- Autic system AS
Contents
1. lt lt IIS 6 Management Allows you to use existing IIS 6 0 APIs and scripts to manage Compatibility this IIS 7 0 Web server IIS 6 Management Installs the IIS 6 0 Management Console Provides support for Console administration of remote IIS 6 0 servers from this computer Management Allows this Web server to be managed remotely from another Service computer via the Web server Management Console Internet Information Services gt World Wide Web Services gt Application Development Features Ey Windows Features Turn Windows features on or off To turn a feature on select its check box To turn a feature off clear its check box A fillec feature is turned on de Internet Information Services de FTP Server d Web Management Tools Li World Wide Web Services l Application Development Features 7 NET Extensibility 7 J ASP VIJ ASP NET Mp cai 7 Jo ISAPI Extensions 7 ISAPI Filters Ay Server Side Includes De E 7 oe NET Extensibility Enables your web server to host NET framework managed module extensions ASP Enables your web server to host classic ASP applications ASP NET Enables your web server to host ASP NET applications ISAPI Extensions Allows ISAPI extensions to handle client requests ISAPI Filters Allows ISAPI filters to modify web server behavoiur 10 Intern2. Internet Information Services SYD DTEST 26 3 local computer Web sites E Default Web Site E TISHelp CitectSCADA localstart asp 9 mmc gif 9 pagerror gif 9 print gif 9 Thumbs db Right select the CitectSCADA virtual directory and select Properties In the CitectSCADA virtual directory properties in screen below set the Application Protection to Low IIS Process CitectSCADA Properties 21x Virtual Directory Documents Directory Security HTTP Headers Custom Errors When connecting to this resource the content should come from A directory located on this computer A share located on another computer C A redirection to a URL Local Path C Program Files Citect CitectSCADAVB Browse I Script source access M Log visits MV Read IV Index this resource TO White IV Directory browsing Application Settings Application name tects CADA Remove Starting point lt Default CitectSCADA Configuration Execute Permissions Scripts only ha Application Protection MPEGS he Unload 53 17 ASP NET The following is a Windows 2003 Server related issue The Web Client deployment page may display incorrectly and the icons for Start Display Client Delete Deployment and Edit Deployment are also missing There are two problems that could be occurring here e On Windows 2003 Server the default setting is to have all web locations except lo
3. Error ES A reee A Q Software Protection Failure No protection key found or no licence available from network If you deploy whilst in demo mode this copies a copy of citect ini file to the deployment folder on the server with the network settings disabled If you then obtain a license dongle you will need to re run Citect Explorer computer setup and redeploy on the server PC e What are the software requirements Web Server Web Client Server 2003 SP1 Windows Server 2008 SP2 Vista SP2 Windows 7 32 bit or 64 bit supported for all mentioned OS 1 Windows XP Pro SP2 or SP3 Windows 1 Windows XP Pro SP2 or SP3 Windows Server 2003 SP1 Windows Server 2008 SP2 Vista SP2 Windows 7 32 bit or 64 bit supported for all mentioned OS 2 Microsoft Internet Explorer Version 6 0 or later 2 Microsoft Internet Information Services IIS Version 5 or later 3 Microsoft Internet Explorer Version 6 0 or later 4 NTFS file system Note The target drive for the Web Server software must use an NTFS file system otherwise you won t have full access to the required Windows security settings Folder Properties dialog will not have a Security tab If you are currently using FAT32 system ensure you convert the drive to NTFS before installation of the Web software 2A e Web Client Starting up with a noticeable delay This issue could be related to the operating system checking for certifica
4. L User must change password at next logon L User must change password at next logon Password never expires Account is disabled WebWicwOntyllacr ee Password ATT Confim password AT L User must change password at next logon e Set the password for all three accounts to be something easy to remember for e g Citect e When done press Close 21 e Once the users are created assign these users to the groups created in the previous step To do this For each user right select and select Properties File Action View Help e 72H XE l uA de Computer Management Local a System Tools Name Full Name Description sae __vmware_u __vmware_user_ VMware Use gt ba i mai Administrator Built in aces gt E Event Viewer A ASPNET ASP NET Machine Acco Account us gt a Shared Folders Fi Guest Built in aces a amp Local Users and Groups AS F Users gt in a Groups wWebAadmin WebControl b 5 Performance ME WebViewOn Ey Device Manager a Storage t Disk Management gt EN Services and Applications e Select the Member Of tab and press Add 22 e Make sure the locations field displays the workstation name e Enter the group for each user in the bottom field and press Ok From this location WIN K54MP822KNF Enter the object names to select examples WIN K54MP822KNF WebAdmins e Once done for each the group w
5. Security section in Permissions for Citect should look as below Object name C inetpub wwrootCitect Group or user names 42 ns USAS W7AL06112390GC7L4115_IUSAS Trusted Installer Ea WebAdmin W7AU0611299OC7L WebAdmin a WebControlClients W7AUD611299OC7L WebControlClie E WebWewOntyCliients W7AU061 12992C7LAWeb ViewQnl Permissions for Web ViewOnhGients Full control Modify Read amp execute List folder contents Leam about access control and permissions Make sure all three groups have Read Execute List Folder Contents and Read permissions e Click OK on the Permissions for Citect pop up and go back to the Citect Folder properties gt Security Tab This should now list the three groups we have added Object name C inetpub wwwrootCitect Group Or user names Administrators AANTAL IEA ADORO Administrators 4 m1 To change pemissions click Edit Permissions for WebAdmin Full control Modify Read amp execute List folder contents Read Write For special permissions or advanced settings click Advanced Leam about access control and permissions e Press the Advanced button to bring up Advanced Security Settings for Citect and Click on the Change Permissions Button Advanced Security Settingsfor Citect Permissions Auditing Owner Effective Pemissions gt To view detaila of a permission entry double click thz entry To modi
6. citect Web Deployments Overview Windows Internet Explorer ay all Cw Za E http localhost Citect 8 4 x E sing pr H Favorites 385 FH Suggested Sites E Web Slice Gallery v Web Deployments Oveniew fi El gt Gl dh y Pager Safety Toolky Gr Juice System Messages LOGINDC Control Client webcontrolclientuser logged in Web Client Deployment Deployment Description Action 0 Example_project EL 3 Username WebViewOnlyUser Password citect Web Deployments Overview Windows Internet Explorer A a Gv kg le http localhost Citect R 4 x e Bing Rex Hi Favorites g Suggested Sites E Web Slice Gallery v Web Deployments Overview hy ld y Page Safetyy Toolsy v e Eve Citect System Messages aSoCollaborative software LOGINMC View only Client webviewonlyuser logged in Web Client Deployment Deployment Description Action 0 Example_project y If you do not get these windows for each user the setting up of user access rights from Section 3 3 has not been done correctly NOTE IF you have Windows authentication enabled you may be logged in automatically to the web server without being prompted for a username or password please follow KB Q5957 for details on fixing this 36 To create the project deployment login as the web client admin user WebClientAdminUser in this De ar example Then select the Add New Deployment icon In the Deployment fie
