Professional Documents
Culture Documents
EIO0000001255 09/2019
www.schneider-electric.com
The information provided in this documentation contains general descriptions and/or technical
characteristics of the performance of the products contained herein. This documentation is not
intended as a substitute for and is not to be used for determining suitability or reliability of these
products for specific user applications. It is the duty of any such user or integrator to perform the
appropriate and complete risk analysis, evaluation and testing of the products with respect to the
relevant specific application or use thereof. Neither Schneider Electric nor any of its affiliates or
subsidiaries shall be responsible or liable for misuse of the information contained herein. If you
have any suggestions for improvements or amendments or have found errors in this publication,
please notify us.
You agree not to reproduce, other than for your own personal, noncommercial use, all or part of
this document on any medium whatsoever without permission of Schneider Electric, given in
writing. You also agree not to establish any hypertext links to this document or its content.
Schneider Electric does not grant any right or license for the personal and noncommercial use of
the document or its content, except for a non-exclusive license to consult it on an "as is" basis, at
your own risk. All other rights are reserved.
All pertinent state, regional, and local safety regulations must be observed when installing and
using this product. For reasons of safety and to help ensure compliance with documented system
data, only the manufacturer should perform repairs to components.
When devices are used for applications with technical safety requirements, the relevant
instructions must be followed.
Failure to use Schneider Electric software or approved software with our hardware products may
result in injury, harm, or improper operating results.
Failure to observe this information can result in injury or equipment damage.
© 2019 Schneider Electric. All rights reserved.
2 EIO0000001255 09/2019
Table of Contents
Safety Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
About the Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Chapter 1 First Steps. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
First Installation or Upgrade of Process Expert 4.3/SP1 . . . . . . . . . . . 10
Upgrading EcoStruxure Hybrid DCS 2018 or 2018 R2 . . . . . . . . . . . . 13
Chapter 2 EcoStruxure Hybrid DCS System Infrastructure. . . . . . . 15
Software Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Virtual Machine Usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Virtual Machine Licensing Considerations. . . . . . . . . . . . . . . . . . . . . . 27
Physical Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Physical Architecture Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Chapter 3 System and Installation Requirements . . . . . . . . . . . . . . 37
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Software Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
General Installation Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Installation Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Installing the Controller Simulator . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Chapter 4 Installing the Software . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Installing the Software for the First Time . . . . . . . . . . . . . . . . . . . . . . . 54
Installing Supervision Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Chapter 5 Upgrading the Software . . . . . . . . . . . . . . . . . . . . . . . . . 57
5.1 About Upgrading the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Using Templates Supplied with the Software Upgrade . . . . . . . . . . . . 64
Stopping and Starting Caché. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
5.2 Migrating Databases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Preparing Databases for Migration . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Re-Installing Extensions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Migrating Databases to the Current Version . . . . . . . . . . . . . . . . . . . . 77
Impact of Migration On System Data. . . . . . . . . . . . . . . . . . . . . . . . . . 79
5.3 Installing the Software Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Installing the Software Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Chapter 6 Role-Based Access Control . . . . . . . . . . . . . . . . . . . . . . 85
About Role Based Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Setting Up Role Based Access Control . . . . . . . . . . . . . . . . . . . . . . . . 91
EIO0000001255 09/2019 3
Chapter 7 Securing Client/Server Communication . . . . . . . . . . . . . . 93
About Using Digital Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Generating and Installing Root CA Certificates . . . . . . . . . . . . . . . . . . 98
Installing Entity Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
Uninstalling Certificates from the Computer. . . . . . . . . . . . . . . . . . . . . 107
Chapter 8 Configuring the Software . . . . . . . . . . . . . . . . . . . . . . . . . 111
Using Configuration Wizards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Configuring the System Server and Clients . . . . . . . . . . . . . . . . . . . . . 117
Configuring the Virtual Machine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
Managing Participant Extensions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
Activating the Virtual Machine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
Configuring the Content of Blank Databases . . . . . . . . . . . . . . . . . . . . 144
Chapter 9 Starting the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
System Server Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
Backing Up and Restoring Databases . . . . . . . . . . . . . . . . . . . . . . . . . 152
Starting With a Blank Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
Starting the System Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
Starting the Engineering Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
Chapter 10 Modifying, Repairing, and Removing the Software . . . . . 163
Modifying the Software Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Repairing the Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166
Removing the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168
Chapter 11 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
Troubleshooting Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172
Troubleshooting the System Server. . . . . . . . . . . . . . . . . . . . . . . . . . . 174
Troubleshooting the Virtual Machine . . . . . . . . . . . . . . . . . . . . . . . . . . 175
Troubleshooting Client/Server Communication . . . . . . . . . . . . . . . . . . 178
Troubleshooting USB Port Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
Troubleshooting the Caché Database . . . . . . . . . . . . . . . . . . . . . . . . . 182
Appendices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
Appendix A Installing the Floating License Manager . . . . . . . . . . . . . . 185
Installing the Floating License Manager. . . . . . . . . . . . . . . . . . . . . . . . 185
Appendix B Installation of DTMs by Using a Response File . . . . . . . . 187
Installing DTMs by Using a Response File . . . . . . . . . . . . . . . . . . . . . 187
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191
4 EIO0000001255 09/2019
Safety Information
Important Information
NOTICE
Read these instructions carefully, and look at the equipment to become familiar with the device
before trying to install, operate, service, or maintain it. The following special messages may appear
throughout this documentation or on the equipment to warn of potential hazards or to call attention
to information that clarifies or simplifies a procedure.
EIO0000001255 09/2019 5
PLEASE NOTE
Electrical equipment should be installed, operated, serviced, and maintained only by qualified
personnel. No responsibility is assumed by Schneider Electric for any consequences arising out of
the use of this material.
A qualified person is one who has skills and knowledge related to the construction and operation
of electrical equipment and its installation, and has received safety training to recognize and avoid
the hazards involved.
6 EIO0000001255 09/2019
About the Book
At a Glance
Document Scope
This document explains how to install or upgrade EcoStruxure Hybrid DCS.
It also describes how to:
Configure the software.
Start the system server and engineering clients.
Migrate databases of supported earlier versions to make them compatible with the current
version.
Repair, modify, and uninstall the software.
It is written for users who have a working knowledge in the design of control systems, including
supervision functions.
NOTE: Read and understand this manual and the EcoStruxure™ Hybrid DCS Licensing Guide
before installing and using this software.
The licensing Guide is in the ReleaseNotesAndUGs folder of the software installation package.
Validity Note
This document is valid for EcoStruxure Hybrid DCS 2019 or later. It supersedes any previous
version.
Related Documents
EIO0000001255 09/2019 7
EcoStruxure Hybrid DCS Support Portal
Visit app.schneider-electric.com/ecostruxure-hybrid-dcs for support, software updates, and latest
information on EcoStruxure Hybrid DCS.
Registration required.
Trademarks
Schneider Electric, EcoStruxure Hybrid DCS, and Control Expert are trademarks of
Schneider Electric SE, its subsidiaries, and affiliates.
Citect is a registered trademark of AVEVA Group plc in the United States and/or other countries.
Microsoft, Windows, and Internet Explorer are either registered trademarks or trademarks of
Microsoft Corporation in the United States and/or other countries.
Adobe and Reader are either registered trademarks or trademarks of Adobe Systems Incorporated
in the United States and/or other countries.
Oracle and Java are registered trademarks of Oracle and/or its affiliates.
Caché and InterSystems are trademarks of InterSystems Corporation.
InstallShield is a registered trademark of Flexera Software in the United States and other countries.
PassMark is a registered trademark of Passmark Software Pty Ltd in Australia and other countries.
Other names are registered trademarks or trademarks of their respective owners.
8 EIO0000001255 09/2019
EcoStruxure™ Hybrid DCS
First Steps
EIO0000001255 09/2019
Chapter 1
First Steps
First Steps
EIO0000001255 09/2019 9
First Steps
Overview
This topic outlines the steps that you need to complete to get started with EcoStruxure Hybrid DCS
in the following cases:
You are installing the software for the first time.
You are upgrading Process Expert 4.3 or V4.3 SP1 with or without reusing a database.
If you want to reuse one or more of your databases with the new version of the software, refer to
the prerequisites (see page 10) before proceeding with the upgrade. Upgrading the software
without migrating a database creates a new blank one (see page 44).
If you are upgrading EcoStruxure Hybrid DCS 2018, refer to the corresponding procedure
(see page 13).
In case you experience difficulties, refer to the troubleshooting topic (see page 171) or contact
EcoStruxure Hybrid DCS support by visiting app.schneider-electric.com/ecostruxure-hybrid-dcs.
Getting Started
The table outlines the steps to follow if you are installing the software for the first time or upgrading
Process Expert 4.3 or its service pack. Each step contains a reference to the topic describing the
step more in detail.
Step Action
1 Verify that the computers of the Process Expert system infrastructure still fulfill the system
requirements (see page 37).
2 If you are upgrading and had customized any setting in one of the configuration wizards
(see page 111), write down the modifications because you need to make them again after the
installation of the upgrade is completed (for example, the system server IP address, the folder
shared with the virtual machine).
NOTE: The software automatically backs up the extensions (see page 75) that are installed in
the virtual machines.
3 If you are upgrading, in specific cases, you need to delete a folder (see page 60) before
proceeding with the installation of the upgrade.
4 Extract the files of the installation package (see page 41) to disk or mount the image (.iso).
10 EIO0000001255 09/2019
First Steps
Step Action
5 Install the software (see page 54) by launching the installer.
For a first-time installation, install at least the system server.
If you are upgrading, perform this step on the computer on which the Process Expert system
server is installed. You can add and/or remove clients.
Select the authentication type (see page 91) during installation.
NOTE: The steps to follow when you install clients are described at the end of this table.
6 Purchase or update licenses and activate them by using the Floating License Manager
(see EcoStruxure™ Hybrid DCS, Licensing Guide).
7 If you selected the domain authentication, the system/network administrator must create a
group (see page 92) for each EcoStruxure Hybrid DCS role.
(If you selected local authentication, the groups have been created automatically on the
computer on which the system server has been installed.)
8 The system/network administrator must add users (see page 85) who need to use the software
to one or more groups either:
On the system server computer for a local authentication type. Use the Windows® Computer
Management or lusrmgr (.msc) UI.
On the domain controller for a domain authentication type. Use the Windows® Active
Directory Administrative Center.
9 Open the system server console and log in (see EcoStruxure™ Hybrid DCS, User Guide) by
entering your username without domain or prefix and your password.
(From the Windows® Start menu, click EcoStruxure Hybrid DCS → System Server.)
10 Create and/or install certificates (see page 93) by using the Security section of the System
Server Configuration Wizard (Settings menu of the system server console).
You can let the software create a root CA certificate or you may be able to use your own.
11 In the Virtual Machine section of the System Server Configuration Wizard, activate
(see page 63) the virtual machine by entering an appropriate Windows® product key
(see page 27).
12 Enter the IP address (see page 121) of the computer on which the Floating License Manager is
installed (if it is not installed on the local computer) by using the Port@Address of Floating
License Manager parameter.
13 Share a folder (see page 120) with the virtual machine.
The shared folder is required when you want to manage files within the virtual machine or
exchange them between the virtual machine and the local computer.
14 For a new installation or if you are not migrating a database, you can select which templates are
added to the database (see page 144) that is created when you start the system server.
15 If you are upgrading and had customized any setting by using the System Server Configuration
Wizard, re-configure the system server with these modifications.
16 If you are upgrading and want to migrate (see page 61) a Process Expert 4.3/SP1 database
1. Re-install extensions (see page 75) in the virtual machine of the system server.
2. Restore the database backup file (.mdbk) (see page 77).
EIO0000001255 09/2019 11
First Steps
Step Action
17 Start the system server (see page 147) by clicking Action → Start in the menu bar of the server
console.
If you are migrating a database, the EcoStruxure Hybrid DCS 2019 Migration window opens and
may require user-interaction (see page 77) to complete the migration of Supervision data.
Wait until Server is ready appears in the console. This may take a moment the first time.
18 Install clients by launching the installer on other computers that you want to be part of the
EcoStruxure Hybrid DCS infrastructure:
For engineering clients, repeat steps 1, 4, 10, 11, and 13 of this procedure. Use the
Engineering Client Configuration Wizard (from the EcoStruxure Hybrid DCS folder of the
Windows® Start menu).
For operation clients, repeat steps 1, 4 and 10 of this procedure. Use the Operation Client
Configuration Wizard (from the EcoStruxure Hybrid DCS folder of the Windows® Start
menu).
Install certificates only once per computer even if you are installing both types of clients.
NOTE: If you are upgrading, perform this step on each computer on which a Process Expert
client is installed.
19 if you are upgrading and had customized any setting by using a client configuration wizard,
re-configure clients with these modifications before starting them.
20 if you have migrated a database and want to modify existing systems or create new ones to take
advantage of the new functionalities of the upgrade, you need to import and use the templates
that are supplied with the upgrade (see page 64).
12 EIO0000001255 09/2019
First Steps
Overview
This topic outlines the steps that you need to complete to get started if you are upgrading
EcoStruxure Hybrid DCS 2018 or 2018 R2 with or without reusing a database.
If you want to reuse one or more of your databases with the new version of the software, refer to
the prerequisites (see page 13) before proceeding with the upgrade. Upgrading the software
without migrating a database creates a new blank one (see page 44).
In case you experience difficulties, refer to the troubleshooting topic (see page 171) or contact
EcoStruxure Hybrid DCS support by visiting app.schneider-electric.com/ecostruxure-hybrid-dcs.
Getting Started
Each step contains a link to the topic describing the step more in detail.
Step Action
1 If you had customized any setting in one of the configuration wizards (see page 111), write
down the modifications because you need to make them again after the installation of the
upgrade is completed (for example, the system server IP address or the folder shared with the
virtual machine).
NOTE: The software automatically backs up the extensions (see page 75) that are installed in
the virtual machines.
2 If you want to retain the HTML help of templates that you have used with version 2018 or
2018 R2, you need to copy the corresponding help files before proceeding with the upgrade.
Without this step, the help of version 2018/R2 is replaced by the help of version 2019.
For details, refer to Using Help for Different Versions of Schneider Electric Templates in the
User Guide of version 2018 or 2018 R2.
3 In specific cases, you need to delete a folder (see page 60) before proceeding with the
installation of the upgrade.
4 Update your licenses and activate them by using the Floating License Manager
(see EcoStruxure™ Hybrid DCS, Licensing Guide).
5 Extract the files of the installation package (see page 41) to disk or mount the image (.iso).
EIO0000001255 09/2019 13
First Steps
Step Action
6 Install the software (see page 82) by launching the installer.
Perform this step on each computer on which version 2018 or 2018 R2 is installed. You can
remove and/or add software components on each computer during installation.
NOTE:
The following items of version 2018 or 2018 R2 are still valid given that they are not expired (if
applicable):
The authentication type (see page 91) that you had selected is retained (for system server
computer). However, you can change it.
User groups and user memberships for RBAC.
Certificates (see page 93). Except for the root certificate file (.pfx), which is deleted during
the upgrade if you had created it at the default path. In such case, retrieve the file first.
7 In the Virtual Machine section of the System Server Configuration Wizard, activate the virtual
machine by entering your Windows® product key (see page 27). You can reuse the one that
you had used for version 2018 or 2018 R2.
8 Enter the IP address (see page 121) of the computer on which the Floating License Manager is
installed (if it is not installed on the local computer) by using the Port@Address of Floating
License Manager parameter.
9 Re-configure the software components by using the appropriate configuration wizards
(see page 112).
10 If you are not migrating a database, you can select which templates are added to the database
(see page 144) that is created when you start the system server.
11 If you want to migrate (see page 61) a version 2018 or 2018 R2 database:
1. Re-install extensions (see page 75) in the virtual machine of the system server.
2. Restore the database backup file (.mdbk) (see page 77).
12 Start the system server (see page 147) by clicking Action → Start in the menu bar of the server
console.
If you are migrating a database, the EcoStruxure Hybrid DCS 2019 Migration window opens and
may require user-interaction (see page 77) to complete the migration of Supervision data.
Wait until Server is ready appears in the console. This may take a moment the first time.
NOTE: If no database backup file has been restored, a blank version 2019 database is created
(see page 155).
13 if you have migrated a database and want to modify existing systems or create new ones to take
advantage of the new functionalities of the upgrade, you need to import and use the templates
that are supplied with the upgrade (see page 64).
14 EIO0000001255 09/2019
EcoStruxure™ Hybrid DCS
EcoStruxure Hybrid DCS System Infrastructure
EIO0000001255 09/2019
Chapter 2
EcoStruxure Hybrid DCS System Infrastructure
Overview
This chapter provides a high-level understanding of the main software components that form the
EcoStruxure Hybrid DCS system infrastructure. It also describes how these components can be
installed on various computers depending on the tasks you want to accomplish. For example,
engineering only or runtime-related tasks.
EIO0000001255 09/2019 15
EcoStruxure Hybrid DCS System Infrastructure
Software Architecture
Overview
The EcoStruxure Hybrid DCS system infrastructure is based on a client/server architecture with
integrated as well as third-party software components. It allows you to run multiple clients with one
server to access the tools that are required in engineering time and during operation.
By using multiple clients, several users can work simultaneously on the same system or perform
similar tasks on various systems.
To use the various software components described in this topic, you need to:
Purchase and activate the necessary licenses (see EcoStruxure™ Hybrid DCS, Licensing
Guide).
Generate and install digital certificates (see page 93).
Create groups and/or add users to groups (see page 85).
NOTE: EcoStruxure Hybrid DCS and Supervision software components are available in separate
installation packages (see page 42).
