How do I limit access to PME web pages that do not require a login?

Issue
How do I set up an authentication requirement to access a PME web page that does not require a login such as the "http://localhost/ion" virtual directory.

Product Line

Power Monitoring Expert 7.2

Power Monitoring Expert 8.x

Power Monitoring Expert 9.x

Power Monitoring Expert 2021

Power Monitoring Expert 2022

Power Monitoring Expert 2023

Power Monitoring Expert 2024

StruxureWare Power Monitoring (SPM) 7.0.x
ION Enterprise 6.0.x

Environment
Web page access and authentication

Cause
There may be a security concern that certain web pages may be accessible without requiring a login prior to viewing the information contained.

Resolution
1. Open the "Internet Information Services (IIS) Manager" console on the machine that the power monitoring software is installed on. (Click Start, Search IIS)
2. Expand "Sites" on the left side. Expand "Default web site".
3. Click a site that needs authentication such as the "ION" site.
4. Locate "Authentication" in the middle pane and double click it.
5. Disable "Anonymous Authentication" by highlighting and right clicking on it and selecting "Disabled".
6. Enable "Windows Authentication" by highlighting and right clicking on it and selecting "Enabled".
7. Open a command prompt as administrator. Type "IISRESET" and hit enter. (Not required, but a good practice when making IIS changes)
8. Verify that Windows Authentication is now enabled for the ION virtual directory by attempting to browse to the site. You should now see a Windows Authentication prompt to enter a username and password.

Note:
Permissions are set at the folder level using Windows security settings. This method does not use a PME login.  Please verify proper Windows security settings to the virtual directory path prior to making changes.
The default path to the ION virtual directory within the Power Monitoring Expert install path is "...\Schneider Electric\Power Monitoring Expert\system\WebReach"
Some browsers may not support Windows level authentication or may require additional changes beyond the scope of this document.

Released for: Schneider Electric Canada