Securing sensitive historian configuration information
Systems and methods for securing configuration information for cloud-based services. A system comprises a data store and data sets including plant process information and configuration information. A memory device stores computer-executable instructions. When executed by a processor coupled to the cloud service, the instructions receive configuration information, store it in a data file, apply a generated certificate to the file, and deploy the resulting protected configuration data file to the cloud-based service. In addition, the protected configuration data file is made available by obtaining the file from the cloud-based service.
1. A cloud-based computer system comprising:
a cloud service,
a service role,
a configuration data file,
configuration data, and
configuration settings;
wherein the service role is configured to receive the configuration data and store the configuration data in the configuration data file;
wherein the configuration data comprises the configuration settings; and
wherein the cloud service is configured to read the configuration settings from the configuration data file in response to a query by the service role;
further comprising one or more computers comprising one or more processors and one or more non-transitory computer readable memory devices, the one or more non-transitory computer readable memory devices storing computer-executable instructions that cause the one or more processors to:
generate a certificate and apply the certificate to the configuration data file to transform the configuration data file into a protected configuration data file, generate a private key associated with the certificate, and
deploy the protected configuration data file for querying by the service role;
wherein the protected configuration data file comprises encrypted configuration values as well as a thumbprint of the certificate stored in a service configuration file;
wherein the thumbprint uniquely identifies the certificate;
wherein the certificate is only required for uploading the encrypted configuration values to the cloud service; and
wherein the private key associated with the certificate is not required for uploading the encrypted configuration values to the cloud service.
2. The computer system of claim 1 , wherein the configuration data comprises a name of a storage account.
3. The computer system of claim 2 , wherein the service role further comprises a worker role providing applications capable of running asynchronous tasks that are independent of user interaction or input.
4. The computer system of claim 1 , wherein the service role further comprises a web role providing a dedicated internet information services (IIS) web server used for hosting front-end web.
5. The computer system of claim 1 , wherein utilizing the cloud service via the service role further comprises storing data related to monitoring process control variables.
6. The computer system of claim 4 , wherein utilizing the cloud service via the service role further comprises accessing data related to process control variables.
7. The computer system of claim 4 , wherein utilizing the cloud service via the service role further comprises accessing user identification data.
8. The computer system of claim 4 , wherein utilizing the cloud service via the service role further comprises accessing user password data.
9. The computer system of claim 1 , wherein the configuration data file further comprises data related to configuration settings for the cloud service and configuration settings for individual roles, including a number of role instances for the individual roles.