16 EIO0000001255 09/2019
EcoStruxure Hybrid DCS System Infrastructure
Software Components
The EcoStruxure Hybrid DCS installation package contains the following software components,
which form the system infrastructure:
A system server: Manages system data, software Participant activity, and requests from clients.
The user interface consists of a console that allows you to monitor server activity.
Engineering clients: Provide a user interface that gives access to software platform resources,
such as explorers and editors. In addition, engineering clients display software Participants with
which you can perform in-depth configurations. Together, these resources and tools allow you
to design and maintain systems. You can use several clients at the same time.
Operation clients: Provide a user interface that allows you to view system components during
runtime (for example, controllers, process objects, process data, and so on) for monitoring and
troubleshooting purposes. These clients display software Participants too. They require a
Supervision client to run in parallel, which is the entry point to runtime navigation services
(RTNS) (see EcoStruxure™ Hybrid DCS, Runtime Navigation Services , User Guide). You can
use several clients at the same time.
Virtual machines: Provide the services of software Participants (for example Control and
Supervision Participants), which are required in engineering time and during operation. They
are run by third-party software and use the Microsoft® Windows® operating system. Virtual
machines can be accessed by the system server and clients. They can be used in various
configurations depending on the performance of the computers they are installed on and the
number of concurrent users.
For details, refer to the topic describing virtual machine usage (see page 20).
A database: Consists of several physical databases, which contain template libraries and user
data related to the systems that you create by using the software. Each system has its own
database. The database resides on the computer running the system server and is created
during the first system server start. It is managed by third-party software (see page 43), which
is included.
NOTE: To manage usage rights and application size, the software also utilizes Schneider Electric
license management software (see page 45).
EIO0000001255 09/2019 17
EcoStruxure Hybrid DCS System Infrastructure
The following figure shows a simplified model of the software architecture of EcoStruxure
Hybrid DCS.
18 EIO0000001255 09/2019
EcoStruxure Hybrid DCS System Infrastructure
The following figure shows the Supervision client/server part of an EcoStruxure Hybrid DCS
architecture.
EIO0000001255 09/2019 19
EcoStruxure Hybrid DCS System Infrastructure
Overview
A virtual machine (VM) provides Software Participant services, which are required to complete the
system engineering life cycle. These services are also required if you want to use the runtime
navigation services.
Each VM that you install, gives you access to a limited number of VM instances (see page 27).
Each VM instance can provide a limited number of Participant sessions of each Participant.
NOTE: You must activate the Microsoft® Windows® operating system of each VM with a suitable
product key (see page 27). You need to purchase product keys separately.
20 EIO0000001255 09/2019
EcoStruxure Hybrid DCS System Infrastructure
When no more Participant sessions are available because the corresponding slots are used up,
the software informs you that it cannot provide the Participant services.
For more information on using Participants, refer to:
The Participant Services User Guides.
The help of software Participants (see EcoStruxure™ Hybrid DCS, User Guide).
EIO0000001255 09/2019 21
EcoStruxure Hybrid DCS System Infrastructure
In this example, 2 instances are allowed for the VM installed on the system server computer. When
client PC A accesses an instance of this VM through the Participant window and uses only one
slot, client PC B cannot access the remaining slots of this VM. They are reserved for client PC A.
Client PC B will use the second instance of the VM. If a third client computer tries to access the
system server VM through a Participant window, no Participant services can be provided because
this would require a third VM instance.
22 EIO0000001255 09/2019
EcoStruxure Hybrid DCS System Infrastructure
NOTE: The use of instances of a VM by more than one user needs to satisfy the VM licensing terms
(see page 27).
EIO0000001255 09/2019 23
EcoStruxure Hybrid DCS System Infrastructure
24 EIO0000001255 09/2019
EcoStruxure Hybrid DCS System Infrastructure
The table describes the various possibilities of VM usage that you can configure for each
component and their limitations.
Software component
VM that the component can use
requiring VM services
System server VM Engineering client VM (installed on
engineering station)
System server Yes Yes
Engineering client Yes (2) (3)
Yes(3)
By default, the engineering client uses
the local VM to help improve
performance but, if allowed
(see page 121), uses the system server
VM when needed.
Operation client Yes(1) (2) (3) Yes(1) (3)
NOTE: An operation client When the operation and engineering
installation does not include clients are installed on the same
a VM. computer, the operation client can use
the VM of the engineering client.
(1) Each operation client uses 1 Control Participant slot of a VM. The other slots remain available
to the engineering client installed on the same computer.
(2) The system server VM must be configured to allow clients to use it.
(3) When several clients access the same VM, they use instances of that VM on a first come, first
served basis. In the case where more than 1 instance of a VM is allowed, once no more slots
are available to a client, another instance of the VM is started as long as the number of instances
is within the limit.
If clients are configured to use the local VM and can also use the VM of the system server, the
local VM is used first. Once the maximum number of allowed local VM instances is reached, the
VM of the system server is used.
The obligation for clients to use their local VM or the right to use the system server VM are
configurable after you install a component by using its Configuration wizard (see page 120).
In addition, the configuration wizards (see page 120) allow you to configure the maximum number
of VM instances that can run in the system server and engineering clients.
NOTE: By default, when you install the software, VMs are installed and configured (see page 120)
as per these recommendations.
EIO0000001255 09/2019 25
EcoStruxure Hybrid DCS System Infrastructure
26 EIO0000001255 09/2019
EcoStruxure Hybrid DCS System Infrastructure
Overview
You must purchase licensing rights to use VMs that you install for various software components.
VMs use the Microsoft® Windows® 10 Professional operating system.
This objective of this topic is to help you understand VM licensing concepts and determine the
number of VM licenses you need to purchase. It also outlines various license types that Microsoft®
offers.
NOTE: The information in this topic is provided for guidance only. It does not constitute legal advice
or interpretation. You must ensure that you comply with Microsoft® Software License Terms in any
case. For more information, contact your local software distributor or visit
www.microsoft.com/licensing.
The number of licenses that is required is 2 even if sometimes User_B uses both engineering and
operation clients simultaneously on PC_3.
EIO0000001255 09/2019 27
EcoStruxure Hybrid DCS System Infrastructure
License Types
The table outlines the various Microsoft® license types that are available to activate VMs.
NOTE: For details, contact your local software distributor or visit www.microsoft.com/licensing.
28 EIO0000001255 09/2019
EcoStruxure Hybrid DCS System Infrastructure
Physical Architecture
Overview
The software provides the flexibility to install software components on various physical
architectures depending on the performance of the computers, the number of concurrent users,
and your work method. Client stations and servers need to be connected to each other on an
Ethernet network by a cable connection. A cable connection to the control network is also
necessary.
EIO0000001255 09/2019 29
EcoStruxure Hybrid DCS System Infrastructure
NOTE: computers can cumulate several roles in which case you need to install the software that
is required for each role. Verify that each computer meets the requirements (see page 41) of each
role.
NOTE:
For more information, refer to the topics describing:
Example architectures. (see page 32)
The installation of Supervision software (see page 55).
Virtual machine usage (see page 20).
NOTE:
The following can exist but are not represented:
Multiple engineering and operator stations.
Redundant and/or multiple operation servers.
30 EIO0000001255 09/2019
EcoStruxure Hybrid DCS System Infrastructure
Performance Considerations
If you are using a client that is installed on the system server computer and perform CPU-intensive
operations (for example, importing many instances), actions that you execute immediately after
may trigger notifications about client/server communication interruptions.
For more information, refer to the troubleshooting topic (see page 178).
Network Connections
If you experience difficulties with client/server communication, refer to the topic providing
troubleshooting information (see page 178).
EIO0000001255 09/2019 31
EcoStruxure Hybrid DCS System Infrastructure
Overview
With the use of examples, this topic describes some common architectures and outlines the VM
license requirements depending on the number of users working simultaneously.
It also shows the connections to the control network that are required.
Use these examples as a guideline to determine the architecture that is adapted to your needs and
the resulting license requirements.
NOTE: This topic does not describe EcoStruxure Hybrid DCS and application size license
requirements (see EcoStruxure™ Hybrid DCS, Licensing Guide).
All-In-One Architecture
The all-in-one architecture is a common small engineering configuration with:
A single user.
One VM requiring one license.
The following figure shows an architecture where all software components are installed on one
computer.
(1) computer with the system server, a VM, one engineering, and one operation client. Up to four
instances of the VM are available to the user.
(2) Controllers.
(3) Ethernet control network.
32 EIO0000001255 09/2019
EcoStruxure Hybrid DCS System Infrastructure
NOTE: Optionally, Supervision software (one operation server and its Supervision control client)
can also be installed on the computer for testing purposes. This does not affect the VM license
requirements.
Engineering Architecture
This architecture is a common medium-size configuration that is used by system integrators with:
Up to three users working simultaneously.
Three VMs requiring three licenses:
Two VMs on engineering stations.
One VM on the system server.
(1) System server combined with operation server: Computer with the system server, a VM, one
engineering client, one operation client, and Supervision software (one operation server and its
Supervision control client).
(2) Engineering station: Computer with one engineering client and a VM.
(3) Engineering station: Computer with one engineering client and a VM.
(4) Controllers.
(5) Ethernet control network.
EIO0000001255 09/2019 33
EcoStruxure Hybrid DCS System Infrastructure
On-Site Architecture
This architecture models small to medium-size configurations, which are deployed on site with:
One engineering user and up to four operators working simultaneously.
Three VMs requiring five licenses:
The VM of the engineering client on the engineering station (2) requires one license.
The VM of the engineering client on the operator station (3) requires one license.
The three operation clients on the three other operator stations (4) use the VM on the system
server, which requires three licenses.
34 EIO0000001255 09/2019
EcoStruxure Hybrid DCS System Infrastructure
(1) System server: Computer with the system server and a VM, which is used by operator stations
(4).
(2) Engineering station: Computer with one engineering client and a VM.
(3) Operator station combined with engineering station: Computer with one Supervision control
and/or view-only client, one operation client, one engineering client, and a VM.
(4) Operator stations: Three computers with a Supervision control and/or view-only client, and an
operation client.
(5) Operation servers (redundant or specific): Computers with Supervision servers.
(6) Controllers.
(7) Ethernet control network.
NOTE:
Each user of an engineering station ((2) and (3)) can use up to four instances (see page 20) of
the local VM.
Each user of an operator station ((3) and (4)) can share the instances of the VM (see page 21)
of the system server.
EIO0000001255 09/2019 35
EcoStruxure Hybrid DCS System Infrastructure
36 EIO0000001255 09/2019
EcoStruxure™ Hybrid DCS
System and Installation Requirements
EIO0000001255 09/2019
Chapter 3
System and Installation Requirements
Overview
This chapter describes the requirements to install the software on your computer. It also provides
general information, which applies whether you install the software for the first time or upgrade an
earlier version.
EIO0000001255 09/2019 37
System and Installation Requirements
System Requirements
Overview
This topic describes the hardware and operating system requirements.
The hardware requirements depend on the role of the computer (see page 29) in the EcoStruxure
Hybrid DCS system infrastructure.
CPU Performance
Because of the various criteria that impact CPU performance, the required processor performance
level is defined by using the PassMark® CPU mark. To find a CPU that meets the indicated
performance requirement, look up the CPU benchmarks available at passmark.com.
NOTE: Restrictions on the number of supported CPU cores (see page 38) apply.
Component Requirements
CPU CPU mark according to application size:
Small (<1,250 objects): 5,000 (minimum)
Medium (<3,000 objects): 8,000
Large/extra large (>3,000 objects): 10,000
A maximum of 16 processor cores due to restrictions from the license of the database,
which can prevent the system server from starting (see page 174).
RAM Recommended: 24 GB
Minimum: 16 GB
Hard drive 250 GB, 7,200 RPM minimum. SSD recommended. NTFS file system.
40 GB of free space to install and run the software.
Display 1920 x 1080 or higher
Ports Ethernet port
Input devices Mouse or compatible device
Keyboard
38 EIO0000001255 09/2019
System and Installation Requirements
Component Requirements
CPU Varies according to application size.
RAM Recommended: 16 GB
Hard drive 500 GB, 7,200 RPM minimum. SSD recommended. NTFS file system.
Display 1920 x 1080
Ports Ethernet port
Input devices Mouse or compatible device
Keyboard
NOTE: For detailed information, refer to the chapter describing installation requirements in the
Citect SCADA Installation and Configuration Guide.
Component Requirements
CPU CPU mark according to application size:
Small (<1,250 objects): 5,000 (minimum)
Medium (<3,000 objects): 8,000
Large/extra large (>3,000 objects): 10,000
RAM Recommended: 24 GB
Minimum: 16 GB
Hard drive 250 GB, 7,200 RPM minimum. SSD recommended. NTFS file system.
40 GB of free space to install and run the software.
Display 1920 x 1080 or higher
Ports Ethernet port
Input devices Mouse or compatible device
Keyboard
NOTE: The same requirements apply if, in addition, you install an operation client on the computer.
EIO0000001255 09/2019 39
System and Installation Requirements
Component Requirements
CPU CPU mark: 2,000 minimum
RAM Minimum: 4 GB
Hard drive 250 GB, 7,200 RPM minimum. SSD recommended. NTFS file system.
Display 1920 x 1080 or higher
Ports Ethernet port
Input devices Mouse or compatible device
Keyboard
NOTE: The software has been tested with operating systems configured in the following
languages: English, French, Chinese, German, and Spanish.
40 EIO0000001255 09/2019
System and Installation Requirements
Software Requirements
Overview
You can install EcoStruxure Hybrid DCS 2019 on a computer in either of the following cases:
No EcoStruxure Hybrid DCS software is installed.
One of these supported earlier versions of the software is installed:
EcoStruxure Hybrid DCS 2018 or 2018 R2.
Process Expert 4.3 or V4.3 SP1.
Digital Certificates
The software implements a public key infrastructure (PKI) based on the X.509 standard. It allows
using a self-signed root certification authority (CA) and entity certificates to secure client/server
communication in the EcoStruxure Hybrid DCS system infrastructure.
You must generate and install certificates (see page 94) before you can use the system server and
clients.
EIO0000001255 09/2019 41
System and Installation Requirements
For more information on the installation of Citect SCADA and OPC Factory Server, refer to
Installing Supervision Software (see page 55).
NOTE: You can download the software from the EcoStruxure Hybrid DCS Support Portal,
Software Downloads section. Registration required.
42 EIO0000001255 09/2019
System and Installation Requirements
NOTICE
UNEXPECTED SOFTWARE BEHAVIOR
Use only the version of third-party software that is installed by the EcoStruxure Hybrid DCS
installer.
Failure to follow these instructions can result in unusable systems or database.
NOTE: Refer to the topic providing general installation information for details about the version of
third-party software that is installed (see page 45).
License Requirements
The table outlines the license-related actions that are required to use the software.
EIO0000001255 09/2019 43
System and Installation Requirements
44 EIO0000001255 09/2019
System and Installation Requirements
NOTE: Typically, a software upgrade comes with one or more libraries, which contain only the
latest version of each template. Without these latest templates, new functionalities are not
available (for example, support of new controller platforms or new communication modules). For
more information on the latest version of templates, refer to the Library Release Notes.
If you intend to migrate the database of an earlier version, refer to the topic describing how to use
templates supplied with the software upgrade (see page 64).
User Rights
EcoStruxure Hybrid DCS and Schneider Electric licensing software (see page 45) are installed so
that they are available to all the users of the computer.
However, only authorized users can log in (see page 86) and use the system server and/or clients.
EIO0000001255 09/2019 45
System and Installation Requirements
When you install a given software component, the following additional software components are
installed. The table also indicates the installed version.
EcoStruxure Virtual machine Database Schneider Elect Schneider Electric Floating Schneider
Hybrid DCS (see page 20) (Caché version ric License License Manager version Electric
system (Oracle® 2017.1.3.317.0) Manager 2.4.0.0 Software
infrastructure VM Virtualbox version 2.4.0.0 Update
component version 5.1.30 and
HybridDCS.Vm.X.
Win10.64.Y.vdi(1)
virtual machine
file)
System Yes Yes Yes(2) Optional(2). An EcoStruxure Yes
server If an earlier Hybrid DCS system This
version is infrastructure requires at least application
installed on the one Floating License informs you
computer, you Manager. of available
need to allow It corresponds to the License updates for
the installer to Server check box during installed
upgrade it installation. Schneider
during If you select it (default) and an Electric
installation; earlier version is already software
otherwise setup installed on the computer, you and lets you
cannot need to allow the installer to install them.
complete. upgrade it during installation; An Internet
otherwise setup cannot connection
Engineering Yes No No
complete. is required.
client
If you want to use the Floating
Operation No No No License Manager on another
client computer on which no
component is installed, verify
that it is of the same version
as the License Manager
installed by the software.
For more information, refer to
the topic describing licensing
mechanisms
(see EcoStruxure™
Hybrid DCS, Licensing
Guide).
46 EIO0000001255 09/2019
System and Installation Requirements
NOTE: You can also install the Floating License Manager separately by running the EcoStruxure
Hybrid DCS installer and selecting only the License Server check box in the Station Role dialog
box.
The modification is done when the installer updates the earlier version of the Floating License
Manager that is installed on the computer.
After installation, verify that the server port setting is the same in the Floating License Manager and
License Manager of the EcoStruxure Hybrid DCS 2019 system infrastructure. In particular if the
two are not installed on the same computer.
For information on how to verify and/or modify the server port setting, refer to the topic describing
how to configure an Enterprise License Server (see EcoStruxure™ Hybrid DCS, Licensing Guide).
NOTE: If other software acquires license rights from a Floating License Manager whose license
server port was changed, verify that these license rights remain available to the software.
EIO0000001255 09/2019 47
System and Installation Requirements
Hybrid DCS x_reg.log(1) Folder designated by the Microsoft® Windows® Microsoft® installer (MSI)
%TEMP% environment variable. verbose logging
information.
