Cyberthreats A ﬀ e c t Mor e than Your Network · Power Producers Step Up Cybersecurity Redundant Fiber-Optic Network Helps Plant Meet Goals Safety and security have been viewed

Is Your Cybersecurity Strategy Enough?

Power Producers Step Up Cybersecurity

Redundant Fiber-Optic Network Helps Plant Meet Goals

Safety and security have been viewed as separate entities, but in industrial production, they’re inextricably linked.

Cyberthreats Aff ect More than Your Network

PRSRT STDUS POSTAGE

PAID HARRISBURG PAPERMIT # 249

DECEMBER 2017

TJ1712_01_Cover.indd 1 12/5/17 11:39 AM

WITTENSTEIN – one with the future

www.wittenstein-us.com

WITTENSTEIN alpha

Since our origination as Alpha Gear in 1984, WITTENSTEIN alpha has set the bar for excellence in motion control systems—right from the heart of the Midwest. Today our North American headquarters sits on a six-acre campus in Illinois, where we exceed customer expectations daily:

• Ship more than 5,000 products each month, and average 99% on-time delivery.

• Deliver engineering and technical support that helps optimize application performance.

• Provide on-site service and maintenance for WITTENSTEIN alpha gearheads.

The quality of WITTENSTEIN alpha gearheads is renowned. Today that quality is more accessible than ever. For providers near you, email [email protected].

TJ1712_FPA.indd 2 12/5/17 12:07 PM

Imagine your devices had their own pulse. They would tell you how healthy they were and what you could do to improve the performance of your process. Heartbeat Technology™ breathes life into your devices. It provides you with diagnostics, verifies performance and monitors process data to support optimization and predictive maintenance strategies. Our engineers listen carefully to you and understand your Mindset. It is their job to find the best fitting products with Heartbeat Technology to deliver increased operational availability for your plant.

+113GHZYOUR WAVELENGTH

Find out more about the Heartbeat Technology on www.yourlevelexperts.com/heartbeat

+HEARTBEATMINDSET

TJ1712_FPA.indd 3 12/5/17 12:07 PM

THE JOURNAL | DECEMBER 2017 WWW.ROCKWELLAUTOMATION.COM/THEJOURNAL4

©The Journal From Rockwell Automation and Our PartnerNetworkTM, 2017, Volume 24 Number 6, is published six times a year by PUTMAN MEDIA, INC., 1501 E. Woodfield Rd., Suite 400N, Schaumburg, IL 60173 (Phone 630/467-1300). Address all correspondence to Editorial and Executive Offices, same address. Printed in the United States. ©The Journal From Rockwell Automation and Our PartnerNetwork 2017. All trademarks, company names and product names referred to throughout this publication are used for identification purposes only and are the properties of their respective companies. All rights reserved. The contents of this publication may not be reproduced in whole or part without consent of the copyright owner, including digital reproduction. SUBSCRIPTIONS: Qualified-reader subscriptions are accepted from Operating Management in the industrial automation industry at no charge. To subscribe or unsubscribe, email Carmela Kappel at [email protected]. Putman Media Inc., which also publishes Chemical Processing, Control, Control Design, Smart Industry, Pharmaceutical Manufacturing, Plant Services, and Food Processing, assumes no responsibility for validity of claims in items reported. Putman Media, Inc. is not affiliated with Rockwell Automation, Inc. “The Journal From Rockwell Automation and Our PartnerNetwork” is a trademark of Rockwell Automation, Inc. and its use in the title and masthead of this publication is by license granted by Rockwell Automation, Inc. to Putman Media Inc. Some photographs and other illustrations printed in this publication may be used with safety equipment removed or altered for illustrative purposes. However, in actual operation, it is recommended that all correct safety procedures and equipment always be utilized.

Is Your Cybersecurity Strategy Enough? 20The best defense is a good offense with a prevention and response plan to protect industrial control systems from ever-increasing cyberattacks.

Power Producers Step Up Cybersecurity 24Power providers seek a tailored approach that combines physical, electronic and procedural safeguards to meet facility and cyber-security needs.

Redundant Fiber-Optic Network 29Helps Plant Meet GoalsAging wastewater treatment plant slashes costs and downtime by adopting cutting-edge automation that gathers real-time data and reduces maintenance.

