Webnavigator Wincc Client Siemens
-
Upload
eder-rinas -
Category
Documents
-
view
763 -
download
26
Transcript of Webnavigator Wincc Client Siemens
-
7/24/2019 Webnavigator Wincc Client Siemens
1/156
04.04 Contents
Printout of the Online Help iWeb Navigator - Documentation
Contents
1 WinCC / Web Navigator .......................................................................1
2 Web Navigator Demo Project .............................................................. 5
3 Requirements .......................................................................................73.1 Hardware and Software .............................................................................73.2 Licensing..................................................................................................10
4 Installation of the WinCC Web Navigator Server.............................134.1 Procedure.................................................................................................134.2 Installation of the Internet Information Service (IIS) ................................144.3 Installation of the WinCC Web Navigator Server..................................... 16
5 Configuring the Web Navigator Server ............................................195.1 Wizard-assisted Web Setup: WinCC Web Configurator..........................205.1.1 Creating a new standard Website (Stand-alone)..................................... 235.1.2 Creating a Virtual Directory......................................................................255.1.3 Checking the activated Website (Web)....................................................285.2 Load distribution on Web servers using the "Load Balancing" function ..295.3 Configuring the "Load Balancing" Function .............................................32
6 WinCC Web Navigator Security ........................................................356.1 SSL ..........................................................................................................366.2 HTTPS .....................................................................................................36
6.3 WinCC User Administrator.......................................................................376.4 Secure ID Card ........................................................................................376.5 Firewall.....................................................................................................38
7 Structure with the WinCC Web Navigator Server............................417.1 Island Solution .........................................................................................417.2 WinCC Web Navigator Server on the WinCC Server..............................427.3 Separation of WinCC Server and WinCC Web Navigator Server ...........427.4 Dedicated Web Server.............................................................................44
8 Installation of the WinCC Web Navigator Client..............................458.1 Internet Explorer Settings ........................................................................498.2 Installation from the CD-ROM..................................................................51
8.3 Installation via the Intranet/Internet..........................................................53
9 Deinstallation......................................................................................55
10 Configuration of the User Administration........................................5710.1 User Administration in the WinCC User Administrator ............................5710.2 Setting Web Options for Users ................................................................5910.3 Migrating User Data from Older Projects.................................................60
-
7/24/2019 Webnavigator Wincc Client Siemens
2/156
Contents 04.04
ii Printout of the Online HelpWeb Navigator - Documentation
11 Configuration of a Web Project.........................................................6311.1 Publishing WinCC Process Screens........................................................6411.1.1 Publishing WinCC Process Screens with the Web View Publisher......... 66
11.1.2 Publishing WinCC Pictures on a Dedicated Web Server ........................7211.1.3 Remote Publication of WinCC Process Screens with the Web ViewPublisher ..................................................................................................79
11.2 Transfer, Adaptation of existing Projects .................................................8411.3 Limitations................................................................................................8511.4 Using Scripts............................................................................................8611.5 The "PdlPad" Tool....................................................................................8811.6 Differences to the WinCC Basic System .................................................9011.6.1 Script Execution .......................................................................................9011.6.2 Picture Selection ......................................................................................9011.6.3 Scripting ...................................................................................................9011.6.4 Addressing of Objects in Pictures............................................................9111.6.5 Synchronous Script Functions .................................................................94
11.6.6 Defining a Picture-local Script Tag ..........................................................9411.6.7 Properties of Picture Windows on the Web Client...................................95
12 Application of the WinCC Web Navigator Client ............................. 9712.1 Functions and General Properties of the Web Client ..............................9812.2 Web Client Properties Concerning Pictures ..........................................103
13 WinCC Web Navigation Interface.................................................... 10513.1 Expanding the WinCC Web Navigation Interface ..................................108
14 WinCC Plug-In Builder.....................................................................10914.1 Installation of the WinCC Plug-In Builder...............................................110
14.2 Plug-In: Creating, Testing and Making available for Download............. 11114.3 Installation and Deinstallation of a Plug-In on a Web Client.................. 114
15 WinCC Web Navigator Diagnostics Client ..................................... 11515.1 Requirements.........................................................................................11615.2 Diagnostics Client Licensing..................................................................11715.3 Installation of the WinCC Web Navigator Diagnostics Client ................118
16 Diagnosis of the Connections with "Status.html"......................... 121
17 Using the Terminal Services for the WinCC Web Navigator ........12317.1 Requirements for Using the Terminal Services .....................................12517.2 Terminal Services Setup........................................................................12617.2.1 Activation of the Terminal Services on the Windows 2000 Server ........12717.2.2 Creation of the Client Data Carrier on the Windows 2000 Server .........12917.2.3 User Setup for the Access to the Terminal Services Server .................13017.2.4 Installation of a Terminal Services Client on the Client Computer ........13117.2.5 Configuration of the Connection ............................................................13217.2.6 Starting the Application of the Terminal Services Server on the Client
Computer ...............................................................................................133
-
7/24/2019 Webnavigator Wincc Client Siemens
3/156
04.04 Contents
Printout of the Online Help iiiWeb Navigator - Documentation
18 Appendix .......................................................................................... 13518.1 nternet Information Services ..................................................................13518.1.1 Overview of the Highlights .....................................................................135
18.1.2 Reliability................................................................................................13518.1.3 Settings at the Internet Information Services.........................................13618.1.4 Setting up the Web Folder .....................................................................13718.1.4.1 Creating a new Standard Website under Windows ...............................13718.1.4.2 Virtual Folder..........................................................................................13918.1.5 Defining the Start Page..........................................................................14018.1.6 Adding the ISAPI Filter...........................................................................14118.1.7 Definition of the Basic Authentication ....................................................14218.1.8 Application Settings ...............................................................................14318.2 Troubleshooting and Error Correction ...................................................14518.3 Abbreviations .........................................................................................147
-
7/24/2019 Webnavigator Wincc Client Siemens
4/156
Contents 04.04
iv Printout of the Online HelpWeb Navigator - Documentation
-
7/24/2019 Webnavigator Wincc Client Siemens
5/156
04.04 WinCC / Web Navigator
Printout of the Online Help 1
Web Navigator - Documentation
1 WinCC / Web Navigator
Function Overview
The enormous growth of the Internet in recent years has had and is having a largeimpact on industrial development. One of the key factors responsible for theInternet boom was the development of the World Wide Web (WWW) Internetservice.
Browser applications with graphical user interfaces make accessing and navigatingthe Web easy: clicking a mouse button is all that is needed to cross geographicalborders.
The WinCC Web Navigator option package to the WinCC basic system V6.0 orhigher enables you to develop a solution for controlling and monitoring processesvia the Intranet/Internet. With this option package and the standard tools of WinCC,a new way of distributing the HMI functions of your plant - employing theIntranet/Internet - can be implemented. The WinCC Web Navigator supportscurrent Internet security methods and provides Wizards to assist you in your task.
The communication mechanisms used by the WinCC Web Navigator utilize apowerful and optimized event-driven transmission of data, which delivers the bestperformance via the Intranet/Internet.
The WinCC Web navigation interface combines various Web functions and makesthem available to the user in a clear format. The contents of the navigationinterface can be expanded by the user. Installed Dat@Monitor components arealso displayed by the navigation interface.
The WinCC Web Navigator package consists of special server components that
are installed on the server computer and of client components that are installed onthe client computer on the Intranet/Internet.
As a so-called "thin client", the WinCC Web Client can control and monitor arunning WinCC project from an opened Internet Browser, without the need ofhaving to install the complete WinCC basic system on the client computer.
-
7/24/2019 Webnavigator Wincc Client Siemens
6/156
WinCC / Web Navigator 04.04
2 Printout of the Online Help
Web Navigator - Documentation
The WinCC Web Navigator thus cost-effectively expands the networking of client-server systems to the Intranet/Internet. The project and the associated WinCCapplication are located on a server computer. This provides a clear separation ofthe visualization components on the client computer and the WinCC projectrunning on the server computer . This means that operator stations can be set upeasily, e.g. for maintenance or diagnostics purposes.
The software of the WinCC Web Navigator Client component can run underWindows 2000 Professional SP3 or 4, Windows 2000 Server / 2003 Server,Windows XP (Home / Professional / Professional SP1) and Windows NT fromVersion 4.0 SP6a. The visualization can take place on any Internet Browsersupporting the ActiveX technology by Microsoft. This applies to Internet Explorerfrom Version 6.0 SP1. Using the MS Terminal Services, the Web client can also beoperated on other operating systems, such as WinCE, Win95 etc.
The software of the WinCC Web Navigator Client can be installed in various ways:in the normal way using CD-ROM as a self-decompressing file via theIntranet/Internet or even via a group guideline based software distribution in
networks. When directly accessing the WinCC Web Navigator Server, it will bechecked whether the client software has been installed. If the client software ismissing, the user will be asked to download the file to his computer and to performthe installation. This scenario provides the WinCC Web Navigator user with a highdegree of flexibility and mobility.
