bapco-shutterstock_2496750119

PI Ancillary Server

Engineering & Marketing International
Technology

Aveva

Industry

Petroleum

Client

Bapco

Country

Bahrain

Goals

Implement PI Ancillary Server in DMZ with cybersecurity focus. Configure PI Asset Framework on Ancillary Server. Ensure reliable backups of Production PI Servers via VEEAM. Enable secure, buffered PI-to-PI data transfer

Challenges

Integrating new server in secure DMZ without disruption. Guaranteeing secure, seamless data flow between networks. Maintaining data integrity with robust buffering. Aligning with evolving cybersecurity standards.

Solutions

Installed and configured PI Ancillary Server and AF in DMZ. Verified backup operations with VEEAM for disaster recovery. Configured buffered PI-to-PI Interfaces for fault-tolerant transfer. Conducted comprehensive system and security testing

Results

Secure, robust PI Ancillary Server architecture deployed. Reliable and lossless data transfer between production and DMZ. Enhanced backup and recovery through VEEAM integration. Complete documentation supporting maintainability and compliance

BAPCO PI Ancillary Server Implementation

Enhancing PI System Architecture with Cybersecurity Best Practices
In 2019, EMI was contracted by Bahrain Petroleum Company (BAPCO) to upgrade their PI System architecture to meet modern cybersecurity requirements. The core objective was to integrate a PI Ancillary Server within the DMZ network zone, acting as a secure intermediary between the production PI servers and external networks. This implementation reinforced the security posture by isolating sensitive production systems while maintaining seamless and reliable data flow.

The project included installing and configuring the PI Ancillary Server alongside the PI Asset Framework (AF) in the DMZ, enabling asset-centric data modeling in a secure environment. To ensure operational resilience, VEEAM was utilized to back up production PI servers, supporting disaster recovery efforts. Critical to the project’s success was the configuration of PI-to-PI interfaces with buffering enabled, ensuring lossless, fault-tolerant data transfer from production PI servers to the DMZ PI Ancillary Server.

EMI conducted thorough testing to validate data integrity, system functionality, and security compliance. The project was completed with comprehensive documentation detailing the new system architecture, configuration settings, and operational guidelines. This upgrade provided BAPCO with a robust, secure, and maintainable PI system setup that adhered to cybersecurity best practices, significantly enhancing system reliability and operational confidence.