Do I need to do something inside Chrome itself to do with logging in / trusted sites / delegation?
What account is running PI AF Application Service?
Run setspn -q AFServer/AFSERVERHOSTNAME and check if you get a proper response back (meaning the AF service account will be the only one listed).
Of course, Kerberos won't ever work with a local account. The fact that you even had to enter credentials indicates that your web browser may not be set up properly. Check KB01223 - Kerberos and Internet Browsers.
There is a known issue in PI Web API 2015 R3 that maybe affecting you.
In particular, the PI Web API 2015 R3 Admin tool creates a certificate that does not include the fully qualified domain name in the Subject Alternative Name entry of the certificate, can you verify which are the entries that are listed in the certificate used with PI Web API R3?
This means that the FQDN won't be a trusted source, even when you import the certificate. Sadly, the only work around is to uninstall PI Web API R3 and then use the PI Web API R2's installer to create a new certificate.
Yes that worked. I put on R2 and then upgraded.
I used the same account as I use for coresight, which has delegation enabled.
However I have not created any SPN's yet, but I can open the browser and drill down to a point and read its current value and also read an AF element attribute
I wanted to check the Search Crawler databases and have found that the page is completely blank.
I tried to add a new database, the name of the PI Sever Collective name, but when I press save it come up with
"Invalid Search Source Name"
Do you know why the Data Archives and Asset Servers were not automatically added to the cached database for searching?
This is how the product works. It does not add the databases automatically. You need to add it manually. Are you using the correct syntax to add? I think it is "PI:SERVERNAME". Can you connect to this PI Data Archive using AboutSDK?
Hope it helps!
Marcos, yes it does. I misunderstood the behaviour of the crawler. I assumed that it would use the known servers to automatically index those systems.
Now you mention it I was thinking that this might be the case on the way home.
I recall coresight builds the indexes but it has its own admin page and I assume this is a front end for the configuration of the databases that crawler is updating.
I also recalled there might be a prefix on the DA name. So if my DA server is called PIServer I use PI:PIServer as the data source name. And if I have an AF server called AFSERVER I should use AF:AFSERVER right?
1 of 1 people found this helpful
The PI Data Archive prefix differs from the Asset Framework prefix:
Glad I found your answer for the right syntax for AF server. The documentation (techsupport.osisoft.com/Documentation/PI-Web-API/help/topics/crawler-configuration.html) mentions it as af:\afserver\afdatabase (basically missing one \ at the start).