A further function provided by the client installation is "Download on Demand". Theuser is then offered client add ins such as "WinCC User Archive Table Element",additional languages or IndustrialX controls for downloading.
A property of the user administration is the user-specific assignment of the startpicture and the language. For every user, a different start picture and language canbe set. By assigning user authorizations, a scalable access to different projectareas and functions can be implemented for the various users.
The pictures displayed on the WinCC Web Navigator Client can be controlled as ina normal WinCC system, provided the user possesses the necessary userauthorizations. In this way, the project running on the server computer can becontrolled from anywhere on earth. The Web client supports pan, zoom anddeclutter functions. This enables sections of process screens displayed to bemoved, process screens or sections of them to be zoomed using the mouse wheelor dragging the borders and graphic objects to be hidden and unhidden accordingto the level and object size.The display of archive data of the WinCC option User Archives is also supported.
Using Visual Basic Scripting (VBS) it is possible to control the dynamic behavior ofobjects, for example, or establish a connection to other applications with the Webclient. VBS is already integrated into Windows 2000/XP.
Security is an essential aspect when controlling and monitoring via the Internet.Thus, the WinCC Web Navigator supports all currently known security standards(used by the banking and insurance sector) ranging from user-specific logins andpasswords, firewalls, secure ID cards with PINs to RAS (Remote Access Service)or the SSL coding and VPN technology.
The WinCC Web Navigator Server requires the Microsoft Internet InformationService for the communication to its clients. The WinCC Web Configurator isprovided for setting up the WinCC Web Navigator Server, making configuring theInternet server simple and convenient. The Web Configurator is ideal for all userswithout Internet server knowledge: after only making a few entries, the Web serveris properly configured.
-
7/24/2019 Webnavigator Wincc Client Siemens
7/156
04.04 WinCC / Web Navigator
Printout of the Online Help 3
Web Navigator - Documentation
The "Load Balancing" function enables Web Navigator Clients to be distributedautomatically to different Web Navigator servers evenly and according to therespective server authorizations.
In order for a WinCC project to run on the WinCC Web Navigator, the WinCC
process screens must be adapted and converted. As before, the WinCC picturesare created and edited with the WinCC Graphics Designer.
The Web View Publisher automatically performs the necessary adaptations for theproject data so that it can run on the WinCC Web Navigator Client. In order toachieve the best possible performance, the Wizard limits itself to information that isnecessary for the Web.
-
7/24/2019 Webnavigator Wincc Client Siemens
8/156
WinCC / Web Navigator 04.04
4 Printout of the Online Help
Web Navigator - Documentation
-
7/24/2019 Webnavigator Wincc Client Siemens
9/156
04.04 Web Navigator Demo Project
Printout of the Online Help 5
Web Navigator - Documentation
2 Web Navigator Demo Project
Introduction
The WinCC Web Navigator CD contains a WinCC demo project as a self-decompressing ZIP file called "Web_Demo_Project.exe" located in the"DemoProject" folder. To install the project, copy the file to a local target directoryand start the decompressing process by double clicking on the file.
The demo project contains the following logins for various languages alreadyconfigured:
"winccd" for German,
"wincce" for English,
"winccf" for French, "wincci" for Italian and
"winccs" for Spanish.
The password for all languages is "winccpass".
-
7/24/2019 Webnavigator Wincc Client Siemens
10/156
Web Navigator Demo Project 04.04
6 Printout of the Online Help
Web Navigator - Documentation
-
7/24/2019 Webnavigator Wincc Client Siemens
11/156
04.04 Requirements
Printout of the Online Help 7
Web Navigator - Documentation
3 Requirements
3.1 Hardware and Software
Introduction
This chapter outlines the WinCC Web Navigator hardware, software and operatingsystem requirements.
WinCC Web Navigator Client
Operating System: Windows NT from V4.0 SP6a or later,Windows 2000 Professional Service Pack 3 or 4Windows 2000 ServerWindows 2003 ServerWindows XP HomeWindows XP ProfessionalWindows XP Professional Service Pack 1Use MS Terminal Services for other operating systems,such as WinCE, Win95.
Software: Internet Explorer 6.0 SP1 or higher
Minimum HardwareRequirements:
No special hardware is required, however, the IE 6.0must be able to run.
Other: Access to the Intranet/Internet
or TCP/IP connection to the Web server
Note
If MSI technology is implemented, "MS Installer" is required on the target systemfor installation of the Web clients. However, this is not available in Windows NTV4.0. The service can be installed using the Download page of the WebNavigation user interface or using the "instmsiw.exe" file on the "Web Navigator"product CD.
-
7/24/2019 Webnavigator Wincc Client Siemens
12/156
Requirements 04.04
8 Printout of the Online Help
Web Navigator - Documentation
WinCC Web Navigator Server on a WinCC Single-user or Client System
Operating System: Windows 2000 Professional Service Pack 3 or 4Windows 2000 ServerWindows 2003 ServerWindows XP Professional orWindows XP Professional Service Pack 1
Software: Internet Explorer 6.0 SP1 or higherWinCC Basis System from V6.0
Minimum HardwareRequirements:
Intel Pentium III, 800 MHz512 Mbyte700 MB free memoryNetwork interfaces
Other: Access to the Intranet/Internetor TCP/IP connection to the Web client
Note
In order to have more than three clients, the Server version of Windows 2000Server or 2003 Server must be installed, since the Workstation version is limitedto three clients.. The conditions as under "WinCC Web Navigator Server on theWinCC Server" apply accordingly.
-
7/24/2019 Webnavigator Wincc Client Siemens
13/156
04.04 Requirements
Printout of the Online Help 9
Web Navigator - Documentation
WinCC Web Navigator Server on WinCC Server
Operating System: Windows 2000 ServerWindows 2000 Advanced ServerWindows 2003 Server
Software: Internet Explorer 6.0 SP1 or higherWinCC Basis System from V6.0
Minimum HardwareRequirements:
Intel Pentium III, 800 MHz512 MB RAM700 MB free memory
Other: If you want to publish Intranet information, the followingis required:
A network-capable computer as well as a LANconnection (LAN = Local Area Network).
A system that breaks up computer names into IPaddresses (IP = Internet Protocol). This is not a
mandatory step, but it allows users to use "alias names"instead of IP addresses when connecting to your server.
If you want to publish Internet information, the followingis required:
An Internet connection and an IP address from yourInternet service provider (ISP). You can only publishinformation on the Internet, if you possess a connectionto the Internet (provided by the ISP).
A network card that is suitable for connecting to theInternet.
A DNS registration (DNS = Domain Name System) for
your IP address. This is not a mandatory step, but itallows users to use "alias names" instead of IPaddresses when connecting to your server.
-
7/24/2019 Webnavigator Wincc Client Siemens
14/156
Requirements 04.04
10 Printout of the Online Help
Web Navigator - Documentation
3.2 Licensing
WinCC Web Navigator Client
Through the server-side licensing on the on the Web Server, the computer runningthe Web Navigator Client does not require a license.
WinCC Web Navigator Server
As a prerequisite for the WinCC basic system, the WinCC RT basic license isrequired. No WinCC server license is required, if no local WinCC clients areoperated. Even when operating a WinCC client as a dedicated Web server, noWinCC server license is required for the WinCC client.
Without a license, the WinCC Web Navigator Server will run in demo mode for a
duration of 30 days.For the permanent use of the WinCC Web Navigator Server, a license is required.Licenses are available for 3, 10, 25 or 50 clients that can simultaneously accessthe Web Server.
If the number of licensed clients is exceeded during a login attempt by a Webclient, a message will be displayed and no further logins be permitted.
WinCC Web Navigator Diagnostics Client
For the function of the Web Navigator Diagnostics Client, other licenses arerequired. For additional detailed information, see the topic "Web Navigator
Diagnostics Client".
-
7/24/2019 Webnavigator Wincc Client Siemens
15/156
04.04 Requirements
Printout of the Online Help 11
Web Navigator - Documentation
Overview of the Licenses on the Web Navigator Server and Client
Server Client no License Client with DiagnosticsClient License
WN server license +WinCC license
WN clientNumber till max. onlicense (server)
Diagnostics ClientOne license perdiagnostics client.
WN Gatekeeper +WinCC license
Demo ClientUnlimited number
Diagnostics ClientOne license perdiagnostics client.
WN-GK + WN Server +WinCC license
WN clientNumber till max. onlicense (server)
Diagnostics ClientOne license perdiagnostics client.