(1) Where x corresponds to the version of the software that you have installed
Databases
When you install the software and start the system server, a new database is created.
If you are upgrading a supported earlier version and have created a backup for migration of the
database before installing the upgrade, you have the possibility to reuse the database of the earlier
version after migrating it (see page 70).
Virtual Machine
If you are installing a component that uses a virtual machine, the installer may give you the option
to keep the existing virtual machine file or replace it.
During installation, the software verifies if a virtual machine file (.vdi) is present at the location
specified in the Destination Folder dialog box.
If no corresponding virtual machine is present at this location (for example, because the virtual
machine of an earlier version is in a different location), the software automatically installs the virtual
machine included in the installation package.
If a corresponding virtual machine is already present at this location, the software gives you the
choice to continue using the existing virtual machine or to replace it with the one included in the
installation package.
If the installer is not able to extract the virtual machine file from the installation package, it displays
a notification during installation. Refer to the troubleshooting section (see page 172) for details.
NOTE: If you replace the virtual machine, you will lose any changes that you have made to it (for
example, updates of the Libset of the Control Participant) and you will need to activate it.
48 EIO0000001255 09/2019
System and Installation Requirements
EIO0000001255 09/2019 49
System and Installation Requirements
Installation Requirements
Firewall Exceptions
The installation process modifies the Windows® firewall settings of the computer to allow
communication with applications that it installs.
If you are using a firewall other than the Windows® one, modify the settings of the firewall to allow
incoming connections with these applications.
The following paths correspond to a default installation of the system server with its virtual
machine:
VBoxHeadless: C:\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
VBoxWrap: C:\Program Files\Oracle\VirtualBox\VBoxWrap2.exe
HostAgent: C:\Program Files\Schneider Electric\EcoStruxure\Hybrid DCS\System
Server\HostAgent.exe
SystemServer: C:\Program Files\Schneider Electric\EcoStruxure\Hybrid DCS\System
Server\SystemServer.exe
When you install only an engineering client on the computer, only settings for the VBoxHeadless
and VBoxWrap applications are required in the firewall. No settings are required when you install
only an operation client.
NOTE: The entries created by the installer of an earlier version of the software may remain when
the program is removed.
Installing .NET Framework 4.6.1 for Microsoft® Windows Server® 2012 R2, and Windows® 10
Before you can install the software on a computer, .NET Framework 4.6.1 needs to be installed:
For Windows® 7 and Windows® 10 (version earlier than 1511): The installer installs it
automatically after you confirm the operation.
For Microsoft® Windows Server® 2012 R2: The installer installs it automatically only if the
required Windows® updates are installed on the computer. If not, the installation of the software
is canceled and you need to install these updates manually first.
For information on the required updates and how to install them, refer to the FAQ section of the
EcoStruxure Hybrid DCS support portal.
NOTE: .NET Framework 4.6.1 is already installed on Windows® 10 versions later than 1511.
50 EIO0000001255 09/2019
System and Installation Requirements
Overview
The installation package includes the PLC_Simulator folder, which contains the files required to run
an emulated simulator software. You can use it to perform deployment and execution tasks for
Control Participant projects.
When you install any component on a computer, the Controller Simulator application is installed.
By default, the simulator is installed with a setting that secures the Ethernet port of the computer,
which it uses. This setting applies only to the Windows® session of the user who is logged on
during installation.
Modifying this setting during the installation or installing the simulator on another computer makes
the computer vulnerable to cyber attack.
NOTE: Securing the Ethernet port used by the simulator must be part of a global approach to make
your control environment less vulnerable to cyber attack. A topic dedicated to cybersecurity is
available in the support area of the Schneider Electric website.
This is the file that is loaded into the simulator when you select the check box in the Controller
Simulator Ethernet Port Vulnerability dialog box.
NOTE: For information on how to change the password, refer to the topic describing password
management.
EIO0000001255 09/2019 51
System and Installation Requirements
Step Action
1 Copy the PLC_Simulator folder to the computer.
The folder is located in the installation package at the path Program Files\Schneider Electric.
2 Copy the simulatorprofile.sta file to the computer.
The file is located in the AFS folder in the root of the installation package.
NOTE: If you had installed the simulator that was provided with an earlier version of the software
on another computer, you must replace it with the simulator provided with this version of
EcoStruxure Hybrid DCS.
52 EIO0000001255 09/2019
EcoStruxure™ Hybrid DCS
Installing the Software
EIO0000001255 09/2019
Chapter 4
Installing the Software
Overview
This chapter describes how to install the various components of EcoStruxure Hybrid DCS and
highlights specific points of the installation of Supervision software, which is required during
runtime.
EIO0000001255 09/2019 53
Installing the Software
Overview
The installer installs necessary software depending on the components that you select during
installation.
The computer may restart automatically during the installation process and requires a restart to
complete it.
NOTE: If you are upgrading a supported earlier version, refer to the topic describing how to
upgrade the software (see page 57).
Step Action
1 Verify that the hardware and software requirements (see page 41) are fulfilled.
2 Quit Schneider Electric applications that are running.
3 Verify that .NET Framework is enabled (see page 50) (for Windows® 10 and Microsoft®
Windows Server® 2012 R2 operating systems).
4 Temporarily disable antivirus services (such as real time, scripting) running on the computer.
5 Double-click the setup.exe file located in the root of the installation package.
Result: The installation procedure starts.
6 Follow the instructions on screen.
7 Accept the End User License Agreement (EULA).
8 In the Station Role dialog box, select the components (see page 45) that you want to install on
the computer depending on the machine role (see page 29).
9 If you selected to install the system server component, in the Authentication Settings dialog box,
configure the settings for role based access control (see page 85).
10 Click Finish to exit the installer.
11 Restart the computer when prompted to complete the installation process.
NOTE: To disable the USB port monitoring service of Oracle® VM Virtualbox software after
installation, use the registry entries file provided (see page 179).
54 EIO0000001255 09/2019
Installing the Software
Installation Requirements
To complete the system engineering life cycle and use Supervision services during operation, you
need to install Supervision software (see page 42) on machines that serve as:
Operation server: Install operation server software (configuration tools are required on at least
one operation server).
Operator station: Install a Supervision control and/or view only client.
For more information, refer to the Citect SCADA 2018 Installation and Configuration Guide, which
is available in the software installation package and shown during installation.
NOTE: To use runtime navigation services, you need to install on the same computer, an
EcoStruxure Hybrid DCS operation client (see page 29) in addition to the Supervision client.
An operation client requires the services of a virtual machine (see page 24). By default, it is
configured to use the virtual machine of the system server.
Installing Drivers
When you install the operation server, in the Select Drivers screen, select the OFSOPC RELEASE
Driver option so that the software can communicate with the OPC Factory Server.
For more information, refer to the topic documenting the Protocol parameter in tag container
properties (see EcoStruxure™ Hybrid DCS, User Guide).
EIO0000001255 09/2019 55
Installing the Software
56 EIO0000001255 09/2019
EcoStruxure™ Hybrid DCS
Upgrading the Software
EIO0000001255 09/2019
Chapter 5
Upgrading the Software
Overview
This chapter contains information on the upgrade process and describes how to upgrade a
supported earlier version.
EIO0000001255 09/2019 57
Upgrading the Software
Section 5.1
About Upgrading the Software
Overview
This section contains information about the various aspects related to upgrading a supported
earlier version (see page 41).
NOTE: Refer also to the topic containing general installation information (see page 44).
58 EIO0000001255 09/2019
Upgrading the Software
Overview
You have the possibility to reuse databases of supported earlier version (see page 70) of the
software or start fresh with a blank database (see page 155).
NOTE: If upgrading your version of Process Expert is not supported, either uninstall it, or if you
want to reuse your database, migrate it to the next version as you need to migrate databases by
following the sequence of versions. For example, if Process Expert 4.2 is installed, migrate the
database to Process Expert 4.3 first. Then, you can migrate it directly to EcoStruxure
Hybrid DCS 2019.
EIO0000001255 09/2019 59
Upgrading the Software
User account that was used User account that was used User account that is used to User account that is used to
to install the currently to start the install the upgrade start the upgraded
installed version server/engineering client of server/engineering client
the currently installed
version
User A User B(1) User A User A
User A User A(1) and User B User B User B
(1) Delete the folder for this user (corresponds to <username> in the folder path)
60 EIO0000001255 09/2019
Upgrading the Software
Migrating databases of supported earlier versions so that you can reuse them with the current
version of the software is a two-step process:
In a first step, you need to install a premigration patch and create a backup of each database
that you want to reuse by using the system server of your existing software installation.
NOTE: The installation of the premigration patch is optional for Process Expert 4.3/SP1.
In a second step, you need to install EcoStruxure Hybrid DCS 2019, re-install the extensions
(see page 75) that the software has backed up, and restore the database backup. The migration
is performed automatically when you start the system server.
If you do not want to reuse your current databases (this includes systems, segment libraries, and
any template you may have created), install the software upgrade and start the system server. In
this case, to save disk space, you can remove the Db database folder (see page 49) of the earlier
version.
NOTE: It is possible to re-use the database of 32-bit Process Expert 4.1 or earlier but you need to
migrate it to V4.2 first, then to V4.3. Refer to the V4.2 Installation Guide, Upgrading the Software.
EIO0000001255 09/2019 61
Upgrading the Software
Reusing Templates
If you want to resuse templates that you had created in Process Expert 4.3/SP1 or
version 2018/2018 R2 and that are not part of the Global Templates library anymore (because you
have, for example, exported and then deleted them), you need to Import (see EcoStruxure™
Hybrid DCS, User Guide) the corresponding export files (.sbk) in the library of the respective
version before installing the software upgrade. During migration of the database, the templates are
made compatible with the upgrade.
NOTE: When you import templates that were exported from a different version of the software, they
may not be usable in the entire system engineering life cycle.
62 EIO0000001255 09/2019
Upgrading the Software
License Requirements
When you install a new version of the software, you may need to update your licenses
(see EcoStruxure™ Hybrid DCS, Licensing Guide).
For more information, refer to the Schneider Electric Floating License Manager user manual.
Before installing the software upgrade, check the instance count of existing systems to verify that
your application size license is still of the appropriate size.
For more information, refer to Counting Instances (see EcoStruxure™ Hybrid DCS, User Guide).
NOTE: Unless mentioned otherwise, licenses that you have activated for a major version (for
example, EcoStruxure Hybrid DCS 2019) are valid also for subsequent releases within the same
year (versions with R• suffix, for example EcoStruxure Hybrid DCS 2019 R2).
EIO0000001255 09/2019 63
Upgrading the Software
Overview
Typically, a software upgrade comes with one or more libraries, which contain new and/or updated
templates.
To take advantage of the new functionalities provided by these templates, you need to import
(see EcoStruxure™ Hybrid DCS, User Guide) them if you have migrated a database of a
supported earlier version. This is because the templates that are supplied with the software
upgrade do not appear in the Global Templates library (see page 44) after a migration.
Then, to be able to use the latest version of templates you need to update the templates that are
used by the instances of your systems.
As a general rule, update a template only if it is required. That is, if the new version of the template
provides a new functionality that you need or fixes an issue that you may experience. This applies
in particular to systems that are already deployed.
For more information on the templates that are provided, refer to the help of the Schneider Electric
libraries.
For information on the severity of the impact when updating a template and on the compatibility of
templates belonging to different libraries, refer to the Library Release Notes.
64 EIO0000001255 09/2019
Upgrading the Software
EIO0000001255 09/2019 65
Upgrading the Software
WARNING
UNINTENDED EQUIPMENT OPERATION
Verify that any built Control Participant projects that are contained in a migrated database
function properly before deploying them to controllers.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
66 EIO0000001255 09/2019
Upgrading the Software
The table describes the work flow to update templates that are used by application instances and
topological entities with templates supplied with the software upgrade.
Step Description
1 Verify that the application size license that is activated for the software is of the appropriate size.
If the software displays a notification about the license size, refer to Licensing Conflicts
(see EcoStruxure™ Hybrid DCS, Licensing Guide).
For information on the size of systems, refer to Instance Count (see EcoStruxure™ Hybrid DCS,
User Guide).
2 Verify that you have imported Global Templates supplied with the software upgrade
(see page 64).
3 If you had created your own templates, update these templates with any updated reference that
may be available with the software upgrade.
Refer to Updating Global Templates (see EcoStruxure™ Hybrid DCS, User Guide).
4 Update the templates that are used by instances of the application.
Refer to Updating and Replacing Templates of Instances.
NOTE: To maintain existing links, update instances that are linked at once.
5 Generate the Control and Supervision projects.
NOTE: If the software detects DFB version conflicts, it opens a dialog box, which allows you to
select the version you want to use. Select the version encapsulated in the new version of the
template. For details, refer to the topic describing the management of versions of types in
Control facets during generation (see EcoStruxure™ Hybrid DCS, User Guide).
NOTE: If generation detects that the controller does not support a new functionality or data type,
you need to upgrade the firmware version of the CPU of the default configuration used by the
Control Participant project.
6 Update the templates that are used by the topological entities of each system by using the
Update Templates command.
Refer to Updating Templates of Topological Entities (see EcoStruxure™ Hybrid DCS, User
Guide).
NOTE: You may need to upgrade the firmware of topological entities to a version that supports
new modules or data types.
7 Build the Participant projects and verify that they function properly.
8 Deploy the built Participant projects to their respective engines.
EIO0000001255 09/2019 67
Upgrading the Software
Stopping Caché
To stop Caché, you need to stop the system server first.
NOTICE
LOSS OF COMMUNICATION
Stop the system server only when no client is running.
Failure to follow these instructions can result in unresponsive clients.
Step Action
1 Quit any clients that are connected to the system server that is running on the computer on which
Caché is installed (see EcoStruxure™ Hybrid DCS, User Guide).
2 Stop the system server (see EcoStruxure™ Hybrid DCS, User Guide).
3 Right-click the icon in the Microsoft® Windows® notification area representing the Caché
database.
Result: The Caché context menu opens.
4 Select Stop Caché.
Result: Caché opens the Caché Shutdown dialog box.
5 Select Shut down and click OK.
Result: Caché displays a splash screen while shutting down the database.
6 Wait until the Caché database icon turns gray, indicating that the database is shut down.
NOTE: Do not start the system server when Caché is stopped because the database needs to be
running for the system server to function properly.
NOTE: By default, Caché starts when you restart the computer.
68 EIO0000001255 09/2019
Upgrading the Software
Starting Caché
To start Caché, proceed as follows.
Step Action
1 Right-click the icon in the Microsoft® Windows® notification area representing the Caché
database.
Result: The Caché context menu opens.
2 Select Start Caché.
Result: Caché displays a splash screen while the database starts.
3 Wait until the Caché database icon turns blue, indicating that the database is running.
NOTE: By default, Caché is configured to start when you start Microsoft® Windows®.
EIO0000001255 09/2019 69
Upgrading the Software
Section 5.2
Migrating Databases
Migrating Databases
Overview
Only the migration of databases of Process Expert 4.3 or V4.3 SP1 and EcoStruxure
Hybrid DCS 2018 or 2018 R2 is supported.
Migrating a database is a two-step process (see page 61), which can take up to several hours
depending on the size of the database. This section describes the prerequisites and how to
complete the process.
NOTE: The information in this section applies only if you are upgrading and want to reuse your
existing database with EcoStruxure Hybrid DCS 2019.
70 EIO0000001255 09/2019
Upgrading the Software
Overview
Migrating a database of Process Expert V4.3/V4.3 SP1 or version 2018/2018 R2 is a two-step
process (see page 61).
In the first step, you need to prepare databases for migration before installing the software
upgrade. This premigration is an automated process and is performed by using the Migrate
Database command of the system server of the currently installed version.
For version 2018/2018 R2 databases, the command becomes available once you install the
premigration patch.
For V4.3/V4.3 SP1 databases, the command is already available in the system sever console.
You need to install a premigration patch only in case of forgotten passwords (see page 71).
The purpose of premigration is to create a backup file of each database that you want to use with
the new version of the software. Once the new version is installed, these backup files can be
migrated to create a compatible database.
You cannot use clients during this step.
NOTE: If you modify, add, or delete a system or make a change to the Global Templates library or
content repository after you have created the database backup file, you must create a new one in
order to migrate the changes.
Activity Logs
The software creates log entries when you prepare a database for migration.
The information is added to the system server log file (see EcoStruxure™ Hybrid DCS, User
Guide).
Password Authentication
If the database contains systems with topological entities for which password protection
(see EcoStruxure™ Hybrid DCS, User Guide) is enabled and an application password has been
set, the Password Authentication dialog box opens. You must provide the password for each
controller to be able to proceed with the premigration.
The dialog box provides an option to manage forgotten passwords:
For controllers, it lets you obtain a temporary password that you can enter directly in the
Password Authentication dialog box.
For station nodes, it lets you proceed with the premigration without providing the password.
NOTE: In Process Expert 4.3/SP1, the option is only available after you install the premigration
patch.
Without installing the premigration patch, if you have forgotten the password for a controller or
station node, you can cancel the premigration process, open the Topological Explorer, reset the
password (see EcoStruxure™ Hybrid DCS, User Guide), and then start over.
EIO0000001255 09/2019 71
Upgrading the Software
The following figure shows an example of the Password Authentication dialog box featuring the
option to manage forgotten passwords.
Item Description
1 When selected, shows the station nodes acting as emulated simulator for which password
protection is enabled and a password has been set. Otherwise, these station nodes are not shown
and you cannot enter their password.
NOTE: Entering the password for station nodes is optional. If you do not enter it, you can proceed
with the premigration after you confirm the command. However, you will need to deploy the built
Control Participant project again to the station node in the new version of the software.
