FactoryTalk View Site Edition Version 11 (CPR9 SR11) Design Considerations
FactoryTalk View Site Edition Version 11 (CPR9 SR11) Design Considerations
FactoryTalk View Site Edition Version 11 (CPR9 SR11) Design Considerations
Notes:
1. For architectures making use of a domain, it is recommended to use more than one domain controller such that a host failure will not interrupt domain services.
2. For architecture making use of Remote Desktop Services, it is recommended to use more than one RDS server to prevent a single point of failure for thin clients.
3. For smaller applications, this can be co-located with the VantagePoint Server host or the AssetCentre Server host.
4. Depending upon MSSQL licensing, this instance of Express could be removed and all SQL data logged to the existing MSSQL Standard instance.
5. For use with VantagePoint. Refer to the Mobility section in 61808 - FAQ: FactoryTalk VantagePoint Frequently Asked Questions
(https://rockwellautomation.custhelp.com/app/answers/detail/a_id/61808
6. As with Remote Desktop Services using multiple servers to eliminate a single point of failure, the ThinManager servers are configured for redundancy.
7. ThinManager server is frequently co-located with Remote Desktop Services server. The components have been split onto different hosts in this example, but can be consolidated
if the number of hosts becomes a concern.
8. Thin Clients can be either ThinManager Ready or ThinManager Capable. ThinManager Ready means the clients have the ThinManager BIOS extension image embedded, allowing for
easy configuration out of the box. ThinManager Capable devices do not have anything related to ThinManager embedded, but can still be connected to the ThinManager server via
a PXE boot.
9. Internet Browsers can be used to connect to FactoryTalk VantagePoint, FactoryTalk ViewPoint, and FactoryTalk AssetCentre servers.
Networking Considerations
A distributed HMI solution requires a reliable network to support communications
between the servers and the clients. Ethernet communications rely on a network that
does not have noise, interrupted connectivity, excessive collisions, or broadcast
storms. The options are endless when designing your network topology, but best
practices are always recommended.
Learn more about Industrial Network Architectures here:
https://www.rockwellautomation.com/en_NA/capabilities/industrial-
networks/overview.page
Ethernet Design Considerations Reference Manual (Publication number ENET-RM002C)
Wireless Networking
FactoryTalk applications require network speeds of >= 100Mbps.
Occasionally wireless or 3rd party networks (T1, DSL, etc.) are implemented in a control
environment. For instance, to communicate with remote sites. Wireless networks are
prone to signal interference, leading to breaks in communications, therefore it
recommended to avoid using wireless with FactoryTalk View SE thick clients or with
direct data server to controller connections.
• Ensure that all thick FactoryTalk® View SE clients are on the same network
segment as the server(s).
• Remote HMI clients are possible through the use of Remote Desktop Services (thin
clients) or FactoryTalk Viewpoint web clients.
• Controllers at remote locations should be configured to use a data concentrator,
which needs to be located on the same network segment as the data server(s).
Time Synchronization
It is strongly recommended to synchronize time clocks on distributed system
components (controllers), computers, and redundant servers.
The Windows Time service (W32tm.exe) uses the Network Time Protocol (NTP) to
synchronize computer clocks on the network. Time synchronization is critical for the
proper operation of many Windows services and to ensure the security of Kerberos
authentication within an Active Directory environment. In a FactoryTalk View SE
distributed system, time synchronization ensures accurate time stamps on alarms and
diagnostic logs.
In workgroup environments, configure Windows Time to synchronize all the SE
computer clocks to an authoritative time server (e.g. the FactoryTalk Directory).
• In either environment, the authoritative time server should then be synched to:
Multi-Homed PCs
Multi-homed servers (i.e.: servers with 2 or more NIC’s connected to 2 different
networks) connected to the Process Control Network (PCN) and Enterprise Network
(EN) are not recommended for the following reasons:
1. They are difficult to troubleshoot.
2. They can negatively impact network security by providing multiple paths between
the networks. For example, malware introduced on the Enterprise Network (EN) is
very likely to migrate unimpeded to the Process Control Network (PCN).
3. They can create unexpected and undesirable effects with the browser service.
(see Microsoft article Symptoms of multi-homed browsers)
A preferred solution is to use a DMZ between the PCN and the EN to isolate them, and
place the SE computers only on the PCN.