No WN license orNo WinCC license
Demo ClientUnlimited number
Demo ClientUnlimited number
WN server license +WinCC license +"Load Balancing" license
WN clientNumber till max. onlicense (server)
Diagnostics ClientOne license perdiagnostics client.
WN server license +WinCC license +WinCC redundancylicense +"Load Balancing Step-Up"license
WN clientNumber till max. onlicense (server)
Diagnostics ClientOne license perdiagnostics client.
-
7/24/2019 Webnavigator Wincc Client Siemens
16/156
Requirements 04.04
12 Printout of the Online Help
Web Navigator - Documentation
-
7/24/2019 Webnavigator Wincc Client Siemens
17/156
04.04 Installation of the WinCC Web Navigator Server
Printout of the Online Help 13
Web Navigator - Documentation
4 Installation of the WinCC Web NavigatorServer
4.1 Procedure
The WinCC Web Navigator Server requires Windows 2000 or XP as well asWinCC V6 to be installed.
For details regarding the installation of WinCC, please refer to the WinCCdocumentation. The following description assumes that WinCC has already beeninstalled.
Installation of the WinCC Web Navigator Server under Windows 2000/XP:
1. Installation of the Internet Information Services (IIS)2. Installation of the WinCC Web Navigator Server
Note
In order to install the Server component of the WinCC Web Navigator underWindows, write permissions to the registry database are required, i.e. you mustpossess administrator rights.
-
7/24/2019 Webnavigator Wincc Client Siemens
18/156
Installation of the WinCC Web Navigator Server 04.04
14 Printout of the Online Help
Web Navigator - Documentation
4.2 Installation of the Internet Information Service (IIS)
When using Windows 2000 Professional or XP, the Internet Information Service
(IIS) must be installed prior to the WinCC Web Navigator Server. When using theWindows 2000 Server or 2003 Server, this manual installation is not necessary.
Note
In order to install the Internet Information Service under Windows, writepermissions to the registry database are required. you must possessadministrator rights.
If the logging functions are active with IIS, the log files must be monitored anddeleted, if necessary. The event views should be configured so that the log filesdo not become to large.
Insert the Windows 2000 CD-ROM into the CD-ROM drive.
From the Start menu of Windows 2000, select the "Settings" > "Control Panel"entries and then click on the "Add or remove programs" icon.
Open the "Add or remove programs" dialog and click on "Add/RemoveWindows components". The following dialog opens.
In the selection window, activate the check-box at the "Internet InformationServices (IIS)" entry.
-
7/24/2019 Webnavigator Wincc Client Siemens
19/156
04.04 Installation of the WinCC Web Navigator Server
Printout of the Online Help 15
Web Navigator - Documentation
Click on "Next". The data required is then transferred and the necessaryconfiguration of Windows performed.
Exit the Wizard by clicking on "Finish".
-
7/24/2019 Webnavigator Wincc Client Siemens
20/156
Installation of the WinCC Web Navigator Server 04.04
16 Printout of the Online Help
Web Navigator - Documentation
4.3 Installation of the WinCC Web Navigator Server
Note
If the Web Navigator Server is installed after a Web Navigator Client on the samecomputer, the client needs to be reinstalled.
In order to install the Server component of the WinCC Web Navigator underWindows, write permissions to the registry database are required, i.e. you musthave administrator rights.
Insert the WinCC Web Navigator CD-ROM into the CD-ROM drive.
The setup program will start automatically after a few seconds, provided thatthe autorun functionality is not disabled.
The setup can also be started manually in case the installation is performedfrom a network drive or the autorun function has been disabled. From theWindows 2000 / XP Start menu, select the "Settings" > "Control Panel" > "Addor remove programs" option and click on the "Add new programs" icon. Thenselect the required installation medium.
The setup program will then be started.
To receive additional information about the WinCC Web Navigator, click on the"Welcome", "Read first", "Display CD-ROM Contents", "Install Software" and"Language Selection" entries.
To install the WinCC Web Navigator, click on "Install Software".
In the following dialog box, select the component "WinCC Web NavigatorServer". You will be guided step-by-step through the installation.
-
7/24/2019 Webnavigator Wincc Client Siemens
21/156
04.04 Installation of the WinCC Web Navigator Server
Printout of the Online Help 17
Web Navigator - Documentation
The "Authorization" dialog box displays a list of required authorizations basedon the selected components. Select "Yes, the authorization should beperformed during the installation" and insert the authorization floppy disk intodrive "A:".
The following dialog box will display the selected settings. If you want to makechanges to the settings, click on "Back", otherwise click on "Next".
The WinCC Web Navigator Server will then start with the transfer of the files.
If older versions of system files were located on your computer, the setup programmay ask you to restart your computer.
The WinCC Web Navigator Server will be added with a separate icon to thenavigation window of the WinCC Explorer.
Already installed WinCC Web Navigator
The setup program will detect an already installed WinCC Web Navigator Serversoftware. A message will be displayed asking whether the existing version is to bedeinstalled.
Click on "Yes" to deinstall the existing version. Following that, the installation of theWinCC Web Navigator Server will be carried out.
-
7/24/2019 Webnavigator Wincc Client Siemens
22/156
Installation of the WinCC Web Navigator Server 04.04
18 Printout of the Online Help
Web Navigator - Documentation
-
7/24/2019 Webnavigator Wincc Client Siemens
23/156
04.04 Configuring the Web Navigator Server
Printout of the Online Help 19
Web Navigator - Documentation
5 Configuring the Web Navigator Server
Introduction
The following configurations can be made on the Web Navigator server:
The WinCC Web Configurator is used to set up and manage the InternetInformation Service (IIS).
The "Load Balancing" function can be used, as necessary, to set up a loaddistribution between several Web servers.
The Web View Publisher automatically performs the necessary adaptations forthe project data so that it can run on the WinCC Web Navigator Client via theIntranet/Internet. Various versions of the Web View Publisher can be used andare described in Chapter "Configuring a Web Project".
-
7/24/2019 Webnavigator Wincc Client Siemens
24/156
Configuring the Web Navigator Server 04.04
20 Printout of the Online Help
Web Navigator - Documentation
5.1 Wizard-assisted Web Setup: WinCC Web Configurator
Application
The WinCC Web Configurator provides simple, uncomplicated support inmanaging and setting up the Microsoft Internet Information Service (IIS). TheConfigurator is thus ideal for all users without Web server knowledge. This setupand configuration is necessary to make the WinCC Server accessible via theIntranet/Internet. Additional information about the Internet Information Server canbe obtained from Microsoft.
Note
The Internet Information Service and the WinCC Web Navigator Server must beinstalled, otherwise the Wizard will not operate.
Standard Website Settings
The WinCC Web Configurator can also be used to select which standard Websiteshould be opened after starting the Web clients. If "WebClient.asp" is set, the Webclient starts, as usual,with the process screens. If "MainControl.asp" is set, theWeb client starts with the Navigation interface.
How to start the WinCC Web Configurator
1. In the navigation window of the WinCC Explorer, select the Web Navigator andaccess its pop-up menu.
2. In the pop-up menu, select the "Web Configurator" menu command.
Note
In the event of queries or difficulties concerning the following settings, consultyour department's Intranet/Internet administrator.
-
7/24/2019 Webnavigator Wincc Client Siemens
25/156
04.04 Configuring the Web Navigator Server
Printout of the Online Help 21
Web Navigator - Documentation
Initial Configuration of the WinCC Web Navigator Server
During the initial configuration, the first dialog box of the WinCC Web Configuratorallows you to specify the creation of a new standard Website or a new virtualdirectory. For this, please observe the following note. The following step depends
on the option selected.
If only the WinCC Web Navigator Website is operated on the server, activatethe radio-button "Create a new standard Website (Stand-alone)".
If the WinCC Web Navigator Website is added as a subfolder to your existingWebsite, activate the radio-button "Add to an existing Website (VirtualDirectory)".
-
7/24/2019 Webnavigator Wincc Client Siemens
26/156
Configuring the Web Navigator Server 04.04
22 Printout of the Online Help
Web Navigator - Documentation
Editing the Configuration
If the IIS has already been configured, the settings of the existing Web server orvirtual directory can be changed via the WinCC Web Configurator.
The Web Configurator automatically detects an existing configuration and opensthe corresponding dialog box for making changes to the configuration.
Note
The appendix contains the settings made by the WinCC Web Configurator.
If the Website for the WinCC Web Navigator is accidentally deleted, restart thecomputer before creating a new Website with the WinCC Web Configurator.
Please note that if manual changes were made to this Website and the Webcommunication fails afterwards, the Web Configurator will attempt to automaticallycorrect these settings.
If this is unsuccessful, delete the Website from the IIS, restart the computer and
create a new Website with the Web Configurator.At the WinCC Web Navigator Server, only one Website per computer can beactive, since the Web filter (WebFilter.dll) is loaded into the memory of the activeWebsite.If an active Website already exists on the computer - which is to remain active -the Web Navigator Website can be installed as a virtual directory under the activeWebsite.