Click No in the confirmation dialog box to revert to the Password Authentication dialog box.
2 Identifier of the system containing the topological entity.
3 Identifier of the topological entity in the Topology Explorer.
For station nodes, indicates also the identifier of the Control Expert service.
72 EIO0000001255 09/2019
Upgrading the Software
Item Description
4 The engine type can be either of the following:
Controller.
Simulator: A station node in which a Control Expert service has been created.
Step Action
1 Verify that the system server and clients are not running.
2 Copy the premigration patch installation file (.exe ) that corresponds to your installed version to
the computer.
The file is located in the MigrationPatches folder, which is in the root of the upgrade installation
package.
3 Double-click the file.
Result: The welcome screen opens.
4 Click Update and follow the instructions on screen.
EIO0000001255 09/2019 73
Upgrading the Software
Step Action
1 Start the system server.
2 Verify that no client is connected to the system server.
3 In the system server console menu bar click Database → Migrate Database.
Result: A Save As dialog box opens.
4 Enter a name and location for the database backup file and click Save.
Result: If the database contains a system with a topological entity for which password protection
is enabled and a password has been set, the Password Authentication dialog box opens;
proceed to step 6. Otherwise, the creation of the database backup file starts.
5 Wait until Done appears in the system server console after the server is stopped and database
operations are completed.
Result: The database backup file is created and premigration is complete.
NOTE: When the creation of the database backup file starts, no activity may be shown in the
system server console.
6 In the Password Authentication dialog box, enter the password for each topological entity or
manage forgotten passwords (see page 71) and click OK.
Result: The creation of the database backup file starts (no activity may be shown in the system
server console).
NOTE: Click Cancel to close the dialog box without migrating a database.
7 Wait until Done appears in the system server console after the server is stopped and database
operations are completed.
Result: The database backup file is created and premigration is complete.
8 To create a backup file of another database, restore it (see page 152) and repeat the procedure.
74 EIO0000001255 09/2019
Upgrading the Software
Re-Installing Extensions
Overview
When you upgrade the software, the software automatically backs up the extensions that were
installed in the virtual machine and creates a log file.
It includes:
Participant extensions that you have installed by using the Extensions section of the System
Server Configuration Wizard (for example, a DTM).
Extensions whose files you have added manually or by an installer to the Extensions folder,
which is located on the computer on which the system server is installed, at the path C:\Program
Files\Schneider Electric\EcoStruxure\Hybrid DCS\Vm\Extensions (for example, a segment
library extension that is added when you install such an optional library).
This facilitates the re-installation of these extensions, which are required if you are migrating a
database or reusing it in another EcoStruxure Hybrid DCS infrastructure.
NOTE: A backup of the extensions is also created when you uninstall the system server
(see page 168).
After the upgrade or uninstallation is completed, the file is located at the path
C:\Users\Username\AppData\Local\Schneider Electric\Hybrid DCS\ExtensionBackup where
Username corresponds to the user who is currently logged on to the operating system of the
computer.
EIO0000001255 09/2019 75
Upgrading the Software
Re-Installing Extensions
Re-install the extensions before you start the system server of the software upgrade.
Once you have extracted the backup archive file to disk on the computer on which the system
server is installed, you can re-install extensions by using either method:
Use the Extensions section (see page 130) of the System Server Configuration Wizard.
Add the files manually to the Extensions (see page 75) folder.
76 EIO0000001255 09/2019
Upgrading the Software
Overview
The second step of the migration process can be performed once you have upgraded the system
server.
By restoring a database backup file created during the first step and starting the system server, the
migration process is completed.
Once you have migrated a database, you can complete the migration process of another database
at any time by repeating this step.
NOTE: After upgrading to EcoStruxure Hybrid DCS 2019, if you start the system server without
restoring a database first, a blank database is created (see page 44).
Prerequisites
The following are prerequisites for performing the migration process:
You have an up-to-date backup file (.mdbk) of each database that you want to migrate, which
was created before installing the upgrade (see page 71).
You have installed the version 2019 system server.
You have activated (see page 63) the operating system of the VM of the system server.
You have re-installed (see page 75) in the VM of the system server all the extensions
(see page 130) that are used in Control Participant projects of systems contained in the
database that you want to migrate.
EIO0000001255 09/2019 77
Upgrading the Software
Step Action
1 Back up the database that is mounted by using the Back Up Database command
(see page 149) in the system server console. A database is mounted (see page 44) if you have
restored one and/or already started the version 2019 system server.
2 Mount the database that you want to migrate by clicking Database → Restore Database in the
system server console.
In the Open dialog box, select the .mdbk extension in the file type menu.
3 Start the system server (see page 156).
Result: The migration of the database is performed. During this process, the EcoStruxure
Hybrid DCS 2019 Supervision Participant window opens and may require user-interaction for
migration to complete successfully.
4 Wait until Server is ready appears in the console.
Result: The server is running and the database has been migrated to the current software
version, which is indicated in brackets.
Managing Databases
Database backups that the software creates when you restore databases can use up a lot of disk
space. Manage these folders regularly to recover disk space.
78 EIO0000001255 09/2019
Upgrading the Software
Overview
This topic describes the impact that database migration has on data of systems.
It describes in particular, the changes that result of new Participant features and that are available
in the migrated database. These changes may require user intervention to be fully integrated in
existing systems.
WARNING
UNINTENDED EQUIPMENT OPERATION
Verify that any built Control Participant projects that are contained in a migrated database
function properly before deploying them to controllers.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
After migration of the database is completed, you need to deploy the executable of a built Control
Participant project to its respective engine again by using the Deploy Built Project command if the
link status that is displayed in the status bar of the Control Participant indicates DIFFERENT.
Deploying executables requires stopping the controller.
To view the link status, use the Refine Online command in the Topology Explorer, which opens the
Control Participant window. The figure shows a partial view of the status bar.
1 Link status
EIO0000001255 09/2019 79
Upgrading the Software
The table describes the various states of Control project executables that can result of a migration
and the actions you can to take in each case.
The table describes the various states of Supervision project executables that can result of a
migration and the actions you need to take in each case.
Out Of Date Out Of Date Independently if the built Supervision project was deployed or
not, use the Build All command(2) and deploy it.
Not Built Not Built Use the Build or Build All command(2) and deploy it.
(1) Supervision software installed on station nodes needs to be upgraded to meet the software requirements.
Deployed Supervision projects need to be compiled locally.
(2) Building a Supervision project will not complete successfully if the identifier of any cluster exceeds 16 characters
in length. If this is the case, rename such clusters and generate any impacted Supervision project before building
it.
80 EIO0000001255 09/2019
Upgrading the Software
EIO0000001255 09/2019 81
Upgrading the Software
Section 5.3
Installing the Software Upgrade
Overview
Install the upgrade on computers that have the following roles (see page 29) because all
components of a same system infrastructure need to be of the same version:
System server.
Operation server (Supervision): Only if a system server, engineering client, or operation client
is installed.
Engineering station.
Operator station (Supervision): Only if an operation and/or engineering client is installed.
82 EIO0000001255 09/2019
Upgrading the Software
Installation Procedure
You can upgrade a supported earlier version only when the system server is not running.
NOTICE
LOSS OF COMMUNICATION
Stop the system server only when no client is running.
Failure to follow these instructions can result in unresponsive clients.
NOTICE
LOSS OF DATA
Back up the database before installing a software upgrade.
Failure to follow these instructions can result in loss of database or unusable systems.
The table describes the procedure to install the software to upgrade a supported earlier version.
Step Action
1 Verify that the system and installation requirements (see page 37) are fulfilled.
2 If you had customized any setting in one of the configuration wizards (see page 111), write down
the modifications because you need to make them again after the installation of the upgrade is
completed (for example, the system server IP address or the folder shared with the virtual
machine).
NOTE: The software automatically backs up the extensions (see page 75) that are installed in
the virtual machines.
3 If you want to retain the HTML help of templates that you have used with version 2018 or
2018 R2, you need to copy the corresponding help files before proceeding with the upgrade.
Without this step, the help of version 2018/R2 is replaced by the help of version 2019.
For details, refer to Using Help for Different Versions of Schneider Electric Templates in the User
Guide of version 2018 or 2018 R2.
4 Back up the mounted database (see page 152) and/or prepare for migration the databases
(see page 71) that you want to continue using.
5 Verify that the installed components are not running.
6 Quit other Schneider Electric applications that are running.
7 Temporarily disable antivirus services (real time, scripting, and so on) running on the computer.
8 Double-click the setup.exe file located in the root of the installation package of the upgrade.
Result: The installation procedure starts and looks for installed components to upgrade and/or
remove.
9 Accept the End User License Agreement (EULA).
EIO0000001255 09/2019 83
Upgrading the Software
Step Action
10 In the Station Role dialog box, the check boxes of components of the earlier version that are
installed on the computer are selected. These components (see page 45) are upgraded by the
installer.
Modify the component selection as needed:
Clearing a selected check box uninstalls the component from the computer.
Selecting a check box that is cleared installs the component on the computer.
NOTE: Clearing the License Server check box does not remove the installed version
(see page 45); it remains on the computer but it is not upgraded. If an earlier version of the
Floating License Manager is installed on the computer, you need to select the check box and
accept to upgrade it so that the installation process can continue.
11 Click Next.
12 Follow the instructions on screen.
NOTE: If an earlier version of the License Manager is installed on the computer, you need to
accept to upgrade it so that the installation process can continue.
13 if you selected to upgrade the system sever component, in the Authentication Settings dialog
box, you can modify the settings for role based access control (see page 85).
14 Click Finish to exit the installer.
15 Restart the computer when prompted to complete the installation process.
16 Repeat the installation procedure on each computer of the EcoStruxure Hybrid DCS system
infrastructure on which the upgrade is required (see page 82).
NOTE: If messages about detected errors are displayed during the upgrade, refer to the topic
about troubleshooting installation (see page 172).
NOTE: To disable the USB port monitoring service of Oracle® VM Virtualbox after installation, use
the registry entries file provided (see page 179).
84 EIO0000001255 09/2019
EcoStruxure™ Hybrid DCS
Role-Based Access Control
EIO0000001255 09/2019
Chapter 6
Role-Based Access Control
Overview
This topic describes role-based access control and how to set it up in the EcoStruxure Hybrid DCS
system infrastructure.
EIO0000001255 09/2019 85
Role-Based Access Control
Overview
The objective of role-based access control (RBAC) is to administer the tasks that authorized users
can perform by assigning them predefined roles.
Roles are associated to groups, which are created either in the operating system of the system
server computer or in a domain controller. Users need to be added to these groups and must log
in to the various EcoStruxure Hybrid DCS components to be authenticated.
You must have administrator rights on the computer to set up RBAC.
NOTE: If you had set up RBAC for an earlier version of the software, your configuration remains
valid when you upgrade.
Working Principle
The following figure illustrates the implementation of RBAC with local authentication. Each user
has a different role and is a member of the corresponding group. The user accounts and groups
are created on the system server computer.
86 EIO0000001255 09/2019
Role-Based Access Control
The following figure illustrates the implementation of RBAC with domain authentication. Each user
has a different role and is a member of the corresponding group. The user accounts and groups
are created on the domain controller.
Stage Description
1 During installation or upgrade of the system server, select to authenticate users locally.
The software automatically creates a group for each predefined role in the operating system of
the local computer.
2 Complete the installation of the software.
3 If required, create a user account on the computer running the system server for each user who
is authorized to use a component of the EcoStruxure Hybrid DCS system infrastructure (system
server, engineering client, operation client).
4 Add each authorized user to one or more groups depending on the tasks to be performed.
EIO0000001255 09/2019 87
Role-Based Access Control
Stage Description
1 During installation or upgrade of the system server, select to authenticate users on a domain.
2 Complete the installation of the software.
3 On the Active Directory® domain controller:
Create a group for each predefined role. The creation of the groups can be automated by
running the supplied software tool.
If required, create a user account for each user who is authorized to use a component of the
EcoStruxure Hybrid DCS system infrastructure (system server, engineering client, operation
client).
Add each authorized user to one or more groups depending on the tasks to be performed.
Roles
The following roles are defined to cover all the tasks that one can perform with EcoStruxure
Hybrid DCS.
Any logged-in user, independently of their group membership, can access the user, about, and/or
help menus of a component. These menus are also accessible when no user is logged in.
88 EIO0000001255 09/2019
Role-Based Access Control
ESX HDCS Template Designer (1) Perform tasks on the engineering client that are directly related to
Global Templates and not a system.
No access to:
System server
Operation client
Explorers other than Global Templates Explorer and Content
Repository explorer
Systems folder, its subfolders, and the corresponding context
menu commands in the Content Repository explorer
Inspect → External References context menu command of a
template in the Global Templates Explorer.
ESX HDCS Operator Full access to the functionalities of the operation client only.
No access to:
System server
Engineering client
(1) Both roles combined give full access to the functionalities of the engineering client.
After logging in, you can view which roles are assigned to you in the User Information dialog box
(see page 90) .
Groups
For each predefined role, a corresponding group must exist either locally in the operating system
of the computer running the system server or in the Active Directory® domain controller, depending
on the selected authentication type. Users need to be added to these groups.
You can create the required groups automatically (see page 92) or manually. If you had not
created all the groups manually, you can add the others automatically as well.
If you create the groups manually, their name must be identical to the role name (see page 88) and
respect the case.
Groups can be removed manually only. Uninstalling the software does not remove the groups that
were created automatically.
A user who does not belong to one of the groups cannot log in to the software. A user can belong
to more than one group.
NOTE: If a user is added to a new group or removed from a group while the user is logged in to
the software, the change takes effect only after the user logs off.
EIO0000001255 09/2019 89
Role-Based Access Control
Authentication Type
You can select whether the system server validates the credentials of users who log in either
locally on the computer running the system server or on a domain that you specify.
The selection is made initially during the installation of the system server but can be viewed and
modified by either method:
By using the Repair or Modify functionality (see page 163).
By using the System Server Configuration Wizard, Authentication section (see page 149).
User Information
The User Information dialog box contains the following information about the user who is logged in:
Username and full name.
The name of the computer running the system server of this EcoStruxure Hybrid DCS
infrastructure.
Roles assigned to the user and their description.
You can open the dialog box from the user menu in the toolbar of each software component.
90 EIO0000001255 09/2019
Role-Based Access Control
Item Description
1 Lets you select where the system server validates the credentials of users who log in:
Local: On the computer running the system server.
Domain: On the Active Directory® domain controller.
2 You must enter the name of the domain if you have selected the domain authentication.
3 Click to verify if the domain controller of the selected domain is accessible (optional).
A dialog box informs you of the result.
NOTE: You can view and change the authentication type and domain settings also in the System
Server Configuration Wizard, Authentication section (see page 149).
EIO0000001255 09/2019 91
Role-Based Access Control
Using the software tool facilitates the creation of groups with the correct name so that they are
valid.
Step Action
1 Copy the Domain folder to the domain controller computer.
The folder is located at the path ProgramFiles64Folder\Utilities\Roles Manager starting from the
root of the installation package (.iso).
2 Double-click Domain.bat.
Result: A group for each role is created on the local computer.
NOTE: Right-click the file and select Run as administrator if the groups were not created the
first time.
92 EIO0000001255 09/2019
EcoStruxure™ Hybrid DCS
Securing Client/Server Communication
EIO0000001255 09/2019
Chapter 7
Securing Client/Server Communication
Overview
This topic describes how to generate and install digital certificates that are required to use
EcoStruxure Hybrid DCS.
EIO0000001255 09/2019 93
Securing Client/Server Communication
Overview
The software implements a public key infrastructure (PKI) based on the X.509 standard. It uses a
Schneider Electric self-signed certification authority (CA) to create root and entity certificates to
help secure client/server communication in the EcoStruxure Hybrid DCS system infrastructure
(see page 15).
You may be able to use your own CA and root certificate.
Certificates are verified and must be validated successfully at these times:
For the system server: During server start.
For clients: During the attempt to connect to the system server.
In a distributed infrastructure, a client can connect to the system server only if their respective
certificates are issued and signed by the same root CA.
The use of digital certificates is mandatory.
NOTE: If you had generated and/or installed certificates for an earlier version of the software, they
remain valid when you upgrade it given that they are not expired.
If you have modified the role of a station (see page 97) during the upgrade, you may need to install
new certificates.
94 EIO0000001255 09/2019
Securing Client/Server Communication
The following figure illustrates the working principle of the PKI in a distributed system infrastructure.
Stage Description
1 On the system server computer, generation of a password-protected root CA certificate
(see page 98) by a user with administrator rights.
This step is performed by using the System Server Configuration Wizard.
This also installs a set of entity certificates on this computer, which is required for the system
server to run.
NOTE: If you want to use your own root certificate file (.pfx), you need to select to install only
certificates (see page 99) in the System Server Configuration Wizard.
2 On each computer of the EcoStruxure Hybrid DCS system infrastructure, installation of a set of
entity certificates (see page 102) by a user with administrator rights, who knows the root CA
certificate file location and password.
This step is performed by using any client configuration wizard.
This also installs the root CA certificate on each computer.
EIO0000001255 09/2019 95
Securing Client/Server Communication
Stage Description
1 Generation of a password-protected root CA certificate (see page 98) by a user with
administrator rights.
This step is performed by using the System Server Configuration Wizard.
This also installs a set of entity certificates on this computer.
NOTE: If you want to use your own root certificate file (.pfx), you can select to install only
certificates in the System Server Configuration Wizard.
Recommendations
The following are recommendations related to the expiration of certificates.
Certificate Recommendations
Root CA certificate Stop using the software as soon as you receive a notification about the
Entity certificates upcoming expiration of a certificate and install new certificates.
