurityLike Show 6 Likes(6)

4 commentsShow more activityShow more activity

Bryan Owen

3 months ago (Show more Show less)

Application whitelisting with "AaronLocker". A set of powershell scripts that make it easier to deploy Applocker. ANNOUNCING: Application whitelisting with “AaronLocker” – Aaron Margosis' Non-Admin, App-Compat and Sysinternals WebLog Checkout these tools and Defrag video if you thought Applocker is too hard to configure for desktops. …

Like Show 0 Likes(0) Actions

Brian

in Security4 months ago (Show more Show less)

Interested in attacking the PI System? Come to S4!

We share this special invitation to the Digital Bond S4x19 ICS Security Conference sponsored by OSIsoft, LLC. The S4x19 conference is taking place in Miami Beach, January 15-17, 2019. The three-day event brings together the top researchers, thought leaders and influencers in the industrial control system (ICS) community to discuss advance… (Show more Show less)

in SecurityLike Show 7 Likes(7)

1 commentShow more activityShow more activity

Rhys Kirk

4 months ago (Show more Show less)

Sounds very interesting. I'm off to check flights...

Like Show 1 Like(1) Actions

Brian

in Security5 months ago (Show more Show less)

Security Workshop in D.C.

Coming this month on August 21-22, OSIsoft is hosting a Super Regional Seminar. This is a special two day event taking place in Washington D.C. There will a be a good mix of talks on our product roadmap, customer stories as well as guests speakers from the Department of Energy (DoE) and the Nation Institute for Standards and Technology (NIST). … (Show more Show less)

in SecurityLike Show 2 Likes(2)

0 comments

Shared by hpaul

from Harry Paul's Blog5 months ago (Show more Show less)

Configuration as Code for PI System Security: Introducing PI Security DSC

As a PI System administrator, do you want to: use the same mechanism to secure both the OS and the applications running on it? maintain a baseline across numerous nodes and sites? have functional documentation that allows you to both apply and verify your configurations? The Customer Success Cyber Security Champions have created the PI… (Show more Show less)

0 comments

aivanova

in Security6 months ago (Show more Show less)

Standard ISO/IEC 27032:2012 and PI System

Dear all, Some our customers and sales people ask if PI system meet requirements of the standard ISO/IEC 27032:2012 (https://www.iso.org/standard/44375.html ) and if yes, can we get some sort of proof (certificate, OSIsoft statement etc.). Your help would be highly appreciated!

in SecurityLike Show 0 Likes(0)

1 replyShow more activityShow more activity

Bryan Owen

(to aivanova) 6 months ago (Show more Show less)

About standards... ISO 27000 series and NIST 800 series documents are organized as a loose 'family' of standards, guidelines and technical reports. Standards often reference each other and not all standards are intended as auditable nor offered with a formal certification regimen including ISO/IEC 27032:2012. ISO/IEC 27032 seems an unlikely…

Like Show 0 Likes(0) Actions

Recent Content Tagged with Security

Loading...

Upcoming Events

Loading...

You can't create events here, but watch for events you might be interested in.

Popular Tags

Loading...

administration
audit
conference
cyber_security
digital bond
github
ot security
pi security
pi system administration
powershell
regional seminar
s4x17
scripts
security
security cybersecurity

View all

Actions

Loading...

Group feeds

Edit Place Overview Page

Manage

Security Links

Featured Content

Recently Joined

Welcome to the OSIsoft Security Group!

Ask Security

Recent Content Tagged with Security

Upcoming Events

Popular Tags

Actions