Industrial IT, 800xa - Information Management, Configuration - 05
Industrial IT, 800xa - Information Management, Configuration - 05
Industrial IT, 800xa - Information Management, Configuration - 05
Argument(1) Description
-name This name is used by certain data access applications to identify a specific
data provider when there are more than one data provider of that type.
Specifically, the -name argument is used by DataDirect when the Use
Channel Numbers option is disabled, and by display scripts that use the
Data statement.
When you connect more than one Data Provider of the same type, each
Data Provider MUST have a unique name. Assigning a new channel number
also assigns a new name. Therefore, if you assign a new channel number,
you are not required to edit the name unless you do not want to use the
assigned default name.
-channel This also uniquely identifies a specific data provider when there are more
than one data provider of that type. The -channel argument is used by
DataDirect when the Use Channel Numbers option is enabled, and by
display scripts that do not use the Data statement.
Default data providers are assigned CHANNEL 0. If an application client
specifies an invalid channel, the application defaults to channel 0. If you do
not want to default to channel 0 in the event of an invalid channel
specification, you must ensure that no data providers are assigned channel
number 0. You must change the channel number of the default data
providers, and do not use channel number 0 for additional data providers.
NOTE: On the Windows 2000 Display Server, the Active Data Object (ADO)
takes the place of the Dynamic Oracle Data Provider and uses the same
channel number.
-server This is the name or IP address of the service provider. For a local node
installation, this should be the name of the local node. If you do not want the
data provider to start automatically when the corresponding Display server is
started, set the value for Server in Arguments to NoNode. NOTE: If the
service provider platform is Windows 2000, in order to use the host name,
the host name must be included in C:\WINNT\system32\drivers\etc\hosts.
(1) For specific arguments for each type of service, see Table 62 for ADSspCOM.EXE, Table 63 for
ADSdpDDR.EXE, Table 64 for ADSdpADO.EXE, Table 65 for ADSdpOPCHDA.EXE, Table 66 for
ADSdpDCS.EXE, Table 67 for ADSdpDCS.EXE, Table 68 for ADSdpOPC.EXE
710 3BUF001092R4001
Section 15 Configuring Data Providers Editing Data Provider Configuration Files
Table 62 describes the arguments that are unique for the ADSspCOM.EXE data
provider. This data provider also has arguments common to all data providers as
described in Table 61.
Argument Description
-server The host name or TCP/IP address where the service provider runs. For a local
node installation, this should be the name of the local node. If you do not want
the service provider to start automatically when the corresponding ADSS is
started, set the value for Server to NoNode.
NOTE: If the service provider platform is Windows 2000, in order to use the host
name, the host name must be included in
C:\WINNT\system32\drivers\etc.
-port The TCP/IP socket port number. Three sockets are used, starting from the one
specified.
Default: 19014
Range: 1000<= n <= 65000
-AliveTimeOut Used to disconnect clients if they are quiet for the time specified.
Default: 60
Range: 0 <= x <= ...
Unit: Seconds
-license_key & These are the license key and text as entered when you install the display
-license_text server, or when you update the license. The key is entered in quotes.
3BUF001092R4001 711
Editing Data Provider Configuration Files Section 15 Configuring Data Providers
Table 63 describes the arguments that are unique for the ADSdpDDR.EXE data
provider. This data provider also has arguments common to all data providers as
described in Table 61.
Argument Description
-server The host name or TCP/IP address where the service provider runs.
For a local node installation, this should be the name of the local
node. If you do not want the data provider to start automatically
when the corresponding ADSS is started, set the value for Server to
NoNode.
NOTE: If the service provider platform is Windows 2000, in order to
use the host name, the host name must be included in
C:\WINNT\system32\drivers\etc.
-port The TCP/IP socket port number. Three sockets are used, starting
from the one specified.
Default: 19014
Range: 1000<= n <= 65000
-datapath This is the path to the directory where the display files reside. The
default is: c:\Program Files\ABB Industrial IT\ Inform
IT\Display Services\Server\Data
-Allow_System_Access This argument is required to support bulk data export for client
applications such as DataDirect. This argument is provided by
default. In addition to this argument, the SYSTEMACCESS user
preference must be enabled. This is the default setting for this
preference.
712 3BUF001092R4001
Section 15 Configuring Data Providers Editing Data Provider Configuration Files
Table 64 describes the arguments that are unique for the ADSdpADO.EXE data
provider. This data provider also has arguments common to all data providers as
described in Table 61.
Argument Description
-server The host name or TCP/IP address where the service provider runs. For a
local node installation, this should be the name of the local node. If you
do not want the data provider to start automatically when the
corresponding ADSS is started, set the value for Server to NoNode.
NOTE: If the service provider platform is Windows 2000, in order to use
the host name, the host name must be included in
C:\WINNT\system32\drivers\etc.
-port The TCP/IP socket port number. Three sockets are used, starting from
the one specified.
Default: 19014
Range: 1000<= n <= 65000
-dbtype This is the type of database to which this data provider connects. The
choices are: MDB, ODBC, and GENERIC. For MDB and ODBC
databases, you must also configure the corresponding username and
password. For GENERIC databases, you must specify the connection
string (-constr argument).
-dbname This is the name or full path to the database. For dbtype MDB, use the full
path. For dbtype ODBC, use the ODBC name.
-user This is the user name for logging into the database. This is required when
the dbtype is ODBC or MDB.
-password This is the password for logging into the database. This is required when
the dbtype is ODBC or MDB.
disallow_sql_write You may add this argument to the argument list to NOT allow any SQL
statements other than those that begin with the SELECT keyword.
-constr This is the full connect string. This is only required when the dbtype is
GENERIC.
3BUF001092R4001 713
Editing Data Provider Configuration Files Section 15 Configuring Data Providers
Argument Description
-CmdTMO <n> This is the command timeout in seconds (n = number of seconds). The
default is 30 seconds
ReConnINT <n> This is the reconnect interval in seconds (n = number of seconds). The
default is 0. When n = 0, reconnect is disabled, otherwise the provider will
attempt connecting the database at the specified interval, until successful
connection or the reconnect timeout period (if specified) is exceeded.