If you keep using the software after certificates have expired, software
Participant services (for example, refinement) or runtime navigation
services may not function properly.
The following are recommendations for sharing the root CA certificate file (.pfx) to make it
accessible to computers of a distributed EcoStruxure Hybrid DCS infrastructure when you install
entity certificates.
The following are recommendations for the validity period of entity certificates.
NOTE: Once you have generated a certificate, you cannot modify its validity period. To change it,
you need to generate a new certificate.
96 EIO0000001255 09/2019
Securing Client/Server Communication
Certificate Properties
Certificates are installed on a machine basis and are valid for all users who can use EcoStruxure
Hybrid DCS.
You can check whether root CA and entity certificates are installed on the local computer and view
information about these certificates in the Microsoft® Management Console (in a Windows® 10
operating system, use the certlm.msc service of the local computer).
The following set of entity certificates is generated on each machine and can be found under
Personal\Certificates:
System server: EcoStruxure Hybrid DCS Server
Engineering client: EcoStruxure Hybrid DCS Engineering Client
Operation client: EcoStruxure Hybrid DCS Operation Client
Virtual machine: EcoStruxure Hybrid DCS VM
They are issued by EcoStruxure Hybrid DCS Root, which is the root CA certificate generated
by EcoStruxure Hybrid DCS and located in Trusted Root Certification Authorities\Certificates.
EIO0000001255 09/2019 97
Securing Client/Server Communication
Overview
The Security section of the System Server Configuration Wizard lets you generate a root certificate
and private key on the computer on which the system server is installed. Both are stored in a single
file (.pfx) that is created in a location that you select.
The default name of the root CA is EcoStruxure Hybrid DCS Root.
This operation also generates a set of entity certificates and installs the root CA certificate along
with the set of entity certificates on the computer so that you can start the system server.
NOTE: Only root certificate files with the .pfx extension are supported,
Prerequisites
You must have installed the system server.
Any EcoStruxure Hybrid DCS component installed on the computer must not be running.
98 EIO0000001255 09/2019
Securing Client/Server Communication
Item Description
1 Generate and Install Certificates generates and installs both the root CA and a set of entity
certificates on the computer.
Install Certificates installs only a set of entity certificates on the computer by using an existing
root CA certificate, which must be accessible from the computer (see page 96).
The fields that are displayed depend on the selection.
EIO0000001255 09/2019 99
Securing Client/Server Communication
Item Description
2 When you select Generate and Install Certificates for the first time or after uninstalling
certificates, contains the full path to the default root CA certificate file that you are creating. The
path is C:\Users\<username>\AppData\Local\Schneider Electric\Hybrid DCS\Certificates. You
can edit the full path but the path must exist and you must use the .pfx extension for the file
name.
You can create the file at a different location on the local computer, a network location shared
(see page 96) with all computers running Hybrid DCS components (for example, the system
server, the engineering client), or on a removable drive (for example, a USB drive).
When you select Install Certificates, the field is empty. You must enter the full path or browse
to an existing root CA certificate file (.pfx).
3 When you select Generate and Install Certificates, you must create and confirm a password.
Hovering with the pointer over the text field shows a tooltip containing the applicable password
rules.
It is possible to generate different root certificate files by using the same password.
NOTE: You will need this password to generate entity certificates on other computers of a
distributed EcoStruxure Hybrid DCS system infrastructure.
When you select Install Certificates, you must enter the password that was used to generate
the root CA certificate.
If you have forgotten the password, you need to generate a new root CA certificate.
4 When you select Generate and Install Certificates, expiration date of the root CA and entity
certificates. You can edit the field.
When you select Install Certificates, enter the expiration date of the entity certificates.
15 days before the expiration date (see EcoStruxure™ Hybrid DCS, User Guide) and at 24-hour
intervals thereafter, a notification about the upcoming certificate expiration is shown:
For the system server certificate: In the server console (only when the server is starting) and in
clients that are connected to the server.
For client certificates: In the client when it is starting or running.
After this date, a new root CA certificate and/or new entity certificates need to be installed.
5 Depending on your selection, button to proceed with:
The generation and installation of the CA root and the set of entity certificates on the computer.
The installation of the CA root and the set of entity certificates on the computer.
6 Button to uninstall root and entity certificates (see page 107) from the computer.
7 Once you have successfully installed certificates on the computer, the fields display the
corresponding information. If no certificates are installed on the computer or if the operation did
not succeed, the fields are empty.
Generating and Installing Root CA and Entity Certificates on the System Server Computer
To install only entity certificates on the computer, refer to the corresponding procedure
(see page 102).
Step Action
1 Open the System Server Configuration Wizard.
Result: The Security section is displayed.
2 Select Generate and Install Certificates.
3 Modify the path and/or file name if required. You can create only files with the .pfx extension.
NOTE: You need to have read/write permissions for the folder containing the certificate file.
4 Enter and confirm a password.
5 Modify the expiration date (see page 96) if needed.
NOTE: Schneider Electric recommends that you do not extend the validity period.
6 Click Generate and Install.
Result:
The root CA certificate file is created at the selected location.
A set of entity certificates is installed on the computer. If you are using an all-in-one
architecture, the certificate installation process is complete.
The fields of the Last Installed Certificates Details section are populated.
NOTE: If the Certificate Import Wizard dialog box opens, you can click No to preserve your
current Certificate Revocation List (CRL). Clicking either button has no impact on the PKI
functionality for EcoStruxure Hybrid DCS. Certificate revocation is currently not supported.
7 If you are using the System Server Configuration Wizard only to generate and/or install
certificates, you can close the window by clicking the close button or Cancel.
Overview
You must install a set of entity certificates (see page 97) on each computer of a distributed
EcoStruxure Hybrid DCS system infrastructure so that clients can connect to the system server.
This applies also when using the all-in-one architecture (see page 32).
All entity certificates of a same system infrastructure must be issued and signed by the same root
CA.
You can test the client/server connection to verify certificate validity.
Prerequisites
You must have installed the system server and clients. The component on which you want to
install entity certificates must not be running.
You must have generated a root CA certificate (see page 98) by using the System Server
Configuration Wizard or posses your own root certificate file with .pfx extension.
The folder containing the root certificate file must be accessible from the computer on which the
component is installed.
Step Action
1 Verify that clients are closed.
2 In the Windows® Start menu, click EcoStruxure Hybrid DCS.
3 Click the Configuration Wizard entry of any component.
4 Go to the Security section.
Item Description
1 Full path of the root CA certificate file.
Once you have successfully generated entity certificates, the last full path that you have entered
is retained when you open the same configuration wizard again.
2 Enter the password that was used to generate the root CA certificate.
NOTE: If you have forgotten the password, you need to generate a new root CA certificate.
Item Description
3 Expiration date of the set of entity certificates that are installed on the computer.
15 days before the expiration date (see EcoStruxure™ Hybrid DCS, User Guide), a notification
about the upcoming certificate expiration is shown. From then on, you are notified at 24-hour
intervals.
The expiration notification is displayed in clients that are starting or running. In a distributed
EcoStruxure Hybrid DCS system infrastructure, the upcoming expiration of the system server
certificate is shown in clients that are connected to this server.
After this date, the next time a client attempts to connect to the system server, the entity certificates
are considered invalid. A new set of certificates needs to be installed.
NOTE: The expiration date cannot exceed the expiration date of the root certificate.
4 Button to proceed with the installation of the root CA and the set of entity certificates on the
computer.
5 Button to uninstall root and entity certificates (see page 107) from the local computer.
6 Once you have successfully installed certificates on the computer, the fields display the
corresponding information. If no certificates are installed on the computer or if the operation did
not succeed, the fields are empty.
Step Action
1 Verify that the EcoStruxure Hybrid DCS components installed on the computer are not running.
If you are installing entity certificates for a system server, verify that clients that connect to it are
not running.
2 Open the Security section of the configuration wizard of the component installed on the
computer.
NOTE: If you have installed several components (for example, an engineering client and an
operation client) on the same computer, you need to install certificates once by using the
configuration wizard of either of the installed components.
If one of the installed components is the system server, you must use the System Server
Configuration Wizard. It installs certificates for the clients as well.
3 Enter the full path of the root CA certificate file (see page 99) with the .pfx extension.
4 Enter the password for the root CA certificate.
5 Modify the expiration date (see page 96) if needed.
NOTE: Schneider Electric recommends that you do not extend the validity period.
6 Click Install.
Result: The set of entity certificates and the root CA certificates are installed in the local
certificate store.
NOTE: If the Certificate Import Wizard dialog box opens, you can click No to preserve your
current Certificate Revocation List (CRL). Clicking either button has no impact on the PKI
functionality for EcoStruxure Hybrid DCS. Certificate revocation is currently not supported.
Step Action
7 For clients that need to connect also to another system server (see page 103), repeat the
procedure and enter the full path and the password that corresponds to the root CA certificate
used on the other system server computer.
8 If you are using the configuration wizard only to install certificates, you can close the window by
clicking the close button or Cancel.
Overview
Uninstalling certificates deletes the EcoStruxure Hybrid DCS root CA and entity certificates from
the certificate store of the computer.
The root CA certificate file (.pfx) remains on the computer and can be reused to install new entity
certificates.
Prerequisites
You can uninstall certificates from a computer only when the components installed on this
computer are not running.
NOTE: When the root CA certificate file (.pfx) is no longer present, you can reinstall or modify the
software on the same computers but you cannot renew entity certificates or install the software on
different computers by using this root CA certificate.
Step Action
1 Verify that the EcoStruxure Hybrid DCS components installed on the computer are not running.
2 Open the configuration wizard of a component that is installed on the computer.
3 In the Security section (see page 104), click Uninstall.
Result: The EcoStruxure Hybrid DCS certificates that were installed on the computer are
deleted from the local certificate store.
Chapter 8
Configuring the Software
Overview
This chapter describes how to configure the system server, clients, as well as virtual machines
before starting the software for the first time and thereafter when changes are required.
The purpose is to:
Verify and/or configure parameters of:
The system server and clients.
The virtual machine (VM) that is installed with the system server and/or engineering clients.
Participants running inside the VM.
Install in and/or remove from Participants running inside the VM extensions, such as:
Device type managers (DTMs).
Generic station description (GSD) files.
Hotfixes or patches.
The configuration is performed by using the various sections of the configuration wizards.
Overview
The following configuration wizards are available to facilitate the configuration of software
components:
System Server Configuration Wizard
Engineering Client Configuration Wizard
Operation Client Configuration Wizard
Section Description
Security Used to generate the root CA certificate, install entity certificates, and uninstall
certificates (see page 93).
Authentication Used to set up the authentication type (see page 91) for role based access control
(RBAC) for the EcoStruxure Hybrid DCS system infrastructure.
Hosting Used to view and configure communication port settings for connections with
clients.
Virtual Machine Used to configure settings to activate and configure the system server VM (saved
states).
Extensions Used to customize software participants installed in the VM.
The Engineering Client Configuration Wizard and Operation Client Configuration Wizard feature
the following sections.
Section Description
System Server Used to view and configure communication settings for the connection with the
system server.
Security Used to install entity certificates and uninstall certificates (see page 93).
Virtual Machine Used to activate and configure the local VM (saved states).
The following figure illustrates the scenario where the VM configuration and the extensions of both
the system server and the client VM are identical. Starting the system server configures the VM
and generates the saved states. When a client that uses a VM connects to the system server, the
saved states of the system server VM are automatically transferred to the client computer. As a
result, patches and/or extensions (for example, DTMs (see page 130)) that were installed on the
VM server-side are readily available client-side because they are part of the saved states of the
VM. You can disable automatic transfer of saved states (see page 121).
NOTE: If the VM was not able to start server-side, saved states cannot be transferred to clients
and VM services are not available client-side. Take the necessary corrective actions server-side
and start the system server again.
The following figure illustrates another scenario where the VM configuration and/or the extensions
of both the system server and the client VM are different. When a client that uses a VM connects
to the system server, the software detects the difference, copies the server-side extensions to the
client computer, and generates the saved states locally to take into account the specific
configuration of the client VM. As a result, installation of patches and/or extensions (for example,
DTMs (see page 130)) that were performed on the VM server-side are repeated on the VM client-
side.
Differences that the software detects between the system server and clients are, for example:
A client VM configuration parameter (for example, a different timeout or language setting).
A new DTM that is installed on the system server.
A different VM activation key that is used for the client VM.
VT-X/AM-V settings of Oracle® VM Virtualbox software.
The following client configuration wizard parameters are not considered to check whether the
server and client VM configuration is identical:
Folder shared with virtual machine
Force saved states generation
NOTE: If an engineering client attempts to connect to the system server while the latter is still
starting, server-side extension files are copied to the client even if their VM configuration and
extension files are identical. This results in saved states being generated locally client-side.
NOTICE
LOSS OF COMMUNICATION
Stop the system server only when no client is running.
Failure to follow these instructions can result in unresponsive clients.
NOTE: Quit a software component before making changes by using its configuration wizard.
To use a configuration wizard, proceed as follows. You must have the necessary permissions.
Step Action
1 From the Microsoft® Windows® Start menu, click EcoStruxure Hybrid DCS and one of the
configuration wizards:
Engineering Client Configuration Wizard
Operation Client Configuration Wizard
For the System Server Configuration Wizard, in the menu bar of system server console, click
Settings → Basic. The system server needs to be stopped.
Result: The selected configuration wizard opens.
2 Verify the settings and/or make necessary changes in the various sections (see page 113) of the
configuration wizard as described further in this chapter.
Clicking Back does not discard your changes.
3 Click Save & Close.
NOTE: Click Cancel to discard changes and close the configuration wizard. You cannot cancel
the creation of certificates (see page 93).
Overview
This topic describes the parameters that you can configure by using:
The Hosting section for the system server:
The client/server communication port.
The file transfer port.
This topic also describes the communication ports that are used by the VM and third-party software
installed along with EcoStruxure Hybrid DCS.
NOTE: You can test the client/server connection by using the Test Certificates button. The system
server must be running. A dialog box informs you of the outcome of the test. If you experience
difficulties, refer to the troubleshooting topic (see page 178).
If you experience difficulties, verify if another program is using any of these ports or if the firewall
is blocking them.
NOTE: For engineering clients, ports used by the local VM are bound to IP address 127.0.0.1
(localhost) to accept only local connections.
Overview
Before using the system server or clients for the first time, you need to verify and/or configure
certain parameters of the VM by using the corresponding configuration wizard (see page 112);
otherwise the default settings that are described in this topic are applied.
Configuration Priority
When the system server with a VM and an engineering client are installed on the same computer,
and you configure the VM by using the configuration wizard of both the system server and the
engineering client, the parameters that are applied to the VM are the ones you configure in the
system server configuration wizard.
When an engineering and an operation client are installed on the same computer, changes that
you save in the Virtual Machine section of one configuration wizard appear also in the configuration
wizard of the other client when you open it. Changes to either configuration wizard that you save
last are retained.
The following figure shows the Virtual Machine section of the engineering client configuration
wizard, which allows you to configure parameters of the VM that is used by the engineering client.
The following figure shows the Virtual Machine section of the operation client configuration wizard,
which allows you to configure parameters of the VM that is used by the operation client.
1 Set of parameters that are specific to the client and that you can configure if the client uses the
local VM; even if you select to use system server settings to configure the VM.
2 Click the button to view settings of the VM of the system server, which are configured in the
Virtual Machine section of the System Server Configuration Wizard. The execution of the local
VM needs to be allowed and the system server needs to be running.
3 Select either option to configure the VM of clients:
Use server configuration: Default setting. Selecting this option configures the VM of the client
by using the same settings as those of the VM of the system server. The fields of the
configurable parameters are not visible.
Saved states of the client VM are transferred from the system server to the client
(see page 113).
Use custom configuration: Selecting this option allows you to configure each parameter of
the VM of clients independently. Fields that you leave blank use the setting of the VM of the
system server.
Saved states of the client VM are generated locally (see page 113) if you customize a
parameter.
NOTE: You cannot customize the Folder for user extensions parameter.
NOTE: The functionality is enabled only if you have allowed the execution of the local virtual
machine.
The table describes the parameters of the Virtual Machine section of the configuration wizard that
are related to the activation of the VM.
Parameter Description
Windows product The Windows® product key (see page 28) to activate the operating system of the VM
key with Microsoft®.
Default value: Blank
NOTE:
If you enter a wrong product key, the operating system is not activated and the software
displays a message in:
The console for the system server.
The notification panel for an engineering client.
Open the corresponding configuration wizard (see page 121), enter the correct product
key. The new value takes effect at the next restart of the component.
Key Management Name and/or port for the Key Management Server (KMS) that the host computer uses
Server (KMS) when you activate the operating system of the VM by using a Windows® product key
under a volume license agreement (see page 28).
The format is hostname:port.
Default value: Blank
NOTE: Enter an IPv6 address in the format [hostname]:port.
The table describes the parameters of the Virtual Machine section of the configuration wizard that
are related to the licensing of the VM.
Parameter Description
Port@Address of Floating License server port of the Floating License Manager where the system server
License Manager license is activated and IP address of the computer on which this FLM is
installed.
This information is required by certain software Participants that are running
inside the VM for licensing purposes.
Default value: 27011@127.0.0.1 (corresponds to localhost).
If the FLM is installed on a different computer, enter the appropriate
information. Use the format port@IP address (IPv4).
NOTE:
This parameter is not a substitute for the License Manager.
If you experience difficulties with Participant services, verify which license
server port is used by the FLM (see EcoStruxure™ Hybrid DCS, Licensing
Guide).
The table describes the parameters of the Virtual Machine section of the configuration wizard that
are related to the usage of the VM (see page 20).
