04.04
Contents
Contents 1
WinCC / Web Navi Navigator gator ...................... ................................. ...................... ...................... ...................... ................ .....1
2
Web Navigator Demo Project .......................... ............. .......................... .......................... ....................... ..........5 5
3
Requirements Requirements ...................... ................................. ....................... ....................... ...................... ...................... .................... .........7 3.1 3.2
4
Installation of the WinCC Web Navigator Server....................... Server......... .................... ......13 13 4.1 4.2 4.3
5
SSL ............................................................... .......................................................................................................... ...........................................36 36 HTTPS .................................................................... ..................................................................................................... .................................36 36 WinCC User Administrator....................................................................... Administrator.......................................................................37 37 Secure ID Card .......................................................... ........................................................................................ ..............................37 37 Firewall.....................................................................................................38 Firewall.....................................................................................................38
Structure with the WinCC Web Navigator Server............. Server ........................... ................41 7.1 7.2 7.3 7.4
8
Wizard-assisted Web Setup: WinCC Web Configurator.......................... Configurator..........................20 20 Creating a new standard Website (Stand-alone)..................................... (Stand-alone).....................................23 23 Creating a Virtual Directory...................................................................... Directory......................................................................25 25 Checking the activated Website (Web).................................................... (Web)....................................................28 28 Load distribution on Web servers using the "Load Balancing" function ..29 ..29 Configuring the "Load Balancing" Function ............................................. .............................................32 32
WinCC Web Navigator Security ......................... ............ .......................... .......................... .................. .....35 35 6.1 6.2 6.3 6.4 6.5
7
Procedure.................................................................................................13 Procedure................................................................................................. 13 Installation of the Internet Information Service (IIS) ................................14 ................................14 Installation of the WinCC Web Navigator Server..................................... Server.....................................16 16
Configuring the Web Navigator Server ............................ .............. ........................... ................ ...19 19 5.1 5.1.1 5.1.2 5.1.3 5.2 5.3
6
Hardware and Software ............................................................ ............................................................................. .................7 7 Licensing.................................................................................................. Licensing..................................................................................................10 10
Island Solution .............................................................. ......................................................................................... ...........................41 41 WinCC Web Navigator Server on the WinCC Server ..............................42 ..............................42 Separation of WinCC Server and WinCC Web Navigator Server ...........42 ........... 42 Dedicated Web Server............................................................................. Server.............................................................................44 44
Installation of the WinCC Web Navigator Client............. Client ............................ ................. ..45 45 8.1 8.2 8.3
Internet Explorer Settings ...................................................... ........................................................................ ..................49 49 Installation from the CD-ROM.................................................................. CD-ROM..................................................................51 51 Installation via the Intranet/Internet................................................... Intranet/Internet .......................................................... .......53 53
9
Deinstallation......................................................................................55 55
10
Configuration of the User Administration.................. Administration... .............................. ...................... .......57 57 10.1 10.2 10.3
User Administration in the WinCC User Administrator ............................57 ............................57 Setting Web Options for Users ............................................................... .................................................................59 Migrating User Data from Older Projects................................................. Projects .................................................60 60
Printout of the Online Help Web Navigator - Documentation
i
Contents
11
04.04
Configuration of a Web Project...................... Project......... ........................... ............................ ..................... .......63 63 11.1 11.1.1 11.1.2 11.1.3 11.2 11.3 11.4 11.5 11.6 11.6.1 11.6.2 11.6.3 11.6.4 11.6.5 11.6.6 11.6.7
12
Application of the WinCC Web Navigator Client ............................. ............... ..............97 97 12.1 12.2
13
Installation of the WinCC Plug-In Builder............................................... Builder...............................................110 110 Plug-In: Creating, Testing and Making available for Download.............111 Download............. 111 Installation and Deinstallation of a Plug-In on a Web Client..................114 Client.................. 114
WinCC Web Navigator Diagnostics Client .......................... ............ ......................... ...........115 115 15.1 15.2 15.3
Requirements.........................................................................................116 Requirements.........................................................................................116 Diagnostics Client Licensing ................................................. .................................................................. .................117 117 Installation of the WinCC Web Navigator Diagnostics Client ................118 ................ 118
16
Diagnosis of the Connections with "Status.html".................... "Status.html"..... .................... .....121 121
17
Using the Terminal Services for the WinCC Web Navigator ........123 ........ 123 17.1 17.2 17.2.1 17.2.2 17.2.3 17.2.4 17.2.5 17.2.6
ii
Expanding the WinCC Web Navigation Interface ..................................108 ..................................108
WinCC Plug-In Builder ......................... ............ .......................... .......................... .......................... .................. .....109 109 14.1 14.2 14.3
15
Functions and General Properties of the Web Client ..............................98 ..............................98 Web Client Properties Concerning Pictures .......................................... ..........................................103 103
WinCC Web Navigation Interface................... Interface....... ......................... .......................... .................... .......105 105 13.1
14
Publishing WinCC Process Screens........................................................ Screens........................................................64 64 Publishing WinCC Process Screens with the Web View Publisher......... 66 Publishing WinCC Pictures on a Dedicated Web Server ........................72 ........................72 Remote Publication of WinCC Process Screens with the Web View Publisher .......................................................... .................................................................................................. ........................................79 79 Transfer, Adaptation of existing Projects ......................................... ................................................. ........84 84 Limitations................................................................................................ Limitations................................................................................................85 85 Using Scripts .................................................................. ............................................................................................ ..........................86 86 The "PdlPad" Tool.................................................................................... Tool....................................................................................88 88 Differences to the WinCC Basic System ................................................. .................................................90 90 Script Execution ................................................................ ....................................................................................... .......................90 90 Picture Selection ................................................... ...................................................................................... ...................................90 90 Scripting .......................................................... ................................................................................................... .........................................90 90 Addressing of Objects in Pictures .................................................... ............................................................ ........91 91 Synchronous Script Functions ......................................................... ................................................................. ........94 94 Defining a Picture-local Script Tag ........................................... .......................................................... ...............94 94 Properties of Picture Windows on the Web Client................................... Client ...................................95 95
Requirements for Using the Terminal Services ..................................... .....................................125 125 Terminal Services Setup........................................................................ Setup........................................................................126 126 Activation of the Terminal Services on the Windows 2000 Server ........127 ........127 Creation of the Client Data Carrier on the Windows 2000 Server .........129 .........129 User Setup for the Access to the Terminal Services Server .................130 .................130 Installation of a Terminal Services Client on the Client Computer ........131 ........131 Configuration of the Connection .................................................... ............................................................ ........132 132 Starting the Application of the Terminal Services Server on the Client Computer ................................................................ ............................................................................................... ...............................133 133
Printout of the Online Help Web Navigator - Documentation
Contents
11
04.04
Configuration of a Web Project...................... Project......... ........................... ............................ ..................... .......63 63 11.1 11.1.1 11.1.2 11.1.3 11.2 11.3 11.4 11.5 11.6 11.6.1 11.6.2 11.6.3 11.6.4 11.6.5 11.6.6 11.6.7
12
Application of the WinCC Web Navigator Client ............................. ............... ..............97 97 12.1 12.2
13
Installation of the WinCC Plug-In Builder............................................... Builder...............................................110 110 Plug-In: Creating, Testing and Making available for Download.............111 Download............. 111 Installation and Deinstallation of a Plug-In on a Web Client..................114 Client.................. 114
WinCC Web Navigator Diagnostics Client .......................... ............ ......................... ...........115 115 15.1 15.2 15.3
Requirements.........................................................................................116 Requirements.........................................................................................116 Diagnostics Client Licensing ................................................. .................................................................. .................117 117 Installation of the WinCC Web Navigator Diagnostics Client ................118 ................ 118
16
Diagnosis of the Connections with "Status.html".................... "Status.html"..... .................... .....121 121
17
Using the Terminal Services for the WinCC Web Navigator ........123 ........ 123 17.1 17.2 17.2.1 17.2.2 17.2.3 17.2.4 17.2.5 17.2.6
ii
Expanding the WinCC Web Navigation Interface ..................................108 ..................................108
WinCC Plug-In Builder ......................... ............ .......................... .......................... .......................... .................. .....109 109 14.1 14.2 14.3
15
Functions and General Properties of the Web Client ..............................98 ..............................98 Web Client Properties Concerning Pictures .......................................... ..........................................103 103
WinCC Web Navigation Interface................... Interface....... ......................... .......................... .................... .......105 105 13.1
14