Industrial Cybersecurity is a Key 33Support to AvailabilityDon’t believe there’s a real cyberthreat to your network? Data shows otherwise. Better controls and security practices can help prevent operations disruptions.

Columbia Machine Delivers Versatility 37OEM’s floor-level palletizer reduces complexity with a standard-ized, conventional design while achieving robotic-like precision to address packaging and changeover challenges.

December 2017

FEATURES

Safety and security have been viewed as

separate entities, but in industrial production,

they’re inextricably linked.

Cyberthreats Aff ect More than Your Network

12

CONTENTS

TJ1712_04_05_TOC.indd 4 12/5/17 11:37 AM

WWW.ROCKWELLAUTOMATION.COM/THEJOURNAL DECEMBER 2017 | THE JOURNAL 5

December 2017JOURNL-BR042A-EN-P

20

24

33

DEPARTMENTS

Editor’s Viewpoint 7News & Noteworthy 8OEM Partner Profile 37Encompass Showcase 39Product Focus 43Ad Index 46

WEB-EXCLUSIVESVisit www.rockwellautomation.com/thejournal to access these Web-only bonus articles!

Free Webinar: 7 Things to Know About Machine Vision, in 7 MinutesIn this free on-demand webinar, learn why and how companies use machine vision; camera types; how lighting affects reliabil-ity; types of processing and analysis provided; how equipment communicates with PLC/PACs; how to obtain good repeatabil-ity of object representation; and what questions to ask when considering using the technology.

VIDEO: Safety Valves are Certified for Cat 4, PL e ApplicationsSee ROSS CONTROLS’ three new safety valves for pneumatic safety functions: the M35 Series safe exhaust, to supply air to a zone or entire machine/system until signaled to shut off; the Rse Series double valves, safe exhaust safe cylinder return, for simple spring-return functions; and the CC4 Series safe cylinder stop and load holding valves with redundant control.

TJ1712_04_05_TOC.indd 5 12/5/17 2:32 PM

6009714A_Journal.indd 1 11/14/17 8:40 AMTJ1712_FPA.indd 6 12/5/17 12:07 PM


>> There are just some things that go together. You can’t have one without the other. Like peas in a pod.

Family and love. Springtime and flowers. Friends and loyalty. “Game of Thrones” and obsession. “Star Wars” and obsession. Candy Crush and obsession. Math and confusion — wait, that’s probably just me.

is issue of e Journal explains two more things that go together: industrial security and safety. ey’re intertwined, and we explain how and why. Automation networks and physical security have everything to do with aff ecting the safety of people and assets. By disrupting safety systems, security breaches can force a standard control system to operate beyond its safety param-eters, damage equipment, and even put workers employees and the general public in unsafe situations.

erefore, you must address how cybersecurity threats aff ect your safety strat-egy. Real-time production intelligence is the key.

If you think cyberthreats aren’t an issue for your company, think again. Our cover story provides examples of cyberattacks in the United States as well as over-seas that disrupted business and threatened employee and public safety. Hackers, or even employees who don’t realize what they’re doing, can aff ect wastewater facilities, oil and gas companies, pharmaceutical manufacturers, steel mills, medi-cal devices makers, power suppliers, and many more.

As our connected world of the Industrial Internet of ings (IIoT) continues to expand, so do cyber threats. So take advantage of the tips provided in this issue on how to strengthen your cybersecurity. Until next time …

SECURITY & SAFETY: TWO PEAS IN A POD

DECEMBER 2017, VOLUME 24, NO. 6

In Memory of Julie Cappelletti-LangeVice President 1984-2012

Putman Media, Inc.1501 E. Woodfi eld Rd., Suite 400NSchaumburg, Ill. 60173, 630-467-1300

Rockwell Automation

The Journal Executive PublisherRockwell Automation

Rebecca [email protected]

The Journal Managing PublisherRockwell Automation

Stanley A. Miller [email protected]

Putman Editorial & Sales Team

Publisher: Mike Brenner

[email protected]

Executive Editor: eresa Houck

[email protected]

Managing Editor: Amanda Joshi

[email protected]

Advertising Sales Managers: Michael Connaughton

[email protected]

Beth [email protected]

Production Manager: Rita Fitzgerald

rfi [email protected]

Putman Media Publishing Team

President and CEO: John M. Cappelletti

Vice President, Content: Keith Larson

Vice President, Circulation: Jerry Clark

Vice President, Creative & Production: Stephen C. Herner

The Journal From Rockwell Automation and Our Partner-Network is published six times a year by Putman Media, Inc. “The Journal From Rockwell Automation and Our Part-nerNetwork” is a trademark of Rockwell Automation and its use in the title and masthead of this publication is by license granted by Rockwell Automation to Putman Media, Inc.