7. oonoconocnonaniconononanonanonanonanananonanananonnananonns 53 E AN e ee e 54 18 CAB File Download and InstallatiON oooonoocccnooocccoononcnoonnnnononnncnnonnnnnnnononocnonnnncnnncnnnnnns 55 Referentes ca ts oo ee cates ace ea aoe dao aces ecg So ape A ead pees 56 19 Knowledge base article ais ds En aR T E R E N RRE 56 20 Uset TAM al Se A A dex edeudcay a Rda 56 Introduction To display a live Citect project in an Internet browser you need to combine the content of the project pages and the current data these pages present using standard Web based communication protocols To understand the communication architecture for the Vijeo Citect Web Client it s easiest to consider the role each of the following components play in achieving this outcome e Citect Web Server Performs the server side functionality of the system It operates by accepting requests from the client and providing a response to the client when the client s details are authenticated It then directs a client to the graphical and functional content of a Vijeo Citect project and the location of the runtime servers This information is stored on the Web Server when a Vijeo Citect project is configured as a deployment A Vijeo Citect Web Server can contain multiple deployments e Citect Runtime Servers including the I O Server Alarm Server Trends Server and Reports Server Monitor the physical production facility and contain the live variab
8. ve No 4 31 6 Prepare SCADA Project for Deployment We will be using the Example project in CitectSCADA 7 20 for demonstration of the web client Make it the active project in Citect Explorer and then Compile the project File gt gt Compile in the Project Editor Then from either the Project Editor or Citect Explorer run Tools gt gt Computer Setup Wizard e Use the following settings This wizard wil assist you h setting up anc customizing your computer for use with Citect The minimum role of this computer is determned by matching is IP address with the server eddresses configurec in your project Select the type of setup you require Selecta compiled project that this computer will run Select he role nf this cramp ite C Express Seti Projec Name Server and Control Client E MultiProcess Custom Setup Con E vai Right select the drop down and select the project you need to prepare for Deployment z E vienaa ily dic w N SS Note If no servers match this computer then this computer must be a cient Seect the primary networking model for this machine These optons allow you to contral the way all Alarms Servers on tris computer operate Consult the help for a detaied description on what these opnons do Alarms scan tim niilliseconcs A Alarms save 60 seconcs E Sumnary lengt 100 anties 4 summary tmeout 6
9. 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 i 0 0 0 0 0 Stack 0 0 0 0 0 0 0 0 0 0 0 0 0 Q 0 0 0 0 N 0 D D 0 0 Service State IO Alarm Trend Alarm Alarm Alarm Alarm Alarm Trend Trend Report Report Online Online Online Online Online Online Online Online Online Online Online Online Access Trusted Trusted Trusted Trusted Trusted Trusted Trusted Trusted Trusted Trusted Trusted Trusted Trusted Authenticat Authenticat 38 9 Licensing Web control client and Web view only clients are licensed using the Web Internet Control Clients and Web Internet View only Clients license respectively You can check for availability of these licenses using CiUsafe or Kernel gt View gt General w R CIUSAFE indow Enter your authorization code and press Update Key Authorization Code Update Key Key ID HZASHSHNDBEDENEREBDH Retum Code KEY FOUND SUCCESSFULLY Save Key ID Read Key Help General Statistics Node Name Time Fri May 11 2012 Running since last Startup Running since last Stat Reset Version 7 20 WIN K54MP822KNF 10 04 04 AM Timer Resolution 1 ms 0 Days 0 Hours 2 min 20 sec 0 Days 0 Hours 2 min 20 sec Memory Total 1 808 308 KB Physical 376 100 KB Resources 100 Read Requests 0 O Write Requests 0 0 Physical Reads 0 0 Physical Writes D D Blocked Re
10. AM CTF File ter 5 17 2012 11 08 AM CTG File Disk C _ ProcessLine RDB 5 17 2012 11 11 AM RDE File _ Processline Simulation ci 9 29 2010 8 56PM CI File j i saving a pad On running the Web Deployment Prepration tool the CTF and RBD files are compressed and saved as CGZ web deploy folder deploy Example project example ka A Search example _ Open Burn Mew folder E Pictures Name Date modified Type E Videos _ processanalyst cgz 5 17 2012 11 17 AM CGZ File 5 17 2012 11 17 AM CGZ File 5 17 2012 11 17 AM CGZFile processline cgz _ securitypw cgz Computer amp Local Disk C securityuv cgz 5 17 2012 11 17 AM CGZ File singlepa cgz 5 17 2012 11 17 AM CGZ File Cu Netwog 4 m GZ Contents O Mame ii Type Date modified ProcessLine ctF CTF File 5 17 2012 11 08 AM _ ProcessLine RDB RDB File 5 17 2012 11 11 AM 49 When we run the web client and browse to the page ProcessLine in this example only at that time this page as a CTF file is downloaded to the web client To view contents of the Citect temporary folder type in tmp in the run prompt hit Enter browse to Citect folder and then to the project folder in there P See more results eno l Local Temp Citect Example_project example gt v gt _ Open Share with v Burn New folder Web Client Temp Folder Name Date modified Type Polish dbf 9
11. description on what these options do f Data directory SEASSA Y Backup project path Startup page Menu EA Pag scan time 250 millseconds Security Setup Contrcl Menu o 5 mea Security Setup Mscel h E Esa These options alow you tc chance the meru items that This cption allows you to conTol whch Wirdows task Thes options allow you 10 inhibit the Windows screen appear on th control menu of Citec ard wheher tha swapping shortcut commends wil be available whle Citect saver and the cancelling of the startup sequence of vonld menu and lle bar are visble is uring Clet Citert control nenu Windowe keydozrd cho teut command a Miecelaneouz optione I Citect corfiguration environment on menu Y Al Space enabled Inhibit screen saver while Chect is running E Pulscrzer se Y Dsplay Cancel button at startup Show title bar E a Shutdowr on menu Y kemelon menu cot A ce ee _ coe ET ces eo cost cra Hep Gencral Options Sctuf e as Citect Computer Se LE Your computer setan ik complete Press the Finish button to save your settings and ext or press the Cancel button to quit wrhout saving any changes e e e f the content of the project incorporates any user created files such as DBF HTML or CSV files you will need to manually place these into a special zip file called Misc zip and store inside the Citect User lt Project Name gt directory e Similarly if a project cont
12. have been set to the lowest level Windows firewall is also disabled What can be the problem Solution Usually when this occurs Citect is looking for Microsoft Installer that has been corrupted due to previous Windows update In order to remedy this problem you can get the latest update from Microsoft The problem of corrupted Microsoft Installer can be verified further by using Citect ver7 20 In Citect v7 20 you can install this CAB file manually to the client machine by double clicking the CAB file If when installing the CAB file Windows Installer error 1723 appears you would then need to install the latest Microsoft Installer iiscript msi This installer can be downloaded from the Microsoft website or can be obtained from your IT staff 55 References 19 Knowledge base articles Q5816 How to configure IIS 7 on Windows Vista Windows 7 and Windows Server 2008 for Citect Web Server 7 10 installation Q5957 am being logged in automatically to the web server without being prompted for a username or password Q4946 Web Client across LAN WAN Q4941 V7 xx Citect Display Client Web Client through Router No more DNS Section have to use AddressForwarding Q6261 IIS setup for web clients to connect to the web server over HTTPS using SSL Q4067 How is a Citect ini file Settings on a Development Deployment Machine Propagated to a Web Client Q4467 Installing Running Web Client without admin rights Q4621 Pages not upd
