Documentation PI Nexus+ Documentation

PI Nexus+ / Installation and Administration

8. Verify Runtime Identities

After installation and database setup, verify that Windows is actually running PI Nexus+ under the intended service account. This is important because the installer can complete with fallback identities if Windows rejects the supplied service account. The application may open with a fallback identity, but SQL, PI, AF, or PI Vision access can fail until the correct identity is assigned.

Overview

After installation and database setup, verify that Windows is actually running PI Nexus+ under the intended service account. This is important because the installer can complete with fallback identities if Windows rejects the supplied service account. The application may open with a fallback identity, but SQL, PI, AF, or PI Vision access can fail until the correct identity is assigned.

8.1 Verify IIS App Pool Identity

The IIS app pool identity is the Windows account used by the PI Nexus+ web application. This account handles user requests, admin configuration, discovery calls, license installation, and web-application access to SQL Server.

Steps:

  1. Open IIS Manager.
  2. Open Application Pools.
  3. Select PINexusAppPool.
  4. Open Advanced Settings.
  5. Confirm Identity is the intended PI Nexus+ service account.
  6. If it is ApplicationPoolIdentity, change it now to the PI Nexus+ service account.
  7. Enter the password.
  8. Recycle or start the app pool.
IIS app pool identity

The app pool should use:

SettingValueWhy
.NET CLR versionNo Managed CodeASP.NET Core runs out-of-process/in-process through the hosting module, not as a classic .NET Framework app
Pipeline modeIntegratedRequired for the IIS pipeline used by the site
Load User ProfileTrueAllows the service account profile and related Windows/PI client context to load correctly

A good result for this section is that the app pool starts and stays running under the intended service account.

8.2 Verify Scanner Service Identity

The scanner service identity is the Windows account used by background scans. This account needs SQL access and PI System read access because it performs PI Point, AF, and PI Vision inventory scans.

Steps:

  1. Open Windows Services.
  2. Find PI Nexus+ Scanner.
  3. Open Properties.
  4. Go to Log On.
  5. Confirm the service uses the intended PI Nexus+ service account.
  6. If it is LocalSystem, change it now to the PI Nexus+ service account.
  7. Enter the password.
  8. Start the service.
Scanner service identity

The service account must have Log on as a service. If the service does not start, check the Windows Event Log and the PI Nexus+ scanner logs.

A good result for this section is that PI Nexus+ Scanner starts and stays running under the intended service account.