-
7/24/2019 Webnavigator Wincc Client Siemens
27/156
04.04 Configuring the Web Navigator Server
Printout of the Online Help 23
Web Navigator - Documentation
5.1.1 Creating a new standard Website (Stand-alone)
When selecting the radio-button "Create a new standard Website (Stand-alone)",the following dialog box is displayed.
Name of the Web
site
Specify a name for your Website here, e.g. WebNavigator
Port Here you can specify the connection (port) to be used bythe http protocol for accessing the Internet.
Only numbers ranging from 1 to 65535 may be entered.As a rule, the port numbers up to 1024 are reserved for thesystem. In this field, the http default port of 80 is set.
IP Address Every computer on the Internet possesses a uniqueaddress. The address consists of a group of four numbersthat are separated by periods. The numbers can havevalues ranging from 0 to 255. The address is defined in theWindows Control Panel. You can only use addresses thatare shown in the list-box.
Via the IP address, you can specify whether the computer isto be accessible on the Intranet or Internet or on bothnetworks. For example, via the IP address x.x.x.x, thecomputer is known to the Intranet, via the IP address y.y.y.yto the Internet. If you want to make the computer accessibleonly on the Intranet or Internet, select the correspondingaddress, e.g. for the Intranet, this would be x.x.x.x.
If the computer is to be accessible via the Intranet and theInternet, select "All not assigned".
Default Web siteselection field
Select the standard Web sites here which should bedisplayed on the Web client after selecting the Web server.
-
7/24/2019 Webnavigator Wincc Client Siemens
28/156
Configuring the Web Navigator Server 04.04
24 Printout of the Online Help
Web Navigator - Documentation
Reconnect interval Enter the time interval after which the Web client shouldautomatically start to establish a connection (Reconnect)following a connection breakdown.If the value = 0 is set, the "Automatic connection
establishment" function is deactivated.Start the Web siteafter beingconfigured
Activate this check-box to automatically start the Websitefollowing the configuration.
If this check-box is not activated, the Website has to bemanually started via the Windows console "InternetInformation Services".
Click on the "Finish" button to complete the configuration of the server.
After the configuration has finished, the just created Website (Web NavigatorWebsite) will be active.
-
7/24/2019 Webnavigator Wincc Client Siemens
29/156
04.04 Configuring the Web Navigator Server
Printout of the Online Help 25
Web Navigator - Documentation
5.1.2 Creating a Virtual Directory
When selecting the radio-button "Add to an existing Website (VirtualDirectory)", click on the "Browse" button.
In the next dialog box, select the active Website to which the virtual directory isto be added.
After selecting the active Website, click on "OK" to go back to the previousdialog box. Click on "Next".
-
7/24/2019 Webnavigator Wincc Client Siemens
30/156
Configuring the Web Navigator Server 04.04
26 Printout of the Online Help
Web Navigator - Documentation
Name of theWebsite:
Here you can specify the name of your virtual directory, whichwill be added to the active Website.
Port and IPAddress
The port and the IP address are predefined and cannot beedited. The WinCC Web Configurator reads the data of theactive WinCC Web Navigator Server from the IIS.
Default Websiteselection field
Select the standard Websites here which should be displayedon the Web client after selecting the Web server.
Reconnect interval
Enter the time interval after which the Web client shouldautomatically start to establish a connection (Reconnect)following a connection breakdown.If the value = 0 is set, the "Automatic connectionestablishment" function is deactivated.
Start the Websiteafter beingconfigured
Activate this check-box to automatically start the Websitefollowing the configuration.
If this check-box is not activated, the Website has to bemanually started via the Windows console "InternetInformation Services".
Click on "Finish" to complete the configuration.
To access the Web Navigator, the name of the virtual Web Navigator Websiteneeds to be added to the URL on the client. ( E.g. http://WebServer/WebNavigator)
-
7/24/2019 Webnavigator Wincc Client Siemens
31/156
04.04 Configuring the Web Navigator Server
Printout of the Online Help 27
Web Navigator - Documentation
No active Website
If no active Website is found, the Web Configurator will terminate with a message.
Acknowledge with "OK".
Before running the Wizard again, a Website has to be activated first. Theprocedure to do this is outlined in the chapter "Checking the activated Website".
-
7/24/2019 Webnavigator Wincc Client Siemens
32/156
Configuring the Web Navigator Server 04.04
28 Printout of the Online Help
Web Navigator - Documentation
5.1.3 Checking the activated Website (Web)
Activate the Internet Information Service.
To do so, select "Programs" > "Management" > "Internet Information Services".
In the navigation window, select the computer. In Windows XP, the subfolder"Websites" must also be selected. The data window will display thecorresponding Websites.
Check the entry of the Website. If "Stopped" is displayed next to the desiredWebsite, e.g. "WebNavigator", the Website needs to be started. To do so,right-click on the Website and select the "Start" menu command from the pop-up menu.
Close the dialog.
The Website is now activated.
-
7/24/2019 Webnavigator Wincc Client Siemens
33/156
04.04 Configuring the Web Navigator Server
Printout of the Online Help 29
Web Navigator - Documentation
5.2 Load distribution on Web servers using the "LoadBalancing" function
Overview
The "Load Balancing" function enables Web Navigator Clients to be distributedautomatically to different Web Navigator servers evenly and according to therespective server authorizations. Each Web Navigator server can implement loaddistribution using the "Load Balancing" function. A Web server can be configuredas a distributing Load Balancing server or as a participating Web server. A LoadBalancing server is automatically a participating Web server, too. Within a group ofparticipating Web servers, several can also be configured as Load Balancingservers.
When logging on from a Web client to a Load Balancing server, the Web client is
forwarded to one of the participating Web servers with the least load and accordingto its server license. If the least number of Web clients are logged on to the LoadBalancing server, the new Web client remains connected to it. If a participatingWeb server fails, the Web clients registered on it are automatically routed to one ofthe other participating Web servers. The address of a Web server is independentof the activation of the "Load Balancing" function. The address of a Web serverused prior to activation continues to be valid.
The function must be set up on each of the participating Web servers and LoadBalancing servers. In this case, all Load Balancing servers and participating Webservers are recorded in a list. On a Load Balancing server, the query interval mustalso be set up and its function as a Load Balancing server activated or deactivated.No configuration is necessary on the Web clients.
Licensing
A maximum of 32 Web servers connected to each other can be supported by the"Load Balancing" function.A "Load Balancing" license is required on each participating Web server and LoadBalancing server. No license is necessary on the Web clients.In the case of WinCC computers with WinCC redundancy, a Load Balancingserver or participating Web server can be operated with a "WinCC Redundancy"license and "Load Balancing Step-Up" license.
-
7/24/2019 Webnavigator Wincc Client Siemens
34/156
Configuring the Web Navigator Server 04.04
30 Printout of the Online Help
Web Navigator - Documentation
Example
In the figure, the Web servers 1 to 3 are participating in the "Load Balancing"function. A "Load Balancing" license is installed on these Web servers. Webservers 1 and 2 are configured as Load Balancing servers. When Web client 1 logson to Web server 1 or 2, the client is automatically forwarded to the Web serverwith the lowest load. If the Web server connected fails, Web client 1 is routed toone of the other two Web servers.
Web server 4 is not participating in the "Load Balancing" feature. If Web client 2logs on to this Web server, the logon fail due to a high load level of the server. IfWeb server 4 fails, the client is not forwarded to Web servers 1 to 3 despite the factthat a network connection exists.
Internet options on Load Balancing servers and participating Web servers
In order that the Load Balancing server can distribute the Web clients to other Webservers as they log on, the Load Bearing server must be capable of accessing theparticipating Web servers, and vice versa, via the communication connection. Thismust also be guaranteed even when the connection between Load Balancingserver and participating Web servers is not established via a LAN but via anInternet connection with an interconnected proxy server.
-
7/24/2019 Webnavigator Wincc Client Siemens
35/156
04.04 Configuring the Web Navigator Server
Printout of the Online Help 31
Web Navigator - Documentation
The use of a proxy server may cause the target address of the participating Webserver / Load Balancing servers "http://" to be replaced by"http://" resulting in the Web server addressed not beingfound.To avoid this behavior, each of the servers participating in Load Balancing mustenter the target address of all the other servers in Internet Explorer under in the"Exceptions" field in "Tools > Internet Options > Connections > LAN Settings >Extended".
-
7/24/2019 Webnavigator Wincc Client Siemens
36/156
Configuring the Web Navigator Server 04.04
32 Printout of the Online Help
Web Navigator - Documentation
5.3 Configuring the "Load Balancing" Function
Introduction
The "Load Balancing" function enables Web Navigator Clients to be distributedautomatically to different Web Navigator servers evenly and according to therespective server authorizations.