13. i Using Windows System Resource Manager WSRM can help ensure equitable servicing of Web server traffic especially when there are multiple roles on this computer i The default installation for the Web Server IIS role indudes the installation of role services that enable you to serve static content make minor customizations such as default documents and HTTP errors monitor and log server activity and configure static content compression Additional Information Overview of Web Server IIS Overview of Available Role Services in IIS 7 0 IIS Checklists Common Administrative Tasks in IIS Overview of WSRM eae eee Add Roles Wizard xi Select Role Services Before You Begin Select the role services to install for Web Server IIS Server Roles Role services Description IIS 6 Management Console provides a a infrastructure for administration of E Y Common HTTP Features remote IIS 6 0 servers from this Static Content computer Default Document Directory Browsing HTTP Errors HTTP Redirection WebDAV Publishing lication Development ASP NET NET Extensibility ASP CGI ISAPI Extensions ISAPI Filters _ Server Side Indudes C Health and Diagnostics Bl Security Basic Authentication Windows Authentication Diaest Authentication Y More about role services Progress Results dada i ARO EE iv
14. not create graphics files for the project pages Fast runtime display option can be enabled via Citect Graphics builder gt Tools gt Options Adjust Colors Edit Favorite Colors Convert to Bitmap Bitmap Editor Update Pages Pack Libraries Variable Tags Citect Fonts Batch Build Batch Simulate Batch Execute TF Show version 3 xx 4 xx tools Citect Explorer IV Fast Update Pages Project Editor IV xP Style Buttons by default Cicode Editor Transparent paste ActiveX Automatic Page Saving Prompt before This is further complicated if Fast Runtime Display is disabled after development of a page has begun and the page saved In this case a CTF files exists but are not updated with the recent changes The result in web clients displaying an older version of the graphics page Here the problem is not with web client but web server not having the latest version of CTF file 48 This is the process flow of generating and propagating a CTF file to web server and then web Client This example is with the assumption that Fast Runtime display is enabled On saving a page CTG and CTF files are generated in the project folder An RDB file for the page is then generated and saved in project folder at compile time Keep note of the date time stamp on CTF and RDB files as it moves from Project Folder to Deploy folder Project Folder Open Burn New folder es Date modified 5 5 17 2012 11 11
15. olog Microsoft Windows Version 6 1 7601 Copyright lt c gt 200 Microsoft Corporation All rights reserved C Users sesa 834 7 gt telnet 10 176 17 78 2882 Connecting To 16 176 17 78 Could not open connection to the host on port 2082 Connect failed Project Configuration On many occasions when a new project configuration is started the Network Address field is set to Loop Back adaptor 127 0 0 1 When this project is later on deployed on the web server and a web client is strated it is then looking for an IO Server on server port 2082 at IP 127 0 0 1 which is the loop back address for the client machine To fix this make sure that Network Address field reflects the IP address of the PC where the server would be running es Web Client would try Mame This_PC A and look for an IO Server on the local Comment machine Replace Delete Help Record 1 Network Addresses MetaData_Test o fo Name This_PC Web Client looks for an Address 10 176 17 72 lO Server on the Comment machine for which the IP address is specified _ Replace Delete Help here Record 1 Further Reading KB Q4235 Software protection failure on a web client 47 14 Page display and update issues First step in fixing this issue would be to check if Fast Runtime Display in enabled If Fast Runtime Display is disabled the graphics builder will not create CTF files and the web preparation tool will
16. v lt Previous ne gt Install Cancel Add Roles Wizard xi Before You Begin Select the role services to install for Web Server 115 Server Roles Role services Description z IIS 6 Management Console provides e me atan E e dice of Y Basic Authentication remote IIS 6 0 servers from this Y Windows Authentication computer C Digest Authentication Progress Client Certificate Mapping Authentication Results C us Client Certificate Mapping Authentication E URL Authorization V Request Filtering _ IP and Domain Restrictions Performance E Management Tools 4 IIS Management Console IIS Management Scripts and Tools Management Service IIS 6 Management Compatibility X IIS 6 Metabase Compatibility C IIS 6 WMI Compatibility C TS 6 Scripting Tools _ TIS 6 Management Console C FIP Server TS Hostable Web Core zi More about role services ala lt Previous ne gt Install Cancel Add Roles Wizard AA Confirm Installation Selections Before You Begin Server Roles Web Server IIS Role Services To install the following roles role services or features cick Install 2 informational messages below This server might need to be restarted after the installation completes Confirmation A Progress O Find out more about Windows System Resource Manager WSRM and how it
17. 0 minutes Primary Alarms Server save vat cz citectivjeoinstallsWIC720 User Comp StencbyWlamsSeversvesat SSCS These opiors alow you to control the way all Reports Servers on this machine operate Consult the hep for z detailed descriptior on what these optons do Slane alure ru vlier SCADA compulers Startup repor EAR gt FF nhibil Lrigger d repor le un slar lup Make Sure Networked option is selected T Rur reports on currently with Prinary Reports Server Thie spton sllowe you to contrel the way all Trende Servere on thie machine operate Consult the help for a cetzilec description cn wha this option does 2 4 Inhibit riggered trerds on startup gt Fuents ar used to trigger actions For events tarun or a given computer E they must first be enabled Select the events to enable for each component 7 Enable events or the computer lent ard Servers Pa O Running a server process requires the configuration of a server password Setting this password allows servers to authenticate each other and creates a trusted network Configure Server Password Password Confirm Password pio ait ac a aa a eo a EME EME BAE BAE SAE Se DHE DME DME IME IME SAE Set Set Set SE These opiors alow you tc further customize Citect Consult the help for a detailed
18. 29 2010 9 56PM DBF File IO ProcessLine ctF CTF File Es _ ProcessLine RDB 5 17 2012 11 11 AM RDB File E projectversion xml 5 17 2012 11 21 AM XML Document 1 RUSSIAN DBF 9 29 2010 9 56PM DBF File v Esn m Further Reading KB Q1762 Fast Runtime Display CTF file information on what is a CTF file and why are these needed in the first place KB Q6041 Web Client Error Cannot Display Page KB Q4621 Pages not updated on Web Client after web deployment 50 IIS Issues 15 IS v6 0 issues The following note applies if you are running IIS v6 x included with Windows 2003 Server If you start the Web Client and get the message Starting Citect Web Client failed Can not initialise Citect system and then the Web Client fails it is due to a MIME configuration problem The initialisation files are not being recognised in Windows 2003 as registered file extensions To correct this you must add the correct MIME extension by doing the following e Run the IIS manager Control Panel gt gt Administrative Tools gt gt Internet Information Services e Go to Web Sites Default Web Site CitectSCADA deploy lt deployed directory gt ormatio la x File Action View Help e Am xen elas m Internet Information Services B SYD DTEST 2G 3 local computer example EU Web Sites include E Default Web Site system g TisHelp 8 citectscADA xml citectsCADA
