Anda di halaman 1dari 107

Operating Systems Considerations

PUBLIC INFORMATION

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Overview
This session provides an introductory overview of Operating System
considerations such as:
Hardware & Software
Domain & Workgroups
Name Resolution
DNS
DHCP
Security
FactoryTalk Directory Configuration
Best practices and the importance of proper operating system configuration
within a manufacturing environment.
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Agenda
What Are We talking about?
Hardware and Software
Windows Roles and Features
FactoryTalk Configuration
Best Practices

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

What are we Talking About


Where is breakfast?
What time does Happy Hour start ?
Whats EDFest all about ?

Everybody Being SUCCESSFUL

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

What are we Talking About


Operating Systems

An operating system (OS) is a collection of software that manages computer


hardware resources and provides common services for computer programs

For hardware functions such as input and output and memory allocation, the
operating system acts as an intermediary between programs and the computer
hardware

The operating system is also responsible for security, ensuring that unauthorized
users do not access the system.

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

What are we Talking About


One of the most prevalent IT industry trends at the moment is the
proliferation of consumer devices in the workplace.
Employees and partners want to access protected corporate data from
their personal devices, from checking email to the consumption of
advanced business applications.
IT administrators in organizations, while wanting to enable this level of
productivity, would like to continue to ensure that they can manage risk
and govern the use of corporate resources.

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

What are we Talking About


Where do we fit? Manufacturing the control of physical equipment
Failure Severity High
Determinism High
Environment Hostile
Whats Changing

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

What are we Talking About


Where do we fit? Other layers or tiers
Enterprise
Data Processing and transfer
Cloud
Information
Web based

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

What are we Talking About


Manufacturing some of the pieces and parts and phases
Segmentation
Plant floor devices

Controllers

Data Servers

HMI Software

Data Storage

Databases

Historian Servers

Visualization

Reporting Software

Mobile Devices

Requirements
Phase
Architectural
Phase
Technical
Design
Implementation
Phase
Maintain
Phase

The OS plays a role in all 5 phases

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Where do we Start
Whats the end goal
We ALL want to be successful
What are the givens
We work in a Windows environment
Whats the reality
We configure Roles and Features
Where do we start
A really good question

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

10

Agenda
What Are We talking about?
Hardware and Software
Windows Roles and Features
FactoryTalk Configuration
Best Practices

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

11

Software Requirements
Manufacture Software Requirements
Operating System
Database
FactoryTalk Services Platform
RSLinx Enterprise
Software is designed to use the Roles and Features of a given OS
Must consider ALL third party software requirements for both Server and
Clients
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

12

Software Requirements
What type of Operating System (OS)
Server Client
Software Requirements
Software product A + B + C on a given computer
Software required for Computer 1 2 3
Rockwell Automation Product Compatibility Center

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

13

Choosing an Operating system


Select Multi-Product Compare

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

14

Choosing an Operating system


Rockwell Software to Install
Select software
Compare
Click Compare

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

15

Choosing a Server Operating system


Windows 2008 R2

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

16

Choosing a Compatible Database


MSSQL 2008 R2

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

17

Choosing a FactoryTalk Services


Platform
FactoryTalk Services Platform

Product Compatibility and Download Center (PCDC)

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

18

Hardware Requirements
Manufactures minimum hardware requirements for Server and Client

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

19

Hardware Requirements
What type of Hardware

Individual Industrial Hardware

Virtualized Hardware (private cloud)

Cloud Based Hardware (public cloud)

Hardware Counts Pick with the end goal in mind

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

20

Hardware Requirements
Three Main components

Processor (hard to upgrade)

Memory (RAM) (up gradable)

Speed
Number of processors
Number of Cores

Amount
Type (speed)

Hard Drive (up gradable)

Size
Speed
Type (Hard Disk Drive) or (Solid State Drive)
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

21

Hardware Requirements
Introduction to VMware Product Suite Virtualization Solutions
Virtualization in Manufacturing Industries
Building a hardware Infrastructure for a Virtualized Solution
Introduction to Cloud Computing for Manufacturers

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

22

Server Operating Systems


Server 2008 R2 and Server 2012 R2

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Windows Servers
At the heart of IT (Business & Control) Infrastructure
The default installation steps are streamlined