The function must be set up on each of the participating Web servers and LoadBalancing servers. In this case, all Load Balancing servers and participating Webservers are recorded in a list. On a Load Balancing server, the query interval mustalso be set up and its function as a Load Balancing server activated or deactivated.No configuration is necessary on the Web clients.
Requirements
Implementation of the "Load Balancing" function requires the installation ofWeb Navigator servers and a "Load Balancing" license.
The function requires WinCC V6.0 SP2 or later.
-
7/24/2019 Webnavigator Wincc Client Siemens
37/156
04.04 Configuring the Web Navigator Server
Printout of the Online Help 33
Web Navigator - Documentation
Configuring the "Load Balancing" Function
1. Select the "WebNavigator" entry in WinCC Explorer in the Navigationwindow. Select the "Load Balancing" menu item from the associated pop-upmenu. The "Load Balancing Configuration" dialog opens.
2. Enter the address of a Web server which is to participate in "LoadBalancing" in the top field. Click on the "Add" button. The address entered istransferred to the server list.Repeat the process for each Web server which should participate in "LoadBalancing".
Note
The name of the Load Balancing server must also be entered in the list.The lists on the Load Balancing server and all participating Web serversshould be identical to ensure a uniform functionality should a one of the Webservers fail.
A server name can also be deleted by selecting it in the list and clicking the"Remove" button.
3. Activate the "Enable Load Balancing" checkbox to activate the local Webserver as the Load Balancing server.The checkbox remains deactivated on the participating Web servers.When the checkbox is deactivated, the list of Web servers is still retained.
-
7/24/2019 Webnavigator Wincc Client Siemens
38/156
Configuring the Web Navigator Server 04.04
34 Printout of the Online Help
Web Navigator - Documentation
4. Use the "Polling Interval" field to select the time interval at which the otherparticipating Web servers should be polled.The time is defined in seconds and is only relevant on a Load Balancingserver.
5. Click on the "Save" button to store the entries.Close the dialog box by clicking on "OK".
6. Repeat the process on all the participating Web servers and Load Balancingservers.
Note
The modifications take effect when WinCC Runtime is activated again.
-
7/24/2019 Webnavigator Wincc Client Siemens
39/156
04.04 WinCC Web Navigator Security
Printout of the Online Help 35
Web Navigator - Documentation
6 WinCC Web Navigator Security
Overview
The moment you connect your WinCC Web Navigator Server to another computer,your data is put at a certain risk.
It makes no difference how the connection was established, e.g. via a localnetwork (LAN) or a dial-up connection of an Internet provider. Unauthorizedpersons could access your data. Your transmission could be intercepted,manipulated and misrouted. By providing special security layers to certain folderson your system, you can control the transmission of information.
There a number of important concepts with regard to a safe transaction:
Windows supplies powerful security functions for checking users, for access
control and for monitoring. The WinCC Web Navigator Server, which is based onthe IIS, uses these capabilities of the Windows operating system to providesecurity for its Internet-based services. Windows employs a security model whichhandles the security for all services via a single login process.
By creating user accounts and setting user authorizations for these accounts,administrators can control, which resources and services are available to theusers. The central management at the WinCC Web Navigator Server takes placevia the WinCC User Administrator.
In addition, the WinCC Web Navigator Server supports firewalls. With the help of afirewall, your system can be protected against unauthorized access. Firewallsrequire users to be continuously identified. This identification can take place withthe help of company-approved IP addresses, user IDs and passwords or secure ID
cards and encrypted access passwords that change in certain intervals. Othersupported security mechanisms include routers, proxy servers and VPNs (VirtualPrivate Network).
The most important components for the security of the WinCC Web NavigatorServer are: the Secure Socket Layer (SSL), the Secure HTTP (HTTPS), theWinCC User Administrator, firewalls, secure ID cards.
-
7/24/2019 Webnavigator Wincc Client Siemens
40/156
WinCC Web Navigator Security 04.04
36 Printout of the Online Help
Web Navigator - Documentation
6.1 SSL
SSL is a protocol that ensures the data security between HTTP and TCP/IP. The
standard for the security of Web Browsers and servers on the Internet was definedby the W3C (World Wide Web Consortium). The W3C was formed for establishingcommon norms for the WWW. Additional information can be found on the Internetat http://www.w3c.org.
The SSL performs a security check before establishing a TCP/IP connection. Thischeck sets the security level on which the client and the server agree and whichwill be used for the required connection authenticity confirmations.
While the connection exists, the SSL decrypts and encrypts the data stream of theprotocol used (e.g. HTTP = Hyper Text Transfer Protocol). All information(request/response) is encrypted. This includes information pertaining to theauthenticity confirmation of the HTTP access (user name/password) as well as alldata transmitted by the server to the client.
To use SSL, you - as the operator of the server - require a certificate from acertification authority, e.g. VeriSign.
To request a VeriSign certificate for the Microsoft Server, go tohttp://www.verisign.com.
6.2 HTTPS
HTTPS is an expansion of the HTTP protocol. The SSL protocol establishes asecure connection between two computers, while the HTTPS securely transmitsindividual messages. The communication between the WinCC Web Navigator
Server and Client takes place via the HTTPS protocol.
-
7/24/2019 Webnavigator Wincc Client Siemens
41/156
04.04 WinCC Web Navigator Security
Printout of the Online Help 37
Web Navigator - Documentation
6.3 WinCC User Administrator
The WinCC User Administrator assigns and controls the user access rights to the
Website. Access rights are assigned during the setup of the user.If a user logs on at the system, the WinCC Web Navigator Server will check,whether the user is registered and whether the maximum number of licensed WebNavigator Clients has been reached.
Additional information can be found at the topic "Configuration of the UserAdministration".
6.4 Secure ID Card
The Remote Access Service (RAS) is a service that enables the direct dialup to anetwork, for example, from home. This takes place via the dialup network (remotedata transmission). The RAS server will ask you to enter your card ID and PINnumber. The RAS server will check the data and, if necessary, call back. This
method ensures that only users with valid access data receive access to theserver.
-
7/24/2019 Webnavigator Wincc Client Siemens
42/156
WinCC Web Navigator Security 04.04
38 Printout of the Online Help
Web Navigator - Documentation
6.5 Firewall
General Information
A firewall is a system consisting of hardware and software that is installed at apoint between two networks and only lets authorized communication traffic passthrough. Improper actions are rejected and detected unauthorized attempts can berecorded. Thus, firewall systems are suitable to enforce defined rules with regardto security (security policy). Firewalls are often used when connecting to theInternet, protecting the internal network from the dangers of the Internet.
Principle of Operation
One computer with installed routing software and two interfaces (two network
adapters). The Internet is connected to one interface, the Intranet to the other.
This results in two different networks sharing one computer and providesexceptional security against attacks from the Internet.
Firewall Types
Among others, there are the following types of firewalls:
Filter Firewall
Proxy Server
Filter Firewall:
A filter firewall controls the data stream based on a data package's origin,destination, port and package type information. This information is contained inevery data package. Only selected network traffic can pass through the firewall.
-
7/24/2019 Webnavigator Wincc Client Siemens
43/156
04.04 WinCC Web Navigator Security
Printout of the Online Help 39
Web Navigator - Documentation
Package filters are IT systems (Information Technology Systems) with specialsoftware that filter the information (IP packages) on the transport layer, i.e. theyeither let the information pass through or intercept it according to defined rules.The rules can operate by means of the source or target address as well as thesource or destination port that is typical for the respective Internet service. Manyrouters can also be employed as package filters. Unlike static package filters,dynamic package filters do not possess a defined set of rules, instead, the firewallmodifies the filter in response to certain events.
Proxy Server
Proxy servers permit indirect access to the Internet through the firewall. A proxy isan application for network services that is executed depending on thecommunication of the service and from system to system. The service program ofthe user does not communicate directly with the target system, but with the proxyserver of the firewall. The proxy evaluates the request and determines whether toestablish or deny the connection.
Proxy servers provide user authentication and integrity during the transfer of databetween client and server. The hypertext transfer protocol (http) proxy interceptsconnections from every Web Browser and directs the requests to the configuredWeb Server.
Proxy servers support content filtering. With content filtering, only certain contentsof HTML pages are permitted. In this case, the communication is rerouted via adefined port to an IP address such as the address of the WinCC server. If contentfiltering is active, the Web Navigator communication will no longer function. In thiscase, the use of SSL is recommended.
