InduSoft Web Studio v7.1

Thin Client Solutions Webinar

InduSoft (Andre Bastos /Fabio Terezinho)

Concepts and Definitions Configuration, Features, and Demonstrations Troubleshooting, Tips, and Tricks Q & A

Agenda

Concepts and Definitions

Thin Client vs. ServerServer Thin Client

Software License Not requiredProduct (IWS)Application Files

Installation

ExecutionGraphical InterfaceBackground TasksCommunication Tasks

Not requiredNot required

NoNo

Deployment

Thin Client Solutions

Web Thin ClientThe user access the application from an Internet Explorer Web Browser.

Ideal for multi-purpose stations (e.g.: Manager’s computer).

Secure Viewer Thin ClientThe user access the application from any computer with another

instance of the Viewer. Ideal for operator stations or dual-monitor.

Mobile Access (MA) Thin ClientThe user access the application from any browser that supports HTML5.

Ideal for mobile devices, such as tablets and smartphones.

Mobile Access (MA) Thin Client “Tabular”The user access the application from any browser. Ideal for legacy

mobile devices with web browsing capabilities.

Web Thin Client

Server(Indusoft Web Studio)

Web Thin Clients

Secure Viewer Thin Client

Server(Indusoft Web Studio)

Thin Clients

MA Thin Client (HTML5)M

A Th

in C

lient

(HTM

L5)

MA

“Tab

ular

” Th

in C

lient

(HTM

L1)

New

MA Thin Client (HTML5)

Server(Indusoft Web Studio)

MA Thin Clients

MA “Tabular” Thin Client

Server(Indusoft Web Studio)

SMA “Tabular”Thin Clients

File Server vs. Data ServerServer Thin Client

File Server

(e.g.: File System, Web Server)

Data Server

TCP/IP Server

Thin Client Component(s)

(e.g.: Plug-In, Web Browser)

Application Files(e.g.: screen files, tags lists, etc)

Online / History Information(e.g.: tag values, trend history, etc )

InduSoft protocolover TCP/IP

TCP Port1234

Web Tunneling GatewayServer Thin Client

File ServerMicrosoft Web

Server (IIS)

Data ServerTCP/IP Server

Thin Client Component(s)

(e.g.: Plug-In, Web Browser)

HTTP/HTTPSover TCP/IP

TCP Port80/443

Web Tunneling Gateway

TCP Port 1234

Thin Client Component(s)

(e.g.: Plug-In, Web Browser)

Tags Scope

ServerTag value IS shared among all

stations (Servers and Thin Clients)

Example: Tank Level, Valve State, Production Counter, etc.

LocalTag value is NOT shared among any stations (Servers and Thin Clients)

Example: Current User, Alarm Filter Period, Report Name, etc.

Redundancy

PrimaryServer

Thin Client(s)

SecondaryServer

Typical architectures

Local HMI

Controller + I/O(e.g.: PLC)

Secure ViewerThin Client

Web Thin ClientMA Thin Client

Cloud-based Server

Web Thin ClientMA Thin Client

Configuration, Features, and

Demonstrations

Installation, Configuration, Execution

Web Thin ClientSystem File ServerWeb Thin Client Server (IIS)Web Tunneling GatewayRedundancy

Secure Viewer Thin ClientSystem File ServerWeb Thin Client Server (IIS)Web Tunneling GatewayRedundancyRDP solution for non-Microsoft devices

MA Thin Client

MAT Thin Client (Tabular)

SSL for IIS Web Server

Web Thin Client

Basic Installation - Preparing the Project

Save all Screens as HTML (File Server part) Enable TCP/IP Server Task (Data Server part)Your project is ready to be served to a Web Thin Client

- Preparing the Web Server Configure the Web Server Root directory to point to the Project’s \Web\ subfolder Open Firewall ports 80 (http) and 1234 (InduSoft TCP/IP Server)

- Running the Server Application Call the Runtime and make sure that the Web Server is running

- Connecting through Internet Explorer Open an Internet Explorer session and type the URL to the computer where the project

is running followed by the startup page namee.g. http://192.168.1.102/startup.html

You will be asked to enter a valid user name and a password. Once the credentials have been validated, you will be able to connect to the server project and navigate through the screens

Web Thin ClientWeb Server: using IIS (Internet Information Services) - Installing IIS