19. A this object with inheritable permissions from Citect Do you wish to continue 29 5 Set up security for web deployment e We need to set up user group specific access rights Locate the Deploy subdirectory in the Web Server folder Organize v Open Include in library v Share with v Burn A 7 Favorites A Name HE Desktop e cgi bin de Downloads e client S Recent Places E help A Libraries Le images ES Documents e locales e Right select deploy folder and select properties Select Edit button and highlight WebAdmin group in the new Permissions for deploy pop up and give Full Control to this group Le deploy Properties General Sharing Securty Previous Versions Customize Object name Ciinetpubwwwroot Citecttdeploy Group or user names Security amp 2 CREATOR OWNER Object name C inetpub wwwroot Citect deploy SA SYSTEM 2 WebAdmin W7AU0611299QC7L WebAdmin Group or user rames MIA rias AATA IANT Aah aril Mian CREATOR OWNER U E SYSTEM E To change permissions click Edit Edi WebContolClients W7AU0611239GC7L WetControlClien Permissions for WebAdmin 2 WebViewDnlyCients W7AUDE 1299QC7L WebViewOnly gt 4 Full control Modify J P for WebAdmin List folder contents Y dd Resd y Write gt For special permissions or adwanced settings
20. Advanced click Advanced Leam about access control and permissions Leam about access control and permissions OK Coment top JE ce ave 30 e Locate the deploy displayClient subdirectory and set Deny Full Control for the WebViewOnlyClients Group Object name C inetpub wwwroot Citect deploy Hdisplayclient Group or user names 2 WebControlClients W7AU0611299QC7L WebControlClien 82 WebViewOnlyCiients W7AU061 1299QC7L Web ViewOnly 82 Administrators W7AU0611299QC7L Administrators i Meare ANTALINGI12Q0NCTI Al loaro 4 m To change permissions click Edit Ei Permissions for Web ViewOnlyClients Allow Deny For special permissions or advanced settings _ Advanced click Advanced Leam about access control and permissions OK Cono too Object name C inetpub wwwroot Citect deploy Hdisplayclient Group or user names 2 CREATOR OWNER S SYSTEM 2 WebAdmin W7AU0611299QC7L WebAdmin PS WebControlClients iw iene 12990C7LWebControlClien e Asecurity prompt will appear press Yes to accept changes You are setting a deny permissions entry Deny entries take precedence over allow entries This means that if a user is a member of two groups one that is allowed a permission and another that is denied the same permission the user is denied that permission Do you want to continue
21. CitectSCADA V7 20 WebClient Quick Start Guide Table of Contents A et cece Sead se oe cents aaa eden ee E ea Sian EER 3 O ir oo opiates E ice A A ese deed pees 4 Server Side CONTIGUA A A A dedesn ute A diia 6 2 gt Software TR CQUITEMICHIS a ii iaiia aeaaea ia iiaiai ea 7 21 IES Setup on Windows Tocci aai e e ia ia e ee ie Teie i 8 2 2 IIS setup on Windows Server 2008 eiii iio area iia 14 Se User Acto ntSet Po aneen a e a a en aean iiaea 18 E Create User AAA A 18 Ded WOPCALCMISEISs ssncduwontztdcteteueodabodssatagentesintanen A A EAE sosmegeunteteanizas 20 4 SGtipySecurily ofthe Wed SEI a 25 5 Setup security Tor web deploy MN busca ti 30 6 Prepare SCADA Project for Deployment sumi iria 32 Client Side Configuration a aaa e did 35 7 Create Scada Project Deploy Matta ii 35 Sa O e es de 38 De gt TEAC CUS o A ae a a ee 39 10 Checklist A vudancbiad soy ninia 41 De A A ecg aa ee A 42 Troubleshootin evita de Ad e aa iaa 44 12 Internet Explorer and WinXP Security vovnerioiioinaccnnniia reo ipsa devi vac e vondoursdvatecsdsevdosdenvonverss 44 13 Software Protection Failure on a Web Client ooooooccnnoncccnonoccnononcnononnnnnnnononocnonncnnonnnnnnnnnns 45 14 Page display and update issues Ad 48 TIS ISSUES osc saeco eases a nepal veg ah dew anda Pane ates 51 15 UUSYO 0 SUS ita 51 16 Security Not applicable for IIS v7 and above
22. H cgi bin a client EU deploy H displayclien ae a imag Explore a locali Open fj Printers Browse New gt All Tasks gt View E Delete Rename Refresh A Export List el Opens property sheet for the Md e Choose properties from the folder s right click menu e Goto HTTP Headers Mime Map and press the File Types button Directory Documents Directory Security HTTP Headers Custom Enors bl Conte 5 7 Expire Immediately Expire after fi Dayts z Expire on Saturday December 11 2004 v at fiz 00 00 AM m Custom HTTP Headers Add Edit Remove Content Rating A gt MIME Map gt To configure additional MIME types the Web y Service sends to browsers in the HTTP Eile Types Header click File Types e On the File Types form press the New Type button 51 x Remove Edit e Add the MIME type File extension and enter the Content type MIME as application octect stream File Type application octet stream e Select Ok application octet stream e Select Ok and restart your web server and client 52 16 Security Not applicable for IIS v7 and above Enter http lt server address gt Citect into the url of an Internet Explorer Screen If you get Page error 404 or 405 the application protection settings of IIS need to be changed Open the IIS management console OS 10 x File Action View Help e amix aB 2 2 m1
23. Panel gt gt Administrative Tools gt gt Computer Management Tool Find Local Users and Groups in the directory tree e e e e Right select the Groups folder and select New Group gO EF Control Panel All Control Panel Items v 43 Search Control Panel p Adjust your computer s settings View by Largeicons y PY Action Center qa Administrative Tools 19 Search Administrative Tools 4 Organize y Hi An Name Date modified Type HZ Desktop i Component Sel 14 07 2009 2 57 PM Shortcut de Downloads A Computer Management 14 07 2009 2 54 PM Shortcut E Recent Places fay Data Sougces ODB 14 07 2009 2 53 PM__ Shortcut 3y Computer Manage File Action View Help 9 20 a bl HEY Computer Management Local Name a System Tools AER gt O Task Scheduler gt E Event Viewer a Shared Folde Users Groups e WIR e Right select the Groups folder and select New Group 18 e To create the WebAdmins Group o Inthe Group Name type WebAdmins and in the o Description type CitectSCADA Web Client Admin o Select the Create button a New Group Sa Group name WebAdmins Description CitectSCADA Web Client Admins Members e To create the WebControlClients Group o Inthe Group Name type WebControlClients and in the o Description type CitectSCADA Web Control Clients o Select the Create button
24. ads 0 Blocked Writes 0 Digital Reads 0 Register Reads 0 Digital Reads Per Sec 0 Register Reads Per Sec D Cache Reads 0 Cache Reads 0 Cache RD Ahead 0 Cache RD Ahead 0 Cache Buffers 0 Cache Flush 0 Average Mininun Maximun Count Response Times 0 000 0 000 0 000 0 KerMain Cycle 0 002 0 000 4294937 94 0 000 65 162 Scheduler Cycles 779 Tasks Per Second 6028 CPU Usage 14 Lost Errors 0 Point Count Max Full 1 Current Full 1 Peak Full 1 Max Huge Max Y O 1 Current V 0 O Peak Y 0 0 Current 0 Max Ctrl 1 Current Ctrl 0 Peak Ctrl 0 Hax Inet 0 1 Current Inet Y O D Max Inet Ctrl 1 Current Inet Ctrl 1 Peak Inet Ctrl urrent 4 OLEDB 10 Current Peak Inet Y O Peak API OLEDB 0 Peak OLEDE Web Control View Only client Licenses currently used OOPO Available Web Control View Only client Licenses When a web client tries to connect to a server that does not have any Web Internet Control or View only licenses left the following prompt windows will appear A KN x No protection key found or Software Protection Failure no licence available from network File Edit View Favorites Tools Help Back gt amp A 4 Gsearch Favorites media D S EA Citect Web Client system aborted Please reload page to restart AQ 10 Checklist IIS installed and running Citect virtual directory created CitectSCADA configured as networked TCP IP
