AVEVA™ Products Feedback Portal

Welcome to our new feedback site!


We created this site to hear your enhancement ideas, suggestions and feedback about AVEVA products and services. All of the feedback you share here is monitored and reviewed by the AVEVA product managers.

To start, select the product of your interest in the left column. Then take a look at the ideas in the list below and VOTE for your favorite ideas submitted by other users. POST your own idea if it hasn’t been suggested yet. Include COMMENTS and share relevant business case details that will help our product team get more information on the suggestion. Please note that your ideas will first be moderated before they are made visible to other users of this portal.

This page is for feedback for specific AVEVA solutions, excluding PI Systems and Data Hub. For links to these other feedback portals, please see the tab RESOURCES below.

Add a new idea Subscribe
Status Will not implement
Portfolio area Application Server
Products Configuration
Created by Guntars Rubenins
Created on May 12, 2025

RELATED IDEAS

Downgrade all OCMC errors and warnings to Info priority about SMS not configured in galaxy.

This Idea is created based on customer feedback from SR: 960579385

End-User would like to have clean OCMC logs if system is working - without unnecessary errors and warnings that are related to SMS configuration disabled.

  • ADMIN RESPONSE
    Jul 20, 2025

    Thanks for raising this idea.

    The short version: We cannot hide these security warnings (explained below) but, please help us make SMS easier to adopt instead.

    Detail:

    The warnings you see are generated only when the suite is configured to accept unencrypted traffic (i.e., SMS is disabled). They serve as a deliberate, real‑time reminder that certificates are not being exchanged and the connection is therefore vulnerable to interception. Suppressing or downgrading these messages to "Info" would mask that risk and undermine the “secure‑by‑default” principles now embedded and required in regulations such as the EU Cyber Resilience Act, which obliges vendors both to ship secure defaults and to warn users of any residual cyber‑risks.

    Under the CRA, we may need to enforce the use of SMS in future versions, so the best path forward is to enable SMS so the platform can issue certificates and encrypt node‑to‑node traffic. If SMS deployment is difficult in your environment, please tell us what is blocking you so we can improve the service and remove objections against its use rather than lowering the security bar. If you have ideas about how we can do that, please submit them here.

  • Attach files