Performance Center (PC) web UI is configured to use SSL for HTTPS. Access to the Performance Center web UI using the same user used in the Odata queries works without error.
The SsoConfig command run on the PC server shows the correct values set for Web Service Host, the value passed to the Data Aggregator (DA) for user authentication in PC.
All supported Performance Management releases
To update the value the DA is set to use follow these steps. The key here is to update the Remote Value option for the Web Service Host value in Performance Center options. Even if it's set correctly already, or is empty, the act of updating or setting a new/updated value is what triggers the DA to look for new values. This shows it has new values to set, which forces it to update it's values. The end result is it using the correct PC host to authorize users for OpenAPI access.
It can take 5-20 minutes depending on system size for the sync to complete despite the UI showing a state change for the DA sync state from Available->Synchronization->Available.
Monitor the http://DA_Host:8581/rest/dataaggregator page to see the NpcHostName value change. Once that changes the failing Odata OpenAPI queries and UI access should now work.