Publishing WinCC Process Screens........................................................ Screens........................................................64 64 Publishing WinCC Process Screens with the Web View Publisher......... 66 Publishing WinCC Pictures on a Dedicated Web Server ........................72 ........................72 Remote Publication of WinCC Process Screens with the Web View Publisher .......................................................... .................................................................................................. ........................................79 79 Transfer, Adaptation of existing Projects ......................................... ................................................. ........84 84 Limitations................................................................................................ Limitations................................................................................................85 85 Using Scripts .................................................................. ............................................................................................ ..........................86 86 The "PdlPad" Tool.................................................................................... Tool....................................................................................88 88 Differences to the WinCC Basic System ................................................. .................................................90 90 Script Execution ................................................................ ....................................................................................... .......................90 90 Picture Selection ................................................... ...................................................................................... ...................................90 90 Scripting .......................................................... ................................................................................................... .........................................90 90 Addressing of Objects in Pictures .................................................... ............................................................ ........91 91 Synchronous Script Functions ......................................................... ................................................................. ........94 94 Defining a Picture-local Script Tag ........................................... .......................................................... ...............94 94 Properties of Picture Windows on the Web Client................................... Client ...................................95 95
Requirements for Using the Terminal Services ..................................... .....................................125 125 Terminal Services Setup........................................................................ Setup........................................................................126 126 Activation of the Terminal Services on the Windows 2000 Server ........127 ........127 Creation of the Client Data Carrier on the Windows 2000 Server .........129 .........129 User Setup for the Access to the Terminal Services Server .................130 .................130 Installation of a Terminal Services Client on the Client Computer ........131 ........131 Configuration of the Connection .................................................... ............................................................ ........132 132 Starting the Application of the Terminal Services Server on the Client Computer ................................................................ ............................................................................................... ...............................133 133
Printout of the Online Help Web Navigator - Documentation
04.04
Contents
18
Appendix .......................... ............. .......................... .......................... ......................... ......................... .......................... .............135 135 18.1 18.1.1 18.1.2 18.1.3 18.1.4 18.1.4.1 18.1.4.2 18.1.5 18.1.6 18.1.7 18.1.8 18.2 18.3
nternet Information Services .................................................. .................................................................. ................135 135 Overview of the Highlights .................................................. ..................................................................... ...................135 135 Reliability................................................................................................135 Reliability................................................................................................135 Settings at the Internet Information Services......................................... Services.........................................136 136 Setting up the Web Folder ...................................................... ..................................................................... ...............137 137 Creating a new Standard Website under Windows ...............................137 ...............................137 Virtual Folder..................................................... Folder .......................................................................................... .....................................139 139 Defining the Start Page.......................................................................... Page..........................................................................140 140 Adding the ISAPI Filter........................................................................... Filter...........................................................................141 141 Definition of the Basic Authentication ............................................... .................................................... .....142 142 Application Settings ................................................ ............................................................................... ...............................143 143 Troubleshooting and Error Correction ............................................. ................................................... ......145 145 Abbreviations .............................................................. ......................................................................................... ...........................147 147
Printout of the Online Help Web Navigator - Documentation
iii
Contents
iv
04.04
Printout of the Online Help Web Navigator - Documentation
04.04
1
WinCC / Web Navigator
WinCC / Web Navigator
Function Overview The enormous growth of the Internet in recent years has had and is having a large impact on industrial development. One of the key factors responsible for the Internet boom was the development of the World Wide Web (WWW) Internet service. Browser applications with graphical user interfaces make accessing and navigating the Web easy: clicking a mouse button is all that is needed to cross geographical borders. The WinCC Web Navigator option package to the WinCC basic system V6.0 or higher enables you to develop a solution for controlling and monitoring processes via the Intranet/Internet. With this option package and the standard tools of WinCC, a new way of distributing the HMI functions of your plant - employing the Intranet/Internet - can be implemented. The WinCC Web Navigator supports current Internet security methods and provides Wizards to assist you in your task. The communication mechanisms used by the WinCC Web Navigator utilize a powerful and optimized event-driven transmission of data, which delivers the best performance via the Intranet/Internet. The WinCC Web navigation interface combines various Web functions and makes them available to the user in a clear format. The contents of the navigation interface can be expanded by the user. Installed Dat@Monitor components are also displayed by the navigation interface. The WinCC Web Navigator package consists of special server components that are installed on the server computer and of client components that are installed on the client computer on the Intranet/Internet.
As a so-called "thin client", the WinCC Web Client can control and monitor a running WinCC project from an opened Internet Browser, without the need of having to install the complete WinCC basic system on the client computer.
Printout of the Online Help Web Navigator - Documentation
1
WinCC / Web Navigator
04.04
The WinCC Web Navigator thus cost-effectively expands the networking of clientserver systems to the Intranet/Internet. The project and the associated WinCC application are located on a server computer. This provides a clear separation of the visualization components on the client computer and the WinCC project running on the server computer . This means that operator stations can be set up easily, e.g. for maintenance or diagnostics purposes. The software of the WinCC Web Navigator Client component can run under Windows 2000 Professional SP3 or 4, Windows 2000 Server / 2003 Server, Windows XP (Home / Professional / Professional SP1) and Windows NT from Version 4.0 SP6a. The visualization can take place on any Internet Browser supporting the ActiveX technology by Microsoft. This applies to Internet Explorer from Version 6.0 SP1. Using the MS Terminal Services, the Web client can also be operated on other operating systems, such as WinCE, Win95 etc. The software of the WinCC Web Navigator Client can be installed in various ways: in the normal way using CD-ROM as a self-decompressing file via the Intranet/Internet or even via a group guideline based software distribution in networks. When directly accessing the WinCC Web Navigator Server, it will be checked whether the client software has been installed. If the client software is missing, the user will be asked to download the file to his computer and to perform the installation. This scenario provides the WinCC Web Navigator user with a high degree of flexibility and mobility. A further function provided by the client installation is "Download on Demand". The user is then offered client add ins such as "WinCC User Archive Table Element", additional languages or IndustrialX controls for downloading. A property of the user administration is the user-specific assignment of the start picture and the language. For every user, a different start picture and language can be set. By assigning user authorizations, a scalable access to different project areas and functions can be implemented for the various users. The pictures displayed on the WinCC Web Navigator Client can be controlled as in a normal WinCC system, provided the user possesses the necessary user authorizations. In this way, the project running on the server computer can be controlled from anywhere on earth. The Web client supports pan, zoom and declutter functions. This enables sections of process screens displayed to be moved, process screens or sections of them to be zoomed using the mouse wheel or dragging the borders and graphic objects to be hidden and unhidden according to the level and object size. The display of archive data of the WinCC option User Archives is also supported. Using Visual Basic Scripting (VBS) it is possible to control the dynamic behavior of objects, for example, or establish a connection to other applications with the Web client. VBS is already integrated into W indows 2000/XP. Security is an essential aspect when controlling and monitoring via the Internet. Thus, the WinCC Web Navigator supports all currently known security standards (used by the banking and insurance sector) ranging from user-specific logins and passwords, firewalls, secure ID cards with PINs to RAS (Remote Access Service) or the SSL coding and VPN technology. The WinCC Web Navigator Server requires the Microsoft Internet Information Service for the communication to its clients. The WinCC Web Configurator is provided for setting up the WinCC Web Navigator Server, making configuring the Internet server simple and convenient. The Web Configurator is ideal for all users without Internet server knowledge: after only making a few entries, the Web server is properly configured.
2
Printout of the Online Help Web Navigator - Documentation
04.04
WinCC / Web Navigator
The "Load Balancing" function enables Web Navigator Clients to be distributed automatically to different Web Navigator servers evenly and according to the respective server authorizations. In order for a WinCC project to run on the WinCC Web Navigator, the WinCC process screens must be adapted and converted. As before, the WinCC pictures are created and edited with the WinCC Graphics Designer. The Web View Publisher automatically performs the necessary adaptations for the project data so that it can run on the WinCC Web Navigator Client. In order to achieve the best possible performance, the Wizard limits itself to information that is necessary for the Web.
Printout of the Online Help Web Navigator - Documentation
3
WinCC / Web Navigator
4
04.04
Printout of the Online Help Web Navigator - Documentation
04.04
2
Web Navigator Demo Project
Web Navigator Demo Project
Introduction The WinCC Web Navigator CD contains a WinCC demo project as a selfdecompressing ZIP file called "Web_Demo_Project.exe" located in the "DemoProject" folder. To install the project, copy the file to a local target directory and start the decompressing process by double clicking on the file. The demo project contains the following logins for various languages already configured: •
"winccd" for German,
•
"wincce" for English,
•
"winccf" for French,
•
"wincci" for Italian and
•
"winccs" for Spanish.
The password for all languages is "winccpass".
Printout of the Online Help Web Navigator - Documentation
5
Web Navigator Demo Project
6
04.04
Printout of the Online Help Web Navigator - Documentation
04.04
3 3.1
Requirements
Requirements Hardware and Software
Introduction This chapter outlines the WinCC Web Navigator hardware, software and operating system requirements.
WinCC Web Navigator Client Operating System:
Windows NT from V4.0 SP6a or later, Windows 2000 Professional Service Pack 3 or 4 Windows 2000 Server Windows 2003 Server Windows XP Home Windows XP Professional Windows XP Professional Service Pack 1 Use MS Terminal Services for other operating systems, such as WinCE, Win95.
Software:
Internet Explorer 6.0 SP1 or higher
Minimum Hardware Requirements:
No special hardware is required, however, the IE 6.0 must be able to run.
Other:
Access to the Intranet/Internet or TCP/IP connection to the Web server
Note If MSI technology is implemented, "MS Installer" is required on the target system for installation of the Web clients. However, this is not available in Windows NT V4.0. The service can be installed using the Download page of the Web Navigation user interface or using the "instmsiw.exe" file on the "Web Navigator" product CD.