Authentication:
Authentication in a Windows domain environment is centralized and performed by a
domain controller. This authentication utilizes kerberos. A kerberos ticket has a default
maximum lifetime of 600 minutes in a Windows domain environment. Tickets are only
needed when authenticating new connections with servers. Ongoing connections are
not impacted by expiring tickets. In a trusted domain environment, the kerberos ticket
for access to a resource in a different domain is generated at the local domain
controller (which communicates with the remote domain controller) and then passed to
FactoryTalk Alarms and Events servers per application 10 non-redundant servers or 10 redundant server pairs
FactoryTalk Linx
FactoryTalk Linx data servers per application 10 non-redundant servers or 10 redundant server pairs
FactoryTalk View SE
Total data logged tags per HMI server (1 second scan 5,000
rate)
3. The total number of alarms per application includes all FactoryTalk Alarms and Events tag-based and device-based alarms in the
application.
4. Refer to Rockwell Automation Answer ID 1070902 for detailed information to determine system scalability for the total device tags
per application.
5. The maximum number of HMI tags that can be created on a single HMI server is 175,000. Extensive use of HMI tags has a significant
performance impact on an HMI server, so Rockwell Automation recommends minimizing their use, and instead using direct-
reference tags as much as possible.
For information about FactoryTalk View SE requirements that might affect the design
of a redundant system, see FactoryTalk View Site Edition Installation Guide. For
information about requirements that apply to redundant data servers such as
FactoryTalk Linx and RSLinx Classic, see the product documentation.
Redundancy Configuration
The typical configuration when using two computers in an HMI system, is to have one
designated as the “Primary” with the responsibility of the Primary HMI Server, Primary
Live Data Server and Primary Alarm and Events Server. The second computer is
designated as “Secondary” with the responsibility of the Secondary HMI Server,
Secondary Live Data Server and Secondary Alarm and Events Server.
8 Hardware Redundancy
Hardware Redundancy is handled at or below the operating system level of the PC.
Failover occurs when a hardware component fails, such as a motherboard, hard disk,
Ethernet card, or input device. This type of redundancy is not directly related to the
FactoryTalk application software. Typically these types of solutions require special
drivers or perhaps even virtual environments in which application software would run.
When implementing anything other than standard Windows hardware with a standard
Windows installation, it is important to test and qualify your FactoryTalk enabled
system before placing it into a production environment. Detailed information on this
topic is outside the scope of this document.
References:
AID 62112 - FactoryTalk ViewPoint Compatibility Matrix
AID 57990 - FactoryTalk ViewPoint Tips and Best Practices TOC
Controller Memory
Be sure to size the controller appropriately for HMI communications. When there are
multiple Data servers talking to a single ControlLogix Controller, separate memory is
consumed by each Data server instance.
If a controller must send its data to an HMI or to a database, there must be enough
memory in the controller to handle both application code (which has priority) as well as
communications. Remember that the communications task in the controller has the
lowest priority.
In order for displays with data collection to function properly, they must be able to
gather data from controllers in an efficient and reliable manner.
Keep in mind that both RSLinx Classic and FactoryTalk Linx use up memory in a
ControlLogix Controller when they are requesting data.
• FactoryTalk Linx is the data server for Rockwell Automation control hardware.
• FactoryTalk Linx Gateway is for third-party OPC DA and UA software access.
Continuous Tasks
• Communications use CPU time only after other tasks execute.
o Overhead time slice adjustments may provide more time for communications,
but execution may not be efficient.
Periodic Tasks
• After execution, task suspends and waits for trigger. While task is suspended,
communications are serviced.
o Beware of task overlap! Task overlap occurs when the controller cannot
execute all tasks in the configured interval. If task overlap occurs, the
overlapping task simply does not execute and waits for the next trigger. While
this state may appear to provide more idle time to service communications, it
comes at the expense of lost execution of periodic tasks.
Controller Connections
• FactoryTalk Linx
o Each instance of FactoryTalk Linx can use up to 5 connections to a Logix
Controller.
o These 5 connections break down to 4 read connections and 1 write connection.
All 5 connections are not always used. They are used as needed and are
automatically controlled by FactoryTalk Linx.
• RSLinx Classic
o By default each instance of RSLinx Classic can use 5 connections to a Logix
Controller.
o Can be increased manually to 20
• Other features that use connections
o Controller-to-Controller messaging
o Local I/O
o Motion Servo Modules
o Produced / Consumed Tags
AID 56682 - Counting CIP Connections for Produced and Consumed tags in ControlLogix
Controller Redundancy
When ControlLogix Redundancy is being used, it is important to configure more
communications time in the controller. Communications time is used by the processors
to synchronize. Since the synchronization occurs during the Communications Time it is
necessary to allow more time so that the HMI system is also able to obtain the requested
data.
