Webnavigator Wincc Client Siemens

7/24/2019 Webnavigator Wincc Client Siemens

1/156

04.04 Contents

Printout of the Online Help iWeb Navigator - Documentation

Contents

1 WinCC / Web Navigator .......................................................................1

2 Web Navigator Demo Project .............................................................. 5

3 Requirements .......................................................................................73.1 Hardware and Software .............................................................................73.2 Licensing..................................................................................................10

4 Installation of the WinCC Web Navigator Server.............................134.1 Procedure.................................................................................................134.2 Installation of the Internet Information Service (IIS) ................................144.3 Installation of the WinCC Web Navigator Server..................................... 16

5 Configuring the Web Navigator Server ............................................195.1 Wizard-assisted Web Setup: WinCC Web Configurator..........................205.1.1 Creating a new standard Website (Stand-alone)..................................... 235.1.2 Creating a Virtual Directory......................................................................255.1.3 Checking the activated Website (Web)....................................................285.2 Load distribution on Web servers using the "Load Balancing" function ..295.3 Configuring the "Load Balancing" Function .............................................32

6 WinCC Web Navigator Security ........................................................356.1 SSL ..........................................................................................................366.2 HTTPS .....................................................................................................36

6.3 WinCC User Administrator.......................................................................376.4 Secure ID Card ........................................................................................376.5 Firewall.....................................................................................................38

7 Structure with the WinCC Web Navigator Server............................417.1 Island Solution .........................................................................................417.2 WinCC Web Navigator Server on the WinCC Server..............................427.3 Separation of WinCC Server and WinCC Web Navigator Server ...........427.4 Dedicated Web Server.............................................................................44

8 Installation of the WinCC Web Navigator Client..............................458.1 Internet Explorer Settings ........................................................................498.2 Installation from the CD-ROM..................................................................51

8.3 Installation via the Intranet/Internet..........................................................53

9 Deinstallation......................................................................................55

10 Configuration of the User Administration........................................5710.1 User Administration in the WinCC User Administrator ............................5710.2 Setting Web Options for Users ................................................................5910.3 Migrating User Data from Older Projects.................................................60


2/156

Contents 04.04

ii Printout of the Online HelpWeb Navigator - Documentation

11 Configuration of a Web Project.........................................................6311.1 Publishing WinCC Process Screens........................................................6411.1.1 Publishing WinCC Process Screens with the Web View Publisher......... 66

11.1.2 Publishing WinCC Pictures on a Dedicated Web Server ........................7211.1.3 Remote Publication of WinCC Process Screens with the Web ViewPublisher ..................................................................................................79

11.2 Transfer, Adaptation of existing Projects .................................................8411.3 Limitations................................................................................................8511.4 Using Scripts............................................................................................8611.5 The "PdlPad" Tool....................................................................................8811.6 Differences to the WinCC Basic System .................................................9011.6.1 Script Execution .......................................................................................9011.6.2 Picture Selection ......................................................................................9011.6.3 Scripting ...................................................................................................9011.6.4 Addressing of Objects in Pictures............................................................9111.6.5 Synchronous Script Functions .................................................................94

11.6.6 Defining a Picture-local Script Tag ..........................................................9411.6.7 Properties of Picture Windows on the Web Client...................................95

12 Application of the WinCC Web Navigator Client ............................. 9712.1 Functions and General Properties of the Web Client ..............................9812.2 Web Client Properties Concerning Pictures ..........................................103

13 WinCC Web Navigation Interface.................................................... 10513.1 Expanding the WinCC Web Navigation Interface ..................................108

14 WinCC Plug-In Builder.....................................................................10914.1 Installation of the WinCC Plug-In Builder...............................................110

14.2 Plug-In: Creating, Testing and Making available for Download............. 11114.3 Installation and Deinstallation of a Plug-In on a Web Client.................. 114

15 WinCC Web Navigator Diagnostics Client ..................................... 11515.1 Requirements.........................................................................................11615.2 Diagnostics Client Licensing..................................................................11715.3 Installation of the WinCC Web Navigator Diagnostics Client ................118

16 Diagnosis of the Connections with "Status.html"......................... 121

17 Using the Terminal Services for the WinCC Web Navigator ........12317.1 Requirements for Using the Terminal Services .....................................12517.2 Terminal Services Setup........................................................................12617.2.1 Activation of the Terminal Services on the Windows 2000 Server ........12717.2.2 Creation of the Client Data Carrier on the Windows 2000 Server .........12917.2.3 User Setup for the Access to the Terminal Services Server .................13017.2.4 Installation of a Terminal Services Client on the Client Computer ........13117.2.5 Configuration of the Connection ............................................................13217.2.6 Starting the Application of the Terminal Services Server on the Client

Computer ...............................................................................................133


3/156

04.04 Contents

Printout of the Online Help iiiWeb Navigator - Documentation

18 Appendix .......................................................................................... 13518.1 nternet Information Services ..................................................................13518.1.1 Overview of the Highlights .....................................................................135

18.1.2 Reliability................................................................................................13518.1.3 Settings at the Internet Information Services.........................................13618.1.4 Setting up the Web Folder .....................................................................13718.1.4.1 Creating a new Standard Website under Windows ...............................13718.1.4.2 Virtual Folder..........................................................................................13918.1.5 Defining the Start Page..........................................................................14018.1.6 Adding the ISAPI Filter...........................................................................14118.1.7 Definition of the Basic Authentication ....................................................14218.1.8 Application Settings ...............................................................................14318.2 Troubleshooting and Error Correction ...................................................14518.3 Abbreviations .........................................................................................147


4/156

Contents 04.04

iv Printout of the Online HelpWeb Navigator - Documentation


5/156

04.04 WinCC / Web Navigator

Printout of the Online Help 1

Web Navigator - Documentation

1 WinCC / Web Navigator

Function Overview

The enormous growth of the Internet in recent years has had and is having a largeimpact on industrial development. One of the key factors responsible for theInternet boom was the development of the World Wide Web (WWW) Internetservice.

Browser applications with graphical user interfaces make accessing and navigatingthe Web easy: clicking a mouse button is all that is needed to cross geographicalborders.

The WinCC Web Navigator option package to the WinCC basic system V6.0 orhigher enables you to develop a solution for controlling and monitoring processesvia the Intranet/Internet. With this option package and the standard tools of WinCC,a new way of distributing the HMI functions of your plant - employing theIntranet/Internet - can be implemented. The WinCC Web Navigator supportscurrent Internet security methods and provides Wizards to assist you in your task.

The communication mechanisms used by the WinCC Web Navigator utilize apowerful and optimized event-driven transmission of data, which delivers the bestperformance via the Intranet/Internet.

The WinCC Web navigation interface combines various Web functions and makesthem available to the user in a clear format. The contents of the navigationinterface can be expanded by the user. Installed Dat@Monitor components arealso displayed by the navigation interface.

The WinCC Web Navigator package consists of special server components that

are installed on the server computer and of client components that are installed onthe client computer on the Intranet/Internet.

As a so-called "thin client", the WinCC Web Client can control and monitor arunning WinCC project from an opened Internet Browser, without the need ofhaving to install the complete WinCC basic system on the client computer.


6/156

WinCC / Web Navigator 04.04

2 Printout of the Online Help


The WinCC Web Navigator thus cost-effectively expands the networking of client-server systems to the Intranet/Internet. The project and the associated WinCCapplication are located on a server computer. This provides a clear separation ofthe visualization components on the client computer and the WinCC projectrunning on the server computer . This means that operator stations can be set upeasily, e.g. for maintenance or diagnostics purposes.

