Hello,
I am getting the following message when I try to get data from PI Data Archive through PI Web API:
"Timestamp": "2017-12-05T15:24:27.7826759Z",
"Value": "Cannot connect to the PI Data Archive. Trust authentication trial failed because insufficient privilege to access the PI Data Archive. Windows authentication trial failed because insufficient privilege to access the PI Data Archive. ",
"UnitsAbbreviation": "",
"Good": false,
"Questionable": false,
"Substituted": false
I've checked if there is an issue with PI Mappings or PI Trust but apparently there is not. Also, pulling data from PI DataLink works just fine.
Any ideas of what might be happening?
Thank you!
If you edit the "String arry" you will see a list of authenitcation options that are enabeled for your PI WebAPI.
Likely it's set to Kerberos.
In order to get Kerberos working you need to configure your account for delegation.
1. Register SPN on the account that runs the PI WebAPI (SETSPN -S HTTP/HOSTNAME domain\account)
2. Allow the service account to delegate to the PI server and AF server (SPN's have to be registered for those services as well, PIServer/HOST (for PI Data Archive) and AFServer/HOST (for AF server))
You can use the Kerberos guide for PI Vision (Coresight) for the configuration
Coresight Squared – What’s next? Kerberos and more..
Not reccomended: Switch to Basic authentication by adding/replacing "Kerberos" with "Basic" (case sensitive) in the AuthenticationMethods attribute, Do NOT change to basic if the PI WebAPI is used in a PI Vision installation.