Printout of the Online Help Web Navigator - Documentation
7
Requirements
04.04
WinCC Web Navigator Server on a WinCC Single-user or Client System Operating System:
Windows 2000 Professional Service Pack 3 or 4 Windows 2000 Server Windows 2003 Server Windows XP Professional or Windows XP Professional Service Pack 1
Software:
Internet Explorer 6.0 SP1 or higher WinCC Basis System from V6.0
Minimum Hardware Requirements:
Intel Pentium III, 800 MHz 512 Mbyte 700 MB free memory Network interfaces
Other:
Access to the Intranet/Internet or TCP/IP connection to the Web client
Note In order to have more than three clients, the Server version of Windows 2000 Server or 2003 Server must be installed, since the Workstation version is limited to three clients.. The conditions as under "WinCC Web Navigator Server on the WinCC Server" apply accordingly.
8
Printout of the Online Help Web Navigator - Documentation
04.04
Requirements
WinCC Web Navigator Server on WinCC Server Operating System:
Windows 2000 Server Windows 2000 Advanced Server Windows 2003 Server
Software:
Internet Explorer 6.0 SP1 or higher WinCC Basis System from V6.0
Minimum Hardware Requirements:
Intel Pentium III, 800 MHz 512 MB RAM 700 MB free memory
Other:
If you want to publish Intranet information, the following is required: A network-capable computer as well as a LAN connection (LAN = Local Area Network). A system that breaks up computer names into IP addresses (IP = Internet Protocol). This is not a mandatory step, but it allows users to use "alias names" instead of IP addresses when connecting to your server. If you want to publish Internet information, the following is required: An Internet connection and an IP address from your Internet service provider (ISP). You can only publish information on the Internet, if you possess a connection to the Internet (provided by the ISP). A network card that is suitable for connecting to the Internet. A DNS registration (DNS = Domain Name System) for your IP address. This is not a mandatory step, but it allows users to use "alias names" instead of IP addresses when connecting to your server.
Printout of the Online Help Web Navigator - Documentation
9
Requirements
3.2
04.04
Licensing
WinCC Web Navigator Client Through the server-side licensing on the on the Web Server, the computer running the Web Navigator Client does not require a license.
WinCC Web Navigator Server As a prerequisite for the WinCC basic system, the WinCC RT basic license is required. No WinCC server license is required, if no local WinCC clients are operated. Even when operating a WinCC client as a dedicated Web server, no WinCC server license is required for the WinCC client. Without a license, the WinCC Web Navigator Server will run in demo mode for a duration of 30 days. For the permanent use of the WinCC Web Navigator Server, a license is required. Licenses are available for 3, 10, 25 or 50 clients that can simultaneously access the Web Server. If the number of licensed clients is exceeded during a login attempt by a Web client, a message will be displayed and no further logins be permitted.
WinCC Web Navigator Diagnostics Client For the function of the Web Navigator Diagnostics Client, other licenses are required. For additional detailed information, see the topic "Web Navigator Diagnostics Client".
10
Printout of the Online Help Web Navigator - Documentation
04.04
Requirements
Overview of the Licenses on the Web Navigator Server and Client Server
Client no License
Client with Diagnostics Client License
WN server license + WinCC license
WN client Number till max. on license (server)
Diagnostics Client One license per diagnostics client.
WN Gatekeeper + WinCC license
Demo Client Unlimited number
Diagnostics Client One license per diagnostics client.
WN-GK + WN Server + WinCC license
WN client Number till max. on license (server)
Diagnostics Client One license per diagnostics client.
No WN license or No WinCC license
Demo Client Unlimited number
Demo Client Unlimited number
WN server license + WinCC license + "Load Balancing" license
WN client Number till max. on license (server)
Diagnostics Client One license per diagnostics client.
WN server license + WN client WinCC license + Number till max. on WinCC redundancy license (server) license + "Load Balancing Step-Up" license
Diagnostics Client One license per diagnostics client.
Printout of the Online Help Web Navigator - Documentation
11
Requirements
12
04.04
Printout of the Online Help Web Navigator - Documentation
04.04
4 4.1
Installation of the WinCC Web Navigator Server
Installation of the WinCC Web Navigator Server Procedure The WinCC Web Navigator Server requires Windows 2000 or XP as well as WinCC V6 to be installed. For details regarding the installation of WinCC, please refer to the WinCC documentation. The following description assumes that WinCC has already been installed.
Installation of the WinCC Web Navigator Server under Windows 2000/XP: 1. Installation of the Internet Information Services (IIS) 2. Installation of the WinCC Web Navigator Server
Note In order to install the Server component of the WinCC Web Navigator under Windows, write permissions to the registry database are required, i.e. you must possess administrator rights.
Printout of the Online Help Web Navigator - Documentation
13
Installation of the WinCC Web Navigator Server
4.2
04.04
Installation of the Internet Information Service (IIS) When using Windows 2000 Professional or XP, the Internet Information Service (IIS) must be installed prior to the WinCC Web Navigator Server. When using the Windows 2000 Server or 2003 Server, this manual installation is not necessary. Note In order to install the Internet Information Service under Windows, write permissions to the registry database are required. you must possess administrator rights. If the logging functions are active with IIS, the log files must be monitored and deleted, if necessary. The event views should be configured so that the log files do not become to large.
•
•
•
•
14
Insert the Windows 2000 CD-ROM into the CD-ROM drive. From the Start menu of Windows 2000, select the "Settings" > "Control Panel" entries and then click on the "Add or remove programs" icon. Open the "Add or remove programs" dialog and click on "Add/Remove Windows components". The following dialog opens.
In the selection window, activate the check-box at the "Internet Information Services (IIS)" entry.
Printout of the Online Help Web Navigator - Documentation
04.04
Installation of the WinCC Web Navigator Server
•
•
Click on "Next". The data required is then transferred and the necessary configuration of Windows performed. Exit the Wizard by clicking on "Finish".
Printout of the Online Help Web Navigator - Documentation
15
Installation of the WinCC Web Navigator Server
4.3
04.04
Installation of the WinCC Web Navigator Server
Note If the Web Navigator Server is installed after a Web Navigator Client on the same computer, the client needs to be reinstalled. In order to install the Server component of the WinCC Web Navigator under Windows, write permissions to the registry database are required, i.e. you must have administrator rights.
•
•
•
Insert the WinCC Web Navigator CD-ROM into the CD-ROM drive. The setup program will start automatically after a few seconds, provided that the autorun functionality is not disabled. The setup can also be started manually in case the installation is performed from a network drive or the autorun function has been disabled. From the Windows 2000 / XP Start menu, select the "Settings" > "Control Panel" > "Add or remove programs" option and click on the "Add new programs" icon. Then select the required installation medium.
The setup program will then be started.
To receive additional information about the WinCC Web Navigator, click on the "Welcome", "Read first", "Display CD-ROM Contents", "Install Software" and "Language Selection" entries. •
•
16
To install the WinCC Web Navigator, click on "Install Software". In the following dialog box, select the component "WinCC Web Navigator Server". You will be guided step-by-step through the installation.
Printout of the Online Help Web Navigator - Documentation
04.04
Installation of the WinCC Web Navigator Server
•
•
The "Authorization" dialog box displays a list of required authorizations based on the selected components. Select "Yes, the authorization should be performed during the installation" and insert the authorization floppy disk into drive "A:". The following dialog box will display the selected settings. If you want to make changes to the settings, click on "Back", otherwise click on "Next".
The WinCC Web Navigator Server will then start with the transfer of the files. If older versions of system files were located on your computer, the setup program may ask you to restart your computer. The WinCC Web Navigator Server will be added with a separate icon to the navigation window of the WinCC Explorer.
Already installed WinCC Web Navigator The setup program will detect an already installed WinCC Web Navigator Server software. A message will be displayed asking whether the existing version is to be deinstalled. Click on "Yes" to deinstall the existing version. Following that, the installation of the WinCC Web Navigator Server will be carried out.
Printout of the Online Help Web Navigator - Documentation
17
Installation of the WinCC Web Navigator Server
18
04.04
Printout of the Online Help Web Navigator - Documentation
04.04
5
Configuring the Web Navigator Server
Configuring the Web Navigator Server
Introduction The following configurations can be made on the Web Navigator server: •
•
•
The WinCC Web Configurator is used to set up and manage the Internet Information Service (IIS). The "Load Balancing" function can be used, as necessary, to set up a load distribution between several Web servers. The Web View Publisher automatically performs the necessary adaptations for the project data so that it can run on the WinCC Web Navigator Client via the Intranet/Internet. Various versions of the Web View Publisher can be used and are described in Chapter "Configuring a Web Project".
Printout of the Online Help Web Navigator - Documentation
19
Configuring the Web Navigator Server
5.1
04.04
Wizard-assisted Web Setup: WinCC Web Configurator
Application The WinCC Web Configurator provides simple, uncomplicated support in managing and setting up the Microsoft Internet Information Service (IIS). The Configurator is thus ideal for all users without Web server knowledge. This setup and configuration is necessary to make the WinCC Server accessible via the Intranet/Internet. Additional information about the Internet Information Server can be obtained from Microsoft. Note The Internet Information Service and the WinCC Web Navigator Server must be installed, otherwise the Wizard will not operate. Standard Website Settings The WinCC Web Configurator can also be used to select which standard Website should be opened after starting the Web clients. If "WebClient.asp" is set, the Web client starts, as usual,with the process screens. If "MainControl.asp" is set, the Web client starts with the Navigation interface.