25. ains any ActiveX objects these will also need to be included in a zip file called ActiveX zip The example project comes with this already done e The example project already comes compiled with CitectSCADA V7 20 so there is no need to compile the project unless you have made changes to it Otherwise if you are using a different project a fresh compile is required before the next step Next run Tools gt gt Web Deployment Preparation or the 33 EY button in Citect Explorer e Aprogress bar and completion message will appear as shown above e Confirm that a webdeploy folder exists in the Example project folder Ji ABCLX J active 1O_detect_POC GUIDI P Alarm_Panel di alarmactioantest J CES Include_V7_R2 de CicodeCompiler de CiUnit de ClusterTests amp ColbyBiomass Ji ColbyBiomass Testing Je CSV_Example J CSV_Include de DiskPLC Je DNP3_Master_20120501 de dummy de Example de Analyst Views e webdeploy B activexzip Y Misc zip Once this is complete run the example project in Citect Name Le example_old de include de system de tab_style_include 34 Client Side Configuration Internet Explorer 6 0 or later is required to use the Web Client Please note that Windows Internet Explorer is the only supported web browser at present 7 Create Scada Project Deployment e Open up Internet Explorer and enter this url http lt server gt Citect e lt server gt is either the server PC name serve
26. ated on web client after web deployment Q4281 Web client Full screen and as a shell Q6199 Cannot edit deployment DEPERR error saving deployment permission denied Q5649 Error when creating a deployment on a remote Web server Q3943 Implications for Citect and Microsoft Windows XP Service Pack 2 Q3010 Setting up a combined FTP Server Proxi Server for a WAN Q3912 How can use a Proxy I O server in CitectHMI SCADA 20 User manuals CitectSCADA Web Client User Guide CitectSCADA User Guide 56
27. ation 2 Software Requirements There are only a few software requirements for installing and functioning of the Web Server component on a PC It is required to setup Internet Information Sevices IIS on the machine designated to be used as a web server This section covers IIS setup for e Windows 7 e Windows Server 2008 2 1 IIS Setup on Windows 7 The Windows IIS World Wide Web service needs to be installed Select e Control Panel gt gt Program and Features COI gt Cotoi Panci An Contri Pane tems gt 39 Senrt Contri Par oN Adjust your computer s settings View by Smell icons amp Mouse a Network and Sharing Center E Notification rea Icons NVIDIA Control Panel a NVICIA Control Fanel NVIDIA nView Desktop Manager MM Performance Information and Tools a Persona ization D Phone and Modem Power Options S Region and Language W RemoteApp and Desktop Connections q Sourd 6 Speech Recognition Ww Symantec LiveUpdate 32 bit O Syne Center El systern HE Taskbar and Start Menu Troubleshooting Ea User Accounts A Windows CardSpace ide Windows Defender BP Windows Firewall H Windows Mobility Center E Windows Update E i e Turn Windows Features on or off option on the left of the window Su Control Panel Home All Control Panel items Programs and Features kd 4 Search Programs and Features Pp Uninstall or change a program View installed updates To uninstal
28. calhost as an untrusted site a Update the Trusted Sites settings as detailed in Chapter 9 e Enable ASP for IIS6 on Windows 2003 Server Follow these steps a Choose Control Panel gt gt Add Remove Programs gt gt Components b In the Windows Components Wizard dialog box select Application Server and select Details Windows Components Wizard Windows Components You can add or remove components of Windows To add or remove a component click the checkbox 4 shaded box means that only part of the component will be installed To see what s included in a component click Details Components Application Server xl To add or remove a component click the check box A shaded box means that only part of the component will be installed To see what s included in a component click Details BA Certificate Services O BM E mail Services O Z Fax Services Description Includes ASF Application S 9 Enable network COM access Total disk space required EY Enable network DTC access 0 0 MB Space available on disk Ji FY Intenet Information Services STO 18 0 MB 52 Message Queuing 6 5MB Description Microsoft Management Console Snap in for the Application Server H administrative interface Total disk space required 28MB Details Space available on disk 3966 9 MB Eres OK e Make sure that ASP NET is selected e Also open Control Panel gt gt Administrator Services gt gt Internet Info
29. can help optimize Results CPU usage Web Server Common HTTP Features Static Content Default Document Directory Browsing HTTP Errors HTTP Redirection WebDAV Publishing Application Development ASP NET NET Extensibility ASP ISAPI Extensions ISAPI Filters xi Can wits Print e mail or save this information Before proceeding further check that IIS is setup correctly and you can browse to the IIS home page To do this type http lt IP Address of the Web Server machine gt and press Enter If IIS is installed correctly and running you should see a page similar to the one below OO Error 4 x P xfa E Bs Options sp Favorites Es E Schnoogle Fig Buy Texture Base Sheet 7 Lon The Building Process An ap 61 xel O mp Pager Safetyy Tools hr IS internet information services amp Local intranet Protected Mode Off 17 3 User Account Setup 3 1 Create User Groups Security on the CitectSCADA web server is handled by Windows Three Windows User Groups must be created on the Server PC 1 WebAdmins user in this group are permitted to remotely view add update and delete deployments 2 WebControlClients user can view project pages and make adjustments to writable values 3 WebViewOnlyClients user can only view the project pages To define access privileges on the Server PC Log in to Windows with Local Administrator privileges Go to Control
30. d remove Web sites from this zone All Web sites in this zone will use the zone s security settings in this zone will use the zone s security settings Add this Web site to the zone Add this Web site to the zone http 192 168 0 253 Citect amp dd Web sites Web sites http 192 168 0 253 Citect Remove I Require server verification https For all sites in this zone I Require server verification https For all sites in this zone OK Cancel Cancel e Press Ok button Knowledgebase article Q3943 discusses the implication of Windows XP service pack 2 in terms of network security Of particular importance are the firewall settings 44 13 Software Protection Failure on a Web Client One of the most common issues encountered on a web client is Software Protection Failure There can be more than one cause for this error on a web client machine Here are few known issue that may cause this problem License Availability Web client license is available as a Web Internet Control Client and Web Internet View Only client license A control client or a View Only client license will not work with a web client So the first thing to check is the availability of a suitable license on your license dongle This can be done by checking the key details via CiUsafe we CIUSAFE Citect Key Information Citect Key Update Product Visit http www citect com authcode to get an updated authorization code for your C
31. e To create the WebViewOnlyClients Group o Inthe Group Name type WebViewOnlyClients and in the o Description type CitectSCADA Web View Only Clients o Select the Create button e Select the Close button 19 You will now see these three groups in the list of groups presented in the Computer Management console du Action View Help e 9 20X E el bf de Computer Management Lc 4 System Tools b Task Scheduler gt Event Viewer gt 2 Shared Folders a amp Local Users and Grot E Users C Groups E AN Name Description He SQLServerMSSQLServ Members in the group have the re he SQLServerMSSQLUser Members in the group have the re He SQLServerReportServe Members in the group have the re qe Members in the group have the re 3 2 Create users e Create example user of each group in the Computer Management console Control Panel gt gt Administrative Tools gt gt Computer Management e Find the Local Users and Groups tree sub item File Action View Help es 21 a e uG a System Tools b Task Scheduler gt Event Viewer gt E Shared Folders gt amp Performance e Right select the Users folder and select New User 2 e Enter each of the following three accounts and press Create for each Description Description Password sesse Fassword Pe Confirm password Confirm password EII