The software of the WinCC Web Navigator Client component can run underWindows 2000 Professional SP3 or 4, Windows 2000 Server / 2003 Server,Windows XP (Home / Professional / Professional SP1) and Windows NT fromVersion 4.0 SP6a. The visualization can take place on any Internet Browsersupporting the ActiveX technology by Microsoft. This applies to Internet Explorerfrom Version 6.0 SP1. Using the MS Terminal Services, the Web client can also beoperated on other operating systems, such as WinCE, Win95 etc.

The software of the WinCC Web Navigator Client can be installed in various ways:in the normal way using CD-ROM as a self-decompressing file via theIntranet/Internet or even via a group guideline based software distribution in

networks. When directly accessing the WinCC Web Navigator Server, it will bechecked whether the client software has been installed. If the client software ismissing, the user will be asked to download the file to his computer and to performthe installation. This scenario provides the WinCC Web Navigator user with a highdegree of flexibility and mobility.

A further function provided by the client installation is "Download on Demand". Theuser is then offered client add ins such as "WinCC User Archive Table Element",additional languages or IndustrialX controls for downloading.

A property of the user administration is the user-specific assignment of the startpicture and the language. For every user, a different start picture and language canbe set. By assigning user authorizations, a scalable access to different projectareas and functions can be implemented for the various users.

The pictures displayed on the WinCC Web Navigator Client can be controlled as ina normal WinCC system, provided the user possesses the necessary userauthorizations. In this way, the project running on the server computer can becontrolled from anywhere on earth. The Web client supports pan, zoom anddeclutter functions. This enables sections of process screens displayed to bemoved, process screens or sections of them to be zoomed using the mouse wheelor dragging the borders and graphic objects to be hidden and unhidden accordingto the level and object size.The display of archive data of the WinCC option User Archives is also supported.

Using Visual Basic Scripting (VBS) it is possible to control the dynamic behavior ofobjects, for example, or establish a connection to other applications with the Webclient. VBS is already integrated into Windows 2000/XP.

Security is an essential aspect when controlling and monitoring via the Internet.Thus, the WinCC Web Navigator supports all currently known security standards(used by the banking and insurance sector) ranging from user-specific logins andpasswords, firewalls, secure ID cards with PINs to RAS (Remote Access Service)or the SSL coding and VPN technology.

The WinCC Web Navigator Server requires the Microsoft Internet InformationService for the communication to its clients. The WinCC Web Configurator isprovided for setting up the WinCC Web Navigator Server, making configuring theInternet server simple and convenient. The Web Configurator is ideal for all userswithout Internet server knowledge: after only making a few entries, the Web serveris properly configured.


7/156

04.04 WinCC / Web Navigator



The "Load Balancing" function enables Web Navigator Clients to be distributedautomatically to different Web Navigator servers evenly and according to therespective server authorizations.

In order for a WinCC project to run on the WinCC Web Navigator, the WinCC

process screens must be adapted and converted. As before, the WinCC picturesare created and edited with the WinCC Graphics Designer.

The Web View Publisher automatically performs the necessary adaptations for theproject data so that it can run on the WinCC Web Navigator Client. In order toachieve the best possible performance, the Wizard limits itself to information that isnecessary for the Web.


8/156

WinCC / Web Navigator 04.04




9/156

04.04 Web Navigator Demo Project



2 Web Navigator Demo Project

Introduction

The WinCC Web Navigator CD contains a WinCC demo project as a self-decompressing ZIP file called "Web_Demo_Project.exe" located in the"DemoProject" folder. To install the project, copy the file to a local target directoryand start the decompressing process by double clicking on the file.

The demo project contains the following logins for various languages alreadyconfigured:

"winccd" for German,

"wincce" for English,

"winccf" for French, "wincci" for Italian and

"winccs" for Spanish.

The password for all languages is "winccpass".


10/156

Web Navigator Demo Project 04.04




11/156

04.04 Requirements



3 Requirements

3.1 Hardware and Software

Introduction

This chapter outlines the WinCC Web Navigator hardware, software and operatingsystem requirements.

WinCC Web Navigator Client

Operating System: Windows NT from V4.0 SP6a or later,Windows 2000 Professional Service Pack 3 or 4Windows 2000 ServerWindows 2003 ServerWindows XP HomeWindows XP ProfessionalWindows XP Professional Service Pack 1Use MS Terminal Services for other operating systems,such as WinCE, Win95.

Software: Internet Explorer 6.0 SP1 or higher

Minimum HardwareRequirements:

No special hardware is required, however, the IE 6.0must be able to run.

Other: Access to the Intranet/Internet

or TCP/IP connection to the Web server

Note

If MSI technology is implemented, "MS Installer" is required on the target systemfor installation of the Web clients. However, this is not available in Windows NTV4.0. The service can be installed using the Download page of the WebNavigation user interface or using the "instmsiw.exe" file on the "Web Navigator"product CD.


12/156

Requirements 04.04



WinCC Web Navigator Server on a WinCC Single-user or Client System

Operating System: Windows 2000 Professional Service Pack 3 or 4Windows 2000 ServerWindows 2003 ServerWindows XP Professional orWindows XP Professional Service Pack 1

Software: Internet Explorer 6.0 SP1 or higherWinCC Basis System from V6.0


Intel Pentium III, 800 MHz512 Mbyte700 MB free memoryNetwork interfaces

Other: Access to the Intranet/Internetor TCP/IP connection to the Web client

Note

In order to have more than three clients, the Server version of Windows 2000Server or 2003 Server must be installed, since the Workstation version is limitedto three clients.. The conditions as under "WinCC Web Navigator Server on theWinCC Server" apply accordingly.


13/156

04.04 Requirements



WinCC Web Navigator Server on WinCC Server

Operating System: Windows 2000 ServerWindows 2000 Advanced ServerWindows 2003 Server

Software: Internet Explorer 6.0 SP1 or higherWinCC Basis System from V6.0


Intel Pentium III, 800 MHz512 MB RAM700 MB free memory

Other: If you want to publish Intranet information, the followingis required:

A network-capable computer as well as a LANconnection (LAN = Local Area Network).

A system that breaks up computer names into IPaddresses (IP = Internet Protocol). This is not a

mandatory step, but it allows users to use "alias names"instead of IP addresses when connecting to your server.

If you want to publish Internet information, the followingis required:

An Internet connection and an IP address from yourInternet service provider (ISP). You can only publishinformation on the Internet, if you possess a connectionto the Internet (provided by the ISP).

A network card that is suitable for connecting to theInternet.

A DNS registration (DNS = Domain Name System) for

your IP address. This is not a mandatory step, but itallows users to use "alias names" instead of IPaddresses when connecting to your server.


14/156

Requirements 04.04



3.2 Licensing

WinCC Web Navigator Client

Through the server-side licensing on the on the Web Server, the computer runningthe Web Navigator Client does not require a license.

WinCC Web Navigator Server

As a prerequisite for the WinCC basic system, the WinCC RT basic license isrequired. No WinCC server license is required, if no local WinCC clients areoperated. Even when operating a WinCC client as a dedicated Web server, noWinCC server license is required for the WinCC client.

Without a license, the WinCC Web Navigator Server will run in demo mode for a

duration of 30 days.For the permanent use of the WinCC Web Navigator Server, a license is required.Licenses are available for 3, 10, 25 or 50 clients that can simultaneously accessthe Web Server.

