Digital Process Automation Solutions

The AVEVA PI Network Security Migration project in Andover, MA, USA involved migrating manufacturing and automation systems from a flat network topology to a segregated network design based on building area. The primary challenge was to migrate an existing AVEVA PI System to this new segregated network while maintaining strict security requirements and minimizing downtime.

Security Enhancements: The project focused on implementing enhanced security measures such as Group Managed Service Accounts (GMSAs) and Data transfer between Untrusted domains.

Limited Downtime: With the requirement for minimal downtime, the strategy involved meticulous planning and execution to ensure that the migration process was swift and efficient.

System Migration: Despite the complexity, the AVEVA PI system was successfully migrated to the new segregated network. This encompassed various components such as Data Archive Collective, Asset Framework (SQL High Availability), PI-EDA, PItoPI, and RDBMS Interfaces.

Data Historians Integration: A significant challenge involved integrating NGMP (Non-Good Manufacturing Practice) and GMP (Good Manufacturing Practice) Data Collection Site level historians that required communication with the new segregated networks. This required innovative solutions, including the use of GMSAs in Untrusted domains, to ensure secure communication.

Minimal Downtime Execution: One of the most challenging aspects was executing the migration within limited downtime while adhering to Good Manufacturing Practices (GMP). The careful planning, well-coordinated efforts, and efficient execution ensured the project’s success.

Security Enhancements: The project focused on implementing enhanced security measures such as Group Managed Service Accounts (GMSAs) in Untrusted domains. This ensured that the strict security requirements were met, even in a modern domain environment.