-ReConnTMO <n> This is the Reconnect timeout period in seconds (n = number of
seconds). The default is 0. When n = 0 there's no timeout and the
provider will keep on trying to connect to the database. If the reconnect
timeout period is exceeded, the provider will terminate.
FatalErrors This is a listing of error codes which should be treated as Fatal (for
"<n1>;<n2>;....;<nX example, missing connection to the database). If such an error occurs,
>" the data provider will terminate. The format to specify error codes is a list
of numbers separated by semicolons (;) and enclosed in quotation marks.
For example: -FatalErrors "11; 567;-26"
Entering an asterisk in place of error codes will cause the provider to
terminate at any error. For example: –FatalErrors “*”
-ReturnAllErrors See ReturnAllErrors Argument below.
"TRUE|FALSE"
714 3BUF001092R4001
Section 15 Configuring Data Providers Editing Data Provider Configuration Files
ReturnAllErrors Argument
Normally, on errors the ADO provider returns an array containing:
ADS Error Header DP Error Header DP Error Text
ADS specific Error code Last DP specific Error code Last DP specific Error Text
Some data base providers are capable of generating several errors as a result of one
request. If ‘ReturnAllErrors’ is FALSE (default), only the last error code/text is
returned. If ‘ReturnAllErrors’ is TRUE, the returned array will contain all the error
codes/texts encountered:
ADS Error Header DP Error Header DP Error Text
ADS specific Error code 1st DP specific Error code 1st DP specific Error Text
ADS specific Error code 2nd DP specific Error code 2nd DP specific Error Text
Example:
The connection to the SQL server fails. If ReturnAllErrors FALSE (default):
ADS Error ADO Error Text
-106 11 [Microsoft][ODBC SQL Server Driver][TCP/IP Sockets]
General network error. Check your network documentation.
If ReturnAllErrors TRUE:
ADS Error ADO Error Text
-106 10054 [Microsoft][ODBC SQL Server Driver][TCP/IP Sockets]
ConnectionWrite (send()).
-106 11 [Microsoft][ODBC SQL Server Driver][TCP/IP Sockets]
General network error. Check your network documentation.
3BUF001092R4001 715
Editing Data Provider Configuration Files Section 15 Configuring Data Providers
Table 65 describes the arguments that are unique for the ADSdpOPCHDA.EXE data
provider. This data provider also has arguments common to all data providers as
described in Table 61.
Argument Description
-OPCHDAServer <xxx> ProgID for OPCHDA server.
If you are using the AIPOPCHDA Server, the Server ProgID is
ABB.AfwOpcDaSurrogate.
If you are using the IMOPCHDA Server, the Server ProgID is
HsHDAServer.HDAServer.
-OPCHDAServerHost <xxx> H Host name of the PC where the OPCHDA server resides. This
is only required if OPCHDA server is on a remote host.
-ALLOW_LOG_WRITE If this argument is not specified, clients cannot write to history
logs. In addition to this argument, the LOGWRITE user
preference must be enabled. The default setting for this
preference is disabled. For details on how to set this user
preference, refer to Configuring User Preferences on page 758.
-Browser_Separator This applies to the AIPHDA data provider and is used when an
Aspect System has properties being historized whose name
contains the forward slash (/) character, or whose ancestor
objects contain that character. One application for this is the
Harmony Connectivity Server where the default separator
cannot be used.
The OPCHDA browser uses the forward slash character as a
separator by default, and will not parse objects and properties
correctly if they use this character. In this case, the OPCHDA
browser must use a different separator character. The
supported separator characters are "/", "\","-" , "," and ".".
As an example, to declare the backslash as the separator, add
the argument as follows: -Browser_Separator \
For Aspect Systems where the / character is not used in the
property names nor in ancestor object names, no change in
configuration is necessary.
716 3BUF001092R4001
Section 15 Configuring Data Providers Editing Data Provider Configuration Files
Table 66 describes the arguments that are unique for the ADSdpDCS.EXE data
provider. This data provider also has arguments common to all data providers as
described in Table 61.
Argument Description
server The host name or TCP/IP address where the service provider runs. For
a local node installation, this should be the name of the local node. If
you do not want the data provider to start automatically when the
corresponding Display server is started, set the value for Server to
NoNode.
NOTE: If the service provider platform is Windows 2000, in order to use
the host name, the host name must be included in
C:\WINNT\system32\drivers\etc.
-port The TCP/IP socket port number. Three sockets are used, starting from
the one specified.
Default: 19014
Range: 1000<= n <= 65000
-name This is the assigned name for the data provider.
-Allow_Object_Write If this argument is specified, clients can write to process objects. If this
argument is not specified, write transactions are not allowed.
In addition to this argument, the OBJECTWRITE user preference must
be enabled. The default setting for this preference is disabled.
For details on how to set this user preference, refer to the section on
configuring user preferences in Configuring User Preferences on page
758.
3BUF001092R4001 717
Editing Data Provider Configuration Files Section 15 Configuring Data Providers
Table 67 describes the arguments that are unique for the ADSdpLOG.EXE data
provider. This data provider also has arguments common to all data providers as
described in Table 61.
Argument Description
server The host name or TCP/IP address where the service provider runs. For
a local node installation, this should be the name of the local node. If
you do not want the data provider to start automatically when the
corresponding Display server is started, set the value for Server to
NoNode.
NOTE: If the service provider platform is Windows 2000, in order to use
the host name, the host name must be included in
C:\WINNT\system32\drivers\etc.
-port The TCP/IP socket port number. Three sockets are used, starting from
the one specified.
Default: 19014
Range: 1000<= n <= 65000
-name This is the assigned name for the data provider.
LogHandler
-Allow_Log_Write If this argument is specified, clients can modify existing log entries, and
add new log entries. If this argument is not specified, write transactions
are not allowed.
In addition to this argument, the LOGWRITE user preference must be
enabled. The default setting for this preference is disabled.
For details on how to set this user preference, refer to the section on
configuring user preferences in Configuring User Preferences on page
758.