If the number of licensed clients is exceeded during a login attempt by a Webclient, a message will be displayed and no further logins be permitted.

WinCC Web Navigator Diagnostics Client

For the function of the Web Navigator Diagnostics Client, other licenses arerequired. For additional detailed information, see the topic "Web Navigator

Diagnostics Client".


15/156

04.04 Requirements



Overview of the Licenses on the Web Navigator Server and Client

Server Client no License Client with DiagnosticsClient License

WN server license +WinCC license

WN clientNumber till max. onlicense (server)

Diagnostics ClientOne license perdiagnostics client.

WN Gatekeeper +WinCC license

Demo ClientUnlimited number


WN-GK + WN Server +WinCC license



No WN license orNo WinCC license



WN server license +WinCC license +"Load Balancing" license



WN server license +WinCC license +WinCC redundancylicense +"Load Balancing Step-Up"license




16/156

Requirements 04.04




17/156

04.04 Installation of the WinCC Web Navigator Server



4 Installation of the WinCC Web NavigatorServer

4.1 Procedure

The WinCC Web Navigator Server requires Windows 2000 or XP as well asWinCC V6 to be installed.

For details regarding the installation of WinCC, please refer to the WinCCdocumentation. The following description assumes that WinCC has already beeninstalled.

Installation of the WinCC Web Navigator Server under Windows 2000/XP:

1. Installation of the Internet Information Services (IIS)2. Installation of the WinCC Web Navigator Server

Note

In order to install the Server component of the WinCC Web Navigator underWindows, write permissions to the registry database are required, i.e. you mustpossess administrator rights.


18/156

Installation of the WinCC Web Navigator Server 04.04



4.2 Installation of the Internet Information Service (IIS)

When using Windows 2000 Professional or XP, the Internet Information Service

(IIS) must be installed prior to the WinCC Web Navigator Server. When using theWindows 2000 Server or 2003 Server, this manual installation is not necessary.

Note

In order to install the Internet Information Service under Windows, writepermissions to the registry database are required. you must possessadministrator rights.

If the logging functions are active with IIS, the log files must be monitored anddeleted, if necessary. The event views should be configured so that the log filesdo not become to large.

Insert the Windows 2000 CD-ROM into the CD-ROM drive.

From the Start menu of Windows 2000, select the "Settings" > "Control Panel"entries and then click on the "Add or remove programs" icon.

Open the "Add or remove programs" dialog and click on "Add/RemoveWindows components". The following dialog opens.

In the selection window, activate the check-box at the "Internet InformationServices (IIS)" entry.


19/156




Click on "Next". The data required is then transferred and the necessaryconfiguration of Windows performed.

Exit the Wizard by clicking on "Finish".


20/156





Note

If the Web Navigator Server is installed after a Web Navigator Client on the samecomputer, the client needs to be reinstalled.

In order to install the Server component of the WinCC Web Navigator underWindows, write permissions to the registry database are required, i.e. you musthave administrator rights.

Insert the WinCC Web Navigator CD-ROM into the CD-ROM drive.

The setup program will start automatically after a few seconds, provided thatthe autorun functionality is not disabled.

The setup can also be started manually in case the installation is performedfrom a network drive or the autorun function has been disabled. From theWindows 2000 / XP Start menu, select the "Settings" > "Control Panel" > "Addor remove programs" option and click on the "Add new programs" icon. Thenselect the required installation medium.

The setup program will then be started.

To receive additional information about the WinCC Web Navigator, click on the"Welcome", "Read first", "Display CD-ROM Contents", "Install Software" and"Language Selection" entries.

To install the WinCC Web Navigator, click on "Install Software".

In the following dialog box, select the component "WinCC Web NavigatorServer". You will be guided step-by-step through the installation.


21/156




The "Authorization" dialog box displays a list of required authorizations basedon the selected components. Select "Yes, the authorization should beperformed during the installation" and insert the authorization floppy disk intodrive "A:".

The following dialog box will display the selected settings. If you want to makechanges to the settings, click on "Back", otherwise click on "Next".

The WinCC Web Navigator Server will then start with the transfer of the files.

If older versions of system files were located on your computer, the setup programmay ask you to restart your computer.

The WinCC Web Navigator Server will be added with a separate icon to thenavigation window of the WinCC Explorer.

Already installed WinCC Web Navigator

The setup program will detect an already installed WinCC Web Navigator Serversoftware. A message will be displayed asking whether the existing version is to bedeinstalled.

Click on "Yes" to deinstall the existing version. Following that, the installation of theWinCC Web Navigator Server will be carried out.


22/156





23/156

04.04 Configuring the Web Navigator Server



5 Configuring the Web Navigator Server

Introduction

The following configurations can be made on the Web Navigator server:

The WinCC Web Configurator is used to set up and manage the InternetInformation Service (IIS).

The "Load Balancing" function can be used, as necessary, to set up a loaddistribution between several Web servers.

The Web View Publisher automatically performs the necessary adaptations forthe project data so that it can run on the WinCC Web Navigator Client via theIntranet/Internet. Various versions of the Web View Publisher can be used andare described in Chapter "Configuring a Web Project".


24/156

Configuring the Web Navigator Server 04.04



5.1 Wizard-assisted Web Setup: WinCC Web Configurator

Application

The WinCC Web Configurator provides simple, uncomplicated support inmanaging and setting up the Microsoft Internet Information Service (IIS). TheConfigurator is thus ideal for all users without Web server knowledge. This setupand configuration is necessary to make the WinCC Server accessible via theIntranet/Internet. Additional information about the Internet Information Server canbe obtained from Microsoft.

Note

The Internet Information Service and the WinCC Web Navigator Server must beinstalled, otherwise the Wizard will not operate.

Standard Website Settings

The WinCC Web Configurator can also be used to select which standard Websiteshould be opened after starting the Web clients. If "WebClient.asp" is set, the Webclient starts, as usual,with the process screens. If "MainControl.asp" is set, theWeb client starts with the Navigation interface.

How to start the WinCC Web Configurator

1. In the navigation window of the WinCC Explorer, select the Web Navigator andaccess its pop-up menu.

2. In the pop-up menu, select the "Web Configurator" menu command.

Note

In the event of queries or difficulties concerning the following settings, consultyour department's Intranet/Internet administrator.


25/156




Initial Configuration of the WinCC Web Navigator Server

During the initial configuration, the first dialog box of the WinCC Web Configuratorallows you to specify the creation of a new standard Website or a new virtualdirectory. For this, please observe the following note. The following step depends

on the option selected.

If only the WinCC Web Navigator Website is operated on the server, activatethe radio-button "Create a new standard Website (Stand-alone)".

If the WinCC Web Navigator Website is added as a subfolder to your existingWebsite, activate the radio-button "Add to an existing Website (VirtualDirectory)".


26/156




Editing the Configuration

If the IIS has already been configured, the settings of the existing Web server orvirtual directory can be changed via the WinCC Web Configurator.

The Web Configurator automatically detects an existing configuration and opensthe corresponding dialog box for making changes to the configuration.

Note

The appendix contains the settings made by the WinCC Web Configurator.

If the Website for the WinCC Web Navigator is accidentally deleted, restart thecomputer before creating a new Website with the WinCC Web Configurator.

Please note that if manual changes were made to this Website and the Webcommunication fails afterwards, the Web Configurator will attempt to automaticallycorrect these settings.

If this is unsuccessful, delete the Website from the IIS, restart the computer and

create a new Website with the Web Configurator.At the WinCC Web Navigator Server, only one Website per computer can beactive, since the Web filter (WebFilter.dll) is loaded into the memory of the activeWebsite.If an active Website already exists on the computer - which is to remain active -the Web Navigator Website can be installed as a virtual directory under the activeWebsite.


