In this video we will be going over how to change your PI Vision certificates.
You may want to do this if you are upgrading your certificate from a self-signed to a domain
or third-party certificate or if your certificate has expired.
For my example as you can see if we go to the certificate see that it says certificate
expired and if we view the certificate, you’ll see that the certificate has expired and look
at the date below it is past the date now.
Now when you have a new certificate created, you will have to check that the subject alternative
names are set correctly, so as you can see, we want to re-create the certificate with
the same subject alternative names To do this, we will have to open up the PI
Web API Admin utility
And we just select next until we get to the certificate, as you can see, that there is
a warning about it.
So, all we have to do is change and then select your new certificate
Now certificates will only show up here, if they are correct and if they are in the certificates
personal store, so let’s have a look at that now.
First, we will have to open up the MMC application.
Add / remove Snap-in...
Select the certificates.
Add it for the computer account.
And then click okay, now we expand certificates, select the personal store and the certificates.
So, when you have your certificate created, you will have to have it placed here or have
your IT department place it here for you.
The PI Web API Admin utility will only see certificates that are placed here.
So now we will go ahead and finish.
And next.
And just finish through the prompts here.
And finish.
So now all we have to do is, refresh the site.
As you can see, no more certificate error.
So, if we open that up again, you’ll see that we have the new certificate and if we
view the certificates and the subject alternative names, you’ll see that we have added them
back in our new certificate.
Now this will work for PI Vision 2019 and below, in PI Vision 2020 there is no longer
the PI Web API so it will not use the PI Web API admin utility.
So to change that, you will have to open up IIS manager and
now we will expand this, expand the sites and the default website, as you can see, that
is where PI Vision is, so we right click the default website and edit bindings, select
the port which is 443 and here, you just simply go to the SSL Certificate and change it again,
as I already have it selected here, I will just leave that and cancel it and then you
would just simply refresh the website again and the certificate will be applied.
Also note, that the creation of certificates for PI Vision and Web API is not handled by
OSIsoft, you will have to contact a 3rd party vendor or your IT team to create this for
you.