Parameter Description
Allow execution of local Client parameter only.
virtual machine When the check box is:
Selected (true): The client can use the local VM, which is the VM that is
running on the computer. The settings of the configuration wizard apply to the
local VM. The client can still use the VM of the system server (see page 24) if
the system server configuration allows it.
Cleared (false): The client uses the VM that is installed on the system server
computer, whose name or IP address is configured in the Server section of
this wizard. Verify that the system server VM is configured to allow clients to
use it.
You cannot change local VM settings by using the configuration wizard. To
change settings of the VM of the system server, use the System Server
Configuration Wizard.
If a client cannot access a VM, you cannot complete the system engineering life
cycle and/or use runtime navigation services.
Default values:
Engineering client: Selected (true)
Operation client: Cleared (false)
NOTE:
For the operation client, verify that:
The system server VM is configured to allow clients to use it.
If you set the parameter to true, an engineering client needs to be installed on
the same computer unless the operation client is installed on the system
server computer.
Maximum number of The maximum number of VM instances that users are allowed to use. The
virtual machine instances instances can be on the system server, on clients, or on both depending on the
running simultaneously parameter settings for VM usage.
If you change the setting, confirm that this number does not exceed the limit that
is defined by your Microsoft® VM licensing terms (see page 27) and the
performance of your computer is adequate (see page 20).
Default value:
For the system server: 2
For clients: 1
The software starts a new instance automatically when the slots of the current VM
are already used and it receives the request for a new slot (see page 21).
Parameter Description
Folder containing virtual Enter the path to the VM folder containing the virtual image file (.vdi) if you need
machine files (.vdi) to move the folder after installing the software.
This could be necessary, for example, if the disk that contains the VM folder is
running out of space because the virtual machine file is a large file.
Value: Path selected during the installation (see page 49) of the software. By
default, C:\ProgramData\Schneider Electric\Hybrid DCS x\VM, where x
corresponds to the installed major version (the R• version suffix does not
appear).
CriticalMessaging Port Refer to the description of the parameter in the topic documenting the
configuration of server and clients (see page 118).
Allow clients to use virtual System server parameter only.
machine of system server When the check box is selected (true), allows engineering and operation clients
to use the VM (see page 20) that is installed on the computer on which the
system server is installed.
In this case, ports used by the VM (see page 119) are bound to IP address
0.0.0.0 to accept connections from remote computers; otherwise ports are bound
to IP address 127.0.0.1 (localhost).
Default value: Selected (true)
Parameter Description
Folder shared with virtual Path to an existing folder on the local computer or network that becomes
machine accessible from the software Participants installed in the VM.
To access the folder select the Network node in dialog boxes of software
Participants and drill down. The folder that is shared with the VM does not
appear; only its files and subfolders are shown. For example, if you share the
local folder C:\VM_Files, which contains subfolder Control, when you access the
shared folder from a software Participant, you see only Control.
Default value: Blank
Configuring this parameter is required to manage software Participant files (for
example, to export/import files in the Control Participant) and to exchange files
between the VM and the host computer.
NOTE: You cannot share the system root folder (for example, C:\).
NOTE: The folder that you specify needs to exist on the computer that hosts the
VM or on a network that this computer can access. If you enable sharing for this
folder, restrict access by giving permissions only to users who must access this
folder.
For example, if an engineering client installed on PC_1 is configured to use the
VM of the system server, which is installed on PC_2, entering C:\Temp in the
system server configuration wizard allows the VM that is displayed in the
engineering client to access this folder on PC_2. Also, any other engineering
client that is configured to use the VM of the system server can access this folder
as well.
On the opposite, if you are using two engineering clients that are configured to
use their local VM:
To use the C:\Temp folder on the system server, enter the network path to the
folder in each engineering client configuration wizard and share the folder so
that the two engineering client computers can access it (when sharing, give
permissions only to the user of each of the two engineering clients). Similarly,
you can configure any folder on the network to be shared with the VM of each
engineering client. The use of a shared folder on the network is recommended
to share a single folder with several VMs. When sharing, give permissions
only to specific users who need to access the folder.
To use a local folder on each engineering client computer, enter its path in the
engineering client configuration wizard.
Memory allocated to Size of the paging file of the VM in MB.
virtual machine in MB Typically, do not allocate more than half of the memory available on the host
computer.
Default value: 4096
NOTE: Modifying this parameter may cause the software to function incorrectly.
Parameter Description
Processor Count Number of virtual CPU cores that are allocated to the VM.
Allocating more virtual CPU cores can help improve Control-Participant-related
operations.
Typically, do not allocate more than 25% of the physical CPU cores of the host
computer. For example, not more than 4 cores for a 16-core CPU.
Default value: 2
NOTE: Decreasing the default value may reduce the performance.
Ratio to apply to timeouts Allows modifying the default timeouts that apply to the start of the VM (for
example, timeout applicable to the generation of saved states of the VM during
system server startup).
Enter values:
From 1 to 14 to reduce timeouts.
From 16 to 100 to increase timeouts.
Increasing the ratio may help when you experience difficulties during the start of
the VM because of low computer performance.
Range: From 1 to 100
Default value: 15
NOTE: Reducing timeouts excessively or entering a value that is outside of the
range may cause the software to function incorrectly.
Default keyboard layout Allows you to select the default keyboard layout to be used when you work inside
software Participants.
Default keyboard layout setting: US
For more information, refer to Language Settings (see EcoStruxure™
Hybrid DCS, User Guide).
System locale Allows you to set the system locale setting of the operating system of the VM,
which controls the language used to display text in programs that do not support
Unicode. Applies to non-Unicode software Participants.
Change the setting if the language used by non-Unicode Participants to display
text contains characters that are not part of the Windows-1252 code page layout,
which corresponds to English and some Western languages.
Default value: US (en-US)
For more information, refer to Language Settings (see EcoStruxure™
Hybrid DCS, User Guide).
NOTE: The setting does not affect time, date, and currency formats.
Update virtual machine When the check box is selected (true), generates the saved states of the VM
with latest extensions again.This reinstalls any extensions that are listed in the Extensions section of
the configuration wizard.
The setting is helpful, for example, when a Participant has stopped working.
Restarting the system server and selecting this parameter restarts the
Participant.
Default value: Cleared (false)
Parameter Description
Force re-activation of When the check box is selected (true), the software verifies if the operating
Windows system of the VM is activated with Microsoft®. If it is not, it starts the activation
procedure like for a first system server start. If the operating system is already
activated, it starts the system server normally.
Select the check box, for example, if move the VM file (.vdi) to a different
computer. In such case, Windows® detects the hardware change and requires
reactivation.
Default value: Cleared (false)
Overview
This topic describes how to use the Extensions section of the System Server Configuration Wizard
to install and remove the following types of extensions in the Control Participant:
Device type managers (DTMs)
Generic station description (GSD) files
Electronic data sheet (EDS) files of devices communicating by using EtherNet/IP
Once installed, you can use these extensions to configure topological entities in the Topology
Explorer.
It also describes how to install other extensions (see page 140) such as libraries containing Control
resources that you need to refine Control Participant projects.
The software provides silent and manual installation modes. For the installation of GSD and EDS
files (manual mode only), installation files are provided to facilitate the installation.
You can install extensions only in the VM of the system server. Each time you make a change in
the Virtual Machine or Extensions sections of the system server configuration wizard and you start
the system server, the extensions that appear in the Extensions section are reinstalled.
The software transfers or installs automatically to clients that use a VM the extensions that are
installed in the VM of the system server.
If the installation of an extension does not complete successfully or if you cancel it, the VM does
not start.
NOTE: Use the Extensions section also to install hotfixes in software Participants (see page 141).
NOTE: The commands of the Control Participant that allow you to add and remove EDS files are
available but the corresponding wizards do not open when the commands are executed. Follow
the procedures described in this topic instead.
The software installs extensions one after the other in the order that is assigned to them
(see page 132).
The timeout for a silent installation is 10 min. If the installation is not completed within this period,
it is considered not successful.
If the installation in silent mode does not complete successfully, after the timeout is elapsed,
installation starts over in manual mode automatically. This can be the case, for example, if during
a silent installation user interaction is required for the installation to continue or complete.
The following restrictions apply:
You can only install DTMs that create a setup.log file once installation is completed. Refer to the
alternate procedure (see page 187).
You cannot use silent installation for nested installers.
You cannot install an extension that requires a restart of the VM after installation.
NOTE: When you install DTMs, the DTM update dialog box of the Control Participant is displayed
even if the DTM is installed in silent mode.
Recommendations
To reduce the possibility of unsuccessful installation:
Do not place installation files in the root directory of a drive or on the desktop of the computer
before selecting them for installation. Instead, place installation files of each extension in a
separate folder because the software copies the entire folder containing the setup file
(see page 131) (for example, ExtensionSetup.exe) to another location to proceed with the
installation.
When possible, use the .msi file for the installation rather than the .exe file.
Extract compressed installation files (.exe or .msi) and place them in a folder, which does not
contain the compressed archive.
Close all clients before installing or removing extensions.
Extensions Section
The following figure shows an example of the Extensions section of the system server
configuration wizard, which lets you install and remove DTMs, GSD files, and other types of
extensions in the VM of the system server.
Item Description
1 Opens the Browse Extension dialog box, which lets you browse and select the .exe, .msi., or .bat
file of extensions that you want to install.
2 Once you have selected an extension, its path appears under Extension Name.
Extensions that are already installed or that you had added but that did not install successfully
remain in the list of extensions with the order they were assigned when you last saved the
configuration wizard settings.
When you click Save & Close, the folder containing a newly selected extension file (.exe, .msi, or
.bat) is copied to the path C:\Users\Username\AppData\Local\Schneider
Electric\Hybrid DCS X\Vm\HybridDCS.Vm.X.UserExtensions, where X corresponds to the major
version of the software (the R• version suffix does not appear) and x.y is a version index. This is
the location from where the extension is installed.
You cannot install extensions by copying installation files to this folder manually.
Clicking Cancel in the System Server Configuration Wizard section removes from the list of
extensions any extensions, which have not yet been copied to the
HybridDCS.Vm.X.UserExtensions folder.
NOTE:
Once the folder containing the extension file has been copied to the
HybridDCS.Vm.X.UserExtensions folder:
The path that appears under Extension Name is updated when you reopen the System Server
Configuration Wizard. It shows the name of the extension installation file and its parent folder.
The full path appears in a tooltip.
If you need to modify any file in the folder, you must remove the extension from the list first,
proceed with the modification, then add the extension again. If the extension has not yet been
installed in the VM, you do not need to start the server after removing the extension.
3 Indicates the order in which extensions are installed.
You can change the order of installation by dragging an extension up or down to another row.
4 Lets you select the installation mode of the extension (see page 131).
NOTE: Selecting silent mode may not install the extension successfully if the extension does not
support silent mode because, for example, the user is required to provide information during
installation.
Item Description
5 Lets you remove extensions from the list of extensions:
Not yet installed extensions are not installed.
Already installed extensions are uninstalled from the VM.
Step Action
1 Go to the Extensions section of the System Server Configuration Wizard.
2 Open the Browse Extension dialog box and select the installation file (.msi, .exe or, or .bat) of
the extension that you want to install.
NOTE:
If you want to install extensions by using .gsd files, first perform the following steps:
1. Copy the InstallGsd folder (see page 131) to disk. You can change the name of the folder.
2. Copy the extension files (.gsd) to the InstallGsd folder. You can create subfolders.
3. In the Browse Extension dialog box, browse to the InstallGsd folder and select the
Execute.bat file.
3 Modify the order if required.
4 Navigate to the last section of the configuration wizard and click Save & Close.
Result: Folders containing newly selected extension files are copied to the
HybridDCS.Vm.X.UserExtensions folder. Once files and folders are copied, the System Server
Configuration Wizard window closes.
5 Starting the system server starts the VM and initiates the installation of the extensions that
appear in the list of extensions.
Result: The Installation of Extensions window opens.
6 Follow the instructions in the dialog boxes that appear in the Installation of Extensions window.
Result: Once you complete the installation of the extension, the Installation of Extensions
window closes.
NOTE: When you install extensions by using .gsd files, a command prompt window also opens
in the Installation of Extensions window. You need to close the command prompt window after
you have interacted with the installer dialog boxes for the Installation of Extensions window to
close.
NOTE: If you close the Installation of Extensions window manually or cancel the installation of
an extension, the system server starts but without starting the VM.
7 When the installation of DTMs is completed, the Installation of Extensions window opens again
and displays the FDT/DTM Catalog dialog box of the Control Participant.
If the FDT/DTM Catalog dialog box requires any interaction, follow the instructions on screen;
otherwise the dialog box and the Installation of Extensions window close automatically after the
DTM catalog has been updated with the newly installed DTMs.
NOTE: If you do not interact with the FDT/DTM Catalog dialog box when it is required before
the timeout elapses, the Installation of Extensions window closes and installation of the DTM is
considered not successful.
8 When the installation of extensions is completed, the result of the installation (see page 142) is
indicated in the system server console under Result of application of user extensions. Review
the entries.
Startup of the system server continues.
Step Action
1 Go to the Extensions section of the System Server Configuration Wizard.
2 Open the Browse Extension dialog box and select the installation file (.msi, .exe or, or .bat) of
the extension that you want to install.
3 Modify the order if required.
4 Select Silent as installation mode.
5 Navigate to the last section of the configuration wizard and click Save & Close.
Result: Folders containing newly selected extension files are copied the
HybridDCS.Vm.X.UserExtensions folder. Once files and folders are copied, the System Server
Configuration Wizard window closes.
6 Starting the system server starts the VM and initiates the installation of the extensions that
appear in the list of extensions.
Result: When the installation of DTMs is completed, the Installation of Extensions window
opens and displays the FDT/DTM Catalog dialog box of the Control Participant.
NOTE: The installation of an extension may restart in manual mode.
7 If the FDT/DTM Catalog dialog box requires any interaction, follow the instructions on screen;
otherwise the dialog box and the Installation of Extensions window close automatically after the
DTM catalog has been updated with the newly installed DTMs.
NOTE: If you do not interact with the FDT/DTM Catalog dialog box when it is required before
the timeout elapses, the Installation of Extensions window closes and installation of the DTM is
considered not successful.
8 When the installation of extensions is completed, the result of the installation (see page 142) is
indicated in the system server console under Result of application of user extensions. Review
the entries.
Startup of the system server continues.
9 Once the system server is started and you have started an engineering client, if an extension
that you have added was installed in silent mode, confirm that it is installed correctly.
If not, open the System Server Configuration Wizard, change the installation mode to Manual,
and start the system server again.
Step Action
1 Create a folder on the computer on which the system server is installed and copy to it:
The EDS_Addition.bat file
EDS installation files
Step Action
1 Create a folder on the computer on which the system server is installed and copy to it the
EDS_Deletion.bat file (see page 131).
2 Go to the Extensions section of the System Server Configuration Wizard.
3 Open the Browse Extension dialog box and select the EDS_Deletion.bat file.
NOTE: Verify that the installation mode is set to Manual.
4 Navigate to the last section of the configuration wizard and click Save & Close.
Result: The folder containing the .bat file is copied to the HybridDCS.Vm.X.UserExtensions
folder. Once files and folder are copied, the System Server Configuration Wizard window
closes.
5 Starting the system server starts the VM and initiates the installation of the extensions that
appear in the list of extensions.
Result: The Installation of Extensions window opens and displays the start screen of the EDS
Deletion from Device Library wizard.
6 In the EDS Deletion from Device Library wizard, expand a node, select one EDS file, and click
Delete Selected File(s).
Result: The Delete EDS dialog box opens.
7 Click Yes to confirm the deletion.
Result: The selected file is removed from the list.
NOTE: Click No to close the Delete EDS dialog box without deleting the file from the list.
8 Repeat steps 6 and 7 for each EDS file that you want to remove.
9 Once you have selected all the files that you want to remove, click Close.
Result: The EDS Deletion from Device Library wizard closes and startup of the system server
resumes after a few moments.
NOTE: To get the EDS Deletion from Device Library wizard to open again (for example, if you want
to remove additional EDS files after having completed the procedure a first time), select the Update
virtual machine with latest extensions check box (see page 121) in the System Server
Configuration Wizard.
Step Action
1 Create a folder on the computer on which the system server is installed and name it, for
example, MyLibrary.
2 In this folder, create a new text file and name it Execute.bat.
NOTE: If the library installation package already contains such a file, you can edit this one
instead.
3 Edit the file so that it contains only the following line.
"c:\Program Files (x86)\Schneider Electric\Control
Expert 14.0\setupEF.exe" "%~dp0family.dsc" -i -h
Where family.dsc is a file that is included in the library installation package. The name and
file extension may vary
NOTE: setupEF.exe is an existing file in the VM.
4 Save the Execute.bat file.
5 Copy all the library installation files to the same folder.
6 Select the Execute.bat file from the Extensions section of the system server configuration
wizard and follow the procedure describing how to install extensions in manual mode
(see page 130).
Step Action
1 Create a folder on the computer on which the system server is installed and name it, for
example, MyHotFix.
2 In this folder, create a new text file and name it Execute.bat.
3 Edit the file and enter the following two lines.
reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Schneider
Electric\Control Expert\V14.0" /v SilentMode /t REG_SZ /d ON /f
abc.exe /auto (where abc is the name of the hotfix executable file (for example,
ControlExpert_V14_HF123))
4 Save the Execute.bat file.
5 Copy the hotfix executable file (.exe) to the same folder.
6 Select the Execute.bat file from the Extensions section of the system server configuration
wizard and follow the procedure describing how to install extensions in manual mode
(see page 130).
NOTE: If you are installing several hotfixes, you can add an entry for each (second line) in the
Execute.bat file and place all the hotfix executable files (.exe) in the same folder.
Step Action
1 Create a folder on the computer on which the system server is installed and name it, for
example, MyTimeZone.
