bapco-shutterstock_2496750119

PI Ancillary Server

Engineering & Marketing International
Technology

Aveva

Industry

Petroleum

Client

Bapco

Country

Bahrain

Goals

Implement PI Ancillary Server in DMZ with cybersecurity focus

Configure PI Asset Framework on Ancillary Server

Ensure reliable backups of Production PI Servers via VEEAM

Enable secure, buffered PI-to-PI data transfer

Challenges

Integrating new server in secure DMZ without disruption

Guaranteeing secure, seamless data flow between networks

Maintaining data integrity with robust buffering

Aligning with evolving cybersecurity standards

Solutions

Installed and configured PI Ancillary Server and AF in DMZ

Verified backup operations with VEEAM for disaster recovery

Configured buffered PI-to-PI Interfaces for fault-tolerant transfer

Conducted comprehensive system and security testing

Results

Secure, robust PI Ancillary Server architecture deployed

Reliable and lossless data transfer between production and DMZ

Enhanced backup and recovery through VEEAM integration

Complete documentation supporting maintainability and compliance

BAPCO PI Ancillary Server Implementation

Enhancing PI System Architecture with Cybersecurity Best Practices
In 2019, EMI was contracted by Bahrain Petroleum Company (BAPCO) to upgrade their PI System architecture to meet modern cybersecurity requirements. The core objective was to integrate a PI Ancillary Server within the DMZ network zone, acting as a secure intermediary between the production PI servers and external networks. This implementation reinforced the security posture by isolating sensitive production systems while maintaining seamless and reliable data flow.

The project included installing and configuring the PI Ancillary Server alongside the PI Asset Framework (AF) in the DMZ, enabling asset-centric data modeling in a secure environment. To ensure operational resilience, VEEAM was utilized to back up production PI servers, supporting disaster recovery efforts. Critical to the project’s success was the configuration of PI-to-PI interfaces with buffering enabled, ensuring lossless, fault-tolerant data transfer from production PI servers to the DMZ PI Ancillary Server.

EMI conducted thorough testing to validate data integrity, system functionality, and security compliance. The project was completed with comprehensive documentation detailing the new system architecture, configuration settings, and operational guidelines. This upgrade provided BAPCO with a robust, secure, and maintainable PI system setup that adhered to cybersecurity best practices, significantly enhancing system reliability and operational confidence.