718 3BUF001092R4001
Section 15 Configuring Data Providers Editing Data Provider Configuration Files
Table 68 describes the arguments that are unique for the ADSdpOPC.EXE data
provider. This data provider also has arguments common to all data providers as
described in Table 61.
Argument Description
-OPCprogID <xxx> Logical name for OPC server.
For remote OPC servers such as Symphony, Freelance, or SattLine, use
the Data Provider Configuration Wizard to get this information. For details,
refer to Configuring Access to Realtime OPC Data on page 684.
-OPChost <xxx> Host name of the PC where the OPC server resides. This is only required if
OPC server is on a remote host. Do not specify if OPC server and data
provider are on the same host.
For remote OPC servers such as Symphony, Freelance, or SattLine, use
the Data Provider Configuration Wizard to get this information. For details,
refer to Configuring Access to Realtime OPC Data on page 684.
-Allow_Object_Write If this argument is specified, clients can write to OPC objects. If this
argument is not specified, write transactions are not allowed.
In addition to this argument, the OBJECTWRITE user preference must be
enabled. The default setting for this preference is disabled.
For details on how to set this user preference, refer to the section on
configuring user preferences in Configuring User Preferences on page
758.
-EventUpdateRate There is no event subscription on OPC, but a low update rate can simulate
<nnn> this. Default: 250, Unit: milliseconds
-EventDeadBand Percent of difference between low and high engineering units range of
<nnn> analog values. (EU values are specified on the OPC server). Default: 0.00,
Unit: Percent
-CacheWrites If true, the OPC initialization and setup for write commands will never be
removed, resulting in better performance for following writes to the same
object. This uses more memory. Default: Not specified not cached). Range:
Specified | Not specified
3BUF001092R4001 719
ADO Data Provider for Oracle Access Section 15 Configuring Data Providers
Argument Value
-port 19014
-channel 0
-pass history - Password for the history user.
-server localhost
-dbtype ODBC
-ReconnINT 10 - Retry interval (in seconds) for reconnecting to the Oracle database if the
data provider is disconnected from the Oracle database.
-user history - Username for the history user.
-dbname Defaults to localhost. DO NOT change this specification
-name DBA
-FatalErrors “03114” (quotation marks required) - Indicates that oracle error code “03114” for
disconnect will be considered fatal.
720 3BUF001092R4001
Section 15 Configuring Data Providers Starting and Stopping Providers
3BUF001092R4001 721
Checking Display Server Status Section 15 Configuring Data Providers
This displays a dialog for specifying the server hostname, Figure 553.
Enter the hostname, then click OK. As an option you can specify the maximum time
to wait for the server to respond.
722 3BUF001092R4001
Section 15 Configuring Data Providers Checking Display Server Status
This window provides the following information related to the Display Server:
License Text This field indicates the license text.
License Will This indicates when the current license is scheduled to
Expire expire. After you enter the permanent license, this should
indicate your permanent license will never expire.
Started This field indicates when the server was started.
Facilities This is not applicable at this time.
3BUF001092R4001 723
Checking Display Server Status Section 15 Configuring Data Providers
724 3BUF001092R4001
Section 16 Authentication
3BUF001092R4001 725
Section 16 Authentication
726 3BUF001092R4001
Section 16 Authentication Configuring Authentication
Configuring Authentication
Authentication may be configured on an individual basis the operations associated
with aspect categories. These aspect categories are located in the Aspect System
structure. Table 70 lists the operations for which authentication may be configured.
The operations are listed by aspect category, which are grouped by aspect system.
Authentication is configured via an aspect category’s Inform IT Authentication
Category aspect. Typically, this aspect already exists in the aspect category’s aspect
list, and all operations will be preset to None. It this case, you may change the
authentication level for an aspect category operation by displaying the aspect’s
configuration view, selecting the operation, selecting the authentication level, and
then clicking Apply. This is illustrated in Figure 556.
2) Select an
Operation
3) Select the
Authentication
Level
3BUF001092R4001 727
Configuring Authentication Section 16 Authentication
If the Inform IT Authentication Category aspect does not yet exist, you must add it
to the aspect category’s aspect list. If the list of operations for the aspect category is
not complete, you may add any missing operations. To do this, click Add, then enter
the operation name and click OK, Figure 557.
728 3BUF001092R4001
Section 16 Authentication Configuring Authentication
3BUF001092R4001 729
Configuring Authentication for Aspects Related to Softpoint Configuration Section 16 Authentication
730 3BUF001092R4001
Section 16 Authentication Configuring Authentication for Aspects Related to Softpoint Configuration
This will enable authentication for all aspect categories which have been
configured to be enabled. If you had set the Advanced Access Control to false to
disable authentication on those aspect categories, they will now be enabled.
3BUF001092R4001 731
Configuring Authentication for Aspects Related to Softpoint Configuration Section 16 Authentication
d. Check the check box for the authentication level that you desire:
Re-authentication Required or Double Authentication Required.
732 3BUF001092R4001
Section 17 System Administration
3BUF001092R4001 733
Section 17 System Administration
734 3BUF001092R4001
Section 17 System Administration
Managing Users
The Information Management installation creates default user accounts and user
groups. If you need to add, remove, or otherwise edit any user accounts, see
Managing Users on page 744.
Certain Windows and Oracle users installed with your system should have their
default passwords changed in order to prevent unauthorized access. For details, see
Securing Your System on page 748.
3BUF001092R4001 735
Start-up and Shutdown Section 17 System Administration
Once History Services has been started and is collecting data, if you
need to restart or shut down your PC, you MUST first stop PAS.
PAS will perform an orderly shutdown of the ABB software and
any user processes under its supervision. Failure to stop PAS before
you restart or shut down your PC will result in loss of History data,
and may corrupt History data files.
The Process Administration Service window, Figure 562, lets you shut down ABB
processes independent of Windows.
736 3BUF001092R4001
Section 17 System Administration PAS Window
PAS Window
To access the PAS window you must be logged in as an Domain Administrator-level
user, or a user in the PAS operator list. To open the PAS window, from the
Windows task bar, choose: Start>Settings>Control Panel>Administrative Tools
>PAS>Process Administration.
This window is for starting and stopping all processes under PAS supervision. It
also provides access to advanced functions for debugging.