On the Windows Control Panel, select Programs and Features

Click on the Turn Windows features on and off We recommend installing the following features:

IIS Management Console ASP and ASP.Net ISAIP Extensions and ISAPI Features You may need to use these features on MA,

SMA and WTG

- Configuring IIS – 2 options (using Console): Point the Web Server to the Project’s \Web\ folder Create a Virtual Directory pointing to the Project’s \

Web\ Folder

- Configure MIME Types On the Console, select the very Root Under the IIS group, click on MIME Type Enter all the file extensions present on the project’s

\Web\ Subfolder

-

SSLIIS (Internet Information Services) using SSL - Purpose

Provides more security, protecting from attacks through the use of Certificates (HTTPS) Browsers opening pages served through SSL check a Certificate and validates it

- Configure Server Computer to use SSL

Get a certificate from a Certificate Authority. Or.. Create a self-signed certificate following the steps below

Using MMC, configure the Certificate Store (Local Computer) On IIS Console, create a Self-Signed Certificate (User computer name) Enable SSL on the Bindings settings associating it the Self-Signed Certificate that you created

- Configure Client Computer to accept a self-signed Certificate

Ideally, using Internet Explorer, open a page from the to the Server through SSL (https) using the Computer Name (this is used on the Certificate)

Once the certification validation fails, open the page anyway On the URL field, click on the warning regarding the Certification and open the View Certificate

Window. Import the Certificate to the Trusted Root Certification Authorities Now the Certificate is valid to be used with ANY browser

Web Thin Client

Redundancy

Configure the Redundant Servers (both InduSoft project and IIS) On the development environment to the Ribbon->Project tab and click on Web On the Data Server IP Address you can enter the IP Address of the computer that will be the

Primary Server Click on Advanced: you will be able to enter the Secondary IP Address

Backup URL: URL where the Web files are stored (Project’s Web folder) from the Secondary Server

It is used to download the files from the secondary Web server when the primary Web server is not available

-

Web Thin ClientWeb Tunneling Gateway- Installation

Used on the case when the port 1234 is blocked by Firewalls Installs an extension on IIS (IndWebSvc) Installation: The installer is located at \InduSoft Web Studio v7.1\

Bin\WebTunnelingGateway.exeNote: Follow the additional instructions related to ISAPI and CGI Restrictions, as well as Handler Mapping on the Help system

- Configuration On the development environment to the Ribbon->Project tab and

click on Web On the Data Server IP Address enter the Computer’s IP Address. If

the Web Server is on the same computer as the Project, you can type the localhost address

Click on Advanced Enable the Web Tunneling Gateway Enter the IP Address that needs to be visible by the Web Thin

Client In case of Redundant Systems, enter the secondary IP addresses

and Backup URL RUN the VERIFY command to save this information on the

project’s web pages

-

Secure Viewer Thin Client

Server Configuration - Preparing the Project (Data Server)

Enable TCP/IP Server TaskYour project is ready to be served to a Secure Viewer Thin Client

- Preparing the File Server (2 options)1. Use a Web Server and configure the Root directory to point to the Project’s root folder

(folder where the .app is). OR2. Share on the network the Project’s root folder

Open Firewall port 1234 (InduSoft TCP/IP Server), and, if using http, port 80

- Running the Server Application Call the Runtime (make sure that the Web Server is running in case of http)

- Additional Optional Configuration If using Redundant Systems, repeat the steps above on the Secondary Server computer If you want to use Web Tunneling Gateway, follow the same instructions to enable it as

on the previous topic

Secure Viewer Thin ClientClient Installation and Configuration

Install the Secure Viewer application (ThinClientSetup.exe) Run the InduSoft Secure Viewer Thin Client Configuration

On the Data Server IP Address, enter the Server’s IP or Name On the URL field, configure the path to the Server’s .App file

If you are using a shared folder, you will enter here the path as in the example below:\\ComputerName\<Path>\ProjectName.app

If you are using a Web Server, enter the URL to the .App file, as in the example below:http://computer name/ProjectName.app

Configure the other parameters, such as Secondary Server information, WTG, etc…

Mobile Access (v7.1)Project Configuration

Requires IIS – No additional configuration required!!! On the development environment to the Ribbon->Project tab and click on Mobile Access Alternatively, on the Project Explorer TreeView, you can go to the Graphics tab, expand the