The base OS installation & configuration tasks are now separated

Servers offers a rich set of new and improved management and


maintenance tools
After the basic server installation the server can be configured by

Adding Roles and Features


Configuring Roles and Features

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

24

Windows Servers
Server 2008 R2 Management Console

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

25

Windows Servers
Server 2012 R2 Server Manager Dashboard
Local Server
Roles that were added

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

26

Windows Servers
Server 2014 R2 Server Manager > Local Server
Properties
Events
Services
Best Practices Analyzer
Performance
Roles and Features

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

27

Windows Servers -- Manage & Maintain


The system maintenance needs to reflect the changes in the environment:
Capacities
Workloads
Additional Installation
Memory requirement
Network Bandwidth
Disk Space.

In absence of proper maintenance,


systems tend to become less responsive and reliable
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

28

Windows Servers -- Manage & Maintain


Use System Manager as the central point of administration
Manage servers based on their roles
Maintain the network environment's systems periodically to avoid any
inefficiency
Audit not only to identify security breaches or suspicious activity, but
also to gain insight into how the network, network devices, and systems
are accessed
Enable audit policies through the local system policy or Group Policy
Objects
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

29

Virus Protection Considerations


While Virus protection is always and highly recommended, scanning certain file
and folders can actually have adverse effect on system performance.
Care should be exercised in following installation procedure or best practice
recommendations if certain files or folders need to be excluded.
For example in case of FactoryTalk Historian Site Edition:
On Historian server computers, the Server\dat directory and any directory
where archive or event queue files are located, should be exclude

For Interface nodes, the pipc\dat and pipc\log directories, as well as the
directory where buffer queue files are located, should be excluded

The exclusion is to avoid random signature match incidents, potential performance


impacts, and conflicts with locked files:
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

30

Agenda
What Are We talking about?
Hardware and Software
Windows Roles and Features
FactoryTalk Configuration
Best Practices

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

31

Getting Started
Sequence of tasks

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

A General Installation Sequence


Load Operating system
Decide what if any Service Packs or Updates need to be applied
Change, Verify computers names before loading any additional software
Security Model
Domain
Workgroup
Select Computer Roles and Features
Domain Controller
DNS Server
DHCP Server
Web Server (IIS)
Application Server
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

33

A General Installation Sequence


Assign IP address
Static IP addresses
DHCP server
Control network considerations
Name Resolution
NetBIOS
Host Files
DNS
Users
Windows
FactoryTalk
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

34

Security Model
Domains or Workgroups

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Security Model Domain Vs. Workgroup


Workgroup: Decentralized Administration
No domain Controller (Windows Server OS) to purchase.
One less computer in network to maintain.
Recommended only for small applications where user accounts dont
change often.
Domain: Centralized Administration
One place to manage Users, Groups and Security.
If the FactoryTalk Directory is part of a domain, then windows-linked
users can be added in for use within FactoryTalk.
Automate IP addresses with Dynamic Host Configuration Protocol
(DHCP), and Name Resolution and with Domain Name Service (DNS)
and Windows Internet Name Service (WINS).
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

36

Workgroup
All computers are peers; no computer has control over another computer.
Each computer has a set of user accounts. To log on to any computer in
the workgroup, you must have an account on that computer.
There are typically no more than ten computers.
Limitation is 10 concurrent connections to any share in the workgroup at
any one time
All computers should be on the same local network or subnet.

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

37

Workgroups
Workgroup: Decentralized Administration

New User?
Administer
each computer

FactoryTalk View
Studio

SE Client

SE Client

SE Client

Logged in:
Joe

Logged in:
Henry

Logged in:
Mary

Logged in:
Isaac

Local Users
Joe
Henry
Mary
Isaac

Local Users
Joe
Henry
Mary
Isaac

Local Users
Joe
Henry
Mary
Isaac

Local Users
Joe
Henry
Mary
Isaac

Bob

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Domain
An architecture that one or more servers are responsible for dealing with
security and permissions on the network.
Network administrators use servers to control the security and permissions
for all computers on the domain.
Network modifications are easy, as changes are automatically made to all
computers.
Domain users must provide credentials each time they access the domain.
With a user account on the domain, one can log on to any computer on the
domain without needing an account on that computer.
The computers can be on different local networks.
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

39

Domain Organizational Unit


Organizational Units are containers within a Domain into which you can
place users, groups, computers and other organizational units.
An organizational unit can not contain objects from other domains.
An organizational unit is the smallest scope or unit to which you can assign
Group Policy settings.