The process list shows all processes specified in the Windows registry under
HKEY_LOCAL_MACHINE\SOFTWARE\ABB\PAS\Startup. The information
provided in this list is described in Table 71. PAS Window controls are described in
Table 72.
Field Description
Process Name Name of the processes.
Supervision Enabled When a process is removed from PAS supervision (Advanced Functions
or Disabled on page 738), an X icon is placed to the left of the process name.
Process State State of the supervised process, normally Started or Stopped.
Priority Order in which processes run. When the processor is busy, this
determines which processes will be run at all.
3BUF001092R4001 737
Starting and Stopping All Processes Section 17 System Administration
Button Description
Start All/Stop All Start or stop all processes. See Starting and Stopping All Processes.
Restart All Stop and then restart all processes.
Reset Resets failed processes to the Stopped state.
Refresh Clears the process list and queries PAS for the current process list. This
may be used if the list gets out of sync with the PAS internal state.
Advanced>> Expands the window to show controls for advanced functions. See
Advanced Functions on page 738.
Connect This button is only visible when the PAS window is disconnected from PAS.
If this occurs, use this button to reconnect the PAS window to PAS
Advanced Functions
Click Advanced>> in the PAS Window to show the Advanced functions,
Figure 563.
738 3BUF001092R4001
Section 17 System Administration Advanced Functions
3BUF001092R4001 739
Advanced Functions Section 17 System Administration
Button Description
Start Process/Stop Start or stop the selected process.
Process CAUTION: PAS does not perform dependency checks before
starting/stopping an individual process. Therefore you should
generally stop or start all processes rather than individual processes.
Disable/Enable This button alternately disables and re-enables PAS supervision for a
Administration process. For example, if a process fails to start for some reason, you
may want to remove it from PAS supervision so as not to affect the
start-up of other processes. This is generally used for troubleshooting.
Reinitialize Settings This is for technical support personnel. It is used when the registry
information for a process has been changed. When this occurs, the
process must be reinitialized in order for the changes to take effect.
740 3BUF001092R4001
Section 17 System Administration Advanced Functions
Button Description
Stop PAS/Start PAS Start PAS starts PAS. If Autostart flag in the registry is set or is not
specified, PAS will begin the Start All sequence as soon as it starts.
Stop PAS stops PAS. Before PAS service stops, it will shutdown all
processes including the ones that have disabled administration.
NOTE: Only Domain Administrator users are permitted to start/stop
the PAS service. Users specified in the PAS Operator list are not
permitted to start/stop PAS.
Global Reinitialize This command can only be issued when all processes are stopped.
It tells the PAS service to completely erase all its data structures and
reinitialize them with current registry settings. Any changes in the
registry including PAS global setting, Node Type, and individual
process settings will take effect when this command is issued.
Send Message This displays a dialog for sending messages as an alternative
method for interacting with the PAS service, Figure 564. You can
also read the messages that have been sent to a process. This
functionality is generally reserved for debugging by technical
support personnel.
View Logs Displays execution log for PAS service.
3BUF001092R4001 741
Stopping Oracle Section 17 System Administration
Stopping Oracle
To stop Oracle you must stop the Windows services for the Oracle database instance
and Listener. This is done via the Services utility in the Administrative Tools on the
Windows Control Panel. To do this:
1. First launch the Services utility as shown in Figure 565.
742 3BUF001092R4001
Section 17 System Administration Stopping Oracle
3BUF001092R4001 743
Managing Users Section 17 System Administration
Managing Users
This section describes how to manage user access for the Information Management
server. User access is handled on four levels:
• Windows User - The PC where the server software is installed requires you to
log on with a Windows username and password. Windows users are created
and managed via the User Manager on the Windows control panel. A default
user configuration is created by the Windows 2000 installation. Other
Windows users may be created by the installing user as described in the section
on creating users and groups in Industrial IT 800xA System Installation.
The Information Management and Oracle software installations create
additional users and groups. These are described in Windows Users and Groups
for Information Management on page 745.
• Oracle Access - Oracle user authority is required by certain Information
Management processes for access to the Oracle database. A default user
configuration is created by the Information Management and Oracle software
installations. These users are described in Oracle Users on page 747.
• Display Client Users - Standard user files are provided for the desktop
applications - DataDirect, Desktop Trends, and Display Client. You can create
additional users by copying and renaming an existing user file. You can also
specify new passwords, configure user preferences, and customize language
translations. See Managing Users for Display Services on page 753.
You should change the default passwords for certain Windows users
and Oracle users immediately after installing the Information
Management software. This is to protect your system from
unauthorized access. Guidelines are provided in Securing Your
System on page 748.
744 3BUF001092R4001
Section 17 System Administration Windows Users and Groups for Information Management
ocshis User
This user is created by the Information Management software installation It is used
by Information Management processes that require Oracle access. This user is
assigned to the ORA_DBA, HistoryAdmin, and Administrator user groups. It is
recommended that you change the default password for the ocshis user as soon as
possible. This procedure is described in Securing Your System on page 748.
3BUF001092R4001 745
Windows Users and Groups for Information Management Section 17 System Administration
HistoryAdmin Group
This group is created by the Information Management software installation. Users
in this group have access to History configuration and History database
maintenance functions. These users can access History database maintenance
functions and other Information Management administrative procedures seamlessly
without having to change users, or enter Oracle passwords.
This group is included in the PAS OperatorList by default. This grants all users in
the HistoryAdmin group access to PAS, even if these users are not Domain
Administrator-level users. This enables HistoryAdmin users to start and stop PAS
services as required by certain History database maintenance functions.
To grant HistoryAdmin users access to History database configuration, but deny
access to PAS, you must remove this group from the PAS OperatorList. Instructions
for editing the PAS OperatorList are provided in PAS OperatorList on page 751.
ORA_DBA Group
This group is created by the Oracle software installation. Users in this group have
Oracle access for database maintenance functions. Such access is generally reserved
for technical support personnel.
746 3BUF001092R4001
Section 17 System Administration Oracle Users
Oracle Users
The default Oracle user configuration created by the Oracle and Information
Management software installations is described in Table 75.