27/156




5.1.1 Creating a new standard Website (Stand-alone)

When selecting the radio-button "Create a new standard Website (Stand-alone)",the following dialog box is displayed.

Name of the Web

site

Specify a name for your Website here, e.g. WebNavigator

Port Here you can specify the connection (port) to be used bythe http protocol for accessing the Internet.

Only numbers ranging from 1 to 65535 may be entered.As a rule, the port numbers up to 1024 are reserved for thesystem. In this field, the http default port of 80 is set.

IP Address Every computer on the Internet possesses a uniqueaddress. The address consists of a group of four numbersthat are separated by periods. The numbers can havevalues ranging from 0 to 255. The address is defined in theWindows Control Panel. You can only use addresses thatare shown in the list-box.

Via the IP address, you can specify whether the computer isto be accessible on the Intranet or Internet or on bothnetworks. For example, via the IP address x.x.x.x, thecomputer is known to the Intranet, via the IP address y.y.y.yto the Internet. If you want to make the computer accessibleonly on the Intranet or Internet, select the correspondingaddress, e.g. for the Intranet, this would be x.x.x.x.

If the computer is to be accessible via the Intranet and theInternet, select "All not assigned".

Default Web siteselection field

Select the standard Web sites here which should bedisplayed on the Web client after selecting the Web server.


28/156




Reconnect interval Enter the time interval after which the Web client shouldautomatically start to establish a connection (Reconnect)following a connection breakdown.If the value = 0 is set, the "Automatic connection

establishment" function is deactivated.Start the Web siteafter beingconfigured

Activate this check-box to automatically start the Websitefollowing the configuration.

If this check-box is not activated, the Website has to bemanually started via the Windows console "InternetInformation Services".

Click on the "Finish" button to complete the configuration of the server.

After the configuration has finished, the just created Website (Web NavigatorWebsite) will be active.


29/156




5.1.2 Creating a Virtual Directory

When selecting the radio-button "Add to an existing Website (VirtualDirectory)", click on the "Browse" button.

In the next dialog box, select the active Website to which the virtual directory isto be added.

After selecting the active Website, click on "OK" to go back to the previousdialog box. Click on "Next".


30/156




Name of theWebsite:

Here you can specify the name of your virtual directory, whichwill be added to the active Website.

Port and IPAddress

The port and the IP address are predefined and cannot beedited. The WinCC Web Configurator reads the data of theactive WinCC Web Navigator Server from the IIS.

Default Websiteselection field

Select the standard Websites here which should be displayedon the Web client after selecting the Web server.

Reconnect interval

Enter the time interval after which the Web client shouldautomatically start to establish a connection (Reconnect)following a connection breakdown.If the value = 0 is set, the "Automatic connectionestablishment" function is deactivated.

Start the Websiteafter beingconfigured

Activate this check-box to automatically start the Websitefollowing the configuration.

If this check-box is not activated, the Website has to bemanually started via the Windows console "InternetInformation Services".

Click on "Finish" to complete the configuration.

To access the Web Navigator, the name of the virtual Web Navigator Websiteneeds to be added to the URL on the client. ( E.g. http://WebServer/WebNavigator)


31/156




No active Website

If no active Website is found, the Web Configurator will terminate with a message.

Acknowledge with "OK".

Before running the Wizard again, a Website has to be activated first. Theprocedure to do this is outlined in the chapter "Checking the activated Website".


32/156




5.1.3 Checking the activated Website (Web)

Activate the Internet Information Service.

To do so, select "Programs" > "Management" > "Internet Information Services".

In the navigation window, select the computer. In Windows XP, the subfolder"Websites" must also be selected. The data window will display thecorresponding Websites.

Check the entry of the Website. If "Stopped" is displayed next to the desiredWebsite, e.g. "WebNavigator", the Website needs to be started. To do so,right-click on the Website and select the "Start" menu command from the pop-up menu.

Close the dialog.

The Website is now activated.


33/156




5.2 Load distribution on Web servers using the "LoadBalancing" function

Overview

The "Load Balancing" function enables Web Navigator Clients to be distributedautomatically to different Web Navigator servers evenly and according to therespective server authorizations. Each Web Navigator server can implement loaddistribution using the "Load Balancing" function. A Web server can be configuredas a distributing Load Balancing server or as a participating Web server. A LoadBalancing server is automatically a participating Web server, too. Within a group ofparticipating Web servers, several can also be configured as Load Balancingservers.

When logging on from a Web client to a Load Balancing server, the Web client is

forwarded to one of the participating Web servers with the least load and accordingto its server license. If the least number of Web clients are logged on to the LoadBalancing server, the new Web client remains connected to it. If a participatingWeb server fails, the Web clients registered on it are automatically routed to one ofthe other participating Web servers. The address of a Web server is independentof the activation of the "Load Balancing" function. The address of a Web serverused prior to activation continues to be valid.

The function must be set up on each of the participating Web servers and LoadBalancing servers. In this case, all Load Balancing servers and participating Webservers are recorded in a list. On a Load Balancing server, the query interval mustalso be set up and its function as a Load Balancing server activated or deactivated.No configuration is necessary on the Web clients.

Licensing

A maximum of 32 Web servers connected to each other can be supported by the"Load Balancing" function.A "Load Balancing" license is required on each participating Web server and LoadBalancing server. No license is necessary on the Web clients.In the case of WinCC computers with WinCC redundancy, a Load Balancingserver or participating Web server can be operated with a "WinCC Redundancy"license and "Load Balancing Step-Up" license.


34/156




Example

In the figure, the Web servers 1 to 3 are participating in the "Load Balancing"function. A "Load Balancing" license is installed on these Web servers. Webservers 1 and 2 are configured as Load Balancing servers. When Web client 1 logson to Web server 1 or 2, the client is automatically forwarded to the Web serverwith the lowest load. If the Web server connected fails, Web client 1 is routed toone of the other two Web servers.

Web server 4 is not participating in the "Load Balancing" feature. If Web client 2logs on to this Web server, the logon fail due to a high load level of the server. IfWeb server 4 fails, the client is not forwarded to Web servers 1 to 3 despite the factthat a network connection exists.

Internet options on Load Balancing servers and participating Web servers

In order that the Load Balancing server can distribute the Web clients to other Webservers as they log on, the Load Bearing server must be capable of accessing theparticipating Web servers, and vice versa, via the communication connection. Thismust also be guaranteed even when the connection between Load Balancingserver and participating Web servers is not established via a LAN but via anInternet connection with an interconnected proxy server.


35/156




The use of a proxy server may cause the target address of the participating Webserver / Load Balancing servers "http://" to be replaced by"http://" resulting in the Web server addressed not beingfound.To avoid this behavior, each of the servers participating in Load Balancing mustenter the target address of all the other servers in Internet Explorer under in the"Exceptions" field in "Tools > Internet Options > Connections > LAN Settings >Extended".


36/156




5.3 Configuring the "Load Balancing" Function

Introduction

The "Load Balancing" function enables Web Navigator Clients to be distributedautomatically to different Web Navigator servers evenly and according to therespective server authorizations.

The function must be set up on each of the participating Web servers and LoadBalancing servers. In this case, all Load Balancing servers and participating Webservers are recorded in a list. On a Load Balancing server, the query interval mustalso be set up and its function as a Load Balancing server activated or deactivated.No configuration is necessary on the Web clients.

