Configuring CE as a decentral Adapter engine for PI. What about security?
As part of the SAP business content for Global Data Synchronization (GDS) we have installed some Application on CE and configured the CE as a decentral Adapter engine for our PI system by execution the wizard "Advanced Adapter Engine" on the CE instance.
The wizard connects to the PI box and reads user and password information for system users (like PIAFUSER, PIISUSER, PIDIRUSER, etc) from the PI box to setup the comunication between CE and PI. Now we have security concerns because the CE instance is not hosted by our department and is not secured in the same way as the PI system.
Does anyone know:
- What exactly happens if a CE instance is configured as decentral Adapter Enginge for a given PI instance?
- Seems that CE is using the exchange profile on PI. Is it possible to use the exchange profile on CE (or the corresponding configuration services in NWA for systems >= 7.30)?
- Is it possible to configure/use different users than the standard users with less priviliges and a separate password?
Thanks in advance for any help on the matter. I know it is a very advanced topic.