User(1) Description
SYS Created by Oracle.
SYSTEM Created by Oracle.
OUTLN Created by Oracle.
DBSNMP Created by Oracle.
HISTORY This user is created when the Oracle database instance is created.
This user has read access to Oracle tables and views.
OPS$OCSHIS This is an Oracle user account created for the ocshis Windows user.
OPS$_____ This is an Oracle user account created for the Windows user that
installed the Information Management software. This user account is
classified as EXTERNAL, meaning it does not have an Oracle
password. When you are logged in as the Windows user that installed
the Information Management software (for example, tar238), to log
into Oracle, you merely have to enter a slash(/) following the sqlplus
command, for example sqlplus /.
(1) Since Information Management users are not licensed for write access to Oracle tables, the HISTORY
user account is the only Oracle user that operators should use.
You are not required to alter this default Oracle user configuration; however, it is
strongly recommended that you change the default passwords for all Oracle users
with the exception of the HISTORY user, and users whose password is indicated as
EXTERNAL. This procedure is described in Securing Your System on page 748.
3BUF001092R4001 747
Securing Your System Section 17 System Administration
748 3BUF001092R4001
Section 17 System Administration Securing Your System
3BUF001092R4001 749
Securing Your System Section 17 System Administration
2. Select the ocshis user and click Set Password, Figure 571.
3. Enter the new password for ocshis, enter it again to confirm, then click OK,
Figure 571.
750 3BUF001092R4001
Section 17 System Administration PAS OperatorList
PAS OperatorList
OperatorList is a configuration parameter for the PAS Service in the Windows
Registry. This parameter specifies a list of groups and users other than Domain
Administrator-level users who can use the PAS window to start and stop processes
under PAS supervision. Groups and users in this list have complete access to all
functions in the PAS window, except starting and stopping the PAS service itself.
Only Domain Administrator users can start and stop PAS. You can edit this list to
grant/deny users and groups access to PAS.
2. Navigate to the location in the registry where the processes under PAS
supervision are specified -
HKEY_LOCAL_MACHINE\SOFTWARE\ABB\PAS, Figure 573.
3BUF001092R4001 751
PAS OperatorList Section 17 System Administration
752 3BUF001092R4001
Section 17 System Administration Managing Users for Display Services
3BUF001092R4001 753
Creating New Users Section 17 System Administration
When you copy and rename a folder, the user name is the second
word in the name (following the underscore, for example in
AID_aid.svg, the user name is aid).
When you create a new user, you should create a unique password for that user. See
Creating User Passwords on page 755.
You may also want to configure user preferences and/or customize language
translations for that user. See Configuring User Preferences on page 758, and
Customizing Language Translations on page 763.
754 3BUF001092R4001
Section 17 System Administration Creating User Passwords
This displays the Create Password dialog. Enter the new password in the Typed
Password field. The encrypted password key is displayed in the AdvaInform
Display Password field, Figure 577.
3BUF001092R4001 755
Creating User Passwords Section 17 System Administration
756 3BUF001092R4001
Section 17 System Administration Creating User Passwords
To enter the new password, open the Preferences.svd file with a text editor,
and then edit the file. An example is shown in Figure 579.
You can copy the value from the AdvaInform Display Password
field and then paste it in the Preferences.svd file, or simply enter the
value directly.
3BUF001092R4001 757
Configuring User Preferences Section 17 System Administration
RO = Read Only
RW = Read/Write
Any changes you make to user preferences will not take affect until
you restart the computer.
758 3BUF001092R4001
Section 17 System Administration Configuring User Preferences
3BUF001092R4001 759
Configuring User Preferences Section 17 System Administration
760 3BUF001092R4001
Section 17 System Administration Configuring User Preferences
3BUF001092R4001 761
Configuring User Preferences Section 17 System Administration
762 3BUF001092R4001
Section 17 System Administration Customizing Language Translations
The first time you log in using a custom language, you will be prompted to define
any unknown text strings, Figure 583. You can either define the strings at this time,
skip some strings on an individual basis, or skip all definitions at this time.
3BUF001092R4001 763
Customizing Language Translations Section 17 System Administration
To customize the language, choose User > Language from the menu bar and then
use the Edit Language dialog, Figure 584.
The Texts list displays the English version of all text used in the user interface.
Selecting a text line from the list displays the translation for that text according to
the language you have chosen for this session. English text is the default. Edit the
translation in the Translation field, and then click Apply.
764 3BUF001092R4001
Section 17 System Administration Customizing Language Translations
3BUF001092R4001 765
Checking Display Server Status Section 17 System Administration
This displays a dialog for specifying the server hostname, Figure 586.
Enter the hostname, then click OK. As an option you can specify the maximum time
to wait for the server to respond.
Leaving the hostname blank defaults to localhost.
766 3BUF001092R4001
Section 17 System Administration Checking Display Server Status
3BUF001092R4001 767
Checking Display Server Status Section 17 System Administration
768 3BUF001092R4001
Section 17 System Administration Software Version Information
This displays the Version Information window, Figure 589. To save the version
information to a text file, choose File>Save As and specify the text file path.
3BUF001092R4001 769
Handling PDF (Acrobat Reader) Documents Section 17 System Administration
If the configuration needs to be changed, click the Advanced button. Then use the
Edit File Type dialog to specify AcroRd32.exe as the application to perform the
Open, Print, and Printto actions, Figure 591.
770 3BUF001092R4001
Section 17 System Administration Handling PDF (Acrobat Reader) Documents
3BUF001092R4001 771
Disk Maintenance - Defragmenting Section 17 System Administration
772 3BUF001092R4001
Appendix A Terminology
The following is a list of terms related to the 800xA system. The list contains terms
and abbreviations that are unique to ABB or have a usage or definition that is
different from standard industry usage.
Term Description
ActiveX Microsoft standard for user interface components, based on definition of
software interfaces.
Aspect An aspect is a description of some properties of a real world entity. The
properties described could be mechanical layout, how the object is controlled,
a live video image, name of the object etc. In the Aspect Integrator Platform is
an aspect residing in an aspect object. Some examples of aspects are circuit
diagram, process display and control logic.