How to start the WinCC Web Configurator 1. In the navigation window of the WinCC Explorer, select the Web Navigator and access its pop-up menu. 2. In the pop-up menu, select the "Web Configurator" menu command.
Note In the event of queries or difficulties concerning the following settings, consult your department's Intranet/Internet administrator.
20
Printout of the Online Help Web Navigator - Documentation
04.04
Configuring the Web Navigator Server
Initial Configuration of the WinCC Web Navigator Server During the initial configuration, the first dialog box of the WinCC Web Configurator allows you to specify the creation of a new standard Website or a new virtual directory. For this, please observe the following note. The following step depends on the option selected.
•
•
If only the WinCC Web Navigator Website is operated on the server, activate the radio-button "Create a new standard Website (Stand-alone)". If the WinCC Web Navigator Website is added as a subfolder to your existing Website, activate the radio-button "Add to an existing Website (Virtual Directory)".
Printout of the Online Help Web Navigator - Documentation
21
Configuring the Web Navigator Server
04.04
Editing the Configuration If the IIS has already been configured, the settings of the existing Web server or virtual directory can be changed via the WinCC Web Configurator. The Web Configurator automatically detects an existing configuration and opens the corresponding dialog box for making changes to the configuration.
Note The appendix contains the settings made by the WinCC Web Configurator. If the Website for the WinCC Web Navigator is accidentally deleted, restart the computer before creating a new Website with the WinCC Web Configurator. Please note that if manual changes were made to this Website and the Web communication fails afterwards, the Web Configurator will attempt to automatically correct these settings. If this is unsuccessful, delete the Website from the IIS, restart the computer and create a new Website with the Web Configurator. At the WinCC Web Navigator Server, only one Website per computer can be active, since the Web filter (WebFilter.dll) is loaded into the memory of the active Website. If an active Website already exists on the computer - which is to remain active the Web Navigator Website can be installed as a virtual directory under the active Website.
22
Printout of the Online Help Web Navigator - Documentation
04.04
5.1.1
Configuring the Web Navigator Server
Creating a new standard Website (Stand-alone) When selecting the radio-button "Create a new standard Website (Stand-alone)", the following dialog box is displayed.
Name of the Web site
Specify a name for your Website here, e.g. WebNavigator
Port
Here you can specify the connection (port) to be used by the http protocol for accessing the Internet. Only numbers ranging from 1 to 65535 may be entered. As a rule, the port numbers up to 1024 are reserved for the system. In this field, the http default port of 80 is set.
IP Address
Every computer on the Internet possesses a unique address. The address consists of a group of four numbers that are separated by periods. The numbers can have values ranging from 0 to 255. The address is defined in the Windows Control Panel. You can only use addresses that are shown in the list-box. Via the IP address, you can specify whether the computer is to be accessible on the Intranet or Internet or on both networks. For example, via the IP address x.x.x.x, the computer is known to the Intranet, via the IP address y.y.y.y to the Internet. If you want to make the computer accessible only on the Intranet or Internet, select the corresponding address, e.g. for the Intranet, this would be x.x.x.x. If the computer is to be accessible via the Intranet and the Internet, select "All not assigned".
Default Web site selection field
Printout of the Online Help Web Navigator - Documentation
Select the standard Web sites here which should be displayed on the Web client after selecting the Web server.
23
Configuring the Web Navigator Server
04.04
Reconnect interval
Enter the time interval after which the Web client should automatically start to establish a connection (Reconnect) following a connection breakdown. If the value = 0 is set, the "Automatic connection establishment" function is deactivated.
Start the Web site after being configured
Activate this check-box to automatically start the Website following the configuration. If this check-box is not activated, the Website has to be manually started via the Windows console "Internet Information Services".
Click on the "Finish" button to complete the configuration of the server. After the configuration has finished, the just created Website (Web Navigator Website) will be active.
24
Printout of the Online Help Web Navigator - Documentation
04.04
5.1.2
Configuring the Web Navigator Server
Creating a Virtual Directory •
•
•
When selecting the radio-button "Add to an existing Website (Virtual Directory)", click on the "Browse" button. In the next dialog box, select the active Website to which the virtual directory is to be added.
After selecting the active Website, click on "OK" to go back to the previous dialog box. Click on "Next".
Printout of the Online Help Web Navigator - Documentation
25
Configuring the Web Navigator Server
04.04
Name of the Website:
Here you can specify the name of your virtual directory, which will be added to the active Website.
Port and IP Address
The port and the IP address are predefined and cannot be edited. The WinCC Web Configurator reads the data of the active WinCC Web Navigator Server from the IIS.
Default Website selection field
Select the standard Websites here which should be displayed on the Web client after selecting the Web server.
Reconnect interval
Enter the time interval after which the Web client should automatically start to establish a connection (Reconnect) following a connection breakdown. If the value = 0 is set, the "Automatic connection establishment" function is deactivated.
Start the Website after being configured
Activate this check-box to automatically start the Website following the configuration.
•
If this check-box is not activated, the Website has to be manually started via the Windows console "Internet Information Services".
Click on "Finish" to complete the configuration.
To access the Web Navigator, the name of the virtual Web Navigator Website needs to be added to the URL on the client. ( E.g. http://WebServer/WebNavigator)
26
Printout of the Online Help Web Navigator - Documentation
04.04
Configuring the Web Navigator Server
No active Website If no active Website is found, the Web Configurator will terminate with a message.
Acknowledge with "OK". Before running the Wizard again, a Website has to be activated first. The procedure to do this is outlined in the chapter "Checking the activated Website".
Printout of the Online Help Web Navigator - Documentation
27
Configuring the Web Navigator Server
5.1.3
Checking the activated Website (Web) •
Activate the Internet Information Service.
•
To do so, select "Programs" > "Management" > "Internet Information Services".
•
•
28
04.04
In the navigation window, select the computer. In Windows XP, the subfolder "Websites" must also be selected. The data window will display the corresponding Websites. Check the entry of the Website. If "Stopped" is displayed next to the desired Website, e.g. "WebNavigator", the Website needs to be started. To do so, right-click on the Website and select the "Start" menu command from the popup menu.
•
Close the dialog.
•
The Website is now activated.
Printout of the Online Help Web Navigator - Documentation
04.04
5.2
Configuring the Web Navigator Server
Load distribution on Web servers using the "Load Balancing" function
Overview The "Load Balancing" function enables Web Navigator Clients to be distributed automatically to different Web Navigator servers evenly and according to the respective server authorizations. Each Web Navigator server can implement load distribution using the "Load Balancing" function. A Web server can be configured as a distributing Load Balancing server or as a participating Web server. A Load Balancing server is automatically a participating Web server, too. Within a group of participating Web servers, several can also be configured as Load Balancing servers. When logging on from a Web client to a Load Balancing server, the Web client is forwarded to one of the participating Web servers with the least load and according to its server license. If the least number of Web clients are logged on to the Load Balancing server, the new Web client remains connected to it. If a participating Web server fails, the Web clients registered on it are automatically routed to one of the other participating Web servers. The address of a Web server is independent of the activation of the "Load Balancing" function. The address of a Web server used prior to activation continues to be valid. The function must be set up on each of the participating Web servers and Load Balancing servers. In this case, all Load Balancing servers and participating Web servers are recorded in a list. On a Load Balancing server, the query interval must also be set up and its function as a Load Balancing server activated or deactivated. No configuration is necessary on the Web clients. Licensing A maximum of 32 Web servers connected to each other can be supported by the "Load Balancing" function. A "Load Balancing" license is required on each participating Web server and Load Balancing server. No license is necessary on the Web clients. In the case of WinCC computers with WinCC redundancy, a Load Balancing server or participating Web server can be operated with a "WinCC Redundancy" license and "Load Balancing Step-Up" license.
Printout of the Online Help Web Navigator - Documentation
29
Configuring the Web Navigator Server
04.04
Example
In the figure, the Web servers 1 to 3 are participating in the "Load Balancing" function. A "Load Balancing" license is installed on these Web servers. Web servers 1 and 2 are configured as Load Balancing servers. When Web client 1 logs on to Web server 1 or 2, the client is automatically forwarded to the Web server with the lowest load. If the Web server connected fails, Web client 1 is routed to one of the other two Web servers. Web server 4 is not participating in the "Load Balancing" feature. If Web client 2 logs on to this Web server, the logon fail due to a high load level of the server. If Web server 4 fails, the client is not forwarded to Web servers 1 to 3 despite the fact that a network connection exists. Internet options on Load Balancing servers and participating Web servers In order that the Load Balancing server can distribute the Web clients to other Web servers as they log on, the Load Bearing server must be capable of accessing the participating Web servers, and vice versa, via the communication connection. This must also be guaranteed even when the connection between Load Balancing server and participating Web servers is not established via a LAN but via an Internet connection with an interconnected proxy server.
30
Printout of the Online Help Web Navigator - Documentation
04.04
Configuring the Web Navigator Server
The use of a proxy server may cause the target address of the participating Web server / Load Balancing servers "http://
" to be replaced by "http://" resulting in the Web server addressed not being found. To avoid this behavior, each of the servers participating in Load Balancing must enter the target address of all the other servers in Internet Explorer under in the "Exceptions" field in "Tools > Internet Options > Connections > LAN Settings > Extended".