32. et Information Services gt World Wide Web Services gt Common HTTP Features El Windows Features Turn Windows features on or off To turn a feature on select its check box To turn a feature off clear its check box A fil feature is turned on a mg m FIP Server a ml Web Management Tools E Ej World Wide Web Services T Application Development Features WIJ Common HTTP Features eam Default Document W Directory Browsing WIJ HTTP Errors 7 HTTP Redirection 7 Jo Static Content 7 y WebDAV Publishing q E Default Document Allows you to specify a default file to be loaded when users do not specify a file in a request URL Directory Browse Allow clients to see the contents of a directory on your web server HTTP errors Installs HTTP error files Allows you to customize the error messages returned to clients HTTP redirection Provides support to redirect client requests to a specific destination Static Content Server htm html and image files from a web site WebDAV Web based Distributer Authorising and Versioning A protocol used for Publishing publishing and managing contents to we servers sT e Internet Information Services gt World Wide Web Services gt Security Turn Windows features on or off To turn a feature on select its check box To turn a feature off clear its check box A filled be feature is turned on H HE Inte
33. f connected clients on the Citect server at any time Type page table tran in the main window of the kernel Screenshot below shows how this would appear in kernel window NY Citect Kernel Table Y Options View Tools Window Help Table Tran Handle 29 Nane Length I0ServerClusterl DRI ClusterlAlarn DRI ClusterlTrend ClusterlAlarn AlarmServerlClusterl AlarmServerlClusterl AlarmServerlClusterl AlarnServerlClusterl ClusteriTrend TrendServerlClusterl ClusterlReport ReportServer1Cluster TrendServerlCluster1 10ServerCluster1 AlarmServerlClusterl AlarmServerlClusterl TrendServeriClusterl AlarmServerlClusterl AlarmServerlClusterl TrendServerlClusterl 64 Offset Node VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF WIN K5 4MP822KNF WIN K5 4MP822KNF VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF VIN K54MP822KNF W7AU06112990C7L W7AU06112990C7L W7AU06112990C7L 0 Type Client Client Client Client Client Server Server Server Client Server Client Server Server Server Server Server Server Server Server Hode InProc InProc InProc InProc InProc InProc InProc InProc InProc InProc InProc InProc InProc Remote Remote Remote Hnd Web Client located on local machine connecting to this server Rec 56 289 55 Wait 0 0
34. fy permissiona dick Change Permissions Object name C Ninetpub wwwroot Gtect Permission entries Type Name Permission Inherited From Apply To ES Allow CREATOR OWNER Special aul inberiled gt Sublulders and files urily Allow SYST M Full corrrol lt not inherited gt This folder subfolders anc Allow Adminstrators W7AU061 Full corrrol lt not inherited gt This folder subfolders enc Allow Ueere W7AU06 129800 Read Sexecute not inherted gt Thie folder eabfoldere enc Allow IIS_IUSRS W7AU06112 Read amp execute lt not inherited gt This folder subfolders anc Allow TrustedInstaller Full corrrol not inherited gt This folder subfolders anc Allow WebAdmin W7AU06112 Read amp execute lt not inherited gt This folder subfolders enc _ 4 m ij Include inhertabe permissions from this object s parent Managing permission entries e Select Replace permission entries on all child objects To view or edit details for a permission entry select the entry and then dick Edit C netpub wwwroot Citect Apply To Subfolders and files only This folder subfolders a This folder subfolders a This folder subfolders a This folder subfolders a J Edit Remove e Once selected press Ok A security dialog will appear press Yes This will replace explicitly defined permissions on all descendants of
35. ill be in the Member of list for the specific use 23 Note Above example is for adding WebAdminUser to WebAdmin group Repeat this process to add WebControlUser to WebControlClients group and WebViewUser to WebViewClients Group 24 4 Set up security of the web server e You need to adjust the security settings for the Web Server folder e Locate and right select the Web Server folder located in the installation directory o By default this will be C inetpub wwwroot Citect e Select Properties e gt Computer Local Disk C inetpub wwwroot gt Organize v A Open Include in library v Share with Burn New folder wr Favorites Name Date modified HE Desktop aspnet_client 12 8 2011 11 43 PM Ib Dow a E Recent Places E iisstart Open M welcome Open in new window Libraries Open as Notebook in OneNote B Documents Share with gt d me Restore previous versions Include in library BE Videos Send to gt Computer Cut Copy Gu Network Create shortcut 25 e From the Properties dialog select the Security tab and click on the Edit button Object name C inetpubwwwroot Citect Group or user names amp SYSTEM 2 Administrators W7AU0611299QC7L Administrators a Deere AATAL INET TOG TL Decre q i To change pemissions click Edit Permissions for CREATOR OWNER Full control Modify Read amp execute List folder conte
36. in the Computer Setup Wizard Web Internet Control Client or Web Internet View Only Client licenses available on server Web deployment after citect ini has been modified Windows security on folder WebServer and WebServer deploy displayclient CitectSCADA server is running and must be the IO server a Els 8 E A El A E Firewall Port Settings 4 11 FAQ e How do set up my network so that both LAN and WAN PC s can access my CitectSCADA and CitectWeb Servers Please refer to the Document Running both LAN and WAN Citect Web Clients e Where are the downloaded project files located on the Web Client The project files are downloaded to the location specified by the following Windows Environment Variable TMP Citect lt Project Name gt By default on XP TMP is equal to Document and Local Settings lt Current user logon gt Local Settings Temp By default on Windows 7 TMP is equal to C Users lt Current user logon gt lAppDatalLocal Temp To get a fresh copy from the server simply delete this folder including its subfolders and contents When you restart the web client it will automatically re download the project e Can I connect through web client to a Citect server running in demo mode No on the web client side the project pages can be viewed but the tag values will display COMS You will also get the following prompts and IE will be unresponsive for several minutes as the WebClient quits
37. itect key Serial No 0479 81846 Enter your authorization code and press Update Key Authorization Code License Value SCADA Version Fat SCADA Paint Count Unlimited Full Licenses 1 Control Clients 1 View only Clients 1 7 Web Intemet View only Clients 1 Networking Allowed Connectivity PC Servers Key ID OLEDE Connectors F2ZCMHTDGEOCPITGEEBDH Fast Lire Site ID Retum Code KEY FOUND SUCCESSFULLY Licensed Drivers Save Key ID Read Key Help A web client license Control client or View Only client must exist on the license dongle present at the IO server this client is connecting to IO Server is responsible for providing a license to the web client so it is not possible to to have a web client license on the client machine or the web server machine if it is different to the IOserver machine Networking issues Once we have confirmed that a web client license is available at the server next step in fixing this issue is to check if we are able to connect with the IO server on the server port To check our connectivity to the Io server port we can use Telnet and open a connection to the server 45 With Windows 7 Telnet client is disabled To enable Telnet client Go to control Panel gt Programs and Features gt Turn Windows features on or off and check Telnet Client option as shown below o le e Ou DUE lt All Control Panel I Programs and Features X 4 Search F ograms and Feature