-
7/24/2019 Webnavigator Wincc Client Siemens
44/156
WinCC Web Navigator Security 04.04
40 Printout of the Online Help
Web Navigator - Documentation
-
7/24/2019 Webnavigator Wincc Client Siemens
45/156
04.04 Structure with the WinCC Web Navigator Server
Printout of the Online Help 41
Web Navigator - Documentation
7 Structure with the WinCC Web NavigatorServer
Introduction
Before connecting your WinCC Web Server to the Intranet/Internet, you mustdevise a concept taking into account your security and system conditions.
7.1 Island Solution
In the above illustration, the Web Clients are not connected to the Intranet, but onlyserve as HMI for the running WinCC project. You can thus economically set upcomputer stations that, for example, serve monitoring or maintenance functions.
-
7/24/2019 Webnavigator Wincc Client Siemens
46/156
Structure with the WinCC Web Navigator Server 04.04
42 Printout of the Online Help
Web Navigator - Documentation
7.2 WinCC Web Navigator Server on the WinCC Server
The WinCC Server and the server component of the WinCC Web Navigator are
installed on one computer. The WinCC Web Navigator Client can control andmonitor the running WinCC project via the Internet as well as the Intranet. WithWinCC Web Navigator Clients, a client-server system can be expanded.
To protect against attacks from the Internet, firewalls are employed. The firstfirewall protects the WinCC Web Navigator Server from Internet attacks, thesecond firewall provides additional security for the Intranet.
7.3 Separation of WinCC Server and WinCC Web NavigatorServer
Communication via Channel
A group of PLCs is assigned to the WinCC Server. The project includes all datasuch as programs, configuration data and miscellaneous settings. On the computerwith the WinCC Server and the WinCC Web Navigator Server, the WinCC projectis mirrored 1:1 and not networked with the PLCs.
The synchronization of the data takes place via the OPC channel (OPC = OLEProcess Control). For this, the WinCC Web Navigator Server requires a license forthe number of OPC tags.
Here as well, two firewalls are employed to protect the system againstunauthorized access. The first firewall protects the WinCC Web Navigator Serverfrom Internet attacks, the second firewall provides additional security for theIntranet.
-
7/24/2019 Webnavigator Wincc Client Siemens
47/156
-
7/24/2019 Webnavigator Wincc Client Siemens
48/156
Structure with the WinCC Web Navigator Server 04.04
44 Printout of the Online Help
Web Navigator - Documentation
7.4 Dedicated Web Server
For the central supply of data to the Web Clients, the installation of a dedicated
Web server is advantageous in larger systems. The dedicated Web serverprocesses and optimizes the accesses of the Web Clients and is available as aproxy of the WinCC Servers to the clients. For this, the dedicated Web Server cansimultaneously access multiple subordinated WinCC Servers. The user gainsaccess to multiple WinCC projects by logging on once to the dedicated Web server(no individual project logons).
The dedicated Web server supports the redundancy switch of two subordinatedWinCC Servers using WinCC Redundancy.
The functionality of the dedicated Web server is available on a WinCC Clientfollowing the installation of the Web Navigator Server.
-
7/24/2019 Webnavigator Wincc Client Siemens
49/156
04.04 Installation of the WinCC Web Navigator Client
Printout of the Online Help 45
Web Navigator - Documentation
8 Installation of the WinCC Web NavigatorClient
Introduction
The following options are available with which to install the WinCC Web NavigatorClient (client side controls).
Installation from the Product CD. In this case, certain Windows user rights arenecessary, depending on the operating system.
Installation via the Intranet/Internet In this case, certain Windows user rightsare necessary, depending on the operating system.
Installation using the group guideline based software distribution in networks.
This can be done without any user interaction and implementing the Windowsuser rights of the current user.
Procedure
The installation is carried out using the following steps:
1. Complete and check the settings of the client computer in Internet Explorer.
2. Installation of the Web Navigator Client
In addition, the Web Navigator Client can also be installed on the Web server. This,for example, is useful, if you want to check your WinCC configuration locally on theserver in the Internet Explorer.
If scripts are used, use the "PdlPad" tool to check the converted process screens inyour WinCC project path under..\WebNavigator\Pictures.
Note
An older version of the Web Navigator Client can be upgraded directly withoutdeinstalling the old Web client. This is possible during the installation from theProduct CD or the group guideline based software distribution.
If the Web Navigator Server is installed after a Web Navigator Client on the samecomputer, the client needs to be reinstalled.
-
7/24/2019 Webnavigator Wincc Client Siemens
50/156
Installation of the WinCC Web Navigator Client 04.04
46 Printout of the Online Help
Web Navigator - Documentation
Windows user rights required for installation and first registration of the Web client
Certain minimum user rights are required for the installation of Web NavigatorClient via Intranet/Internet depending on the operating system. After theinstallation, the client must register under the name used during installation for the
initial registration on the Web server or log on with a higher Windows userauthorization. The connections must be established successfully. Al the followinglogins can then be performed under a different Windows user authorization withpossibly limited rights.
Operating system Minimum user right requirement
Windows 2000 Professional "Power User"
Windows 2000 Server / Adv.Server
"Power User"
Windows 2003 Server "Power User"
Windows XP Home "Administrators"
Windows XP Professional "Power User"
Windows NT Workstation "User";but "Administrators" when system files must beupdated.
Windows NT Server "User";but "Administrators" when system files must beupdated.
Installing the Web client with limited Windows user rights
By using Microsoft Windows Installer technology (MSI), Web clients from VersionV6.0 SP1 can also be installed with limited Windows user rights, i.e. withoutpossessing the "Power user" or "Administrator" rights.
This procedure can be set during the installation using the group guideline basedsoftware distribution in networks.
Even the Add-Ins and Plug-Ins belonging to the Web Navigator client can beinstalled. The minimum user rights described above are also required to installplug-ins, created with WinCC Plug-In Builder.
By using MSI technology, it is also possible to install the Web client for aconfigured group of users or computers.
Installation for a configured group of users or computers
Using the Microsoft Systems Management server or group guideline on a DomainController, it is possible to install a group of users or computers configured by theAdministrator.
To do this, the "WinCCWebNavigatorClient.msi" MSI file is published in theDomain Controller and released for a user group. The installation is thenperformed according to the configuration of the group guidelines basedsoftware distribution either during login of the defined users or when thecomputer is started The Windows NT, Windows 2000 Server or Windows2003 Server operating systems can be used on the Domain Controller.
-
7/24/2019 Webnavigator Wincc Client Siemens
51/156
04.04 Installation of the WinCC Web Navigator Client
Printout of the Online Help 47
Web Navigator - Documentation
When using a Microsoft Systems Management Server, the installation isconfigured by the Administrator, triggered and executed when the relevantcomputer is started. Further information on Microsoft Systems ManagementServer is available in the Internet on the Microsoft Homepage.
Group guideline based software distribution
The software installation is normally executed with the access rights of the currentWindows user. When using MSI technology, the installation is performed by froman operating system service with a higher level of rights. This enable installationsto be performed for which the Windows user has no authorization. Applicationswhich require installations with a higher level of rights are referred to a "privilegedinstallations" in MSI technology. Installation of these applications is possible whena Windows user is assigned the "Always install with elevated privileges" right.
In order to use the group guideline based software distribution, a group guideline iscreated on the Domain Controller and assigned to the distributing software orpublished using Active Directory.
Assignment: The software distribution can be assigned to a user or acomputer. In this case, the software to be distributed is automatically installedwhen the user logs in or the computer is started.
Publication: The software distribution can be published for single users. In thiscase, when the user logs on on the client computer, the software to bedistributed appears in a dialog and can be selected for installation.
Installation without user interaction
During installation of the Web client, the user is normally prompted to enterinformation, such as the target directory, agreement to the software licenseconditions or components to be installed. By implementing a configuration file,
installation is possible without user interaction. The path specification and userinformation necessary are provided in the "WNC.ini" configuration file. The file mustbe in the same folder as the Web client setup.This installation procedure is advantageous when using the group guideline basesoftware distribution.
Installation from the product CD occurs with user interaction.
-
7/24/2019 Webnavigator Wincc Client Siemens
52/156
Installation of the WinCC Web Navigator Client 04.04
48 Printout of the Online Help
Web Navigator - Documentation
The settings predefined in the table are used under the following conditions:
The "WNC.ini" configuration file is missing and there is no correspondingavailable entry in the client registry, e.g. due to another SIMATIC HMI productbeing installed.
Or the installation is performed via the group guideline based softwaredistribution with assignment to the computer.