Aspect Category A specialization of an aspect type. For example, the aspect type Graphic
Display includes the categories Overview, Group and Object Display.
Aspect Integrator A collection of software that forms the basis for an Industrial IT System, and
Platform provides the development and execution environment for Industrial IT
Compliant applications. The Aspect Integrator Platform includes the Aspect
Framework.
Aspect Objects A computer representation of a real world entity like a pump, a valve, an order
or a virtual object like a service. This computer representation is implemented
by the Aspect Integrator Platform. An aspect object works like an information
container for it’s aspects.
3BUF001092R4001 773
Appendix A Terminology
Term Description
Aspect Object An aspect object type defines certain characteristics that are shared between
Type several aspect object instances, such as a basic set of common aspects. This
makes it possible to create and efficiently re-use standardized solutions to
frequently recurring problems. For example, rather than building an aspect
object from scratch for every valve in a plant, you can define a set of valve
types, and then create all valve objects of these instances.
Aspect Server A server that runs the central functions of the aspect object architecture, such
as Aspect Directory, Structure and Name Server, Cross Referencing, File Set
Distribution, etc. The Aspect Server is normally used as Windows domain
controller for the control and client/server networks.
Aspect System A software system, which implements one or several aspect types by
providing one or several aspect system objects.
Client Client is the part of the software that supply data to a subscriber.
Client/Server A client/server network is used for communication between servers, and
Network between workplaces and servers.
COM Microsoft’s Common Object Model that is used for exchanging information
within the Windows 2000 system.
Connectivity Connectivity components, up-loader, supporting aspect systems (e.g for the
Product configuration), and graphical elements, faceplates, aspect object types, etc.,
bundled together to provide the integration of a certain type of devices into the
Industrial IT system.
Connectivity A server that provides access to controllers and other sources for real-time
Server data, historical data, and alarm and event data. A Connectivity Server runs
services related to OPC/DA, APC/AE, OPC/HAD and SysMag.
Faceplate A faceplate is an aspect that provides a graphical representation of a certain
aspect object, with presentation of certain properties related to the object, and
mechanism for operator interaction such as on/off, increase/decrease, etc.
aspect object types often include several faceplate aspects, providing different
presentation and interaction possibilities.
774 3BUF001092R4001
Appendix A Terminology
Term Description
Graphic Display A graphic display is an aspect that provides a visual presentation. It consists
of static graphics representing for example tanks, pipes etc., and graphic
elements that present dynamic information. Graphic displays are often used to
present the state of a process or a part of a process, but are useful in any
context where dynamic graphical information is needed.
Industrial IT Industrial IT is the umbrella concept for ABB’s vision for enterprise
automation.
Industrial IT A computer system that implements (part of) the Industrial IT vision. Aspect
System Integrator Platform is an example of such a system.
Node A computer communicating on a network e.g. the Internet, Plant, Control or IO
network. Each node typically has a unique node address with a format
depending on the network it is connected to.
OMF ABB proprietary software that supports creation of and access to History and
Process objects in the ABB OCS. For detailed information regarding OMF
objects, refer to the AdvaInform Object Types Reference Manual.
OPC An application programming interface defined by the standardization group
OPC Foundation. The standard defines how to access large amounts of real-
time data between applications. The OPC standard interface is used between
automation/control applications, field systems/devices and business/office
application.
Plant Explorer An application that is used to create, delete and organize aspect objects and
aspects within the Aspect Integrator Platform. The plant explorer organizes
the aspect objects in structures according to functionality, location etc.You can
also use it to browse and search the structures of the plant.
Process Portal A Product containing functionality for efficient control and supervision of an
automated process. Key functions are presentation of process graphics,
process dialogs and presentation of alarms and trends.
Permission A permission groups a set of operations that require the same authority. For
each operation defined for an aspect, the aspect category specifies the
permission needed to use that interface.
Process Object A process concept/equipment e.g. valve, motor, conveyor or tank.
3BUF001092R4001 775
Appendix A Terminology
Term Description
Product Family A range of products within a Product Suite, forming a scalable offering.
Examples: a range of controllers, a family of I/O Products.
Product Suite Product with similar functionality are kept together in a suite. Suite names
have a superscripted IT-suffix. Examples: Operate IT , Control IT , Integrate IT
etc. Property A data field on an aspect of an aspect object that can be
accessed through OPC using the standard Aspect
Object reference A data field on an ActiveX control accessible from the Visual Basic editor.
syntax.
Security Security controls a user’s authority to perform different operations on aspect
objects, depending on several parameters: • The user’s credentials, as
provided by Windows • The node where the user is logged in. This makes it
possible to give a user different authority depending on where he/she is
located, e.g. close to the process equipment, in a control room, or at home
accessing the system through Internet. • The operation the user wants to
perform the operation on.
Server A node that runs one or several Afw Services. It is the part of the software that
supply data to a subscriber.
Structure A hierarchical tree organization of aspect objects. Each structure is used to
define a certain kind of relation between aspect object. The functional
structure defines how a function can be divided into sub functions, the location
structure defines how different objects are located within each other. The
control structure defines how functions are executed by tasks, controllers etc.
An aspect object can be located in several structures, for example both in a
functional structure and in a location structure.
System A software package that provides functionality in the Industrial IT System.
Application System applications cooperate according to rules defined by the Industrial IT
architecture, using mechanism provided by the Aspect Integrator Platform.
They are normally bundled into System Products. To participate in aspect
object operations, and thus be an integrated part of an Industrial IT system, a
system application must present itself as an aspect system. When there is no
risk for confusion with user application, the term application may be used
instead of system application.
776 3BUF001092R4001
Appendix A Terminology
Term Description
System A system Extension consists of one or more applications that are bundled as
Extension an extension to one or several existing System Product(s). A System
extension can only be installed if (one of) the corresponding System
Product(s) has been installed previously.
System Product A system product consists of applications bundled together with relevant parts
of the Aspect Integrator Platform. It is complete from installation point-of-view,
and requires only Windows 2000. Several System Products can be installed
on the same physical node.
Uploader An upload is used to import a configuration from devices, to read in and build
a set of aspect objects from information present in the devices.