ControlLogix Redundancy – Ethernet/IP: When ControlLogix Redundancy is being used
with FactoryTalk Linx data servers, IP address swapping must be used.
12 PlantPAX Architectures
The recommended PlantPAx specifications help reduce variability by defining a set of
system architectures and associated products and documenting best practices.
13 FactoryTalkView SE Installation
Unattended installation
FactoryTalk View Site Edition supports the unattended mode to install the software.
You can typically use this mode during large-scale roll outs when it might be too slow
and costly to have administrators or technicians interactively install the software on
individual computers.
1. Site Edition Client is not mandatory if you plan to install FactoryTalk ViewPoint SE.
2. For more information, see the Rockwell Automation Literature Library document:
FactoryTalk View Site Edition Installation Guide
On page 37: About FactoryTalk Historian Connectivity.
14 FactoryTalk Activation
The FactoryTalk Activation Manager is an application used to acquire and manage
Rockwell Automation Software Activations.
FactoryTalk Activation Manager provides a choice of configuration options:
• node-locked (includes local and mobile)
• concurrent (includes floating and borrowed)
In systems using HMI clients that may not be dedicated, it might be desirable to use a
single, centralized FactoryTalk Activation server to serve client licenses.
18 Datalogging
Data logging is a FactoryTalk View SE component that collects and stores tag values.
When using a Datalog Model, a user can define which tags to collect for a specific
configuration and where to store the collected values.
When planning data collection, design the system so only essential data is collected.
Limiting data collection is important because collection activities require substantial
processing power and generate significant traffic on the communication channel or
network.
Keep data collection requirements in mind when designing the layout of the
programmable controller data tables and the tag database. Ideally, tag addresses
should reference contiguous blocks of programmable controller data tables to reduce
network traffic and optimize system response.
In a redundant SE system it is suggested to log to a third computer as opposed to locally,
in doing this there is only one location to manage the data and there is no need to merge
multiple files or databases together after a failover or switchover.
19 Global Objects
A Global Object Library can be used to improve efficiency and provide better
organization of large projects.
Define only a few base global objects per Global Object display.
Because a base object can contain other base objects, the entire Global Object display
must be loaded into memory every time one of its objects is referenced at runtime. By
limiting the number of base objects to 10 or 20 per Global Object display, performance
is improved at runtime by:
• Speeding up the loading of Global Object display into memory.
• Speeding up a search process for the base object referenced within the Graphic
display.
Example: A Global Object display containing 200 base objects which are referenced on
several graphic displays can take approximately 10 to 20 seconds to load when selected.
What's happening?: Each time a Graphics display referencing a base object is called,
the entire Global Object display with 200 base objects will be loaded in memory and
searched for the required components. The search can have severe performance
impact on the HMI client, particularly on lower-end servers with a lot of client
connections.
Solution: Divide the Global Object display into 10 smaller Global Object displays each
containing about 20 base objects.
Effects of the Solution: During run-time, smaller Global Object displays will load much
faster, the search for the corresponding base objects will be much faster, and overall
client performance will improve by order of magnitude when displaying that particular
screen.
FactoryTalk View Site Edition User's Guide, refer to "Creating Graphics Displays".
Publication VIEWSE-UM006
20 Security
Security threats to a Process Control System generally fall into 4 categories: external,
internal, intentional and accidental.
FactoryTalk Security
FactoryTalk Security authenticates user identities and authorizes user requests to
access a FactoryTalk-enabled system. These security services are fully integrated into
the FactoryTalk Directory and are included as part of the FactoryTalk Services Platform.
FactoryTalk Security includes user authentication that determines who can open,
create, modify, and delete application components, and on which computers the
actions are allowed. Use FactoryTalk Security to add user and group security accounts
as well as Windows-linked accounts, and set up security for common operator actions.
FactoryTalk Security can be configured to:
• Prevent writes to specified tags from the FactoryTalk View SE Client.
• Prevent access to specified displays from the FactoryTalk View SE Client.
• Prevent access to specified commands from the FactoryTalk View SE Client.
• Prevent changes to the application from FactoryTalk View SE Studio or the
FactoryTalk View SE Administration Console.
To open the FactoryTalk View SE User Accounts editor or the Secured Commands
editor, the user requires access to the Common/Create Children action, in addition to
the Common actions, Configure Security, List Children, Read, and Write, on the area or
application.
For more details, also see Rockwell Automation Knowledgebase Answer ID:
AID 30980 - FactoryTalk Security - Tips and Best Practices
22 Language Switching
Language switching allows operators to view user-defined text strings in an
application, in up to 40 different languages. At run time, in a distributed application,
multiple FactoryTalk View SE clients can switch between any of the languages the
application supports.