Requirements

Implementation of the "Load Balancing" function requires the installation ofWeb Navigator servers and a "Load Balancing" license.

The function requires WinCC V6.0 SP2 or later.


37/156




Configuring the "Load Balancing" Function

1. Select the "WebNavigator" entry in WinCC Explorer in the Navigationwindow. Select the "Load Balancing" menu item from the associated pop-upmenu. The "Load Balancing Configuration" dialog opens.

2. Enter the address of a Web server which is to participate in "LoadBalancing" in the top field. Click on the "Add" button. The address entered istransferred to the server list.Repeat the process for each Web server which should participate in "LoadBalancing".

Note

The name of the Load Balancing server must also be entered in the list.The lists on the Load Balancing server and all participating Web serversshould be identical to ensure a uniform functionality should a one of the Webservers fail.

A server name can also be deleted by selecting it in the list and clicking the"Remove" button.

3. Activate the "Enable Load Balancing" checkbox to activate the local Webserver as the Load Balancing server.The checkbox remains deactivated on the participating Web servers.When the checkbox is deactivated, the list of Web servers is still retained.


38/156




4. Use the "Polling Interval" field to select the time interval at which the otherparticipating Web servers should be polled.The time is defined in seconds and is only relevant on a Load Balancingserver.

5. Click on the "Save" button to store the entries.Close the dialog box by clicking on "OK".

6. Repeat the process on all the participating Web servers and Load Balancingservers.

Note

The modifications take effect when WinCC Runtime is activated again.


39/156

04.04 WinCC Web Navigator Security



6 WinCC Web Navigator Security

Overview

The moment you connect your WinCC Web Navigator Server to another computer,your data is put at a certain risk.

It makes no difference how the connection was established, e.g. via a localnetwork (LAN) or a dial-up connection of an Internet provider. Unauthorizedpersons could access your data. Your transmission could be intercepted,manipulated and misrouted. By providing special security layers to certain folderson your system, you can control the transmission of information.

There a number of important concepts with regard to a safe transaction:

Windows supplies powerful security functions for checking users, for access

control and for monitoring. The WinCC Web Navigator Server, which is based onthe IIS, uses these capabilities of the Windows operating system to providesecurity for its Internet-based services. Windows employs a security model whichhandles the security for all services via a single login process.

By creating user accounts and setting user authorizations for these accounts,administrators can control, which resources and services are available to theusers. The central management at the WinCC Web Navigator Server takes placevia the WinCC User Administrator.

In addition, the WinCC Web Navigator Server supports firewalls. With the help of afirewall, your system can be protected against unauthorized access. Firewallsrequire users to be continuously identified. This identification can take place withthe help of company-approved IP addresses, user IDs and passwords or secure ID

cards and encrypted access passwords that change in certain intervals. Othersupported security mechanisms include routers, proxy servers and VPNs (VirtualPrivate Network).

The most important components for the security of the WinCC Web NavigatorServer are: the Secure Socket Layer (SSL), the Secure HTTP (HTTPS), theWinCC User Administrator, firewalls, secure ID cards.


40/156

WinCC Web Navigator Security 04.04



6.1 SSL

SSL is a protocol that ensures the data security between HTTP and TCP/IP. The

standard for the security of Web Browsers and servers on the Internet was definedby the W3C (World Wide Web Consortium). The W3C was formed for establishingcommon norms for the WWW. Additional information can be found on the Internetat http://www.w3c.org.

The SSL performs a security check before establishing a TCP/IP connection. Thischeck sets the security level on which the client and the server agree and whichwill be used for the required connection authenticity confirmations.

While the connection exists, the SSL decrypts and encrypts the data stream of theprotocol used (e.g. HTTP = Hyper Text Transfer Protocol). All information(request/response) is encrypted. This includes information pertaining to theauthenticity confirmation of the HTTP access (user name/password) as well as alldata transmitted by the server to the client.

To use SSL, you - as the operator of the server - require a certificate from acertification authority, e.g. VeriSign.

To request a VeriSign certificate for the Microsoft Server, go tohttp://www.verisign.com.

6.2 HTTPS

HTTPS is an expansion of the HTTP protocol. The SSL protocol establishes asecure connection between two computers, while the HTTPS securely transmitsindividual messages. The communication between the WinCC Web Navigator

Server and Client takes place via the HTTPS protocol.


41/156




6.3 WinCC User Administrator

The WinCC User Administrator assigns and controls the user access rights to the

Website. Access rights are assigned during the setup of the user.If a user logs on at the system, the WinCC Web Navigator Server will check,whether the user is registered and whether the maximum number of licensed WebNavigator Clients has been reached.

Additional information can be found at the topic "Configuration of the UserAdministration".

6.4 Secure ID Card

The Remote Access Service (RAS) is a service that enables the direct dialup to anetwork, for example, from home. This takes place via the dialup network (remotedata transmission). The RAS server will ask you to enter your card ID and PINnumber. The RAS server will check the data and, if necessary, call back. This

method ensures that only users with valid access data receive access to theserver.


42/156




6.5 Firewall

General Information

A firewall is a system consisting of hardware and software that is installed at apoint between two networks and only lets authorized communication traffic passthrough. Improper actions are rejected and detected unauthorized attempts can berecorded. Thus, firewall systems are suitable to enforce defined rules with regardto security (security policy). Firewalls are often used when connecting to theInternet, protecting the internal network from the dangers of the Internet.

Principle of Operation

One computer with installed routing software and two interfaces (two network

adapters). The Internet is connected to one interface, the Intranet to the other.

This results in two different networks sharing one computer and providesexceptional security against attacks from the Internet.

Firewall Types

Among others, there are the following types of firewalls:

Filter Firewall

Proxy Server

Filter Firewall:

A filter firewall controls the data stream based on a data package's origin,destination, port and package type information. This information is contained inevery data package. Only selected network traffic can pass through the firewall.


43/156




Package filters are IT systems (Information Technology Systems) with specialsoftware that filter the information (IP packages) on the transport layer, i.e. theyeither let the information pass through or intercept it according to defined rules.The rules can operate by means of the source or target address as well as thesource or destination port that is typical for the respective Internet service. Manyrouters can also be employed as package filters. Unlike static package filters,dynamic package filters do not possess a defined set of rules, instead, the firewallmodifies the filter in response to certain events.

Proxy Server

Proxy servers permit indirect access to the Internet through the firewall. A proxy isan application for network services that is executed depending on thecommunication of the service and from system to system. The service program ofthe user does not communicate directly with the target system, but with the proxyserver of the firewall. The proxy evaluates the request and determines whether toestablish or deny the connection.

Proxy servers provide user authentication and integrity during the transfer of databetween client and server. The hypertext transfer protocol (http) proxy interceptsconnections from every Web Browser and directs the requests to the configuredWeb Server.

Proxy servers support content filtering. With content filtering, only certain contentsof HTML pages are permitted. In this case, the communication is rerouted via adefined port to an IP address such as the address of the WinCC server. If contentfiltering is active, the Web Navigator communication will no longer function. In thiscase, the use of SSL is recommended.


44/156





45/156

04.04 Structure with the WinCC Web Navigator Server



7 Structure with the WinCC Web NavigatorServer

Introduction

Before connecting your WinCC Web Server to the Intranet/Internet, you mustdevise a concept taking into account your security and system conditions.

7.1 Island Solution

In the above illustration, the Web Clients are not connected to the Intranet, but onlyserve as HMI for the running WinCC project. You can thus economically set upcomputer stations that, for example, serve monitoring or maintenance functions.