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

40

Domains
Domain: Centralized Administration

New User?
Administer the
Domain Controller

FactoryTalk View
Studio

Logged in:
Joe

SE Client

SE Client

SE Client

Bob
Domain
Controller

Logged in:
Henry

Copyright 2008 Rockwell Automation, Inc. All rights reserved.

Logged in:
Mary

Logged in:
Isaac

Domain Users
Joe
Henry
Mary
Isaac

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

41

Domain or Workgroup
New or Existing
Network Architecture or Scope
Number of computers
Number of users
Management

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

42

IP Addresses
Static and DHCP

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Assigning IP Addresses
Regardless of Workgroup or Domain infrastructure, IP address need to be
assigned to each computer that will be on the network
Mission critical computers should have a static IP addresses
Industrial concerns
Using static IP address

Manually entered

Assigned on system startup

Using a DHCP address

DHCP server is a Role of the OS

DHCP server must be available

DHCP server should use a reserved IP address

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

44

Assigning IP Addresses
DHCP IP Address Reservations
Based on MAC addresses

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

45

Assigning IP Addresses
DHCP IP Address Exclusion
Exclude static IP addresses

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

46

Name Resolution
Host Name and NetBIOS

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Name Resolution
Regardless of Workgroup or Domain infrastructure, Name resolution is required
for the computers to communicate with each other on the network.
Name resolution resolves Domain \ Host Names to IP addresses
Two types of Name Resolution

Host Name resolution

Host Files
Domain Name Server (DNS)

NetBIOS resolution

Broadcast
WINS Server
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

48

Host Name Resolution Order


A Windows host (2000 and later) will attempt to resolve the location of a
network resource in the following order:
1.
Hostname (the name of the local machine)
2.

Local DNS Resolver Cache

Loads Host Files on start up


Files cached from the DNS Server

3.

DNS (Centralized name server )

4.

NetBIOS Broadcast (depends on the type of NetBIOS Node)

Absent of ANY configuration, step 4 will be used to achieve some level of name resolution
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

49

Host Files
A Host file is a flat text file used to resolve IP addresses to Host
names
Windows 2000 and later Host files are loaded in to the local DNS
resolver cache first on startup.
You can use different names for the same IP address (nick names)
Host files must be entered and maintained manually

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

50

Host Files Considerations


Useful Application

Redirecting Local Domains

i.e. test local websites in development

Internet Resource Blocking

i.e. Redirecting undesirable sites to harmless destinations

Security Concerns

The hosts file represent an attack vector for malicious software.

i.e. They can be modified by malware to redirect traffic to malicious or


unwanted sites

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

51

Domain Name System/Server (DNS)


Add as a Server Role

Server 2008

Server 2012

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

52

Domain Name System/Server (DNS)


Translates Domain/Host names into IP address
www.example.com = 192.0.43.10
Facilitates the internet usage as meaningful names in URLs and emails
instead of cryptic series of numbers can be used.
The DNS is an essential component of the functionality of a robust network
infrastructure

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

53

Domain Name System/Server (DNS)


Dynamic Updates in a Domain
Only applies to Domain users

Dynamic Updates in a Workgroup


Applies to ALL users

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

54

Name Resolution & Domains


DNS Components
Components of the DNS Editor:
Forward Lookup Zone allows for
resolving a host name to an IP address

Reverse Lookup Zone allows for


resolving an IP address to a host name.
Some software applications will require
this for security, to make sure its
running from a certain machine.

Zones allows for the DNS database


to be split up and administered among
multiple DNS Servers

Resource Records The types of


entries in the database. Host (A)
records associate a host name with an
IP address.
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

DNS How does it work?