Thin Client folder and open the Mobile Access configuration You can configure Alarms, Trend Tags and Widgets for any Tag You can create areas and Sub-areas with different configurations Enable the TCP/IP Server runtime task Call the Runtime! On any browser, including from Tables and mobile, type http://<ComputerIP>/MA

Mobile Access TabularProject Configuration

Requires IIS (ASP) – Configure it to point the Project’s folder, or Web, or \Web\SMA\ subfolders On the development environment to the Ribbon->Project tab and click on Mobile Access Tabular Alternatively, on the Project Explorer TreeView, you can go to the Graphics tab, expand the Thin

Client folder and open the Mobile Access Tabular configuration You can configure the Tags that you want to display or control as well as Alarm Configurations Enable the TCP/IP Server runtime task Call the Runtime! On any browser, including from Tables and mobile, type http://<ComputerIP>/<Path>/logon.asp

Non-Windows RDP Access

Server Configuration

Configure a Windows 2008 R2 Server Roles for Remote Desktop Sessions and Remote Desktop Sessions host

Configure additional settings, such as Network Authentication Level, License Mode, Groups and Users, Audio and Video playback option, etc…

Install and Configure the SecureViewer on the Server Configure the User’s property to launch InduSoft Secure Viewer on LogOn

(Server Manager->Configuration->Local Users and Groups->Users->PropertiesEnviroment tab->Starting Program->Start the Following Program on LogOnConfigure it to start the InduSoft Secure Viewer Thin Client\Viewer.exe

Use a Remote Desktop Application to connect to the Server, such as- PocketCloud: For devices powered with iOS (iPads, iPhones, etc)- Remote RDP: For devices powered with Android (Tablets or phones)- Microsoft Remote Desktop Connection: For computers powered with Mac OSX

InduSoft has a special TechNote for this case

Troubleshooting, Tips, and Tricks

Main Topics

Installation

File Server communication

Data Server communication

Updated product

Updated project

Security

Troubleshooting

Web Thin Client requires the Plug-in ISSymbol.ocx. If you want it to be installed by automatically downloading it from the Web Site, you MUST run Internet Explorer as Administrator (right-click, Run as Administrator)

NOTE: Please notice that the ISSymbol installation file is around 16MB large, so its download process may take a few minutes. During this download time, you will not see anything happening in the Browser

If you are having problems opening a page that you have already opened before, delete the Temporary Files from the Browser. This is specially helpful when you do not see the changes that you did on the Server project

Both Server and Thin Clients should be on the Same IWS version, including Service Pack. Or, at least the Thin Client (Web or Secure Viewer) version needs to be newer than the Server

If you are going to use IIS do not place your project under your user \Documents\ folder. This folder is protected by the Operating System. Recommendation: create a specific folder for the project, e.g. c:\Project\

When using IIS, you MUST configure the MIME types and open the WWW, http and https services and ports on the Firewall

Always make sure that the TCP/IP Server Runtime task is Running and the port is configured on the Firewall

Can’t Start the Web Server? The TCP/IP port 80 is probably being used by another program: Skype, TeamViewer, CodeSys ENI, GE Cymplicity/Proficy

Troubleshooting Browser Error 404 means that the HTML Page does not exist on that server, but the server does have a Web

Server enabled

If the Web Server cannot be reached (not enabled, or firewall blocked) the error is that the browser could not connect to the Server and not to the Page

If the page can be reached and you get the Error connecting to Server ‘<IP Address>’, this means that the Web page was found, that ISSymbol was installed, and that the TCP/IP Server can’t be reached. In which case

Either the TCP/IP Server is not running Firewall is blocking the port 1234 (most common error) Wrong IP Address configured on the Data Server IP Address setting

Use the Telnet command to try to connect to the port 1234. E. g.:

Q & A

Q & A

Email(US) info@indusoft.com(Brazil) info@indusoft.com.br(Germany) info@indusoft-germany.de

Support support@indusoft.comWeb site

(English) www.indusoft.com(Portuguese) www.indusoft.com.br(German) www.indusoft-germany.de

Phone (512) 349-0334 (US) +55-11-3293-9139 (Brazil) +49 (0) 6227-732510 (Germany)

Toll-Free 877-INDUSOFT (877-463-8763) Fax (512) 349-0375

Contact InduSoft Today

Germany

USA

Brazil

Thank you