User application A configuration of software and hardware components that applies to a
specific problem, e.g. a specific process control problem. A user application
consists of a set of simple and composite Aspect Object instances, with
parameter values and other configuration data for the aspects, e.g control
logic, process graphics, alarm and event specifications, reports etc.
View An Aspect can have several ways to be presented depending on the task
performed, like viewing or configuration. Each presentation form is called a
view.
Workplace 1. User interactive functions that are combined for a particular use, e.g,
Operator Workplace. 2. A node that runs one or several workplace
applications.
3BUF001092R4001 777
Appendix A Terminology
778 3BUF001092R4001
Appendix B Extending OMF Domain to TCP/IP
Certain Information Management functions require you to extend the OMF domain
to the TCP/IP network and all other ABB nodes that exist on the TCP/IP network.
Some of these functions are:
• consolidating history data from different Information Management servers.
• using one Information Management server to schedule event-triggered data
collection for logs that reside on a different node.
• using a Display client to view History trend data for any Information
Management node within the OMF domain.
The OMF TCP/IP domain can be defined by Multicast communication, point-to-
point communication, or a combination of Multicast and point-to-point
communication. Example applications are described in:
• OMF TCP/IP Domain with Multicast Communication
• OMF TCP/IP Domain with Point-to-Point and Multicast
• OMF TCP/IP Domain with Point-to-Point Exclusively
3BUF001092R4001 779
Appendix B Extending OMF Domain to TCP/IP
The default address is okay for systems that have their own TCP/IP
network (for small plants with no company intranet). For large
companies with complex intranets connecting multiple sites, the
default address is NOT recommended.
226.1.3.4 DI AI
Primary History Logs-> 226.1.3.4 PLCs
EH - 2
(HP- UX) EH - 3
(2000)
226.1.3.4
226.1.3.4
Figure 592. Example System Configuration Using Multicast Only to Establish Domain
780 3BUF001092R4001
Appendix B Extending OMF Domain to TCP/IP
Any valid address may be selected and assigned to each of the Information
Management nodes that are required to be in the same Domain. Some companies
have the network administrator maintain control over usage of Multicast addresses.
This helps prevent crossing of Multicast defined Domains, and the problems that
may result.
Once you have defined the OMF TCP/IP Domain where your Information
Management node will reside, use the Communication Settings dialog to enable the
OMF TCP/IP socket, and assign the Multicast address. Use the following three
fields in the lower left corner of this dialog: TCP/IP Multicast enabled, Multicast
address, MulticastTTL. This procedure is described in Configuring OMF for
TCP/IP on page 789.
3BUF001092R4001 781
Appendix B Extending OMF Domain to TCP/IP
Domain 1 Domain 2
EH1 EH1 - EH3
EH1 - EH2
Multicast Address = 226.1.3.4
IP Address = 172.28.66.190
TCP/IP Network
EH2 EH3
782 3BUF001092R4001
Appendix B Extending OMF Domain to TCP/IP
3BUF001092R4001 783
Appendix B Extending OMF Domain to TCP/IP
Domain 1 Domain 2
EH1 EH1 - EH4
EH1 - EH2 - EH3
Multicast Address = 226.1.3.4
IP Address = 172.28.66.190 Bridge Gateway w/
Multicast Disabled
TCP/IP Network
784 3BUF001092R4001
Appendix B Extending OMF Domain to TCP/IP
3BUF001092R4001 785
Appendix B Extending OMF Domain to TCP/IP
Domain 1 EH1
EH1 - EH2 - EH3
IP Address = 172.28.66.190
TCP/IP Network
EH2 EH3
786 3BUF001092R4001
Appendix B Extending OMF Domain to TCP/IP Configuring TCP/IP Protocol
Do not enable the TCP/IP socket unless you are using this
functionality. If the TCP/IP socket is enabled and the TCP/IP
connection is not operational, or a default gateway is not configured
for routing, OMF will not start.
From the Windows Control Panel:
1. Select Network and Dialup Connections.
2. In the network and Dialup Connections list, select Local Area Connection.
3. In the Local Area Connection Status dialog, click Properties.
4. In the LAN properties dialog, select Internet Protocol (TCPIP), then click
Properties. This displays the TCPIP properties dialog.
3BUF001092R4001 787
Configuring TCP/IP Protocol Appendix B Extending OMF Domain to TCP/IP
788 3BUF001092R4001
Appendix B Extending OMF Domain to TCP/IP Configuring OMF for TCP/IP
Use the TCP/IP Configuration section to configure the required parameters and
enable OMF on TCP/IP. See Table 78 for details.
3BUF001092R4001 789
Configuring OMF for TCP/IP Appendix B Extending OMF Domain to TCP/IP
Field Description
TCP/IP Multicast You can enable or disable OMF for TCP/IP network via this check box
enabled (check indicates enabled). Do not enable this parameter, unless you
plan to use this functionality.
If you are using distributed History logs, you must check TCP/IP Multicast
enabled, and you must increase the OMF shared memory:
• for History nodes that send History data to a consolidation node, add
5 meg to the OMF shared memory requirement.
• for a consolidation node that collects from one or more History nodes,
add 5 meg to the OMF shared memory requirement for each node
from which it collects History data. For example, if a consolidation
node is receiving from eight History nodes, the consolidation node will
require 8*5 = 40 meg additional OMF shared memory.
Multicast address This is the Multicast address used by OMF (omfNetworkExt and
omfNameProc). To extend the OMF domain to TCP/IP, the Multicast
Address must be the same in all nodes on a network, otherwise the nodes
will not be able to see each other.
A valid multicast group address that enables routing of multicast
messages must be in the range: 224.0.0.2 to 239.225.225.225. The
default multicast address is 226.1.2.3. This is a valid multicast address
and can be used by OMF; however, it is recommended that this default
address NOT be used. Not using the default minimizes the possibility of
conflicts with other unknown nodes on the TCP/IP network with which you
do not wish to establish communication. You should contact your network
administrator to obtain an appropriate multicast address to ensure secure
communication between intended nodes.