3 Does have the address for
www.acme.com in its cache
(IP address of Server D).
Passes the info back to server B

4 Passes along the info

Returned from server C, and


caches it for a while as well

C
5 Caches address

goes to server
D for www.acme.com

2 Does not have the

1 Needs to go www.acme.com .
Checks local DNS cache first if not found
Requests address from DNS Server B

www.acme.com in its DB.


Forwards the request to
another DNS Server (C)
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

56

DNS How does it work?

D
C
5 finds address in
Its cache then
goes to server
D for www.acme.com

B
1 Needs to go www.acme.com .
Checks local DNS cache
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

57

NetBIOS Name Resolution Order


NetBIOS name resolution is based on the Node Type
Hybrid checks Local network then Enterprise
NetBIOS Broadcast -- Node Type (Hybrid)
1. NetBIOS name Cache
2. WINS Server
3. Broadcast
4. Lmhosts file
5. Host File
6. DNS Server

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

58

NetBIOS Name Resolution Order


NetBIOS name resolution is based on the Node Type

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

59

NetBIOS Node Type


Ipconfig /all

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

60

Users
Windows -- FactoryTalk -- SQL Users

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Users, Users, Users


At least four sets of users
Domain Users

Workgroup Users

Domain Scope Users


Single Computer Scoped

SQL Server Users

Can be Windows Users

SQL Server (unlinked) Users

FactoryTalk Users

Can be linked to Windows Users

Independent (Unlinked) Users

Provides some of the Domain user name management conveniences for a


workgroup environment.
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

62

Windows Considerations
IIS

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

IIS (Internet Information Services)


IIS is a Role of the OS

Server 2008 R2

Server 2012 R2

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

64

FactoryTalk System & IIS ..


FactoryTalk system requires a Windows network and depends on a
number of Windows elements, including Internet Information Services (IIS).
A Proper IIS configuration plays a critical role in many FactoryTalk products
particularly those which have a client server infrastructure (web presence).
i.e.
FactoryTalk VantagePoint
FactoryTalk View Site Edition (SE)
FactoryTalk Metrics
etc

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

65

Internet Information Services (IIS)


IIS turns a computer into a web server
Most Rockwell software products require at a minimum
Common Files
Internet Information Services Snap-in
World Wide Web Publishing
Personal Web Manager
Check the knowledgebase on a per product basis

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

66

Internet Information Services (IIS)


IIS is not installed on by default.
IIS manager is accessed through Microsoft Management Console or
Administrative Tools in the Control Panel.

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

67

IIS Role example for FactoryTalk Metrics


Add Web Server (IIS)
Ensure that the following role services are installed for IIS
Common HTTP Features

Application Development

ASP .NET
.Net Extensibility
ISAPI Extensions
ISAPI Filters

Security

HTTP Redirection

Windows Authentication

Management Tools

IIS 6 Metabase Compatibility


IIS 6 WMI Computability
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

68

Internet Information Services (IIS)


Application Pools
An Internet Information Services (IIS) application pool is a grouping of
URLs that is routed to one or more worker processes.
They provide a convenient way to administer a set of Web sites and
applications and their corresponding worker processes.
Process boundaries separate each worker process; therefore, a Web site
or application in one application pool will not be affected by application
problems in other application pools.
Application pools significantly increase both the reliability and
manageability of a Web infrastructure.
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

69

Internet Information Services (IIS)


Application Pools
To verify that an IIS Application Pool is configured for 32-bit operation on a
64-bit OS?

Open Administrative Tools >IIS Manager

In the Explorer tree, expand the IIS Server

In the Explorer tree, select Application Pools

Select the appropriate Application Pool (typically 'DefaultAppPool')

Right-click and select Advanced Settings

In the General section, verify that Enable '32-Bit Applications' = True

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

70

Internet Information Services (IIS)


Application Pools
Application Pool is important because software installation modifies it.
When you have a mix of 32 bit and 64 bit applications, installation of a 32 bit
application will modify 'DefaultAppPool' (and any other existing Application Pools)
for 32-bit operation.
This may cause issues for other applications that are only compatible with 64-bit
Application Pools.
To address such issues, one of the following approach can be taken
To avoid the issue, installation sequence needs to be modified
To correct the issue, the application pool of the non-functioning software
needs to be modified
Please refer to knowledgebase for more details (117888, 111218, 449497,
460423, 477031, .)
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