Generally, it is best practice to develop all the screens in one language first, then import
the translations at the very end. Once translated, all screen text edits and additions
must be updated in both languages.
23 Graphic Displays
Develop Hierarchies for Efficiency and Clarity
Develop a hierarchy of displays with each display giving more granular detail of an
object, area or function. This prevents displays from being cluttered by attempting to
display a large amount of information at one time. This also reduces the demands on
the Live Data Server from having to poll and display a large amount of unnecessary data.
Create Templates
Create templates to ensure consistency of appearance. Use global objects and
parameter passing for efficient re-use of screen content.
Use Wallpaper
When importing a large graphic object (*.jpg, *.bmp) to use as a background, converting
the object to wallpaper will allow smoother mouse control over the object and provide
a better environment for developing the graphic. It also saves memory for faster display
of screen.
Faceplates
Consider using faceplates. Faceplates are standard screens that can be used (and re-
used) within an application. Faceplates can correspond to a Logix5000 instruction, a
tag structure within Logix5000 AOI, or any group of tags that is repeated throughout an
application. Process faceplates can be included in any application by right-clicking on
the HMI server in FactoryTalk View Studio and selecting “Add Process Faceplates…”. A
faceplate is a graphic screen like any other and counts toward the licensed display
count of an application.
VBA Forms or modal VBA Use displays instead of VBA forms since they do not block object
popups events or have the chance of getting caught “behind” the
operator’s HMI screens.
MsgBox (“Hey operator, Log your messages to the FactoryTalk Diagnostics log, or use a
something happened!”) FactoryTalk View SE display with the message in a string tag if you
want it to be obvious.
Use VBA to check for high/low FactoryTalk View SE Numeric Input objects contain numeric entry
limits when operator enters a high and low limit settings, as well as an option to set tooltip text
set point. for the operator.
Use VBA to read in tags to set Embedded variables allow you to dynamically insert tags into the
text displays for the operator, captions on graphical objects, tooltip text, local messages and
popup window titles, or display title bars.
tooltips.
26 Multi-Monitor Support
Multi-monitor deployment – FactoryTalk View SE version 10 (CPR9 SR10) and later
Supports the automatic and dynamic management of HMI application displays. This
provides operators more screens to view more information about process operations
from a single workstation.
• The monitor configuration is defined per client and can be unique per operator
station.
• An HMI Client configuration can support individual configuration of up to six
monitors.
• Applications can span multiple monitors. You can easily drag the displays between
monitors.
• HMI displays can be displayed on the specific pre-configured monitors or
dynamically based on the relative location of originating request.
• The ‘/M’ parameter provides the ability for the display command to specify which
specific monitor the display should be opened on.
For additional details, see the FactoryTalk View Site Edition User's Guide
Publication VIEWSE-UM006
DeskLock
A utility that locks users in the FactoryTalk View SE Client program and prevents them
from having access to the Windows desktop and using Windows system keys.
Compatibility
AID 35330 - Rockwell Software Products and Antivirus Software
Data Communications
FactoryTalk Linx Getting Results Guide (Publication LNXENT-GR00)
AID 58963 - RSLinx Classic, RSLinx Enterprise, FactoryTalk Linx Driver Compatibility
Matrix
AID 52353 - OPC and DCOM Information, Tutorials and Troubleshooting
AID 65406 - Using FactoryTalk Applications with Third Party Devices
AID 29402 - TCP/UDP Ports used by Rockwell Automation products
AID 26464 - RSLinx Internals: OPC/DCOM timeouts when a remote client is
disconnected
AID 68789 - RSLinx Enterprise LogixDP Data Provider Information
AID 507425 - Data Server Decision Guide
AID 609894 - Optimize ControlLogix Performance for FactoryTalk Client Applications
AID 780671 - FactoryTalk Diagnostics Counter Monitor
Design Considerations - FactoryTalk View Site Edition – January 2019 Page 68 of 70
ControlLogix
ControlLogix Selection Guide (Publication 1756-SG00)
RSLogix5000 Controllers Design Considerations (Publication 1756-RM094)
ControlLogix Redundancy System User Manual (Publication 1756-UM523)
ControlLogix Enhanced Redundancy System User Manual (Publication 1756-UM535)
AID 47065 - ControlLogix Controller Common Specifications
AID 40314 - How Many ControlLogix Processors Are Supported in a Single Chassis
AID 45926 - Logix 5000 Tag Import Utility for RSView32, FactoryTalk View Studio and
FactoryTalk Transaction Manager