Other trademarks are property of their respective owners.

To subscribe or unsubscribe, e-mail Carmela Kappel at [email protected].

© The Journal From Rockwell Automation and Our Partner-Network 2017. All rights reserved.

Theresa Houck, Executive Editor Download our free iPhone app by

searching “ROKJournal” in your App Store!

VIEWPOINT

TJ1712_07_Viewpoint.indd 7 12/5/17 11:40 AM

THE JOURNAL | DEcEmbER 2017 WWW.ROcKWELLAUTOmATION.cOm/THEJOURNAL8

ROCKWELL AUTOMATION TO COLLABORATE WITH OHIO COLLEGENew training and certification program helps prepare students for jobs in advanced manufacturing.

>> Rockwell Automation has announced collaboration

with cuyahoga community col-lege (Tri-c), cleveland, Ohio, on an industrial training program to help meet the needs of today’s advanced manufacturing jobs.

Tri-c’s new manufacturing Tech-nology center for Excellence aims to combat the convergence of workforce challenges facing manufacturers, including changing technologies, evolving skill sets, an aging work-force and a lack of interest in manu-facturing jobs. The center includes an integrated line system that replicates the products and technologies found in manufacturing facilities today, and uses Rockwell Automation products and robots from FANUc (www.rockwellautomation.com/go/p-fanuc), an Encompass™ Product Partner in the Rockwell Automation PartnerNetwork™ program.

Tri-c hired millennium control Systems, a Solution Partner in the Rockwell Automation PartnerNet-work™ program, to design and build the hands-on learning environment. With the support of 10 manufactur-ing companies in Ohio, the program will help provide skilled workers to fill job vacancies at their facilities.

The program is available as a workforce training and certification class for workers currently employed in industrial operations that need upskilling, and for students enrolled at the college who are interested in pursuing careers in manufacturing.

The manufacturing Technology center for Excellence currently has four different certification programs, including safety, quality practices and

measurement, manufacturing produc-tion and processes, and maintenance awareness.

Workforce Support and Traininghttp://rok.auto/support-training

Rockwell Automation PartnerNetwork Programwww.rockwellautomation.com/global/sales-partners

The Manufacturing Technology Center for Excellence in Cleveland includes an integrated line system

that replicates the products and technologies found in modern manufacturing facilities.

NEWS & NOTEWORTHY

TJ1712_08_10_News.indd 8 12/5/17 2:34 PM

WWW.ROCKWELLAUTOMATION.COM/THEJOURNAL DECEMbER 2017 | THE JOURNAL 9

NEW MEMBERS JOIN PARTNERNETWORK PROGRAMIndustrial operators focused on improving production through enterprisewide integration must rely on mul-tiple suppliers and partners. To support and simplify this process, Rockwell Automation has added six companies as members of its PartnerNetwork program.

The PartnerNetwork program helps industrial com-panies better solve their production and automation challenges by providing access to an expansive network of leading suppliers, distributors, system integrators, and machine and equipment builders.

The Encompass Partner program welcomed three new members. The Encompass Partner program is a product reference program that helps customers quickly locate products that solve their application challenges. These products complement, enhance and extend Rockwell Automation solutions.

New members in the North America region include:Emulate3D, Dearborn, Michigan, provides engineer-

ing software that seamlessly integrates into the controls testing workflow to help raise productivity and profitabil-ity, while reducing project risk. www.rockwellautomation.com/global/go/emulate

Point Eight Power is a belle Chase, Louisiana manu-facturer of generator control and power distribution systems for the marine, oil and gas, and energy markets. http://rok.auto/pointeightpower

Woodward Inc., Fort Collins, Colorado, is an inde-pendent designer, manufacturer, and service provider of control solutions for the aerospace and industrial markets. The company specializes in systems and compo-nents for industrial gas and steam turbines, reciprocating engines, compressors, wind turbines, electrical grids and other energy-related industrial equipment. www. rockwellautomation.com/global/go/woodward