790 3BUF001092R4001
Appendix B Extending OMF Domain to TCP/IP Configuring OMF for TCP/IP
Field Description
MulticastTTL This is the time-to-live value which indicates the number of router hops to
do before a message is discarded (not sent any more). This prevents
endless message loops that may occur as a result of unexpected or
unusual network partitioning.
0 = multicast messages are not sent at all
1 = multicast messages are sent only on the local subnet
>1 = multicast messages are forwarded to one or more hops
To extend the OMF domain to TCP/IP, this must be set >= 1; otherwise,
nodes will not hear each other.
Socket The socket configuration specifies this node’s scope of OMF access to
Configuration List other nodes in the domain.
The default is Multicast Send Receive. This means this node can see
and be seen by all other nodes in its multicast domain.
You can restrict OMF access between certain nodes in a multicast domain
by configuring their respective socket configurations. For details on how to
do this, see Configuring OMF Socket Communication Parameters on page
792.
3BUF001092R4001 791
Configuring OMF for TCP/IP Appendix B Extending OMF Domain to TCP/IP
The default setting is multicast Send Receive. This means this node can see
(receive the signal from) and be seen by (send the signal to) all other nodes in its
domain.
792 3BUF001092R4001
Appendix B Extending OMF Domain to TCP/IP Configuring OMF for TCP/IP
To change access within the domain, edit the socket configuration list for all nodes
in the domain. A summary of the possible entries is provided in Table 79
multicast SEND This node can be seen by other nodes in the domain
that are configured to RECEIVE network maintenance
messages from this node. To do this, enter multicast
in the IPconfig field, click the Send check box, then
click Add.
multicast RECEIVE This node can see other nodes in the domain that are
configured to SEND network maintenance messages
to this node. To do this, enter multicast in the IPconfig
field, click the Receive check box, then click Add.
point-to-point SEND This node can only be seen by (send network
maintenance messages to) the node whose IP
address is specified. To do this, enter the node’s IP
address, click the Send check box, then click Add.
point-to-point RECEIVE This node can only see (receive network maintenance
messages from) the node whose IP address is
specified. To do this, enter the node’s IP address, click
the Receive check box, then click Add.
3BUF001092R4001 793
Configuring OMF for TCP/IP Appendix B Extending OMF Domain to TCP/IP
Domain 1 Domain 2
EH1 EH1 - EH3
EH1 - EH2
Multicast Address = 226.1.3.4
IP Address = 172.28.66.190
TCP/IP Network
EH2 EH3
794 3BUF001092R4001
Appendix B Extending OMF Domain to TCP/IP Configuring OMF for TCP/IP
This changes the entry to multicast Send. EH1 can now be seen by other nodes in
the domain configured to receive from EH1; however, EH1 can only see nodes from
which it is specifically configured to Receive.
2. Add an entry for EH2 to specify it as a node from which EH1 can receive:
a. Enter the IP address for EH2, 172.28.66.191, in the IP config field.
b. Enter a check in the Receive check box, and make sure the Send box is
unchecked. This configuration is shown in Figure 601.
3BUF001092R4001 795
Configuring OMF for TCP/IP Appendix B Extending OMF Domain to TCP/IP
Repeat the above procedure to modify the socket configurations for EH2 and EH3.
Refer to Figure 599 for the respective socket configurations.
796 3BUF001092R4001
Appendix B Extending OMF Domain to TCP/IP OMF Shared Memory Size
Shutdown Delay
This delays the Windows shutdown to let PAS shut down processes for History
Services. The default is 20 seconds. You may need to increase the delay depending
on the size of your History database. Use the Communication Settings dialog. To
launch this tool, from the Windows task bar, choose Start>Settings>
Control Panel>Administrative Tools>PAS>Settings.
3BUF001092R4001 797
Shutdown Delay Appendix B Extending OMF Domain to TCP/IP
798 3BUF001092R4001
INDEX
A API 273
access name 267 Archive
Acrobat Reader Group 191, 211, 271
setup 770 archive 35, 383
active volume 397 CD ROM 398
add-ins 348 configure 35
ADO data provider for Oracle database 670 device 384, 392
ADSS 678, 694 DVD 398
AID-BROWSER-ROOTASTAB 760 group 384, 401
AID-BROWSER-SCROLLSPEED 760 guidelines 385 to 386
AID-BROWSER-SPRINGLOADDELAY 760 media 35, 383, 392
AID-EDITOR-COMMENTCOLOR 761 archive backup 398
AID-EDITOR-FONT 761 archive device attributes 395
AID-EDITOR-STRINGCOLOR 761 archive entry 384
AID-EDITOR-TEXTCOLOR 761 archive path 396
AID-EDITOR-WORDCOLOR 761 archived logs access 385
AID-PASSWORD 760 argument 709
AID-STARTUP-BASE_DISPLAY- Aspect 773
DISPLAY 760 Category 773
AID-STARTUP-BASE_DISPLAY-GROUP 760 Objects 773
AID-STARTUP-DISPLAY-DISPLAY 760 Server 774
AID-STARTUP-DISPLAY-GROUP 760 System 774
AID-VIEW-BROWSER 761 aspect system 44
AID-VIEW-DISPLAYBOARDERCOLOR 761 authentication 725
AID-VIEW-ELEMENTBAR 761 softponts 62
AID-VIEW-INACTIVEAREACOLOR 761 autologoff
AID-VIEW-OLDSTYLEFRAME 761 enable 762
AID-VIEW-STATUSBAR 761 interval 762
AID-VIEW-TOOLBAR 761 auto-publish 397
AID-VIEW-USERBAR 761 available licenses 724, 768
alarm acknowledge 67, 70
alarm configuration 67 B
alarm/event configuration 63 backup archive path 399
Alignment 192, 289 backup path 489
allocating disk space 228 backup type 399
3BUF001092R4001 799
Index
800 3BUF001092R4001
Index
3BUF001092R4001 801
Index
802 3BUF001092R4001
Index
3BUF001092R4001 803
Index
804 3BUF001092R4001
3BUF001092R4001. Printed in Sweden October 2004
Copyright © 2003-2004 by ABB. All Rights Reserved
® Registered Trademark of ABB.
™ Trademark of ABB.
http://www.abb.com