46/156

Structure with the WinCC Web Navigator Server 04.04



7.2 WinCC Web Navigator Server on the WinCC Server

The WinCC Server and the server component of the WinCC Web Navigator are

installed on one computer. The WinCC Web Navigator Client can control andmonitor the running WinCC project via the Internet as well as the Intranet. WithWinCC Web Navigator Clients, a client-server system can be expanded.

To protect against attacks from the Internet, firewalls are employed. The firstfirewall protects the WinCC Web Navigator Server from Internet attacks, thesecond firewall provides additional security for the Intranet.

7.3 Separation of WinCC Server and WinCC Web NavigatorServer

Communication via Channel

A group of PLCs is assigned to the WinCC Server. The project includes all datasuch as programs, configuration data and miscellaneous settings. On the computerwith the WinCC Server and the WinCC Web Navigator Server, the WinCC projectis mirrored 1:1 and not networked with the PLCs.

The synchronization of the data takes place via the OPC channel (OPC = OLEProcess Control). For this, the WinCC Web Navigator Server requires a license forthe number of OPC tags.

Here as well, two firewalls are employed to protect the system againstunauthorized access. The first firewall protects the WinCC Web Navigator Serverfrom Internet attacks, the second firewall provides additional security for theIntranet.


47/156


48/156

Structure with the WinCC Web Navigator Server 04.04



7.4 Dedicated Web Server

For the central supply of data to the Web Clients, the installation of a dedicated

Web server is advantageous in larger systems. The dedicated Web serverprocesses and optimizes the accesses of the Web Clients and is available as aproxy of the WinCC Servers to the clients. For this, the dedicated Web Server cansimultaneously access multiple subordinated WinCC Servers. The user gainsaccess to multiple WinCC projects by logging on once to the dedicated Web server(no individual project logons).

The dedicated Web server supports the redundancy switch of two subordinatedWinCC Servers using WinCC Redundancy.

The functionality of the dedicated Web server is available on a WinCC Clientfollowing the installation of the Web Navigator Server.


49/156

04.04 Installation of the WinCC Web Navigator Client



8 Installation of the WinCC Web NavigatorClient

Introduction

The following options are available with which to install the WinCC Web NavigatorClient (client side controls).

Installation from the Product CD. In this case, certain Windows user rights arenecessary, depending on the operating system.

Installation via the Intranet/Internet In this case, certain Windows user rightsare necessary, depending on the operating system.

Installation using the group guideline based software distribution in networks.

This can be done without any user interaction and implementing the Windowsuser rights of the current user.

Procedure

The installation is carried out using the following steps:

1. Complete and check the settings of the client computer in Internet Explorer.

2. Installation of the Web Navigator Client

In addition, the Web Navigator Client can also be installed on the Web server. This,for example, is useful, if you want to check your WinCC configuration locally on theserver in the Internet Explorer.

If scripts are used, use the "PdlPad" tool to check the converted process screens inyour WinCC project path under..\WebNavigator\Pictures.

Note

An older version of the Web Navigator Client can be upgraded directly withoutdeinstalling the old Web client. This is possible during the installation from theProduct CD or the group guideline based software distribution.

If the Web Navigator Server is installed after a Web Navigator Client on the samecomputer, the client needs to be reinstalled.


50/156

Installation of the WinCC Web Navigator Client 04.04



Windows user rights required for installation and first registration of the Web client

Certain minimum user rights are required for the installation of Web NavigatorClient via Intranet/Internet depending on the operating system. After theinstallation, the client must register under the name used during installation for the

initial registration on the Web server or log on with a higher Windows userauthorization. The connections must be established successfully. Al the followinglogins can then be performed under a different Windows user authorization withpossibly limited rights.

Operating system Minimum user right requirement

Windows 2000 Professional "Power User"

Windows 2000 Server / Adv.Server

"Power User"

Windows 2003 Server "Power User"

Windows XP Home "Administrators"

Windows XP Professional "Power User"

Windows NT Workstation "User";but "Administrators" when system files must beupdated.

Windows NT Server "User";but "Administrators" when system files must beupdated.

Installing the Web client with limited Windows user rights

By using Microsoft Windows Installer technology (MSI), Web clients from VersionV6.0 SP1 can also be installed with limited Windows user rights, i.e. withoutpossessing the "Power user" or "Administrator" rights.

This procedure can be set during the installation using the group guideline basedsoftware distribution in networks.

Even the Add-Ins and Plug-Ins belonging to the Web Navigator client can beinstalled. The minimum user rights described above are also required to installplug-ins, created with WinCC Plug-In Builder.

By using MSI technology, it is also possible to install the Web client for aconfigured group of users or computers.

Installation for a configured group of users or computers

Using the Microsoft Systems Management server or group guideline on a DomainController, it is possible to install a group of users or computers configured by theAdministrator.

To do this, the "WinCCWebNavigatorClient.msi" MSI file is published in theDomain Controller and released for a user group. The installation is thenperformed according to the configuration of the group guidelines basedsoftware distribution either during login of the defined users or when thecomputer is started The Windows NT, Windows 2000 Server or Windows2003 Server operating systems can be used on the Domain Controller.


51/156




When using a Microsoft Systems Management Server, the installation isconfigured by the Administrator, triggered and executed when the relevantcomputer is started. Further information on Microsoft Systems ManagementServer is available in the Internet on the Microsoft Homepage.

Group guideline based software distribution

The software installation is normally executed with the access rights of the currentWindows user. When using MSI technology, the installation is performed by froman operating system service with a higher level of rights. This enable installationsto be performed for which the Windows user has no authorization. Applicationswhich require installations with a higher level of rights are referred to a "privilegedinstallations" in MSI technology. Installation of these applications is possible whena Windows user is assigned the "Always install with elevated privileges" right.

In order to use the group guideline based software distribution, a group guideline iscreated on the Domain Controller and assigned to the distributing software orpublished using Active Directory.

Assignment: The software distribution can be assigned to a user or acomputer. In this case, the software to be distributed is automatically installedwhen the user logs in or the computer is started.

Publication: The software distribution can be published for single users. In thiscase, when the user logs on on the client computer, the software to bedistributed appears in a dialog and can be selected for installation.

Installation without user interaction

During installation of the Web client, the user is normally prompted to enterinformation, such as the target directory, agreement to the software licenseconditions or components to be installed. By implementing a configuration file,

installation is possible without user interaction. The path specification and userinformation necessary are provided in the "WNC.ini" configuration file. The file mustbe in the same folder as the Web client setup.This installation procedure is advantageous when using the group guideline basesoftware distribution.

Installation from the product CD occurs with user interaction.


52/156




The settings predefined in the table are used under the following conditions:

The "WNC.ini" configuration file is missing and there is no correspondingavailable entry in the client registry, e.g. due to another SIMATIC HMI productbeing installed.

Or the installation is performed via the group guideline based softwaredistribution with assignment to the computer.

