Alert
AL00347 - Applying Windows update KB4480960 or KB4480970 or KB4480957 causes data loss for PI Interface for OPC DA/HDA/Alarms and Events
2019-01-31
This alert applies to installations of PI Interface for OPC DA/HDA/AE running Windows 7 SP1, Windows Server 2008 R2 SP1, or Windows Server 2008 SP2.

Installing Windows security update KB4480960 or Windows monthly rollup update KB4480970 (both applicable to Windows Server 2008 R2 SP1 or Windows 7 SP1), or security update KB4480957 (applicable to Windows Server 2008 SP2) can result in data loss if:
  • Both the interface and the OPC Server service run under a local user (with the same name and password)
  • The local user running the interface service is a member of the local Administrators user group
Applying the security update will prevent the OPC Server service user from authenticating to the interface node. This will generate DCOM error code 80070005 (access denied) and will result in data loss because the interface and the server are unable to communicate.

Affected software

All versions of PI Interface for OPC DA/HDA/AE are impacted by this issue.

Remediation

  • Microsoft Hotfix 4487345 fixes the issue introduced in KB4480960 and KB4480970 (Windows Server 2008 R2 SP1 or Windows 7 SP1)
  • Microsoft Hotfix 4487354 fixes the issue introduced in KB4480957 (Windows Server 2008 SP2)

 Recommendation: As best practice, do not add the PI Interface for OPC DA/HDA/AE service user to the local Administrators group.