Support Multiple Network Service Accounts per Site in Central / Multi-Node Galaxy

In Central Galaxy and Multi-Node System Platform deployments, a single shared Network Service Account is commonly used across all sites and nodes.

In large deployments (e.g. 30–40 servers across multiple facilities), this creates a single operational and security dependency:

• Any required password change must be executed simultaneously across all nodes

• No ability to perform phased or site-by-site password rotation

• Increased outage and rollback risk during credential changes

AVEVA should support multiple Network Service Accounts within a shared Central Galaxy, allowing:

Different service accounts per site / site group

• Logical association of nodes (e.g. KUL, HKG, ICN) to distinct credentials

• Independent password rotation without impacting other sites

• Gradual, phased execution of “Change Network Account Password”

Expected Benefits:

• Reduced operational risk during password changes

• Improved alignment with enterprise security policies

• Better fault isolation between sites

• Enables phased maintenance instead of big-bang changes

• Improved scalability for large multi-site deployments

Alignment with Security & Compliance

This enhancement directly supports:

• Least privilege principles

• Credential compartmentalization

• Zero Trust and IEC 62443 zone isolation concepts