Information Parameter

Target directory for the WebNavigator Client

WNCDIR="\Siemens\WinCC\WebNavigator\Client "

Target directory for commoncomponents

COMMONDIR=" \Siemens "

User information / User name USERNAME

User information / Organization COMPANYNAME

The "" parameters result from the settings in the registry under the key"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion" :

- "" corresponds to the key "ProgramFilesDir" e.g. "C:\\Programs"

- "" corresponds to the key "CommonFilesDir", e.g."C:\\Programme\\Common Files"

Example of a "WNC.ini" configuration file

[USERINFO]

USERNAME=Integration

COMPANYNAME=Siemens AG

[INSTALLPATH]

COMMONDIR=" C:\Program Files\Common Files\Siemens "

WNCDIR=" C:\Program Files\Siemens\WinCC\WebNavigator\Client "

[FEATURES]

FUNCTIONTRENDCONTROL=0

HARDCOPY=0

WINCCUSERARCHIVES=0

DEU=0

FRA=0

ITA=0

ESP=0


53/156




8.1 Internet Explorer Settings

Introduction

In order to have the full functionality available on the Web Navigator Client, thesecurity settings must be adapted in the Internet Explorer.

Click on "Tools" > "Internet Options" in the Internet Explorer.

Click on the "Security" tab control. Select the corresponding zone, e.g. "LocalIntranet"or "Internet".

Click on "Custom Level".


54/156




Click on the "Enable" radio-buttons for "Script ActiveX controls marked safe forscripting" and "Download signed ActiveX controls".

Click on "OK". Carry out the modifications in the subsequent dialog. Select the "Trusted Sites" icon an and use the "Sites" button to open the

"Trusted Sites" dialog.

Enter the address of the Web server in the "Add this Website to the zone" field.Possible formats and placeholders include "*://157.54.100 - 200","ftp://157.54.23.41", or "http://*.microsoft.com". Deactivate the "Require serververification (https:) for all sites in this zone" checkbox. Click on the "Add"button. Confirm the entry by clicking on "OK".

Select the "Trusted Sites" icon. Click on the "Standard level" button and thenthe "Custom Level" button. Activate the "Activate" option in the "Securitysettings" dialog under "Initialize and script ActiveX controls not marked assafe". Confirm the entry by clicking on "OK".

Close the "Internet Options" dialog by clicking on "OK".

This completes all necessary settings in the Internet Explorer.


55/156




8.2 Installation from the CD-ROM

Requirements

The settings in the topic "Settings in Internet Explorer" apply for installation anduse of the Web Navigator Client.

Depending on the operating system, certain minimum user rights are requiredfor installation of the Web client, as described in the topic "Installing the WebNavigator Client".

Installing the Web Navigator Client from the CD-ROM

Insert the CD-ROM containing the WinCC Web Navigator into the CD-ROMdrive.

The setup program will start automatically after a few seconds, provided thatthe autorun functionality is not disabled.

The setup can also be started manually in case the installation is performedfrom a network drive or the autorun function has been disabled. From theWindows 2000 / XP Start menu, select the "Settings" > "Control Panel" > "Addor remove programs" option and click on the "Add new programs" icon. Thenselect the required installation medium.

The setup program will then be started.

To receive additional information about the WinCC Web Navigator, click on the"Welcome", "Read first", "Display CD-ROM Contents", "Install Software" and"Language Selection" entries.

To install the WinCC Web Navigator, click on "Install Software".


56/156




In the following dialog box, select the entry "WinCC Web Navigator Client".You will be guided step-by-step through the installation.


57/156




8.3 Installation via the Intranet/Internet

Requirements

The settings in the topic "Settings in Internet Explorer" apply for installation anduse of the Web Navigator Client.

Depending on the operating system, certain minimum user rights are requiredfor installation of the Web client, as described in the topic "Installing the WebNavigator Client".

For the installation via the Intranet/Internet, you must have the WinCC WebNavigator Server completely installed, the Internet Information Serverconfigured with the WinCC Web Configurator and be registered as a user inthe WinCC User Administrator.

A WinCC project in runtime must be on the required Web Navigator Server.

Installing the Web Navigator Client via the Intranet/Internet

Access the Internet via your Internet Service Provider.

Enter the address of the WinCC Web Navigator Server in the address bar, e.g."http://www.server_name.de". When installing in a virtual directory, the addresscan be as follows: "http:// www.server_name.de/WebNavigator/".

Log onto the WinCC Web Navigator Server with your user name andpassword.

If you are accessing the WinCC Web Navigator Server for the first time, youwill be prompted to install the WinCC Web Navigator Client. Click on the "Clickhere to install" link. Click on the "Save" button in the "File Download" dialog tostore the client setup on the target computer. It is recommended to save theSetup file because, in the event of a restart of the client computer beingnecessary, the Setup need not be downloaded again.

Note

If the Web Navigator Client was installed previously from the CD-ROM and youwant to install an updated version of the clients via the Intranet/Internet, the clientsetup must also be saved on the target computer.

Leave the Internet Explorer open and open Windows Explorer. Navigate to the

folder in which the Setup file was saved and start the Setup file by doubleclicking on it.

Follow the instructions on the screen and enter the information and settingsnecessary. The client-side controls of the Web Navigator will then be installed.Then close the Setup dialog.

When the installation is completed successfully, the client switches to the WinCCproject currently in runtime.


58/156





59/156

04.04 Deinstallation



9 Deinstallation

The WinCC Web Navigator Server and the WinCC Web Navigator Client can be

deinstalled from Windows in the usual manner.

Access "Control Panel" and double-click on the icon "Add/Remove Programs".

Click on the icon "Change or remove Programs".

Select the Web Navigator Server or Client and click on "Remove". Follow theon-screen instructions.

This will remove the WinCC Web Navigator Server/Client from your system.

Note

If you deinstall the WinCC Web Navigator Server, the corresponding authorizationshould also be deinstalled using the "AuthorsW.exe" application. The

authorization can then be reused at a later time. Additional information aboutauthorizations can be found in the WinCC software protection documentation.


60/156

Deinstallation 04.04




61/156

04.04 Configuration of the User Administration



10 Configuration of the User Administration

10.1 User Administration in the WinCC User Administrator

Introduction

The management of the user rights when employing the WinCC Web Navigatortakes place in the WinCC User Administrator. In it, the users are assigned varioususer authorizations for the HMI. In addition, a start picture and the language can beconfigured for individual users in the "Web Options" area. The WinCC UserAdministrator thus enables the setup of a secure and clear user administration forWinCC and the access via the WinCC Web Navigator.

If a user logs onto the Web Navigator Server with the Web Navigator Client, the

server will check whether the user is registered in the WinCC User Administratorand sends the configured user rights to the Web client for evaluation. During login,the Web server also checks whether the maximum number of licensed Web clientshas been reached. If the user is not registered or the number of licensed clients isexceeded during a login attempt by a Web client, a message will be displayed andno further logins be permitted.

The tasks of the WinCC User Administrator include:

Creation and editing of users and user groups

Assignment and management of access rights

Assignment and management of the start picture and the language for userswith project access via the WinCC Web Navigator


62/156

Configuration of the User Administration 04.04



User Authorizations

The following authorizations can be assigned to a user:

Standard authorizations no. 1 to 999

The standard authorizations can be created, edited, deleted and assigned to users.

The name of an authorization indicates what impact the respective authorization isto have, but not how it is actually used.

User hierarchies from PCS7 no. 1 to 8

These user authorizations are available after running the Wizard of the OS projecteditor (Option Basic Process Control). The predefined authorizations cannot bedeleted or edited.

System privileges no. 1000 to 1099

The system privileges are automatically generated by the system and cannot berecreated, edited or deleted. The system privileges can be assigned to a user just

like any other authorization.

System privilege no. 1002 "View only" has a special function when the WinCC WebNavigator is used.

If it is assigned to a user, he or she may only monitor a WinCC project ("ViewOnly") and cannot, for example, acknowledge messages or write to tagsthrough I/O field inputs or script. This authorization is only relevant for the Webclient and does not influence other authorizations assigned to the user. A"Dat@Monitor Web Edition" license is required. If this license is not available,the Web client runs in Demo mode after logging on.