71

Windows Considerations
DEP

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Data Execution Prevention (DEP)


DEP is a set of hardware and software technologies that perform additional
checks on memory to help prevent malicious code from running on a
system.
Software DEP by default monitors essential Windows and service. You can
increase your protection by having DEP monitor all programs EXCEPT
those which you select.
DEP discussed here is the software-based feature of Windows. Some
processor provide hardware-based DEP under various names.
Generally for Rockwell Software Installation, Data Execution Prevention
should be turned on for Essential windows programs and services only
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

73

Data Execution Prevention (DEP)

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

74

Windows Considerations
Time Zone

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Time Zone Consideration


In a distributed system such as FactoryTalk Historian SE, where logged
information, and their timestamps ARE essential, special attention needs to
be paid to Time Zone configuration and Time Synchronization

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

76

Time Zone Consideration


Example FactoryTalk Historian SE Pre-Installation Tasks

Synchronize Time Settings on Historian System Computers


Times must be set correctly and synchronized with the FactoryTalk Historian
server on all machines that are part of the FactoryTalk Historian system.

All Windows machines must have the proper time-zone settings and are set
to automatically adjust for daylight-saving changes.

Time synchronizations is typically done through the domain Controller.

The domain Controller's time is synchronized first by an Network Time


Protocol (NTP) source.

The domain controller synchronizes all the other computers that are a part of
the FactoryTalk Historian system.
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

77

Time Zone Consideration


Example HistorianSE Pre-Installation Tasks
Disable the Windows time zone
The Windows time zone (TZ) environment variable adversely affects the Historian
server. You must ensure that TZ is not set on the Historian server computer.

To confirm that the TZ variable is not set on Windows 7, Server 2008 and 2008 R2:

Right-click on My Computer and select Properties


Click Advanced system settings.
Click Environment Variables.
If the TZ variable is present, delete it.
If prompted, restart the computer.

To confirm that the TZ variable is not set on computers with other Windows OS:

Right-click on My Computer and select Properties


In the System Properties dialog box, click the Advanced tab.
Click Environment Variables.
If the TZ variable is present, delete it.
If prompted, restart the computer.
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

78

Windows 32 and 64 Bit Considerations


Files, Registry and ODBC

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Program Files
Some Rockwell Automation software products that support 64-bit operating
systems are 32-bit (x86) applications that are "64-bit compatible".
The 'Rockwell Automation', 'Rockwell Software' and 'Incuity' folders are
located within the 'Program Files (x86)' folder on a 64-bit OS
On a 64-bit OS, the 'Program Files' folder is for true 64-bit (x64)
applications, while the 'Program Files (x86)' folder is for backwards
support of 32-bit (x86) applications that are "64-bit compatible".

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

80

Program Files --- Little More Details


Applications in the 'Program Files (x86)' folder use the Windows 32-bit On
Windows 64-bit (WoW64) subsystem.
WoW64 is the x86 emulator that allows 32-bit Windows-based applications
to run seamlessly on 64-bit Windows.
WoW64 is provided with the 64-bit operating systems and does not have to
be explicitly enabled
32-bit applications running in the WoW64 subsystem are suffixed in the
Processes tab of the Task Manager with "*32" (e.g., iexplore.exe
*32; EXCEL.EXE *32).
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

81

Folders
ProgramData
The 'ProgramData' folder is a hidden system folder that is used to store
application program related data
Introduced in Vista OS, It replaces the 'Documents and Settings\All
Users\Application Data' folder that was used in previous versions of
Windows.
Like its predecessor, it works in conjunction with applications
installed within the 'Program Files' folder (and the 'Program Files (x86)'
folder on 64-bit operating systems).
NOTE: As a rule, folders and files within the 'ProgramData' folder should not be
manually manipulated (or deleted) using Windows Explorer or other file system
tools.
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

82

Windows Registry
Managing 32-bit registry keys in a 64-bit Windows Operating System?
64-bit Program:
32-bit Program:

@HKEY_LOCAL_MACHINE\SOFTWARE\Rockwell Software
@HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Rockwell Software

References
http://suport.microsoft.com/kb/305097
RA Knowledgebase ID 507187

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

83

Windows Registry
While not recommended, if you have to modify the registry manually,
EXTREME care should be exercised when merging .REG files into registry
when mix of 32 and 64 bit registries are involved.