38. k is done the default re checks time is every 20 days The reason why this problem is showing up is because your network settings are not allowing Windows to access the CRL 43 e Troubleshooting The following trouble shooting issues are taken from the FAQ section page 33 and onwards of the Web Client user manual This document contains only a subset of this but also include screenshots 12 Internet Explorer and WinXP Security If the security settings are high within Internet Explorer on the client side PC you will need to add http lt webserver gt Citect as a trusted web site Open Internet Explorer then select the Tools gt gt Internet Options menu item Select the Security tab General Security Privacy Content Connections Programs Advanced Select a Web content zone to specify its security settings Intemet Local intranet Restricted sites Trusted sites This zone contains Web sites that you Sites trust not to damage your computer or data M Security level for this zone Custom Custom settings To change the settings click Custom Level To use the recommended settings click Default Level Custom Level Default Level e Click on the Sites button o Enter the http lt webserver gt Citect address o Deselect the Require server verification checkbox o Select the Add button You can add and remove Web sites from this zone All Web sites You can add an
39. l a program select it from the list and then click Uninstall Change or off Install a program from the Organize J network z Name Publisher E Adobe AIR Adobe Systema BB Adobe Flash Player 10 Plugin Adobe System Adobe Flash Player 11 ActiveX 64 bit Adobe System H Adobe Reader 9 3 Adobe System E Agent Ransack Version 1 7 3 4 Ampla 5 0 5331 0 Citect 1 Apple Application Support Apple Inc gt Apple Mobile Device Support Apple Inc e Apple Software Update Apple Inc ema r a o srn re nr m 4 kal Currently installed programs Total size 18 1 GB 186 programs installed e Expand Internet Information Services section and select required IIS settings as shown in following screen shots Table below each screen shots provide a short description on selected options Internet Information Services gt Web Management Tools gt IIS 6 Management Compatibility ss ip soy 2 27 ceemal Turn Windows features on or off To turn a feature on select its check box To turn a feature off clear its check box A filled box m feature is turned on g T Internet Information Services E de FTP Server a a d Web Management Tools E E 156 Management Compatibility 1 US 6 Management Console Je IS6 Scripting Tools Je US 6 WMI Compatibility Y de IS Metabase and IIS 6 configuration compatibility Lo IS Management Console _ IS Management Scripts and Tools i IS Management Service
40. ld enter the name to identify the deployment in this case TestExample Enter the project path of the Example project on the CitectSCADA server PC and select the Client control from the list there should be one available Web Deployment Configuration Windows Internet Explorer e o e ae 7 http localhost Citect addeditdeploy htm DeployDir Example_project amp lang en us R x Bing Py Gal we Favorites 4 19 Suggested Sites Web Slice Gallery v Web Deployment Configuration i mh y Pagev Safety y Tools y O gt A Vijeo Citec Lh pd A System Messages Web Client Deployment Deployment Description Action 0 DA Server IP Address Port MY File Paths 284 23 MB 2 Project Path Client Control Select the Apply Changes button EV A progress bar will be displayed as the project deployment files are copied from the User Example webdeploy folder to the inetoub wwwroot Citect deploy Example_Project Note When a project is deployed the project path and client control settings are first taken from the citect ini file If they cannot be found they are taken from the settings entered at this stage Select the Go to Deployment List button A If it is the first time you start the client the required software is automatically downloaded and will prompt the user to install When the windows security dialog appears click on Yes 237 6 Connecting You can display the list o
41. le tag data alarms and trends that the Web Client will display e Web Client provides the platform to merge a deployed project s pages and content with the raw data drawn from the runtime servers Again standard Web technologies are necessary so the client uses Microsoft Internet Explorer 1 Architecture The CitectSCADA Web Client allows the remote viewing and control of a live running CitectSCADA project through internet explorer The three components required are e Web server CitectSCADA web server Microsoft IIS e Run time servers IO and RAT servers a VJC Project configured as VJC Web Deployment 1 on Web Server Server Required Pages and components are saved on Web Server P VJC Runtime System 2 Client connects to Web Server seeking access to Deployment 1 Web Server confirms login and sends required connection information report i server Project pages and components are sent to client as required I l Deployment 1 Client connects to Deployment 1 Runtime Servers S Client retrieves current variable tag Internet data alarms trends and displays Explorer VJC Runtime Project Web Client LE e Web client Internet Explorer Figure 1 CitectSCADA Communication Architecture As we can see from the diagram the WebServer acts as a Fileserver for project files however the actual data is still received directly from
42. nts Read Write For special permissions or advanced settings click Advanced Leam about access control and permissions e From Permissions for Citect pop up select the Add button to add the three new groups we have created in the previous steps Object name C ineipubwwwrootCitect Group or user names 2 CREATOR OWNER 2 SYSTEM R Administrators W7ALID611289QC7L Administrators 2 Users W7AU061 1299QC7L Users 2 11S_1USRS W7AU0611299QC7LMIS_IUSRS 2 Trustedinstaller Permissions for CREATOR OWNER Full control Modify Read amp execute List folder contents Read i In A A A E IG See Leam about access control and pennissions Ea 26 You need to be logged into Windows with a user that has Administrator privileges to edit security permissions on the Citect folder Users Groups or Builtin security principals From this location E WAUO611299QC7L Enter the object mames to select examples WAUING11299OC7L WebAdmin Make sure the locations field displays the workstation name Type in WebAdmin for web administrators group and click on the Check Names button to make sure this group names resolves correctly to the group we have created in section 3 1 Once done click OK e Repeat this process to add WebControlClients and WebViewOnlyClients Once you have all three groups added
43. r PC IP address or localhost if the web client is running on the server PC e A login screen will appear for each user created enter the login details The screen that is supposed to appear is shown below Certificate Error Navigation Blocked Windows Internet Explorer ya COW gt https localhost Citect Ly Favorites 5 g Suggested Sites y g Web Slice Gallery v Certificate Error Navigation Blocked Windows Security The server localhost at localhost requires a username and password E webadminuser m E my credentials 35 Depending on which user is being logged in a web client home page similar to one of the below will be disaplyed Username WebAdminUser Password citect Web Deployments Overview Windows Internet Explorer gt LO oy ele e E http localhost Citect i a x B Bing A She Favorites 983 Suggested Sites y Web Slice Gallery v Web Deployments Overview ft gt y El dh v Pager Safetyw Toolsw ES Vijeo Citect Ik lt lt System Messages gt gt gt E SIRE En Cee ce Admin webadminuser logged in 58 Web Client Deployment Deployment Description a o Py Example_project cy 8 w Server IP Address Port File Paths Project Path C ProgramData Schneider ElectriciVijeo Citect 7 20WUse Example Client Control 720 CitectSCADAWebClient_7_20_0_598 cab Username WebControlUser Password