Printout of the Online Help Web Navigator - Documentation
31
Configuring the Web Navigator Server
5.3
04.04
Configuring the "Load Balancing" Function
Introduction The "Load Balancing" function enables Web Navigator Clients to be distributed automatically to different Web Navigator servers evenly and according to the respective server authorizations. The function must be set up on each of the participating Web servers and Load Balancing servers. In this case, all Load Balancing servers and participating Web servers are recorded in a list. On a Load Balancing server, the query interval must also be set up and its function as a Load Balancing server activated or deactivated. No configuration is necessary on the Web clients.
Requirements •
•
32
Implementation of the "Load Balancing" function requires the installation of Web Navigator servers and a "Load Balancing" license. The function requires WinCC V6.0 SP2 or later.
Printout of the Online Help Web Navigator - Documentation
04.04
Configuring the Web Navigator Server
Configuring the "Load Balancing" Function 1.
Select the "WebNavigator" entry in WinCC Explorer in the Navigation window. Select the "Load Balancing" menu item from the associated pop-up menu. The "Load Balancing Configuration" dialog opens.
2.
Enter the address of a Web server which is to participate in "Load Balancing" in the top field. Click on the "Add" button. The address entered is transferred to the server list. Repeat the process for each Web server which should participate in "Load Balancing". Note The name of the Load Balancing server must also be entered in the list. The lists on the Load Balancing server and all participating Web servers should be identical to ensure a uniform functionality should a one of the Web servers fail.
A server name can also be deleted by selecting it in the list and clicking the "Remove" button. 3.
Activate the "Enable Load Balancing" checkbox to activate the local Web server as the Load Balancing server. The checkbox remains deactivated on the participating Web servers. When the checkbox is deactivated, the list of Web servers is still retained.
Printout of the Online Help Web Navigator - Documentation
33
Configuring the Web Navigator Server
04.04
4.
Use the "Polling Interval" field to select the time interval at which the other participating Web servers should be polled. The time is defined in seconds and is only relevant on a Load Balancing server.
5.
Click on the "Save" button to store the entries. Close the dialog box by clicking on "OK".
6.
Repeat the process on all the participating Web servers and Load Balancing servers.
Note The modifications take effect when WinCC Runtime is activated again.
34
Printout of the Online Help Web Navigator - Documentation
04.04
6
WinCC Web Navigator Security
WinCC Web Navigator Security
Overview The moment you connect your WinCC Web Navigator Server to another computer, your data is put at a certain risk. It makes no difference how the connection was established, e.g. via a local network (LAN) or a dial-up connection of an Internet provider. Unauthorized persons could access your data. Your transmission could be intercepted, manipulated and misrouted. By providing special security layers to certain folders on your system, you can control the transmission of information. There a number of important concepts with regard to a safe transaction: Windows supplies powerful security functions for checking users, for access control and for monitoring. The WinCC Web Navigator Server, which is based on the IIS, uses these capabilities of the Windows operating system to provide security for its Internet-based services. Windows employs a security model which handles the security for all services via a single login process. By creating user accounts and setting user authorizations for these accounts, administrators can control, which resources and services are available to the users. The central management at the WinCC Web Navigator Server takes place via the WinCC User Administrator. In addition, the WinCC Web Navigator Server supports firewalls. With the help of a firewall, your system can be protected against unauthorized access. Firewalls require users to be continuously identified. This identification can take place with the help of company-approved IP addresses, user IDs and passwords or secure ID cards and encrypted access passwords that change in certain intervals. Other supported security mechanisms include routers, proxy servers and VPNs (Virtual Private Network). The most important components for the security of the WinCC Web Navigator Server are: the Secure Socket Layer (SSL), the Secure HTTP (HTTPS), the WinCC User Administrator, firewalls, secure ID cards.
Printout of the Online Help Web Navigator - Documentation
35
WinCC Web Navigator Security
6.1
04.04
SSL SSL is a protocol that ensures the data security between HTTP and TCP/IP. The standard for the security of Web Browsers and servers on the Internet was defined by the W3C (World Wide Web Consortium). The W3C was formed for establishing common norms for the WWW. Additional information can be found on the Internet at http://www.w3c.org. The SSL performs a security check before establishing a TCP/IP connection. This check sets the security level on which the client and the server agree and which will be used for the required connection authenticity confirmations. While the connection exists, the SSL decrypts and encrypts the data stream of the protocol used (e.g. HTTP = Hyper Text Transfer Protocol). All information (request/response) is encrypted. This includes information pertaining to the authenticity confirmation of the HTTP access (user name/password) as well as all data transmitted by the server to the client. To use SSL, you - as the operator of the server - require a certificate from a certification authority, e.g. VeriSign. To request a VeriSign certificate for the Microsoft Server, go to http://www.verisign.com.
6.2
HTTPS HTTPS is an expansion of the HTTP protocol. The SSL protocol establishes a secure connection between two computers, while the HTTPS securely transmits individual messages. The communication between the WinCC Web Navigator Server and Client takes place via the HTTPS protocol.
36
Printout of the Online Help Web Navigator - Documentation
04.04
6.3
WinCC Web Navigator Security
WinCC User Administrator The WinCC User Administrator assigns and controls the user access rights to the Website. Access rights are assigned during the setup of the user. If a user logs on at the system, the WinCC Web Navigator Server will check, whether the user is registered and whether the maximum number of licensed Web Navigator Clients has been reached. Additional information can be found at the topic "Configuration of the User Administration".
6.4
Secure ID Card The Remote Access Service (RAS) is a service that enables the direct dialup to a network, for example, from home. This takes place via the dialup network (remote data transmission). The RAS server will ask you to enter your card ID and PIN number. The RAS server will check the data and, if necessary, call back. This method ensures that only users with valid access data receive access to the server.
Printout of the Online Help Web Navigator - Documentation
37
WinCC Web Navigator Security
6.5
04.04
Firewall
General Information A firewall is a system consisting of hardware and software that is installed at a point between two networks and only lets authorized communication traffic pass through. Improper actions are rejected and detected unauthorized attempts can be recorded. Thus, firewall systems are suitable to enforce defined rules with regard to security (security policy). Firewalls are often used when connecting to the Internet, protecting the internal network from the dangers of the Internet.
Principle of Operation One computer with installed routing software and two interfaces (two network adapters). The Internet is connected to one interface, the Intranet to the other.
This results in two different networks sharing one computer and provides exceptional security against attacks from the Internet.
Firewall Types Among others, there are the following types of firewalls: •
Filter Firewall
•
Proxy Server
Filter Firewall: A filter firewall controls the data stream based on a data package's origin, destination, port and package type information. This information is contained in every data package. Only selected network traffic can pass through the firewall.
38
Printout of the Online Help Web Navigator - Documentation
04.04
WinCC Web Navigator Security
Package filters are IT systems (Information Technology Systems) with special software that filter the information (IP packages) on the transport layer, i.e. they either let the information pass through or intercept it according to defined rules. The rules can operate by means of the source or target address as well as the source or destination port that is typical for the respective Internet service. Many routers can also be employed as package filters. Unlike static package filters, dynamic package filters do not possess a defined set of rules, instead, the firewall modifies the filter in response to certain events. Proxy Server Proxy servers permit indirect access to the Internet through the firewall. A proxy is an application for network services that is executed depending on the communication of the service and from system to system. The service program of the user does not communicate directly with the target system, but with the proxy server of the firewall. The proxy evaluates the request and determines whether to establish or deny the connection. Proxy servers provide user authentication and integrity during the transfer of data between client and server. The hypertext transfer protocol (http) proxy intercepts connections from every Web Browser and directs the requests to the configured Web Server. Proxy servers support content filtering. With content filtering, only certain contents of HTML pages are permitted. In this case, the communication is rerouted via a defined port to an IP address such as the address of the WinCC server. If content filtering is active, the Web Navigator communication will no longer function. In this case, the use of SSL is recommended.
Printout of the Online Help Web Navigator - Documentation
39
WinCC Web Navigator Security
40
04.04
Printout of the Online Help Web Navigator - Documentation
04.04
7
Structure with the WinCC Web Navigator Server
Structure with the WinCC Web Navigator Server
Introduction Before connecting your WinCC Web Server to the Intranet/Internet, you must devise a concept taking into account your security and system conditions.
7.1
Island Solution
In the above illustration, the Web Clients are not connected to the Intranet, but only serve as HMI for the running WinCC project. You can thus economically set up computer stations that, for example, serve monitoring or maintenance functions.
Printout of the Online Help Web Navigator - Documentation
41
Structure with the WinCC Web Navigator Server
7.2
04.04
WinCC Web Navigator Server on the WinCC Server The WinCC Server and the server component of the WinCC Web Navigator are installed on one computer. The WinCC Web Navigator Client can control and monitor the running WinCC project via the Internet as well as the Intranet. With WinCC Web Navigator Clients, a client-server system can be expanded. To protect against attacks from the Internet, firewalls are employed. The first firewall protects the WinCC Web Navigator Server from Internet attacks, the second firewall provides additional security for the Intranet.
7.3
Separation of WinCC Server and WinCC Web Navigator Server Communication via Channel A group of PLCs is assigned to the WinCC Server. The project includes all data such as programs, configuration data and miscellaneous settings. On the computer with the WinCC Server and the WinCC Web Navigator Server, the WinCC project is mirrored 1:1 and not networked with the PLCs. The synchronization of the data takes place via the OPC channel (OPC = OLE Process Control). For this, the WinCC Web Navigator Server requires a license for the number of OPC tags. Here as well, two firewalls are employed to protect the system against unauthorized access. The first firewall protects the WinCC Web Navigator Server from Internet attacks, the second firewall provides additional security for the Intranet.