2 In this folder, create a new text file and name it Execute.bat.
3 Edit the file and enter the following line.
Tzutil.exe /s "<time zone>"
Where <time zone> is the time zone that you want to use.
For example, Tzutil.exe /s "Pacific Standard time"
NOTE: You can obtain your current time zone by typing Tzutil.exe /g in a command
prompt. To obtain a list of valid time zones and their display name, use the /l option.
4 Save the Execute.bat file.
5 Select the Execute.bat file from the Extensions section of the system server configuration
wizard and follow the procedure described in this topic.
Overview
You need to activate the Windows® operating system of the virtual machine (VM) by using the
appropriate configuration wizard (see page 120) and entering a suitable product key
(see page 27).
Schneider Electric recommends that you proceed with the activation the first time you start a
software component that uses a VM. This is because the VM is regenerated when you activate it
and requires, for example, reinstalling any extensions that you had already installed.
You must purchase digital licenses/product keys separately. In case you have purchased a digital
license from the Microsoft® Store, you can retrieve the corresponding product key by looking up
your purchase history and selecting Product key/Install. For more information, search Find your
downloads and product keys on the Microsoft® web site.
Overview
The Data Folders section lets you configure which templates and content containers a blank
database contains.
You need to configure the parameters before starting the system server (see page 155) or using
the Create Blank Database command (see page 148).
NOTE: After the blank database has been created, you can import additional templates
(see EcoStruxure™ Hybrid DCS, User Guide) and content containers (see EcoStruxure™
Hybrid DCS, Runtime Navigation Services , User Guide).
Item Description
1 By default, path to the folder containing the template archive files (see page 64) (.sbk) of a
Schneider Electric library.
Verify that the templates (.sbk) that you are adding are compatible (see page 62) with this version
of the software; otherwise, the system server may not start.
2 By default, path to the folder containing the content container archive files (.cbk)
(see EcoStruxure™ Hybrid DCS, Runtime Navigation Services , User Guide) that are extracted to
disk during installation of the software.
NOTE: Verify that the selected content containers match the templates that are installed in the
database.
Chapter 9
Starting the Software
Overview
This section describes the system server console and the various actions that you can perform by
using its commands. It also describes how to start the system server and engineering clients for
the first time.
For information on how to start the operation client, refer to the topic describing how to set up
runtime navigation services (see EcoStruxure™ Hybrid DCS, Runtime Navigation Services , User
Guide).
For additional information on how to start and quit the software, including logging in to clients and
client/server connection, refer to the topic that describes starting and quitting the software
(see EcoStruxure™ Hybrid DCS, User Guide).
Overview
When you double-click the system server icon, the system server console opens after you are
logged-in.
The console lets you:
Start, stop, and configure the system server.
Back up, restore, and delete databases of the current version of the software.
Restore databases of a supported earlier version (see page 41).
Back up databases of the current version to migrate them to a later version.
Create an empty database.
To use the system server console you must be a member of a group that is created for an
EcoStruxure Hybrid DCS role (see page 88) with the necessary permission.
NOTE: To back up individual systems, use the corresponding command from the system context
menu in the Systems Explorer of the engineering client (see EcoStruxure™ Hybrid DCS, User
Guide).
Command Description
Start Starts the system server.
NOTE: If you had restored a database of a supported earlier version, it migrates
the database (see page 77).
Stop Stops the system server after you confirm the command (see EcoStruxure™
Hybrid DCS, User Guide).
The table describes the commands of the Database menu. The commands are unavailable(1)
when the system server is running.
Command Description
Back Up Database Opens a Save as dialog box, which lets you save (see page 152) the mounted
database to disk as one file (.dbk).
Restore Database Opens an Open dialog box, which lets you mount a database by using a backup file
of either format:
.dbk: Backup files created by using the Back Up Database command of the
current version of the software.
.mdbk: Backup files created by using the Migrate Database command of a
supported earlier version of the software. This mounts the database so that it is
migrated (see page 77) when you start the system server.
NOTE: The software creates a copy of the database folder (see page 152) before
restoring the one that you have selected.
Delete Database Allows you to remove the Caché database entries pertaining to the installed
EcoStruxure Hybrid DCS databases.
The command is available only in either of the following cases:
The Db folder on the computer on which the system server is installed is either
empty or missing.
The CACHE.DAT file is missing in the GLOBAL and SCHEMA subfolders and no
System_n system exists in the Db folder.
For more information, refer to the troubleshooting section (see page 175).
Create Blank Lets you back up the mounted database to a location that you select and starts the
Database system server with a blank database (see page 155) after you confirm the command.
You can configure (see page 144) which templates and content are added to the
blank database.
(1) The Migrate Database command is available only when the system server is running.
Command Description
Migrate Database Opens a Save as dialog box, which lets you save the mounted database to disk as
one file (.mdbk).
It lets you create a backup file (see page 71) of a database that you can migrate to
make it compatible with a later version of the software once you have installed it.
The command is visible only once you install a migration patch, which is available
when the later version of the software is released. Refer to the Installation and
Configuration Guide of the later version to determine if you need to use this
command.
NOTE: You cannot restore this backup file (.mdbk) in the same version of the
software. To do so, create a backup file by using the Back Up Database command.
(1) The Migrate Database command is available only when the system server is running.
Command Description
Basic Opens the Server Configuration Wizard window (see page 113), which lets you
configure settings of the system server and its virtual machine.
Advanced Gives access to advanced parameters of the system server, virtual machine,
client/server communication, and database that can be adjusted if you experience
difficulties running the software.
The command is available only after you enable the console command prompt
(see page 151).
NOTE: Modifying default settings may have a negative impact on software
functionality. Contact EcoStruxure Hybrid DCS support before modifying settings.
Command Description
View Help Opens the global HTML software help.
About Opens the About EcoStruxure Hybrid DCS dialog box (see EcoStruxure™
Hybrid DCS, User Guide).
Command Description
Lock Locks (see EcoStruxure™ Hybrid DCS, User Guide) the components where you
logged in on the local computer.
User Information Opens the User Information dialog box (see page 90).
Log In/Log Out Lets you log in or out (see EcoStruxure™ Hybrid DCS, User Guide) of the software.
Step Action
1 Open the system server console.
2 Press Ctrl+M and enter support@Pes2016 (case sensitive).
3 Press Enter.
Result: Entering maintenance mode is displayed in the console and the command prompt is
enabled.
NOTE:
If you enter a wrong password, repeat step 2.
To disable the command prompt, press Ctrl+M again.
Overview
Data of systems that you create is stored in the database. It also contains the templates of the
Global Templates library.
You can back up a database as a file (.dbk) and restore a database from such a backup file by
using the corresponding commands in the system server console menu bar (see page 148).
Database backup files can only be used with the version of the software that was used to create
them.
Exceptions apply for certain supported versions of databases that you can restore to migrate them
to the current version. This may be the case, for example, for additional releases within the same
year (versions with R• suffix) or when Participants are compatible from one version to the other.
NOTE: You can also back up and restore individual systems by using the corresponding
commands from the context menu in the Systems Explorer of the engineering client
(see EcoStruxure™ Hybrid DCS, User Guide). A system backup contains less data than a
database backup (for example, it does not contain templates) and is version dependent.
For more information, refer to the topic describing how to manage passwords for Control
Participant projects (see EcoStruxure™ Hybrid DCS, User Guide).
Backing Up a Database
You can back up databases only when the system server is stopped.
NOTICE
LOSS OF COMMUNICATION
Stop the system server only when no client is running.
Failure to follow these instructions can result in unresponsive clients.
Step Action
1 Quit any clients that connect to the system server whose database you want to back up
(see EcoStruxure™ Hybrid DCS, User Guide).
2 Stop the system server (see EcoStruxure™ Hybrid DCS, User Guide).
3 Close and reopen the system server console if required.
4 From the system server console menu bar, click Database → Back Up Database.
Result: A Save as dialog box opens.
5 Select a file name and location for the database backup and click Save.
Result: The software starts the back-up process and displays Done in the system server console
when the operation is completed.
Restoring a Database
When you restore a database, the software creates a copy of the existing database folder before
mounting the new database.
The name of the database folder copy is created by adding the suffix _YYYYMMDDHHMMSS to the
name of the database folder, where YYYYMMDD represents the date and HHMMSS the time when the
copy was created.
The copy of the database folder is stored at the path:
C:\ProgramData\Schneider Electric\Hybrid DCS x, where x corresponds to the major version that
you are using (the R• version suffix does not appear).
You can restore databases only when the system server is stopped.
NOTICE
LOSS OF COMMUNICATION
Stop the system server only when no client is running.
Failure to follow these instructions can result in unresponsive clients.
Step Action
1 Quit any clients that connect to the system server (see EcoStruxure™ Hybrid DCS, User Guide).
2 Stop the system server (see EcoStruxure™ Hybrid DCS, User Guide).
3 Close and reopen the system server console if required.
4 From the system server console menu bar, click Database → Restore Database.
Result: An Open dialog box opens.
5 Select a database backup file (.dbk) and click Open.
Result: The software:
Creates a copy the existing database.
Starts the restore process of the selected file.
Displays Done in the system server console when the database is mounted.
NOTE: If the restore operation does not complete successfully, the software restores the
previously mounted database.
Scenario Method
Software is installed for the first time and system server has not yet Starting the system server creates a
been started. blank database (see page 44).
Software has been upgraded to a next major version and no
database has been restored.
Software has been upgraded to an intermediate version (Rx) and Use the Create Blank Database
system server has not yet been started. command (see page 149) and start
Any scenario where a database is already mounted. The database the system server.
may have been migrated and/or contains systems that you have
created.
Overview
From the System Server console (see page 148), before starting the system server for the first
time, you need to configure (see page 82) server settings and the virtual machine (VM) if you have
installed it.
Start the system server before starting clients.
A first system server start may take several minutes because it:
Installs extensions that you have added to the Extensions section of the configuration wizard.
Starts one instance of the VM.
Generates the saved states of the VM.
Imports templates into the Global Templates library and creates the database (this step is not
performed if you are migrating a database).
If starting the system server migrates a database (see page 77), the start-up time is significantly
longer because of the additional steps that the software carries out to migrate it. Depending on the
size of the database, the process may take hours.
Once you start the system server, you cannot stop it until startup is completed.
Refer to Starting and Quitting the Software (see EcoStruxure™ Hybrid DCS, User Guide) for more
information on working with the system server and clients.
NOTE:
Before you can start the system server, you must:
Activate your EcoStruxure Hybrid DCS licenses on the Floating License Manager.
Add users to groups (see page 86).
Generate and install digital certificates (see page 93).
Step Action
1 Configure (see page 111) the system server and its VM settings as needed.
2 Verify that Caché (see page 68) is running by checking the presence and the color of the Caché
notification area icon. When Caché is running, its notification area icon is blue.
3 From the Windows® start menu, click EcoStruxure Hybrid DCS → System Server.
Result: The log-in window opens.
4 Enter your username without domain or prefix, your password, and click Log In.
Result: The system server console opens.
5 If you want to migrate a database, refer to the topic describing database migration
(see page 77).
Otherwise, proceed to step 6.
6 Click Action → Start.
Result: The system server starts up and creates a new, blank database (see page 144). If you
are upgrading an earlier version and/or have restored a database backup file in the previous
step, the system server migrates this database instead.
NOTE: If you have not activated the software license by using the Floating License Manager,
the system server displays a notification and stops.
7 If before starting the system server, you had entered a Microsoft® Windows® product key in the
configuration wizard to activate the VM, the software attempts to activate it over the Internet or
by using the KMS server. If it is unable to do so, the Microsoft® Select your country or region
dialog box opens. Otherwise, the system server activates the VM in the background and
resumes its startup; proceed to step 10.
NOTE: If you entered a wrong Microsoft® Windows® product key, the VM activation procedure
is not initiated, the system server starts but the VM does not. In such case, open the Server
Configuration Wizard (see page 121), enter the correct product key, and restart the system
server.
8 Select your country or region and click Next.
Result: The Call and provide your installation ID dialog box opens.
NOTE: If you cancel the manual activation process, the VM is not activated. You need to restart
the system server once the initial startup has completed to reinitiate the VM activation procedure.
9 Follow the instructions on screen to complete the manual activation of the VM.
10 Wait until the system server console displays the following message at the bottom of the window
to start the engineering client (see page 159): Server is ready.
Overview
Start the system server (see page 156) before starting any client.
Before you start the engineering client for the first time, you need to configure (see page 82) the
server settings and the virtual machine (VM) that the engineering client is using.
The complete start-up of an engineering client may take several minutes if the client uses its own
VM and generates the saved states of the virtual machine (see page 113) and/or installs
extensions (see page 130) locally.
Refer to Starting and Quitting the Software (see EcoStruxure™ Hybrid DCS, User Guide) for more
information on working with the system server and clients.
NOTE: Before you can start the engineering client, you must generate and install digital certificates
(see page 93).
NOTICE
LOSS OF COMMUNICATION
After an interruption of the client/server connection, verify that the last operation executed by the
software was completed successfully, and if necessary, repeat the last operation.
Failure to follow these instructions can result in unresponsive clients.
NOTE: It is recommended to use the notification panel of the engineering client to verify the status
of each task executed through a task menu command. The history of other client-related activity
data is logged in log files (see EcoStruxure™ Hybrid DCS, User Guide).
To start the engineering client for the first time, proceed as follows.
Step Action
1 Configure the server and VM settings as needed by using the configuration wizard.
2 With the system server running, from the Windows® start menu, click EcoStruxure Hybrid DCS →
Engineering Client.
Result: A splash screen appears to indicate that the engineering client is starting. After a few
moments, the log-in window opens.
NOTE: If you are already logged in (see EcoStruxure™ Hybrid DCS, User Guide) to another
EcoStruxure Hybrid DCS on this computer (for example, the system server) the engineering client
window opens without displaying the log-in window.
3 Log in by entering your username without domain or prefix and your password.
NOTE: Close the log-in window to quit the engineering client.
4 Click Log In.
Result: The engineering client window opens and VM-related start-up tasks continue executing.
Information about these tasks is available in the notification panel. You can use the engineering
client in the meantime but Participant services are not available until the VM is fully started.
5 If you have configured the engineering client to use the local VM, selected to use a custom
configuration, and before starting the engineering client, you had entered a Microsoft® Windows®
product key, the software attempts to activate it over the Internet or by using the KMS server. If it is
unable to do so, the Microsoft® Select your country or region dialog box opens. Otherwise, the VM
is activated in the background.
NOTE: If you entered a wrong Microsoft® Windows® product key, the VM activation procedure is
not initiated, the client starts but the VM does not. In such case, open the Engineering Client
Configuration Wizard (see page 121), enter the correct product key, and restart the client.
Step Action
6 Select your country or region and click Next.
Result: The Call and provide your installation ID dialog box opens.
NOTE: If you cancel the manual activation process, the VM is not activated. You need to restart
the client to reinitiate the VM activation procedure.
7 Follow the instructions on screen to complete the manual activation of the VM.
The client starts independently of the VM.
NOTE:
If you start the engineering client:
Before the system server, the client displays a notification that it cannot locate the server.
While the system server is still starting up, the splash screen of the client is displayed until the
server is up and running.
Chapter 10
Modifying, Repairing, and Removing the Software
Overview
This chapter describes how to modify, repair, and remove EcoStruxure Hybrid DCS.
Overview
By using the Modify functionality of the installer, you can perform the following actions after you
have installed at least one EcoStruxure Hybrid DCS component on the computer:
Install one or more additional components (for example, an engineering client).
Uninstall one or more installed components.
Change the authentication type and create role groups (see page 86) (only if the system server
is installed or if you select to install it)
You can access the functionality from either:
The installation package.
The Uninstall or change a program window of the Microsoft® Windows® Control Panel. Select
the Change command for EcoStruxure Hybrid DCS.
When you remove an installed component, the installer checks the integrity of the files of remaining
components.
NOTE: To remove the software from the computer use the remove functionality (see page 168).
Software Licenses
When you add and/or remove software components from the computer, verify that you:
Return licenses that have become unnecessary through the Floating License Manager.
Activate licenses for newly installed components as needed.
For information on the return process, refer to the Schneider Electric Floating License Manager
user manual.
NOTICE
LOSS OF COMMUNICATION
Stop the system server only when no client is running.
Failure to follow these instructions can result in unresponsive clients.
NOTICE
LOSS OF DATA
Back up the database before modifying the installation.
Failure to follow these instructions can result in loss of database or unusable systems.
NOTE: For more information, refer to the topic describing how to back up the database
(see page 152).
To modify the software installation of a computer by using the installation package, proceed as
follows.
Step Action
1 Quit any clients connected to the system server (see EcoStruxure™ Hybrid DCS, User Guide).
2 Stop the system server (see EcoStruxure™ Hybrid DCS, User Guide).
3 Back up the database (see page 152) of the software system infrastructure.
4 On the computer whose installation you want to modify, double-click the setup.exe file that is
located in the root of the installation package.
Result: The installer dialog box opens.
5 Select Modify and click Next.
6 The dialog box shows the different software components that you can install. Those that are
already installed are selected:
Select the check box of other components that you want to install.
Clear the check box of installed components that you want to uninstall.
Do not modify the check box of installed components that you want to keep.
7 Click Next.
Result: The software proceeds with the removal and/or installation of components according to
your selection.
8 Click Finish to exit the installer.
9 Restart the computer when prompted to do so to complete the installation process.
Overview
If a software component is not working properly, you may be able to repair it by using the Repair
functionality of the installer.
The installer attempts to fix missing or corrupt files, shortcuts, and registry entries.
On a computer on which the system server is installed, you can also change the authentication
type and create role groups (see page 86).
You can access the functionality from either:
The installation package.