Right-click Merge of .reg file will always place the registry information
in the 64 bit location which is not accessible by the 32 bit programs

Use the correct version of the Registry Editor


32-BIT VERSION: C:\Windows\SysWOW64\regedt32.exe
64-BIT VERSION: C:\Windows\System32\regedt32.exe

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

84

ODBC DSN Considerations


The 64-bit ODBC Data Source Name (DSN) cannot be used by a 32-bit
applications running in the WoW64 subsystem.
On a 64-bit OS, the 32-bit ODBC Data Source Administrator must be used
for a 32 bit application:

%windir%\SysWOW64\ odbcad32.exe (typically Windows\SysWOW64).

The 64-bit ODBC Data Source Administrator (also odbcad32.exe) is


accessed using the traditional method:

All Programs > Administrative Tools > Data Sources (ODBC)

NOTE: Both 64 bit and 32 bit version of the ODBC Data Source admin is
odbcad32.exe but in different locations.
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

85

ODBC DSN
In some products (i.e. FactoryTalk Metrics, and FactoryTalk View SE) even
when installed on a 64 bit OS, the SQL Server database portion of their
install is a 32 bit version.
The 32 bit version of the ODBC Data Source Administrator at the following
location should be used:
%windir%\SysWOW64\odbcad32.exe
NOTE: If you try to create a DSN by using Administrative Tools > Data
Sources (ODBC) on a 64 bit Operating System, it will open the 64-bit
system ODBC Data Source Administrator configuration GUI.
The 64 bit DSN GUI has no visual indication that it only relates to 64-bit.
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

86

ODBC DSN
64 Bit

32 Bit

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

87

Agenda
What Are We talking about?
Hardware and Software
Windows Roles and Features
FactoryTalk Configuration
Best Practices

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

88

What is FactoryTalk?
FactoryTalk Services Platform
A service oriented architecture
(SOA) that delivers value
through FactoryTalk-enabled
products
Reduces customer learning
curve and project engineering
time through commonality and
reuse

FactoryTalk System Design


Considerations

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

89

FactoryTalk Services Platform

Common address
book Central
ofsecurity
Enterprise-wide
Centralized
Comprehensive
location Enterprise-wide
for record
of access toaccess to
resources
that are shared
Common software
license
real-time
real-time
manufacturing
alarms and events
warnings
anyand
changes
errors
made to
the
authority Services
for all
components
managementamong
for all FactoryTalk
products
information.
that require action.
generated
by the system.
system.
in the
system. manufacturing
enabled products

Required for FactoryTalk Products

(Confidential For Internal Use Only) Copyright 2007 Rockwell Automation, Inc. All rights reserved.

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

90

FactoryTalk Directory
FactoryTalk Directory

Allows FactoryTalk-enabled products to organize applications,


share definitions and manage services. The FactoryTalk
Directory provides a central lookup service so that all definitions
dont have to existing in a single physical location like a project
file. Instead references or pointers are saved in the
FactoryTalk Directory and used to locate definitions when they
are needed.

FactoryTalk Directory is a core service of the FactoryTalk


Services Platform allowing customers to build an integrated
system from FactoryTalk and Integrated Architecture

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

91

FactoryTalk Security
FactoryTalk Security

FactoryTalk Security performs two critical tasks:


Authentication verifies a users identity and verifies that a
request for service originates with that user.
Authorization verifies a users request to access a software
product, feature, or system resource against a set of
defined access permissions.

FactoryTalk Security authenticates and authorizes users against


a set of defined permissions held in the FactoryTalk Directory.

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

92

FactoryTalk Directory Security


FactoryTalk Directory provides centralized security services without
requiring a Windows Server and domain controller. However Life is
much easier in a Domain environment
Workgroup
Do not use Windows-linked accounts. Instead, create user accounts
that are managed and authenticated by FactoryTalk Security.
Domain
You can use Windows-linked accounts that are managed and
authenticated by the Windows operating system
FactoryTalk Security provides separate permissions for accessing the
automation system.