44. rmation Services IIS Manager e On the local machine traverse to Web Sites Web Service Extensions and make sure that All Unknown ISAPI Extensions Active Server Pages and ASP NET v1 1 4322 items have the status of Allowed amp Internet Information Services 115 Manager E O xj g Fle Action view Window Help 181 es em ARAE m Internet Information Services E AUSTSUPTESTE local comp E Application Pools Web Service Extension Status a pa Eoas TB Al Unknown ISAPI Extensions Allowed eel Allow Y Al Unknown CGT Extensions Prohibited CitectsCADA Prohibit Ay Active Server Page Allowed LocalNet A ASP NET v1 1 43225 Allowed msade Properties Internet Data Connector Prohibited Plant2NET S Server Side Includes Prohibited j 3 WebDAY Prohibited a viewer Tais we il aspnet_client JB Web Service Extensions E add a new Web service extension El allow all web service extensions For a specific application El prohibit all Web service extensions 9 Open Help gt Extended A Standard 54 18 CAB File Download and Installation After configuring the Citect web server as per Web Client quick start guide during project deployment errors are experienced downloading cab file The address of the webserver as a trust site however the problem still persists The Server and Clients both use Internet explorer 6 and all Internet Explorer security levels
45. rnet Information Services wM FTP Server Im Web Management Tools E World Wide Web Services m Application Development Features Y 4 Common HTTP Features m Health and Diagnostics m Performance Features MJ Security Y Jo Basic Authentication mip Client Certificate Mapping Authentication Je Digest Authentication PJ IS Client Certificate Mapping Authentication EE PP Security Y Request Filtering EE URL Authorization Y Windows Authentication Basic Authentication Requires a valid windows user name and password for connection Request Filtering Configures rules to block selected clients Windows Authentication Authenticates Clients by using NTLM NT LAN Manager or Kerberos 12 Once all settings are done IIS setup options should look similar to this Turn Windows features on or off To turn a feature on select its check box To turn a feature off clear its check box A filled box means that only part of the feature is turned on E mH Internet Information Services FTP Server 8 de Web Management Tools a MJ 1S6 Management Compatibility PT 1S6 Management Console Pl Ja 156 Scripting Tools IS 6 WMI Compatibility Y IS Metabase and IIS 6 configuration compatibility IIS Management Console IS Management Scripts and Tools IIS Management Service a Ej World Wide Web Services a Application Development Features NET Extensibility Y Ji ASP ASP NET CGI ISAPI Ex
46. s p Control Panel Home Uninstall or change a program View installed updates To uninstall a program select it from the list and then click Uninstall Change or 9 Turn Windows features on or Repair off l Install a program from the i EL Windows Features e Esa network i Turn Windows features on or off o To turn a feature on select its check box To turn a feature off clear its check box A filled box means that only part of the feature is turned on de Simple TCPIP services i e echo daytime etc y Subsystem for UNIX based Applications v Tablet PC Components Y Telnet Server Je TFTP Client Y Windows Gadget Platform 3 4 Windows Process Activation Service 107 ET a SIP A Once done bring up the command prompt and open a Telnel session to the IO server by using the command syntax as Telnet lt IO Server IP Address gt lt IO Server port gt For eg If we are using the default server port and server is present at IP 10 176 17 78 this should look like Telnet 10 176 17 78 2082 EX C Wind n321 cmd exe o Es t Windows Version 6 1 76011 Copyright lt c 2889 Microsoft Corporation All rights reserved T Telnet 10 176 17 78 k ko C Users sesa78347 gt telnet 10 176 17 78 2082 m 46 If we are unable to initiate a telnet session to the IO server port an error similar to the one below is shown in the command prompt window EN C Windows system32 cmd exe
47. tensions ISAPI Filters Server Side Includes E Y Common HTTP Features Default Document Directory Browsing HTTP Errors HTTP Redirection Y J Static Content WebDAV Publishing Health and Diagnostics Bl Performance Features a Wl Security Basic Authentication Client Certificate Mapping Authentication Digest Authentication Ja IS Client Certificate Mapping Authentication IP Security Request Filtering 7 Jo URL Authorization Windows Authentication 13 2 2 IIS setup on Windows Server 2008 To enable the required IIS 7 components under Windows Server 2008 you need to do the following e Click Start click Administrative Tools and then click Server Manager e Inthe navigation pane right click Roles and then click Add Roles e Step through the Add Roles Wizard as shown below Add Roles Wizard 14 Add Roles Wizard xi ac Web Server IIS Introduction to Web Server IIS Web servers are computers that have specific software that allows them to accept requests from dient computers and return responses to those requests Web servers let you share information over the Internet or through intranets and extranets The Web Server role indudes Internet Information Services IIS 7 0 a unified Web platform that integrates IIS 7 0 ASP NET and Windows Communication Foundation IIS 7 0 also features enhanced security simplified diagnostics and delegated administration Things to Note
48. tes against the Certificate revocation list with certifying Authority To fix this go to Internet Options and select the Advanced tab and uncheck the Check for publisher s certificate revocation option as shown below Internet Options a Y eto General Security Privacy Content Connections Programs Advanced Settings Do not submit unknown addresses to your auto search pri 9 Just display the results in the main window amp Security Allow active content from CDs to run on My Computer mM a eto os Do not save encrypted pages to disk V Enable DOM Storage V Enable Integrated Windows Authentication V Enable memory protection to help mitigate online attacks Y 4 mW r Takes effect after you restart Internet Explorer Restore advanced settings Reset Internet Explorer settings Resets Internet Explorer s settings to their default You should only use this if your browser is in an unusable state ox cancel pel Why is CRL check needed in the first place Windows OS later than Win XP VISTA Windows 7 requires NET DLLs to be signed This signing normally means that at start up NET checks to see if the Certificate has been revoked This requires Internet access or access to the domain group CRL files After 2 minutes the system continues running if the check cannot be done Once the chec
49. the SCADA Servers as per a normal Display Client In the following example the WebServer and SCADA Servers are on the same PC but this does not always have to be the case Hence in this example only two PCs will be required Server Sone i Runtime o Hosts the WebServer CitectSCADA Depharnient 4 Web Server ____ o Hosts SCADA Runtime Servers A i le a s Bend Jane e Client Microsoft IIS Server Server Server Server o A Display Client viewed via AAA Internet Explorer Retrieves Project files from WebServer Receives Comms from SCADA Runtime Servers Client li Internet a a 0 al Explorer Web Client Figure 2 Communication structure of example web client project Important User performing steps mentioned in this guide must be logged in with local administrative privileges If you are not logged in as a local admin to your windows PC please do so before continuing further Server Side Configuration The main benefit of Citect SCADA WebClient is that the majority of the configuration is Server Side In most cases the Client PC does not require any configuration as Internet Explorer will download the required program files when the WebClient is first run However in some corporate environments some security settings are required to be modified on the client All Client Side settings are covered in a later section This section deals with the Server Side configur
Download Pdf Manuals
Related Search