Technology
Aveva
Industry
Oil and Gas
Client
ADNOC
Country
UAE
Goals
Prepare PI infrastructure for secure Data Diode-based OT-IT data transfer
Upgrade PI servers to latest OS and PI software versions
Implement PI Vision with Single Sign-On integration for user authentication
Configure Asset Framework for asset management and calculation offloading
Challenges
Establish secure OT to IT data flow without impacting users
Migrate and upgrade PI infrastructure while maintaining continuity
Integrate identity and access management for PI users with IT domain
Migrate HA PI Data Archive to VMware platform with zero downtime
Solutions
Created mirrored PI Data Archives in IT network for seamless user access
Migrated PI databases without impacting ProcessBook or DataLink references
Configured PI-to-PI interfaces to transfer data securely via Data Diode
Offloaded calculations from PI PE/ACE to PI AF servers for scalability
Results
Achieved secure, compliant PI infrastructure meeting cybersecurity standards
Upgraded and modernized PI environment with improved stability
Enhanced user experience with PI Vision and SSO authentication
Delivered scalable, maintainable architecture supporting future upgrades
|
ADNOC BorougePI Infrastructure Upgrade and Cybersecurity EnhancementBetween 2022 and 2023, EMI and its local partner ALMASOOD were contracted to upgrade and enhance the PI System infrastructure for ADNOC Borouge in the UAE. The project focused on securing the PI environment by enabling data transfer between the Operational Technology (OT) and Information Technology (IT) networks through Data Diode technology. EMI created mirrored PI Data Archives in the IT network to maintain seamless data accessibility without disrupting existing applications. |
The scope included upgrading PI servers (Data Archive and Application Servers) to the latest OS and PI software versions and migrating the high availability (HA) PI Data Archive onto a VMware platform with zero downtime. PI Vision was implemented as the main visualization platform, replacing legacy systems, while Single Sign-On (SSO) integration was added for streamlined user authentication with corporate IT domains. The Asset Framework (AF) was configured extensively to offload complex calculations from legacy PI ProcessBook and Analysis Services, improving system performance and scalability.
Throughout the project, EMI managed challenges such as maintaining uninterrupted operations during migration, ensuring secure data flow between segregated networks, and integrating identity management for SSO. A comprehensive security audit was performed to validate firewalls, backup procedures, and user policies. The project culminated in a robust, compliant PI infrastructure delivering enhanced cybersecurity, operational visibility, and scalable architecture prepared for future upgrades. | ![]() |