Information Parameter
Target directory for the WebNavigator Client
WNCDIR="\Siemens\WinCC\WebNavigator\Client "
Target directory for commoncomponents
COMMONDIR=" \Siemens "
User information / User name USERNAME
User information / Organization COMPANYNAME
The "" parameters result from the settings in the registry under the key"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion" :
- "" corresponds to the key "ProgramFilesDir" e.g. "C:\\Programs"
- "" corresponds to the key "CommonFilesDir", e.g."C:\\Programme\\Common Files"
Example of a "WNC.ini" configuration file
[USERINFO]
USERNAME=Integration
COMPANYNAME=Siemens AG
[INSTALLPATH]
COMMONDIR=" C:\Program Files\Common Files\Siemens "
WNCDIR=" C:\Program Files\Siemens\WinCC\WebNavigator\Client "
[FEATURES]
FUNCTIONTRENDCONTROL=0
HARDCOPY=0
WINCCUSERARCHIVES=0
DEU=0
FRA=0
ITA=0
ESP=0
-
7/24/2019 Webnavigator Wincc Client Siemens
53/156
04.04 Installation of the WinCC Web Navigator Client
Printout of the Online Help 49
Web Navigator - Documentation
8.1 Internet Explorer Settings
Introduction
In order to have the full functionality available on the Web Navigator Client, thesecurity settings must be adapted in the Internet Explorer.
Click on "Tools" > "Internet Options" in the Internet Explorer.
Click on the "Security" tab control. Select the corresponding zone, e.g. "LocalIntranet"or "Internet".
Click on "Custom Level".
-
7/24/2019 Webnavigator Wincc Client Siemens
54/156
Installation of the WinCC Web Navigator Client 04.04
50 Printout of the Online Help
Web Navigator - Documentation
Click on the "Enable" radio-buttons for "Script ActiveX controls marked safe forscripting" and "Download signed ActiveX controls".
Click on "OK". Carry out the modifications in the subsequent dialog. Select the "Trusted Sites" icon an and use the "Sites" button to open the
"Trusted Sites" dialog.
Enter the address of the Web server in the "Add this Website to the zone" field.Possible formats and placeholders include "*://157.54.100 - 200","ftp://157.54.23.41", or "http://*.microsoft.com". Deactivate the "Require serververification (https:) for all sites in this zone" checkbox. Click on the "Add"button. Confirm the entry by clicking on "OK".
Select the "Trusted Sites" icon. Click on the "Standard level" button and thenthe "Custom Level" button. Activate the "Activate" option in the "Securitysettings" dialog under "Initialize and script ActiveX controls not marked assafe". Confirm the entry by clicking on "OK".
Close the "Internet Options" dialog by clicking on "OK".
This completes all necessary settings in the Internet Explorer.
-
7/24/2019 Webnavigator Wincc Client Siemens
55/156
04.04 Installation of the WinCC Web Navigator Client
Printout of the Online Help 51
Web Navigator - Documentation
8.2 Installation from the CD-ROM
Requirements
The settings in the topic "Settings in Internet Explorer" apply for installation anduse of the Web Navigator Client.
Depending on the operating system, certain minimum user rights are requiredfor installation of the Web client, as described in the topic "Installing the WebNavigator Client".
Installing the Web Navigator Client from the CD-ROM
Insert the CD-ROM containing the WinCC Web Navigator into the CD-ROMdrive.
The setup program will start automatically after a few seconds, provided thatthe autorun functionality is not disabled.
The setup can also be started manually in case the installation is performedfrom a network drive or the autorun function has been disabled. From theWindows 2000 / XP Start menu, select the "Settings" > "Control Panel" > "Addor remove programs" option and click on the "Add new programs" icon. Thenselect the required installation medium.
The setup program will then be started.
To receive additional information about the WinCC Web Navigator, click on the"Welcome", "Read first", "Display CD-ROM Contents", "Install Software" and"Language Selection" entries.
To install the WinCC Web Navigator, click on "Install Software".
-
7/24/2019 Webnavigator Wincc Client Siemens
56/156
Installation of the WinCC Web Navigator Client 04.04
52 Printout of the Online Help
Web Navigator - Documentation
In the following dialog box, select the entry "WinCC Web Navigator Client".You will be guided step-by-step through the installation.
-
7/24/2019 Webnavigator Wincc Client Siemens
57/156
04.04 Installation of the WinCC Web Navigator Client
Printout of the Online Help 53
Web Navigator - Documentation
8.3 Installation via the Intranet/Internet
Requirements
The settings in the topic "Settings in Internet Explorer" apply for installation anduse of the Web Navigator Client.
Depending on the operating system, certain minimum user rights are requiredfor installation of the Web client, as described in the topic "Installing the WebNavigator Client".
For the installation via the Intranet/Internet, you must have the WinCC WebNavigator Server completely installed, the Internet Information Serverconfigured with the WinCC Web Configurator and be registered as a user inthe WinCC User Administrator.
A WinCC project in runtime must be on the required Web Navigator Server.
Installing the Web Navigator Client via the Intranet/Internet
Access the Internet via your Internet Service Provider.
Enter the address of the WinCC Web Navigator Server in the address bar, e.g."http://www.server_name.de". When installing in a virtual directory, the addresscan be as follows: "http:// www.server_name.de/WebNavigator/".
Log onto the WinCC Web Navigator Server with your user name andpassword.
If you are accessing the WinCC Web Navigator Server for the first time, youwill be prompted to install the WinCC Web Navigator Client. Click on the "Clickhere to install" link. Click on the "Save" button in the "File Download" dialog tostore the client setup on the target computer. It is recommended to save theSetup file because, in the event of a restart of the client computer beingnecessary, the Setup need not be downloaded again.
Note
If the Web Navigator Client was installed previously from the CD-ROM and youwant to install an updated version of the clients via the Intranet/Internet, the clientsetup must also be saved on the target computer.
Leave the Internet Explorer open and open Windows Explorer. Navigate to the
folder in which the Setup file was saved and start the Setup file by doubleclicking on it.
Follow the instructions on the screen and enter the information and settingsnecessary. The client-side controls of the Web Navigator will then be installed.Then close the Setup dialog.
When the installation is completed successfully, the client switches to the WinCCproject currently in runtime.
-
7/24/2019 Webnavigator Wincc Client Siemens
58/156
Installation of the WinCC Web Navigator Client 04.04
54 Printout of the Online Help
Web Navigator - Documentation
-
7/24/2019 Webnavigator Wincc Client Siemens
59/156
04.04 Deinstallation
Printout of the Online Help 55
Web Navigator - Documentation
9 Deinstallation
The WinCC Web Navigator Server and the WinCC Web Navigator Client can be
deinstalled from Windows in the usual manner.
Access "Control Panel" and double-click on the icon "Add/Remove Programs".
Click on the icon "Change or remove Programs".
Select the Web Navigator Server or Client and click on "Remove". Follow theon-screen instructions.
This will remove the WinCC Web Navigator Server/Client from your system.
Note
If you deinstall the WinCC Web Navigator Server, the corresponding authorizationshould also be deinstalled using the "AuthorsW.exe" application. The
authorization can then be reused at a later time. Additional information aboutauthorizations can be found in the WinCC software protection documentation.
-
7/24/2019 Webnavigator Wincc Client Siemens
60/156
Deinstallation 04.04
56 Printout of the Online Help
Web Navigator - Documentation
-
7/24/2019 Webnavigator Wincc Client Siemens
61/156
04.04 Configuration of the User Administration
Printout of the Online Help 57
Web Navigator - Documentation
10 Configuration of the User Administration
10.1 User Administration in the WinCC User Administrator
Introduction
The management of the user rights when employing the WinCC Web Navigatortakes place in the WinCC User Administrator. In it, the users are assigned varioususer authorizations for the HMI. In addition, a start picture and the language can beconfigured for individual users in the "Web Options" area. The WinCC UserAdministrator thus enables the setup of a secure and clear user administration forWinCC and the access via the WinCC Web Navigator.
If a user logs onto the Web Navigator Server with the Web Navigator Client, the
server will check whether the user is registered in the WinCC User Administratorand sends the configured user rights to the Web client for evaluation. During login,the Web server also checks whether the maximum number of licensed Web clientshas been reached. If the user is not registered or the number of licensed clients isexceeded during a login attempt by a Web client, a message will be displayed andno further logins be permitted.
The tasks of the WinCC User Administrator include:
Creation and editing of users and user groups
Assignment and management of access rights
Assignment and management of the start picture and the language for userswith project access via the WinCC Web Navigator
-
7/24/2019 Webnavigator Wincc Client Siemens
62/156
Configuration of the User Administration 04.04
58 Printout of the Online Help
Web Navigator - Documentation
User Authorizations
The following authorizations can be assigned to a user:
Standard authorizations no. 1 to 999
The standard authorizations can be created, edited, deleted and assigned to users.
The name of an authorization indicates what impact the respective authorization isto have, but not how it is actually used.
User hierarchies from PCS7 no. 1 to 8
These user authorizations are available after running the Wizard of the OS projecteditor (Option Basic Process Control). The predefined authorizations cannot bedeleted or edited.