42
Printout of the Online Help Web Navigator - Documentation
04.04
Structure with the WinCC Web Navigator Server
Communication via Process Bus Just like in the above illustration, two firewalls are employed to protect the system against unauthorized access. On the computer with the WinCC Server and the WinCC Web Navigator Server, the WinCC project is mirrored 1:1. The synchronization of the data takes place via the process bus.
Printout of the Online Help Web Navigator - Documentation
43
Structure with the WinCC Web Navigator Server
7.4
04.04
Dedicated Web Server For the central supply of data to the Web Clients, the installation of a dedicated Web server is advantageous in larger systems. The dedicated Web server processes and optimizes the accesses of the Web Clients and is available as a proxy of the WinCC Servers to the clients. For this, the dedicated Web Server can simultaneously access multiple subordinated WinCC Servers. The user gains access to multiple WinCC projects by logging on once to the dedicated Web server (no individual project logons). The dedicated Web server supports the redundancy switch of two subordinated WinCC Servers using WinCC Redundancy. The functionality of the dedicated Web server is available on a WinCC Client following the installation of the Web Navigator Server.
44
Printout of the Online Help Web Navigator - Documentation
04.04
8
Installation of the WinCC Web Navigator Client
Installation of the WinCC Web Navigator Client
Introduction The following options are available with which to install the WinCC Web Navigator Client (client side controls). •
•
•
Installation from the Product CD. In this case, certain Windows user rights are necessary, depending on the operating system. Installation via the Intranet/Internet In this case, certain Windows user rights are necessary, depending on the operating system. Installation using the group guideline based software distribution in networks. This can be done without any user interaction and implementing the Windows user rights of the current user.
Procedure The installation is carried out using the following steps: 1. Complete and check the settings of the client computer in Internet Explorer. 2. Installation of the Web Navigator Navigator Client In addition, the Web Navigator Client can also be installed on the Web server. This, for example, is useful, if you want to check your WinCC configuration locally on the server in the Internet Explorer. If scripts are used, use the "PdlPad" tool to check the converted process screens in your WinCC project path under ..\WebNavigator\Pictures. under ..\WebNavigator\Pictures. Note An older version of the Web Navigator Client can be upgraded directly without deinstalling the old Web client. This is possible during the installation from the Product CD or the group guideline based software distribution. If the Web Navigator Server is installed after a Web Navigator Client on the same computer, the client needs to be reinstalled.
Printout of the Online Help Web Navigator - Documentation
45
Installation of the WinCC Web Navigator Client
04.04
Windows user rights required for installation and first registration of the Web client Certain minimum user rights are required for the installation of Web Navigator Client via Intranet/Internet depending on the operating system. After the installation, the client must register under the name used during installation for the initial registration on the Web server or log on with a higher Windows user authorization. The connections must be established successfully. Al the following logins can then be performed under a different Windows user authorization with possibly limited rights.
Operating system
Minimum user right requirement
Windows 2000 Professional
"Power User"
Windows 2000 Server / Adv. Server
"Power User"
Windows 2003 Server
"Power User"
Windows XP Home
"Administrators"
Windows XP Professional
"Power User"
Windows NT Workstation
"User"; but "Administrators" when system files must be updated.
Windows NT Server
"User"; but "Administrators" when system files must be updated.
Installing the Web client with limited Windows user rights By using Microsoft Windows Installer technology (MSI), Web clients from Version V6.0 SP1 can also be installed with limited Windows user rights, i.e. without possessing the "Power user" or "Administrator" rights. This procedure can be set during the installation using the group guideline based software distribution in networks. Even the Add-Ins and Plug-Ins belonging to the Web Navigator client can be installed. The minimum user rights described above are also required to install plug-ins, created with WinCC Plug-In Builder. By using MSI technology, it is also possible to install the Web client for a configured group of users or computers. Installation for a configured group of users or computers Using the Microsoft Systems Management server or group guideline on a Domain Controller, it is possible to install a group of users or computers configured by the Administrator. •
46
To do this, the "WinCCWebNavigatorClient.msi" MSI file is published in the Domain Controller and released for a user group. The installation is then performed according to the configuration of the group guidelines based software distribution either during login of the defined users or when the computer is started The Windows NT, Windows 2000 Server or Windows 2003 Server operating systems can be used on the Domain Controller.
Printout of the Online Help Web Navigator - Documentation
04.04
Installation of the WinCC Web Navigator Client
•
When using a Microsoft Systems Management Server, the installation is configured by the Administrator, triggered and executed when the relevant computer is started. Further information on Microsoft Systems Management Server is available in the Internet on the Microsoft Homepage.
Group guideline based software distribution The software installation is normally executed with the access rights of the current Windows user. When using MSI technology, the installation is performed by from an operating system service with a higher level of rights. This enable installations to be performed for which the Windows user has no authorization. Applications which require installations with a higher level of rights are referred to a "privileged installations" in MSI technology. Installation of these applications is possible when a Windows user is assigned the "Always install with elevated privileges" right. In order to use the group guideline based software distribution, a group guideline is created on the Domain Controller and assigned to the distributing software or published using Active Directory. •
•
Assignment: The software distribution can be assigned to a user or a computer. In this case, the software to be distributed is automatically installed when the user logs in or the computer is started. Publication: The software distribution can be published for single users. In this case, when the user logs on on the client computer, the software to be distributed appears in a dialog and can be selected for installation.
Installation without user interaction During installation of the Web client, the user is normally prompted to enter information, such as the target directory, agreement to the software license conditions or components to be installed. By implementing a configuration file, installation is possible without user interaction. The path specification and user information necessary are provided in the "WNC.ini" configuration file. The file must be in the same folder as the Web client setup. This installation procedure is advantageous when using the group guideline base software distribution. Installation from the product CD occurs with user interaction.
Printout of the Online Help Web Navigator - Documentation
47
Installation of the WinCC Web Navigator Client
04.04
The settings predefined in the table are used under the following conditions: •
•
The "WNC.ini" configuration file is missing and there is no corresponding available entry in the client registry, e.g. due to another SIMATIC HMI product being installed. Or the installation is performed via the group guideline based software distribution with assignment to the computer.
Information
Parameter
Target directory for the Web Navigator Client
WNCDIR=" \Siemens\WinCC\WebNavigator \Client "
Target directory for common components
COMMONDIR=" \Siemens "
User information / User name
USERNAME
User information / Organization
COMPANYNAME
The "" parameters result from the settings in the registry under the key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion" : - "" corresponds to the key "ProgramFilesDir" e.g. "C:\\Programs" - "" corresponds to the key "CommonFilesDir", e.g. "C:\\Programme\\Common Files" Example of a "WNC.ini" configuration file [USERINFO] USERNAME=Integration COMPANYNAME=Siemens AG [INSTALLPATH] COMMONDIR=" C:\Program Files\Common Files\Siemens " WNCDIR=" C:\Program Files\Siemens\WinCC\WebNavigator\Client " [FEATURES] FUNCTIONTRENDCONTROL=0 HARDCOPY=0 WINCCUSERARCHIVES=0 DEU=0 FRA=0 ITA=0 ESP=0
48
Printout of the Online Help Web Navigator - Documentation
04.04
8.1
Installation of the WinCC Web Navigator Client
Internet Explorer Settings
Introduction In order to have the full functionality available on the Web Navigator Client, the security settings must be adapted in the Internet Explorer. •
•
•
Click on "Tools" > "Internet Options" in the Internet Explorer. Click on the "Security" tab control. Select the corresponding zone, e.g. "Local Intranet"or "Internet".
Click on "Custom Level".
Printout of the Online Help Web Navigator - Documentation
49
Installation of the WinCC Web Navigator Client
•
•
•
•
•
•
04.04
Click on the "Enable" radio-buttons for "Script ActiveX controls marked safe for scripting" and "Download signed ActiveX controls". Click on "OK". Carry out the modifications in the subsequent dialog. Select the "Trusted Sites" icon an and use the "Sites" button to open the "Trusted Sites" dialog. Enter the address of the Web server in the "Add this Website to the zone" field. Possible formats and placeholders include "*://157.54.100 - 200", "ftp://157.54.23.41", or "http://*.microsoft.com". Deactivate the "Require server verification (https:) for all sites in this zone" checkbox. Click on the "Add" button. Confirm the entry by clicking on "OK". Select the "Trusted Sites" icon. Click on the "Standard level" button and then the "Custom Level" button. Activate the "Activate" option in the "Security settings" dialog under "Initialize and script ActiveX controls not marked as safe". Confirm the entry by clicking on "OK". Close the "Internet Options" dialog by clicking on "OK".
This completes all necessary settings in the Internet Explorer.
50
Printout of the Online Help Web Navigator - Documentation
04.04
8.2
Installation of the WinCC Web Navigator Client
Installation from the CD-ROM
Requirements •
•
The settings in the topic "Settings in Internet Explorer" apply for installation and use of the Web Navigator Client. Depending on the operating system, certain minimum user rights are required for installation of the Web client, as described in the topic "Installing the Web Navigator Client".