The Uninstall or change a program window of the Microsoft® Windows® Control Panel. Select
the Change command for EcoStruxure Hybrid DCS.
NOTE: Third-party components are not repaired. If a third-party component that is required is not
installed (for example, because it has been uninstalled), the installer installs it.
NOTICE
LOSS OF COMMUNICATION
Stop the system server only when no client is running.
Failure to follow these instructions can result in unresponsive clients.
NOTICE
LOSS OF DATA
Back up the database before repairing the installation.
Failure to follow these instructions can result in loss of database or unusable systems.
NOTE: For more information, refer to the topic describing how to back up the database
(see page 152).
To repair the software on a computer by using the installation package, proceed as follows.
Step Action
1 Quit any clients connected to the system server (see EcoStruxure™ Hybrid DCS, User Guide).
2 Stop the system server (see EcoStruxure™ Hybrid DCS, User Guide).
3 Back up the database (see page 152) of the software system infrastructure.
4 On the computer on which the component that you want to repair is installed, double-click the
setup.exe file that is located in the root of the installation package.
Result: The installer dialog box opens.
5 Select Repair and click Next.
Result: The software attempts to repair the installed software components.
6 Click Finish to exit the installer.
7 Restart the computer when prompted to do so to complete the repair process.
Overview
This operation removes the software from the computer. The database that contains the data of
existing systems is not removed.
Nevertheless, consider backing up existing databases (see page 152).
You can access the functionality from either:
The installation package.
The Uninstall or change a program window of the Microsoft® Windows® Control Panel. Select
EcoStruxure Hybrid DCS.
To remove software components individually, use the modify functionality (see page 164).
A restart is required to complete the process of uninstalling the software from the computer.
NOTE: The process does not remove the Schneider Electric License Manager and Floating
License Manager.
Removing Hotfixes
You can remove hotfixes that have been applied to the software by using the Uninstall command
from the Microsoft® Windows® Control Panel. Navigate to the View installed updates window
under Programs and Features.
Applied hotfixes are listed in the EcoStruxure Hybrid DCS section.
Returning Licenses
When you remove the software from the computer, consider returning your licenses through the
Floating License Manager so that you may activate them again on a different computer.
For information on the return process, refer to the Schneider Electric Floating License Manager
user manual.
NOTICE
LOSS OF COMMUNICATION
Stop the system server only when no client is running.
Failure to follow these instructions can result in unresponsive clients.
NOTICE
LOSS OF DATA
Back up the database before removing the software.
Failure to follow these instructions can result in loss of database or unusable systems.
NOTE: For more information, refer to the topic describing how to back up the database
(see page 152).
The table describes the procedure to remove the software from the computer by using the
installation package.
Step Action
1 Quit Schneider Electric applications that are running, clients, and stop the system server
(see EcoStruxure™ Hybrid DCS, User Guide).
2 Back up the database (see page 152).
3 On the computer on which the component that you want to remove is installed, double-click the
Setup.exe file located in the root of the installation package.
Result: The installer dialog box opens.
4 Click Next.
5 Select Remove.
6 Follow the instructions on screen.
7 Click Finish to exit the installer.
8 Restart the computer when prompted to do so to complete the removal process.
NOTE: You can click No to restart the computer yourself later. However, a restart of the
computer is required before you start a new installation of EcoStruxure Hybrid DCS.
Chapter 11
Troubleshooting
Troubleshooting
Overview
This chapter contains various troubleshooting information.
Troubleshooting Installation
Step Action
1 Open Task Manager.
2 Stop the explorer.exe process.
3 Restart the explorer.exe process by clicking from the menu of the Task Manager, File → New
Task (Run...).
4 Enter explorer.exe and click OK.
5 Uninstall the software again by using the Uninstall command.
Step Action
1 Open a command prompt as administrator.
2 Change to C:\Windows\SysWOW64
3 Execute lodctr /r
4 Press Enter.
NOTE: You may see a message about a detected error: Unable to rebuild performance counter
setting from system backup restore, error code is 2
5 Restart the system server.
Callin.CallinException: Failure: If the system server console displays this message shortly after
starting the server, you may be running the system server on a computer whose CPU has more
than 16 cores. This hardware configuration conflicts with the license of the Caché database, which
is included with EcoStruxure Hybrid DCS and supports only 16 CPU cores or less.
In such case, to be able to start the system server, you have the following options:
Restrict the number of processors (cores) that the operating system can use in the Boot tab of
the Windows® System Configuration.
Contact Schneider Electric technical support (see page 8) to obtain a license for the database,
which supports more than 16 cores. Conditions apply.
The Db folder contains the files of databases where the software stores data of the Global
Templates library and of existing systems. The default path to the Db folder is
C:\ProgramData\Schneider Electric\Hybrid DCS x, where x corresponds to the major version that
you are using (the R• version suffix does not appear).
The figure shows an example of the contents of the Db folder for a healthy database with two
systems created. The right-hand section of the window shows the CACHE.DAT file that exists in
the GLOBAL and SCHEMA subfolders.
NOTE: Systems that appear in the Db folder keep their default name (System_n) even if you
rename them in the Systems Explorer.
Deleting the Db folder or some of its contents creates an inconsistency with the database entries
that exist in the Caché database.
In such case, you need to remove the Caché database entries pertaining to the installed databases
to make them consistent with the file structure on the computer.
To remove Caché database entries, proceed as follows.
Step Action
1 In the system server console menu bar (see page 149), click Database → Delete database.
Result: The Delete Database dialog box opens.
2 Click Yes.
Result: The software removes Caché database entries.
NOTE: Click No to close the Delete Database dialog box without removing Caché database
entries.
3 Wait until the console displays Done to start the system server.
CPU-Intensive Operations
Performing CPU-intensive operations (for example, importing many instances or mapping many
interfaces) by using a client on a computer on which the system server is installed may lead to CPU
starvation.
As a result, actions that you execute immediately after such CPU-intensive tasks may trigger
notifications about client/server communication interruptions.
Increase the priority of the EngineeringClient.exe or OperationClient.exe process to Above
Normal by using the Details tab of the Windows® Task Manager.
Network Connections
The system server and its engineering stations need to be connected to the same Ethernet network
by a cable connection so that the system server, engineering, and operation clients are able to
communicate. This can be a network that is dedicated to client/server communication.
In case the computer on which the system server is installed is connected also to another network
(for example, an enterprise network providing access to the Internet), verify that an interruption of
this network connection does not block communication on the client/server network. This may
happen, for example, if a domain firewall is configured to disable all communication ports of the
computer in case the connection to the enterprise network is interrupted.
Problem Description
When you connect a USB drive to a computer on which the system server and/or engineering client
is running, you may experience one or more of the following issues:
You cannot eject the USB drive.
The USB port stops responding.
The computer does not hibernate anymore.
The computer does not shut down anymore.
The Microsoft® Windows® blue screen.
This is because the USB port monitoring service of the Oracle® VM Virtualbox application, the
third-party software managing the virtual machine (VM) of the software, does not release the USB
port of the computer.
Recommendation
To transfer files between the host computer and the VM of the system server and/or the
engineering client, use the user-configurable folder that is shared with the VM (see page 120)
rather than USB drives.
NOTICE
LOSS OF COMMUNICATION
Stop the system server only when no client is running.
Failure to follow these instructions can result in unresponsive clients.
To disable the USB port monitoring service of the Oracle® VM Virtualbox application, proceed as
follows.
Step Action
1 Close engineering clients and the system server they connect to.
2 Restart the computer.
3 Copy the VBoxUSBMonitorDisable.reg file to the computer on which you want to use USB
drives.
4 Double-click the VBoxUSBMonitorDisable.reg file.
Result: The Registry Editor dialog box opens.
5 Click Yes.
Result: The USB port monitoring service of the Oracle® VM Virtualbox application is disabled.
NOTICE
LOSS OF COMMUNICATION
Stop the system server only when no client is running.
Failure to follow these instructions can result in unresponsive clients.
To enable the USB port monitoring service of Oracle® VM Virtualbox, proceed as follows.
Step Action
1 Close engineering clients and the system server they connect to.
2 Restart the computer.
3 Copy the VBoxUSBMonitorEnable.reg file to the computer on which you want to use USB
drives.
4 Double-click the VBoxUSBMonitorEnable.reg file.
Result: The Registry Editor dialog box opens.
5 Click Yes.
Result: The USB port monitoring service of the Oracle® VM Virtualbox application is enabled.
Problem Description
The Caché database does not start if you have changed the name of the computer while Caché
was running and have restarted the computer. The Caché icon in the notification area of
Microsoft® Windows® remains gray.
Attempting to start the Caché database manually opens a dialog box Cache Terminal could not
start (112).
Caché software stores the name of the computer in temporary files. When it starts, it compares the
name of the computer with the name stored in the files. If they do not match, the Caché database
does not start.
Recommendation
To change the name of the computer on which the Caché application is installed, first stop the
Caché application (see page 68).
Starting Caché
To get the Caché database to start again, proceed as follows.
Step Action
1 Browse to C:\Program Files\InterSystems\STRUXUREWAREPEv44\mgr.
2 Delete the following files:
cache.ids
cache.lck
EIO0000001255 09/2019
Appendices
Appendix A
Installing the Floating License Manager
Overview
This topic describes how to install the Floating License Manager (FLM) on a computer that is to
become an enterprise license server and on which no EcoStruxure Hybrid DCS nor Supervision
components are going to be installed.
For more information on how to use the FLM, refer to the topic describing licensing mechanisms
(see EcoStruxure™ Hybrid DCS, Licensing Guide).
Installation Procedure
Step Action
1 Double-click the FloatingLicenseManagerSetup_PE.exe file to extract the installation files.
The file is located inside the LicenseManagers folder of the EcoStruxure Hybrid DCS installation
package.
2 Select a destination folder on the computer on which you want to install the FLM.
3 In this destination folder, double-click the setup.exe file to start the installation.
4 Follow the instructions on screen.
NOTE:
Use the following values to configure parameters of the FLM (see EcoStruxure™ Hybrid DCS,
Licensing Guide):
Web Port: 8090
License Server Port: 27011
Vendor Daemon Port: 27010
NOTE: To obtain the server port value that is used by an FLM after installation, refer to the topic
describing how to verify the license server, vendor daemon, and Web port settings of the FLM
(see EcoStruxure™ Hybrid DCS, Licensing Guide).
Appendix B
Installation of DTMs by Using a Response File
Overview
Use this procedure when the installation of a DTM in the Control Participant of the VM did not
succeed because the installation process does not generate the necessary log file (see page 131)
(silent and manual installation modes).
In this case, the use of a response file (setup.iss) allows completing the installation. The response
file records user entries and installation settings that are made during a temporary manual
installation from within the VM.
The response file is generated by installing the DTM on any computer running a Windows®
operating system. This is the only purpose of this installation, which can be removed once the
response file has been retrieved.
The file is then copied from where it was generated and added to the installation package of the
DTM to be used during a silent installation with the help of a batch file (.bat).
Step Action
1 On the computer on which the system server is installed, create a folder that you will be
accessing from the VM.
2 Copy the DTM installation files (.exe and any other required files) to this folder so that the
installation can be started from within the VM.
Step Action
1 Copy the DTM installation file to the C: drive of the computer on which you can perform the
installation (for example, the computer running the system server).
2 Open a command prompt.
3 In the command prompt, type cd.. and press Enter until you are the C:\> prompt.
Step Action
4 Execute the DTM installation file with the /r option in order to generate the InstallShield response
file.
Result: The DTM installation starts.
The following example shows the SMARTSENS_PH_DTM_V1-1-3_Setup.exe DTM installation file,
which is executed from the command prompt with the /r option.
5 Follow the steps on screen until the installation of the DTM is complete.
Result: The setup.iss response file is generated at the path C:\Windows.
Step Action
1 Confirm that the system server is closed.
2 Locate the VM Extensions folder in the EcoStruxure Hybrid DCS installation package (.iso) and
copy the InstallGsd subfolder to the computer on which the system server is installed.
3 Open the InstallGsd folder and delete the UpdateDtm.exe, which is not required.
4 Copy the uncompressed DTM installation file (.exe) and the response file (setup.iss) to the
InstallGsd folder.
5 Edit the Execute.bat file inside the InstallGsd folder as follows.
@Echo off
echo installing DTM...
setup.exe /s
echo Done
Where setup.exe is the name of the DTM installation file.
(Remove the UpdateDtm.exe command.)
NOTE: The /s option installs the DTM in silent mode by using the data and installation settings
contained in the response file.
6 Save the changes to the Execute.bat file.
NOTE: If you want to install several DTMs, create the other entries (setup.exe /s) in the
Execute.bat file and copy all the installation files and response files to the InstallGsd folder. You
can create subfolders inside the InstallGsd folder.
7 Open the Extensions section of the System Server Configuration Wizard.
8 Open the Browse for extension dialog box, browse to the InstallGsd folder, and select the
Execute.bat file.
9 Refer to the topic describing the installation of extensions in manual mode (see page 136) to
complete the procedure.
Index
0-9 C
32-bit databases
Cache
reusing, 61
installed software components, 45
32-bit Process Expert
starting and stopping, 68
upgrading a 32-bit system infrastructure,
third-party software components, 43
60
troubleshooting Cache not starting, 182
7-zip
certificate generator
unzipping the installation package, 41
generating and installing digital certifi-
cates, 93
A certificates
expiration notification for entity certifi-
access control cates, 104
setting up RBAC, 85 generating and installing digital certifi-
activating cates, 93
virtual machine, 143 uninstalling digital certificates, 93
activation Citect SCADA
using configuration wizards, 112 installation requirements, 42
adding installing supervision software, 55
adding a software component, 164 upgrading supervision software, 60
architectures client configuration wizards
client/server communication interrup- activating virtual machines, 143
tions, 31 configuring virtual machines, 120
physical architectures, 29 clients
physical VM architecture examples, 32 configuring clients, 117
software architecture, 16 configuring server settings, 119
authentication connecting a client to different system
role-based access control, 85 servers, 142
engineering client activity logs, 159
starting engineering clients, 159
B communication interruptions
backing up client/server communication interrup-
databases, 152 tions, 31
bad credentials performance considerations, 31
troubleshooting virtual machine password troubleshooting, 178
E
D EDS files
Data Folders section installing and removing, 130
System Server Configuration Wizard, 144 engineering clients
Database menu engineering client activity logs, 159
system server console menu bar, 148 starting, 159
K M
keyboard layouts memory
configuration wizard for virtual machines, memory allocated to the VM, 20
121 Migrate Database
system server console commands, 148
migrating
L databases, 70
languages migrating databases
default keyboard layout of virtual ma- 32-bit migration process overview, 61
chines, 121 database migration log files, 78
user interface language, 45 database premigration log files, 71
Last Action Summary impact on system data, 79
availability after database migration, 81 migrating databases to the current ver-
libraries sion, 77
installing in the control Participant, 140 migration process overview, 61
libraries supplied with Hybrid DCS up- new feature availability after migrating, 79
grades, 64 preparing databases for migration, 71
License Manager re-installing extensions, 75
installed software components, 45 missing directory
license server port setting, 47 troubleshooting virtual machine startup,
license server port 177
licensing software installation, 47 modifying the installation
licensing licensing considerations, 164
considerations for virtual machines, 27 mounting databases
installing the Floating License Manager, restoring, 152
185
requirements when upgrading, 63
using configuration wizards, 112 N
VM licensing examples, 32 network connections
licensing software virtual machine network connections, 20
license server port setting, 47 networks
locking network connection examples, 32
Lock command (system server), 148 network connections of servers and sta-
log files tions, 29
database migration log files, 78 troubleshooting client-server connec-
database premigration log files, 71 tions, 178
engineering client activity log files, 159 new features
extension backup log files, 75 availability in migrated databases, 79
installation log files, 48
system server activity log files, 156
O R
operating systems RBAC
operating system requirements, 40 setting up role based access control, 85
Oracle VM VirtualBox removing
third-party software components, 43 before installing an earlier software ver-
sion, 169
Hybrid DCS, 168
P removing a software component, 164
passwords removing applied hotfixes, 168
default simulator password, 51 repairing
password information and settings when Hybrid DCS, 166
restoring databases, 152 requirements
troubleshooting virtual machine password installing Control Expert, 42
issues, 175 response files
patches installing DTMs with a response file, 187
impact of Control Participant rebranding, Restore Database
62 system server console commands, 148,
performance 148
virtual machine installation recommenda- restoring
tions, 20 databases, 152
performance considerations password information and settings when
client/server communication interrup- restoring databases, 152
tions, 31 restoring a new database, 152
permissions role-based access control
setting up role-based access control, 85 setting up RBAC, 85
physical architectures roles
description, 29 role-based access control, 85
PKI root certificates
generating and installing digital certifi- generating and installing digital certifi-
cates, 93 cates, 93
PLC Simulator
installing, 51
ports S
client configuration wizard, 119 saving files
client VM communication ports, 119 sharing files with the VM, 121
server VM communication ports, 119 security
settings and configuration of communica- setting up role-based access control, 85
tion ports, 117 Security section
system server port configuration, 118 generating and installing digital certifi-
troubleshooting communication ports, cates, 93
178
premigration
preparing databases for migration, 71
project indicators
availability after database migration, 81
Expert, 60
using configuration wizards, 112
VirtualBox
installed software components, 45
third-party software components, 43
VM
changing the time zone of the virtual ma-
chine, 141
default time zone, 26
memory allocated to the VM, 20
unable to extract the VM file, 172
W
Windows 10
.NET Framework requirements, 50
Windows Server 2012
.NET Framework requirements, 50
wizards
using configuration wizards, 112
X
XDB files
updated types supplied in the release, 65
Z
zip utility
unzipping the installation package, 41