If it is not assigned to a user, this user may operate and monitor a WinCCproject depending on the assigned authorizations. A "Client" license is

required.

Additional information regarding the user administration can be found in the WinCCInformation System at "Working with WinCC" and "Configuration of the UserAdministration". To configure multilingual projects and non-Latin based fonts,information is available under "Working with WinCC" / "Multilingual ProjectConfiguration".


63/156




10.2 Setting Web Options for Users

Introduction

For the access to a WinCC project via the WinCC Web Navigator, the user areassigned certain user authorizations in the WinCC User Administrator and settingsconfigured for the start picture and language.

Requirements

The WinCC Web Navigator Server has to be installed for the "Web Options"area to be active in the WinCC User Administrator.

The WinCC project has to be open.

Configuring Web Options

1. In the WinCC Explorer, open the editor "User Administrator".

2. In the navigation window, select the desired user or create a new user.

3. In the table window, the user authorizations existing in the WinCC projectand an already configured assignment to this user are displayed. Check thesetting of system privilege no. 1002 "View only" and make any changesnecessary.If this system privilege is activated, the user may only observe the project(View Only) and a "Dat@Monitor Web Edition" license is required.If this system privilege remains deactivated, the other user authorizations

assigned to the user apply. Check the settings of the other authorizations.

4. Activate the "Web Navigator" checkbox in the table window. The "WebOptions" area appears.

5. In the "Start Picture" field, use the "..." button to select the start picture forthis user. As start picture, only pictures that have been published with theWeb View Publisher on the Web Navigator Server can be selected.

6. In the "Language" field, select the language for this user. Available forselection are the languages installed in WinCC.

7. Close the User Administrator.

Note

A user name can only be assigned once.

Additional information regarding the user administration can be found in the WinCCInformation System at "Working with WinCC" and "Configuration of the UserAdministration".


64/156




10.3 Migrating User Data from Older Projects

Introduction

Under the WinCC Web Navigator before Version 6, user rights were managed bythe Web Administrator. Starting with V6 of the Web Navigator, the useradministration takes place with the WinCC User Administrator. Old user data canbe migrated with the "WebNavV6Migration" tool for further use in the WebNavigator V6 or higher.

The migrated, old users are placed under the user group"WebNavigatorUserGroup" by the migration tool. The user authorizations of thisuser group are passed on to the migrated users. If this user group does not yetexist, it will be created by the tool and the processing stopped. After the desireduser authorizations have been assigned to the group, the migration tool can berestarted.

In addition to the password, the migration tool also transfers the user's settingspertaining to the start picture and the language.

Requirements

The WinCC Web Navigator Server has to be installed for the "Web Options"area to be active in the WinCC User Administrator.

The WinCC project into which the user data is to be migrated has to be open.

The WinCC User Administrator for this project is a user group"WebNavigatorUserGroup". The group has been assigned the necessary user

authorizations.


65/156




Migrating the User Data

1. In the Windows Explorer, select the WinCC installation folder. Access theassociated subdirectory, "WebNavigator/Server/bin", and start the"WebNavV6Migration.exe" program. The user interface of the tool is onlyprovided in English.

2. In the "Project Name" field, select the project from which the old user data isto be migrated.

3. Confirm the selection with the "OK" button. Users of the old project are thenset up in to open WinCC project in the "WebNabvigatorUserGroup" groupand inherit the user authorizations assigned to the group.If the old user database record cannot be read, an error message will beissued. In this case, the database driver "DAO JetEngine" from the current"Web Navigator" CD-ROM needs to be installed on the computer from whichthe user data is to be migrated into the WinCC project.

4. After the successful migration, a message with the number of migrated

users will be output. This is followed by the inquiry the old database can bedeleted. Select the desired option. The migration tool will close.

5. Open the "User Administrator" editor in WinCC Explorer of the currentproject.Check the settings of the migrated user and adapt them to the currentproject as necessary.

6. Close the User Administrator.

Additional information regarding the user administration can be found in the WinCCInformation System at "Working with WinCC" and "Configuration of the User

Administration".


66/156





67/156

04.04 Configuration of a Web Project



11 Configuration of a Web Project

Introduction

This chapter describes the configuration of a Web project and special features tobear in mind.

Publish WinCC process screens with the Web View Publisher to compress andadapt the project data. Publishing with the Web View Publisher can takeplace in several ways, depending on the source and target folders of thepublished pictures or the system structure.

Use the "PdlPad" tool to locate errors in the scripts used in the publishedWinCC process screens.

Assume and adapt existing WinCC projects to make them accessible via

Intranet/Internet.

Limitations to be taken into account.

Differences to the WinCC the basic system

Using scripts Special features when using VB Scripts, Global Script, ActionScripts with tag trigger and diagnostics for VBS and Global Script

Multilingual projects and non-Latin fonts

The configuration of foreign language texts, user names, etc., and the use of non-

Latin fonts, e.g. for Asian projects, is performed in the WinCC project. Certainconditions must be fulfilled and settings made. E.g., the desired configurationlanguage or a special font must be installed in the operating system. After installinga language, it must be transferred to the Alarm Logging editor and Text Library sothat the configuration can be made in that language or specific font.

Additional information regarding the user administration can be found in the WinCCInformation System at "Working with WinCC" and "Multilingual ProjectConfiguration". To configure multilingual projects and non-Latin based fonts,information is available under "Working with WinCC" / "Language Support inWinCC".


68/156

Configuration of a Web Project 04.04



11.1 Publishing WinCC Process Screens

Introduction

When configuring a Web project, the WinCC process screens are published so thatthey can run on the WinCC Web Navigator Client via the Intranet/Internet.Publishing is performed with the Web View Publisher which automatically makesthe necessary adaptations to the project data.

The following adaptations will be performed:

Compression of the data to achieve the best possible performance on theInternet.

Removal of project-specific data that is not required for the operation.

Conversion of picture windows into an ActiveX component.

Conversion of scripts to make them operational on the WinCC Web NavigatorClient.

The publishing with the Web View Publisher can take place in several ways,depending on the source and target folders of the published pictures or systemstructure.

Publishing on the local computer: The source folder is the current WinCCproject folder and the target folder the subfolder "WebNavigator/Pictures"existing in it.

Publishing on a dedicated Web server by employing the server prefix: Thesource folder is the WinCC project folder on another WinCC computer, which is

predetermined by selecting the server prefix. The target folder is located on theWinCC client in the WinCC project subfolder ".../WebNavigator/Pictures".

Remote publishing: The source and target folders can be located on one ormultiple Web servers. The publisher itself can be started on the Web serverwith the source or target folder or on a third Web server.

Errors During Publishing

If warnings appear or errors occur during publishing, the process screens affectedare marked in the output field of the Web View Publisher. The "PdlPad" tool can bestarted directly in the publisher in order to check the scripts used in the publishedpictures.

A further source of errors can be due to publishing without project functions,described below.


69/156

04.04 Configuration of a Web Project



Publishing without project functions

When publishing with the Web View Publisher, the selected project functions arealways published. When publishing without project functions, none of the publishedpictures possesses project functions any longer. The project functions of the last

publishing process are always available in the published pictures and, thus, on theWeb client.The selection of project functions available in the Publisher is dependent on thosein the pictures published in the sam

Webnavigator Wincc Client Siemens

Documents

Transcript of Webnavigator Wincc Client Siemens