Installing the Web Navigator Client from the CD-ROM •
•
•
•
•
•
Insert the CD-ROM containing the WinCC Web Navigator into the CD-ROM drive. The setup program will start automatically after a few seconds, provided that the autorun functionality is not disabled. The setup can also be started manually in case the installation is performed from a network drive or the autorun function has been disabled. From the Windows 2000 / XP Start menu, select the "Settings" > "Control Panel" > "Add or remove programs" option and click on the "Add new programs" icon. Then select the required installation medium. The setup program will then be started.
To receive additional information about the WinCC Web Navigator, click on the "Welcome", "Read first", "Display CD-ROM Contents", "Install Software" and "Language Selection" entries. To install the WinCC Web Navigator, click on "Install Software".
Printout of the Online Help Web Navigator - Documentation
51
Installation of the WinCC Web Navigator Client
•
52
04.04
In the following dialog box, select the entry "WinCC Web Navigator Client". You will be guided step-by-step through the installation.
Printout of the Online Help Web Navigator - Documentation
04.04
8.3
Installation of the WinCC Web Navigator Client
Installation via the Intranet/Internet
Requirements •
•
•
•
The settings in the topic "Settings in Internet Explorer" apply for installation and use of the Web Navigator Client. Depending on the operating system, certain minimum user rights are required for installation of the Web client, as described in the topic "Installing the Web Navigator Client". For the installation via the Intranet/Internet, you must have the WinCC Web Navigator Server completely installed, the Internet Information Server configured with the WinCC Web Configurator and be registered as a user in the WinCC User Administrator. A WinCC project in runtime must be on the required Web Navigator Server.
Installing the Web Navigator Client via the Intranet/Internet •
•
•
•
Access the Internet via your Internet Service Provider. Enter the address of the WinCC Web Navigator Server in the address bar, e.g. "http://www.server_name.de". When installing in a virtual directory, the address can be as follows: "http:// www.server_name.de/WebNavigator/". Log onto the WinCC Web Navigator Server with your user name and password. If you are accessing the WinCC Web Navigator Server for the first time, you will be prompted to install the WinCC Web Navigator Client. Click on the "Click here to install" link. Click on the "Save" button in the "File Download" dialog to store the client setup on the target computer. It is recommended to save the Setup file because, in the event of a restart of the client computer being necessary, the Setup need not be downloaded again. Note If the Web Navigator Client was installed previously from the CD-ROM and you want to install an updated version of the clients via the Intranet/Internet, the client setup must also be saved on the target computer.
•
•
Leave the Internet Explorer open and open Windows Explorer. Navigate to the folder in which the Setup file was saved and start the Setup file by double clicking on it. Follow the instructions on the screen and enter the information and settings necessary. The client-side controls of the Web Navigator will then be installed. Then close the Setup dialog.
When the installation is completed successfully, the client switches to the WinCC project currently in runtime.
Printout of the Online Help Web Navigator - Documentation
53
Installation of the WinCC Web Navigator Client
54
04.04
Printout of the Online Help Web Navigator - Documentation
04.04
9
Deinstallation
Deinstallation The WinCC Web Navigator Server and the WinCC Web Navigator Client can be deinstalled from Windows in the usual manner. •
Access "Control Panel" and double-click on the icon "Add/Remove Programs".
•
Click on the icon "Change or remove Programs".
•
Select the Web Navigator Server or Client and click on "Remove". Follow the on-screen instructions.
This will remove the WinCC Web Navigator Server/Client from your system. Note If you deinstall the WinCC Web Navigator Server, the corresponding authorization should also be deinstalled using the "AuthorsW.exe" application. The authorization can then be reused at a later time. Additional information about authorizations can be found in the WinCC software protection documentation.
Printout of the Online Help Web Navigator - Documentation
55
Deinstallation
56
04.04
Printout of the Online Help Web Navigator - Documentation
04.04
Configuration of the User Administration
10 Configuration of the User Administration 10.1 User Administration in the WinCC User Administrator
Introduction The management of the user rights when employing the WinCC Web Navigator takes place in the WinCC User Administrator. In it, the users are assigned various user authorizations for the HMI. In addition, a start picture and the language can be configured for individual users in the "Web Options" area. The WinCC User Administrator thus enables the setup of a secure and clear user administration for WinCC and the access via the W inCC Web Navigator. If a user logs onto the Web Navigator Server with the Web Navigator Client, the server will check whether the user is registered in the WinCC User Administrator and sends the configured user rights to the Web client for evaluation. During login, the Web server also checks whether the maximum number of licensed Web clients has been reached. If the user is not registered or the number of licensed clients is exceeded during a login attempt by a Web client, a message will be displayed and no further logins be permitted. The tasks of the WinCC User Administrator include: •
Creation and editing of users and user groups
•
Assignment and management of access rights
•
Assignment and management of the start picture and the language for users with project access via the WinCC Web Navigator
Printout of the Online Help Web Navigator - Documentation
57
Configuration of the User Administration
04.04
User Authorizations The following authorizations can be assigned to a user: Standard authorizations no. 1 to 999 The standard authorizations can be created, edited, deleted and assigned to users. The name of an authorization indicates what impact the respective authorization is to have, but not how it is actually used. User hierarchies from PCS7 no. 1 to 8 These user authorizations are available after running the Wizard of the OS project editor (Option Basic Process Control). The predefined authorizations cannot be deleted or edited. System privileges no. 1000 to 1099 The system privileges are automatically generated by the system and cannot be recreated, edited or deleted. The system privileges can be assigned to a user just like any other authorization. System privilege no. 1002 "View only" has a special function when the WinCC Web Navigator is used. •
•
If it is assigned to a user, he or she may only monitor a WinCC project ("View Only") and cannot, for example, acknowledge messages or write to tags through I/O field inputs or script. This authorization is only relevant for the Web client and does not influence other authorizations assigned to the user. A "Dat@Monitor Web Edition" license is required. If this license is not available, the Web client runs in Demo mode after logging on. If it is not assigned to a user, this user may operate and monitor a WinCC project depending on the assigned authorizations. A "Client" license is required.
Additional information regarding the user administration can be found in the WinCC Information System at "Working with WinCC" and "Configuration of the User Administration". To configure multilingual projects and non-Latin based fonts, information is available under "Working with WinCC" / "Multilingual Project Configuration".
58
Printout of the Online Help Web Navigator - Documentation
04.04
Configuration of the User Administration
10.2 Setting Web Options for Users
Introduction For the access to a WinCC project via the WinCC Web Navigator, the user are assigned certain user authorizations in the WinCC User Administrator and settings configured for the start picture and language.
Requirements The WinCC Web Navigator Server has to be installed for the "Web Options" area to be active in the WinCC User Administrator.
•
The WinCC project has to be open.
•
Configuring Web Options 1.
In the WinCC Explorer, open the editor "User Administrator".
2.
In the navigation window, select the desired user or create a new user.
3.
In the table window, the user authorizations existing in the WinCC project and an already configured assignment to this user are displayed. Check the setting of system privilege no. 1002 "View only" and make any changes necessary. If this system privilege is activated, the user may only observe the project (View Only) and a "Dat@Monitor Web Edition" license is required. If this system privilege remains deactivated, the other user authorizations assigned to the user apply. Check the settings of the other authorizations.
4.
Activate the "Web Navigator" checkbox in the table window. The "Web Options" area appears.
5.
In the "Start Picture" field, use the "..." button to select the start picture for this user. As start picture, only pictures that have been published with the Web View Publisher on the Web Navigator Server can be selected.
6.
In the "Language" field, select the language for this user. Available for selection are the languages installed in WinCC.
7.
Close the User Administrator.
Note A user name can only be assigned once. Additional information regarding the user administration can be found in the WinCC Information System at "Working with WinCC" and "Configuration of the User Administration".
Printout of the Online Help Web Navigator - Documentation
59
Configuration of the User Administration
04.04
10.3 Migrating User Data from Older Projects
Introduction Under the WinCC Web Navigator before Version 6, user rights were managed by the Web Administrator. Starting with V6 of the Web Navigator, the user administration takes place with the WinCC User Administrator. Old user data can be migrated with the "WebNavV6Migration" tool for further use in the Web Navigator V6 or higher. The migrated, old users are placed under the user group "WebNavigatorUserGroup" by the migration tool. The user authorizations of this user group are passed on to the migrated users. If this user group does not yet exist, it will be created by the tool and the processing stopped. After the desired user authorizations have been assigned to the group, the migration tool can be restarted. In addition to the password, the migration tool also transfers the user's settings pertaining to the start picture and the language.
Requirements •
•
•
60
The WinCC Web Navigator Server has to be installed for the "Web Options" area to be active in the WinCC User Administrator. The WinCC project into which the user data is to be migrated has to be open. The WinCC User Administrator for this project is a user group "WebNavigatorUserGroup". The group has been assigned the necessary user authorizations.
Printout of the Online Help Web Navigator - Documentation
04.04
Configuration of the User Administration
Migrating the User Data 1.
In the Windows Explorer, select the WinCC installation folder. Access the associated subdirectory, "WebNavigator/Server/bin", and start the "WebNavV6Migration.exe" program. The user interface of the tool is only provided in English.
2.
In the "Project Name" field, select the project from which the old user data is to be migrated.
3.
