System Management Server

Hi Jakob,

it depends how the SMS is configured on the nodes.

If it's configured to allow only encrypted communications, any SuiteLink connection will try to authenticate, fail to do so, then disconnect.

If SMS is configured to accept non-encrypted communication, it will connect anyway but not applying TLS. E.g. the following setting will allow non-encrypted fallback.

Ok, thank you for your help!! The main reason for choosing to have a SMS active in the system, is because i require redundant appengines, and according to ASP guidelines the SMS is a requirement for being able to do that, there were some other things as well the webviewengine if i remember correctly.  

Seeing the text NOT RECOMMENDED next to the option of no SMS in the configurator is convincing as well

thank you!

You can setup redundant SSO server if you're worried about single point of failure

docs.aveva.com/.../734320.html

Yes, i intend to. But does having an SMS activated, only affect suite link connections or are there other things to consider?

SMS affects only Suitelink connections at the moment

If the System Management Server is down, it will affect the deployment/ undeployment, user authentication , any communication such as SuiteLink

docs.aveva.com/.../734315.html

SMS builds trust between machines , if the SMS is lost, the trust is lost and hence no communication

I was guessing that once certificates have been verified the first time on the nodes network it does not automatically shut out access and makes a live system stop.  I would assume it only creates problems when you are adding new nodes or making changes, that require reinstalling certificates on nodes.

It won't make a live system stop, but you will lose data, live SCADA is pretty much useless without data

Mx, IData (web), SuiteLink, HCAL are crypted by SMS. HTTPS can be used for example with licence manager with the help of ssms. However, once the client machine is recongnized it gets a certificate with a long validation’(years) so even do you stop SMS once the connection has been correctly made it shouldn’t affect your runtime.

I was unaware that for redundant engines you must apply SMS. In my opinion it’s always possible to use it without SMS. The only thing is that you’ll be floated of warning telling you that SMS is deactivated. Based on that I think SMS will be a mandatory configuration point in the future