System privileges no. 1000 to 1099
The system privileges are automatically generated by the system and cannot berecreated, edited or deleted. The system privileges can be assigned to a user just
like any other authorization.
System privilege no. 1002 "View only" has a special function when the WinCC WebNavigator is used.
If it is assigned to a user, he or she may only monitor a WinCC project ("ViewOnly") and cannot, for example, acknowledge messages or write to tagsthrough I/O field inputs or script. This authorization is only relevant for the Webclient and does not influence other authorizations assigned to the user. A"Dat@Monitor Web Edition" license is required. If this license is not available,the Web client runs in Demo mode after logging on.
If it is not assigned to a user, this user may operate and monitor a WinCCproject depending on the assigned authorizations. A "Client" license is
required.
Additional information regarding the user administration can be found in the WinCCInformation System at "Working with WinCC" and "Configuration of the UserAdministration". To configure multilingual projects and non-Latin based fonts,information is available under "Working with WinCC" / "Multilingual ProjectConfiguration".
-
7/24/2019 Webnavigator Wincc Client Siemens
63/156
04.04 Configuration of the User Administration
Printout of the Online Help 59
Web Navigator - Documentation
10.2 Setting Web Options for Users
Introduction
For the access to a WinCC project via the WinCC Web Navigator, the user areassigned certain user authorizations in the WinCC User Administrator and settingsconfigured for the start picture and language.
Requirements
The WinCC Web Navigator Server has to be installed for the "Web Options"area to be active in the WinCC User Administrator.
The WinCC project has to be open.
Configuring Web Options
1. In the WinCC Explorer, open the editor "User Administrator".
2. In the navigation window, select the desired user or create a new user.
3. In the table window, the user authorizations existing in the WinCC projectand an already configured assignment to this user are displayed. Check thesetting of system privilege no. 1002 "View only" and make any changesnecessary.If this system privilege is activated, the user may only observe the project(View Only) and a "Dat@Monitor Web Edition" license is required.If this system privilege remains deactivated, the other user authorizations
assigned to the user apply. Check the settings of the other authorizations.
4. Activate the "Web Navigator" checkbox in the table window. The "WebOptions" area appears.
5. In the "Start Picture" field, use the "..." button to select the start picture forthis user. As start picture, only pictures that have been published with theWeb View Publisher on the Web Navigator Server can be selected.
6. In the "Language" field, select the language for this user. Available forselection are the languages installed in WinCC.
7. Close the User Administrator.
Note
A user name can only be assigned once.
Additional information regarding the user administration can be found in the WinCCInformation System at "Working with WinCC" and "Configuration of the UserAdministration".
-
7/24/2019 Webnavigator Wincc Client Siemens
64/156
Configuration of the User Administration 04.04
60 Printout of the Online Help
Web Navigator - Documentation
10.3 Migrating User Data from Older Projects
Introduction
Under the WinCC Web Navigator before Version 6, user rights were managed bythe Web Administrator. Starting with V6 of the Web Navigator, the useradministration takes place with the WinCC User Administrator. Old user data canbe migrated with the "WebNavV6Migration" tool for further use in the WebNavigator V6 or higher.
The migrated, old users are placed under the user group"WebNavigatorUserGroup" by the migration tool. The user authorizations of thisuser group are passed on to the migrated users. If this user group does not yetexist, it will be created by the tool and the processing stopped. After the desireduser authorizations have been assigned to the group, the migration tool can berestarted.
In addition to the password, the migration tool also transfers the user's settingspertaining to the start picture and the language.
Requirements
The WinCC Web Navigator Server has to be installed for the "Web Options"area to be active in the WinCC User Administrator.
The WinCC project into which the user data is to be migrated has to be open.
The WinCC User Administrator for this project is a user group"WebNavigatorUserGroup". The group has been assigned the necessary user
authorizations.
-
7/24/2019 Webnavigator Wincc Client Siemens
65/156
04.04 Configuration of the User Administration
Printout of the Online Help 61
Web Navigator - Documentation
Migrating the User Data
1. In the Windows Explorer, select the WinCC installation folder. Access theassociated subdirectory, "WebNavigator/Server/bin", and start the"WebNavV6Migration.exe" program. The user interface of the tool is onlyprovided in English.
2. In the "Project Name" field, select the project from which the old user data isto be migrated.
3. Confirm the selection with the "OK" button. Users of the old project are thenset up in to open WinCC project in the "WebNabvigatorUserGroup" groupand inherit the user authorizations assigned to the group.If the old user database record cannot be read, an error message will beissued. In this case, the database driver "DAO JetEngine" from the current"Web Navigator" CD-ROM needs to be installed on the computer from whichthe user data is to be migrated into the WinCC project.
4. After the successful migration, a message with the number of migrated
users will be output. This is followed by the inquiry the old database can bedeleted. Select the desired option. The migration tool will close.
5. Open the "User Administrator" editor in WinCC Explorer of the currentproject.Check the settings of the migrated user and adapt them to the currentproject as necessary.
6. Close the User Administrator.
Additional information regarding the user administration can be found in the WinCCInformation System at "Working with WinCC" and "Configuration of the User
Administration".
-
7/24/2019 Webnavigator Wincc Client Siemens
66/156
Configuration of the User Administration 04.04
62 Printout of the Online Help
Web Navigator - Documentation
-
7/24/2019 Webnavigator Wincc Client Siemens
67/156
04.04 Configuration of a Web Project
Printout of the Online Help 63
Web Navigator - Documentation
11 Configuration of a Web Project
Introduction
This chapter describes the configuration of a Web project and special features tobear in mind.
Publish WinCC process screens with the Web View Publisher to compress andadapt the project data. Publishing with the Web View Publisher can takeplace in several ways, depending on the source and target folders of thepublished pictures or the system structure.
Use the "PdlPad" tool to locate errors in the scripts used in the publishedWinCC process screens.
Assume and adapt existing WinCC projects to make them accessible via
Intranet/Internet.
Limitations to be taken into account.
Differences to the WinCC the basic system
Using scripts Special features when using VB Scripts, Global Script, ActionScripts with tag trigger and diagnostics for VBS and Global Script
Multilingual projects and non-Latin fonts
The configuration of foreign language texts, user names, etc., and the use of non-
Latin fonts, e.g. for Asian projects, is performed in the WinCC project. Certainconditions must be fulfilled and settings made. E.g., the desired configurationlanguage or a special font must be installed in the operating system. After installinga language, it must be transferred to the Alarm Logging editor and Text Library sothat the configuration can be made in that language or specific font.
Additional information regarding the user administration can be found in the WinCCInformation System at "Working with WinCC" and "Multilingual ProjectConfiguration". To configure multilingual projects and non-Latin based fonts,information is available under "Working with WinCC" / "Language Support inWinCC".
-
7/24/2019 Webnavigator Wincc Client Siemens
68/156
Configuration of a Web Project 04.04
64 Printout of the Online Help
Web Navigator - Documentation
11.1 Publishing WinCC Process Screens
Introduction
When configuring a Web project, the WinCC process screens are published so thatthey can run on the WinCC Web Navigator Client via the Intranet/Internet.Publishing is performed with the Web View Publisher which automatically makesthe necessary adaptations to the project data.
The following adaptations will be performed:
Compression of the data to achieve the best possible performance on theInternet.
Removal of project-specific data that is not required for the operation.
Conversion of picture windows into an ActiveX component.
Conversion of scripts to make them operational on the WinCC Web NavigatorClient.
The publishing with the Web View Publisher can take place in several ways,depending on the source and target folders of the published pictures or systemstructure.
Publishing on the local computer: The source folder is the current WinCCproject folder and the target folder the subfolder "WebNavigator/Pictures"existing in it.
Publishing on a dedicated Web server by employing the server prefix: Thesource folder is the WinCC project folder on another WinCC computer, which is
predetermined by selecting the server prefix. The target folder is located on theWinCC client in the WinCC project subfolder ".../WebNavigator/Pictures".
Remote publishing: The source and target folders can be located on one ormultiple Web servers. The publisher itself can be started on the Web serverwith the source or target folder or on a third Web server.
Errors During Publishing
If warnings appear or errors occur during publishing, the process screens affectedare marked in the output field of the Web View Publisher. The "PdlPad" tool can bestarted directly in the publisher in order to check the scripts used in the publishedpictures.
A further source of errors can be due to publishing without project functions,described below.
-
7/24/2019 Webnavigator Wincc Client Siemens
69/156
04.04 Configuration of a Web Project
Printout of the Online Help 65
Web Navigator - Documentation
Publishing without project functions
When publishing with the Web View Publisher, the selected project functions arealways published. When publishing without project functions, none of the publishedpictures possesses project functions any longer. The project functions of the last
publishing process are always available in the published pictures and, thus, on theWeb client.The selection of project functions available in the Publisher is dependent on thosein the pictures published in the sam