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

93

FactoryTalk Administration Console

(Confidential For Internal Use Only) Copyright 2007 Rockwell Automation, Inc. All rights reserved.

Planning

Security

Networks

Availability

Defining

Installation

Configuration

Integration

Supporting

Diagnostics

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

94

Part of the FactoryTalk Services


Platform
Load FactoryTalk Services Platform on each computer
Choose which computer will Host the FactoryTalk Directory
Have all other computers join that FactoryTalk Directory
Computer A
Local

Computer B
Local

Global / Network

Computer C
Local

Global / Network

Global / Network

RNAServer

RNAServer

RNAServer

RNAClient

RNAClient

RNAClient

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

95

FactoryTalk Directory
How does it work?
3 Does not have knowledge of
Tag ABC

DS

DS

4 Has knowledge of tag


ABC returns acknowledgement

FTD

5 Caches address
Goes to DS
D for Tag ABC value

HMI
A

2 Does not have the


1 Needs Tag ABC value

DS address. Ask known DS for

Checks for DS Address


Ask the FTD for the DS Address

knowledge of tag ABC

C or D

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

96

FactoryTalk Directory
How does it work?

DS
DS

D
FTD

2 Finds address

In its local cache


Goes to DS
D for Tag ABC value

HMI
A

1 Needs Tag ABC value


Checks cache for DS Address
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

97

Agenda
What Are We talking about?
Hardware and Software
Windows Roles and Features
FactoryTalk Configuration
Best Practices

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

98

Installing Rockwell Automation Software


Verify and test ALL Windows Roles and Features
Have network configure
Install FactoryTalk Services Platform
Install Activations services
Select which FactoryTalk Directory to use
Have all other FactoryTalk computers join that FactoryTalk Directory
Install Application Software per installations instructions
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

99

Installing Rockwell Automation Software


Verify and Test each product before installing additional software if
possible
Create your FactoryTalk Application
Add Data Servers
Configure communication drivers
Add HMI servers
You can test the FactoryTalk Application configuration using the
FactoryTalk Live Data Test Client tool

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved. 100

Starting a FactoryTalk Application


Start the FactoryTalk Directory computer
Start ALL Data Servers
Start ALL HMI servers
Start other Servers (FactoryTalk Metrics, FactoryTalk Historian,
FactoryTalk Transaction Manager and others
Start Clients

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved. 101

Updates and Patch Management


Microsoft releases security patches and product updates on regular basis
Recommended to have Windows Updates turned off
Patches may have adverse affect on installed software operation
A robust patch & update policy is a critical part of a good software
maintenance plan
Use knowledgebase as a reference

On a working Automation System, Patch and Update installations should be a part of a


Deliberate activity and not an Automatic one
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved. 102

Backup, Backup and then Backup again


Windows
Files
System Image Backup
Previous Versions
System restore
FactoryTalk Directory and Applications
Backup
Restore

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved. 103

Backup, Backup and then Backup again


RSLinx
Backup and Restore Utility
Controllers
Backup
Restore
Automatic on a schedule (FactoryTalk AssetCentre)
Network Pieces and Parts
Routers
Switches
Backing up a SYSTEM has many parts and needs to be a Deliberate activity and not
left to chance
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved. 104

Questions?

PUBLIC INFORMATION

Follow RSTechED on Facebook & Twitter.


Connect with us on LinkedIn.
www.rsteched.com
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

We care what you think!


Please take a couple minutes to complete a quick
session survey to tell us how were doing.
On the mobile app:
1. Locate session using
Schedule or Agenda Builder
2. Click on the thumbs up icon on
the lower right corner of the
session detail
3. Complete survey
4. Click the Submit Form button

Thank you!!

4
Copyright 2014 Rockwell Automation, Inc. All Rights Reserved. 106

Thank you for participating!


Please remember to tidy up your work area for the next session.
We want your feedback! Please complete the session survey!

PUBLIC INFORMATION

Copyright 2014 Rockwell Automation, Inc. All Rights Reserved.

Anda mungkin juga menyukai