Confirm the selection with the "OK" button. Users of the old project are then set up in to open WinCC project in the "WebNabvigatorUserGroup" group and inherit the user authorizations assigned to the group. If the old user database record cannot be read, an error message will be issued. In this case, the database driver "DAO JetEngine" from the current "Web Navigator" CD-ROM needs to be installed on the computer from which the user data is to be migrated into the WinCC project.
4.
After the successful migration, a message with the number of migrated users will be output. This is followed by the inquiry the old database can be deleted. Select the desired option. The migration tool will close.
5.
Open the "User Administrator" editor in WinCC Explorer of the current project. Check the settings of the migrated user and adapt them to the current project as necessary.
6.
Close the User Administrator.
Additional information regarding the user administration can be found in the WinCC Information System at "Working with WinCC" and "Configuration of the User Administration".
Printout of the Online Help Web Navigator - Documentation
61
Configuration of the User Administration
62
04.04
Printout of the Online Help Web Navigator - Documentation
04.04
Configuration of a Web Project
11 Configuration of a Web Web Project Introduction This chapter describes the configuration of a Web project and special features to bear in mind. •
•
•
Publish WinCC process screens with the Web W eb View Publisher to compress and adapt the project data. Publishing with the Web View Publisher Publisher can take place in several ways, depending on the source and target folders of the published pictures or the system structure. Use the "PdlPad" tool to locate errors in the scripts used in the published WinCC process screens. Assume and adapt existing WinCC projects to make them accessible via Intranet/Internet.
•
Limitations to be taken into account.
•
Differences to the WinCC the basic system
•
Using scripts Special features when using VB Scripts, Scripts, Global Script, Action Scripts with tag trigger and diagnostics for VBS and Global Script
Multilingual projects and non-Latin fonts The configuration of foreign language texts, user names, etc., and the use of nonLatin fonts, e.g. for Asian projects, is performed in the WinCC project. Certain conditions must be fulfilled and settings made. E.g., the desired configuration language or a special font must be installed in the operating system. After installing a language, it must be transferred to the Alarm Logging editor and Text Library so that the configuration can be made in that language or specific font. Additional information regarding the user administration can be found in the WinCC Information System at "Working with WinCC" and "Multilingual Project Configuration". To configure multilingual projects and non-Latin based fonts, information is available under "Working with WinCC" / "Language Support in WinCC".
Printout of the Online Help Web Navigator - Documentation
63
Configuration of a Web Project
04.04
11.1 Publishing WinCC Process Screens
Introduction When configuring a Web project, the WinCC process screens are published so that they can run on the WinCC Web Navigator Client via the Intranet/Internet. Publishing is performed with the Web View Publisher which automatically makes the necessary adaptations to the project data. The following adaptations will be performed: •
Compression of the data to achieve the best possible performance on the Internet.
•
Removal of project-specific data that is not required for the operation.
•
Conversion of picture windows into an ActiveX component.
•
Conversion of scripts to make them operational on the WinCC Web Navigator Client.
The publishing with the Web View Publisher can take place in several ways, depending on the source and target folders of the published pictures or system structure. •
•
•
Publishing on the local local computer: The source folder is the the current WinCC project folder and the target folder the subfolder "WebNavigator/Pictures" existing in it. Publishing on a dedicated Web server by employing the server prefix: prefix: The source folder is the WinCC project folder on another WinCC computer, which is predetermined by selecting the server prefix. The target folder is located on the WinCC client in the WinCC project subfolder ".../WebNavigator/Pictures". Remote publishing: The source and target folders can be located on one or multiple Web servers. The publisher itself can be started on the Web server with the source or target folder or on a third Web server.
Errors During Publishing If warnings appear or errors occur during publishing, the process screens affected are marked in the output field of the Web View Publisher. The "PdlPad" tool can be started directly in the publisher in order to check the scripts used in the published pictures. A further source of errors can be due to publishing without project functions, described below.
64
Printout of the Online Help Web Navigator - Documentation
04.04
Configuration of a Web Project
Publishing without project functions When publishing with the Web View Publisher, the selected project functions are always published. When publishing without project functions, none of the published pictures possesses project functions any longer. The project functions of the last publishing process are always available in the published pictures and, thus, on the Web client. The selection of project functions available in the Publisher is dependent on those in the pictures published in the same process. If, for example, some project functions have been modified but not, however, their interfaces, all the necessary project functions must still be published, not just those modified. However, not picture must be published in the same process if it has not been modified.
Printout of the Online Help Web Navigator - Documentation
65
Configuration of a Web Project
04.04
11.1.1 Publishing WinCC Process Screens with the Web View Publisher
Introduction In order to use the WinCC project in the Intranet/Internet, WinCC process screens can be created or already created pictures can be used in WinCC in Graphics Designer. Note The names of the pictures used via the Web Navigator must not contain a doubleunderscore character, since the character string before the double-underscore is interpreted as a server prefix. Customized standard functions cannot be published. If these customized standard functions should be available on the Web client, these can be created as project functions and then published. Only use the WinCC Web View Publisher for projects that have been created with WinCC V6.0 or higher. For projects that have been converted from WinCC V5.0 SP1/SP2 to WinCC V6.0, observe the migration instructions located in the WinCC basic documentation. If you are using more complex functions or scripts, please also read the corresponding chapters outlining the limitations, etc. If you have created your project and your pictures with the WinCC Graphics Designer, you will only need the Web View Publisher to make these pictures operational on the Intranet/Internet. The Web View Publisher automatically makes the necessary changes to the project data (conversion of WinCC pictures, scripts) so that they can run on the WinCC Web Navigator Client via the Intranet/Internet.
66
Printout of the Online Help Web Navigator - Documentation
04.04
Configuration of a Web Project
How to start the Web View Publisher: 1.
In the navigation window of the WinCC Explorer, access the pop-up menu of the "Web Navigator" and select the "Web View Publisher". This will start the Web Publishing Wizard.
2.
Click on "Next" to go to the next dialog box.
3.
In the "Path to WinCC project folder" field, select the project folder of the WinCC project whose pictures are to be published, e.g. "..\Siemens\WinCC\WinCCProjects\".
Printout of the Online Help Web Navigator - Documentation
67
Configuration of a Web Project
04.04
Use the "Publishing folder of the WinCC Web" field to select the target folder for the published pictures, e.g. "..\Siemens\ WinCC\ WinCCProjects\ \WebNavigator". For the runtime of the Web Navigator, the folder suggested within the WinCC project folder must be kept as the target folder of the published pictures. The path specification should only be changed when pictures are to be transferred, e.g. to a different project. 4.
Click on "Next" to go to the next dialog box.
Select the pictures that you want to publish on the WinCC Web Navigator Server. 5.
68
Click on "Next" to go to the next dialog box.
Printout of the Online Help Web Navigator - Documentation
04.04
Configuration of a Web Project
Via ">", select the C Project Functions that are to be published. Activate the "Transfer Visual Basic Scripts" check-box to publish all VB scripts. The selection of individual VB scripts is not possible. 6.
Click on "Next" to go to the next dialog box.
Select the graphics referenced in the process pictures (*.PDL) that you want to publish on the Web server (e.g. bitmaps). 7.
Click on "Next" to go to the next dialog box.
Printout of the Online Help Web Navigator - Documentation
69
Configuration of a Web Project
04.04
8.
Activate the "Check scripts" checkbox. It activates a syntax check when converting scripts.
9.
Click on "Finish" to start the publishing of the pictures. You can track the progress in the progress display.
10.
After the completion, a dialog box will be displayed. Acknowledge this dialog box by clicking on "OK" In the output field of the Publisher, the pictures in which script errors were found will be highlighted. By double-clicking on the file name, the picture can be opened in the "PdlPad" and the script errors be determined and corrected. You can exit the Wizard via the "Finish" button or change the Wizard selections via the "Back" button and, if necessary, publish again.
70
Printout of the Online Help Web Navigator - Documentation
04.04
Printout of the Online Help Web Navigator - Documentation
Configuration of a Web Project
71
Configuration of a Web Project
04.04
11.1.2 Publishing WinCC Pictures on a Dedicated Web Server
Introduction For the central supply of data to the Web Clients, the installation of a dedicated Web server is advantageous in larger systems. The dedicated Web server processes and optimizes the accesses of the Web Clients and is available as a proxy of the WinCC Servers to the clients. This results in a number of benefits: •
•
•
•
•
The load can be distributed among multiple dedicated Web servers, increasing the performance of the total system. The physical separation of dedicated Web server and WinCC server on different computers increases security. The physical separation of the servers also permits a spatial separation via operational functions, e.g. system support and EDP department. The dedicated Web server supports the redundancy switch of two subordinated WinCC Servers using WinCC Redundancy. The dedicated Web server can simultaneously access multiple subordinated WinCC servers. In this case, the user gains access to multiple WinCC projects by logging onto the dedicated Web server (no individual project logons).
The functionality of the dedicated Web server is made available on a WinCC Client by installing the Web Navigator Server. For publishing on the dedicated Web servers, the Web View Publisher is used. The Web View Publisher automatically makes the necessary changes to the project data (conversion of WinCC pictures, scripts, functions) so that they can run on the WinCC Web Navigator Client via the Intranet/Internet. The published pictures are stored in the project of the WinCC client in the folder ".../WebNavigator/Pictures". •
•
72
Pictures of the own project under the name "