Two new companies have joined the OEM Partner program in North America. OEM Partners are machine and equipment builders that help provide flexible and efficient equipment leveraging Rockwell Automation solutions. The new OEM Partners are as follows:

Case Engineering, Inc., Evansville, Indiana, designs and builds world-class control solutions for industrial compressed air utilities. The company provides con-trollers for centrifugal, fixed and variable-speed rotary screw and reciprocating compressors. http://rok.auto/caseengineering

Cloud Packaging Equipment, Des Plaines, Illinois, is a developer and manufacturer of high-speed horizon-tal pouching, thermoforming and filter pack machinery. The company specializes in custom packaging equip-ment for multinational food companies. http://rok.auto/cloudpackaging

Rockwell Automation PartnerNetwork Program www.rockwellautomation.com/global/sales-partners

>> PartnerNetwork BriefMatrix Technologies, Inc. Names New VP. Rockwell Auto-mation Solution Partner Matrix Technologies, Inc., an engineering, system integration and manufacturing opera-tions design firm based in Maumee, Ohio, has promoted Ron England, PE, PMP to Vice Presi-dent. England started his career with Matrix in 1996 as an engineer and has quickly moved through several important roles in the corporation, including project manager, senior project manager, and director of project management.

Matrix Technologies, Inc.www.rockwellautomation.com/global/go/p-matrix

>> PartnerNetwork BriefFANUC Marks Production Milestone.Encompass™ Product Part-ner FANUC has produced its 500,000th robot. In addition, FANUC an-nounced plans to build a new factory scheduled to open in August 2018. The new production site will increase its robot capacity from 6,000 to 11,000 units per month.

FANUC Corporationwww.rockwellautomation.com/go/p-fanuc

NEWS & NOTEWORTHY

TJ1712_08_10_News.indd 9 12/5/17 2:35 PM


ROCKWELL AUTOMATION NAMES SENIOR VP, IT AND CIOchris Nardecchia has joined Rockwell Automation as senior vice president, information technology and chief information officer. In this newly created leadership role

reporting to company president and cEO blake moret, Nardecchia will provide strategic vision, operational excellence and change leadership to develop and implement information technology initiatives and architecture throughout the company.

Nardecchia brings extensive life sciences industry experience. most recently, he was vice president and cIO global operations and supply chain at Amgen, Inc. He also held leadership roles at Pfizer and Warner Lambert, where he led IT-enabled business and digital strategy, accelerating growth through technology and data analytics.

Nardecchia also has experience in portfolio manage-ment, engineering, operations, mergers and acquisitions, IT risk management and using technology to develop business insights. Earlier in his career, he held process and production engineering roles in the pharmaceutical, chemical and nuclear industries.

Nardecchia holds a bachelor’s degree in chemical engi-neering from State University of New York at buffalo, and an mbA from michigan State University.

Rockwell Automationwww.rockwellautomation.com

ROCKWELL AUTOMATION INVESTS IN ARTIFICIAL INTELLIGENCE Rockwell Automation is investing in The Hive, a Silicon Valley innovation fund and co-creation studio. The Hive (www.hivedata.com), based in Palo Alto, california, identifies new artificial intelligence (AI)-based opportuni-ties with great growth potential, and based on these op-portunities co-creates, funds, and launches startups with substantial operational and technology support.

The investment will allow Rockwell Automation access to an ecosystem of innovators and technology start-ups with a focus on applying AI to industrial automation. The com-pany’s goals include co-creating to solve customer problems, accelerating innovation, and identifying new emerging technologies that can help its manufacturing customers im-prove business performance by bridging the gaps between plant-floor and higher-level information systems.

The Hivewww.hivedata.com

Rockwell Automation Inc.www.rockwellautomation.com

NEWS & NOTEWORTHY

>> PartnerNetwork BriefSEL Joins Veracity Industrial Networks Board. Veracity Industrial Networks, a developer of industrial software defined networks (SDN)-based technology for opera-tional networks, announced that Dave Whitehead, CEO of Schweitzer Engineering Laboratories (SEL), has joined its board of directors. SEL, a participating Encompass™ Partner in the Rockwell Automation PartnerNetwork™ program, recently became an investor in Veracity.

Schweitzer Engineering Laboratorieswww.rockwellautomation.com/go/p-schweitzer

>> PartnerNetwork BriefTriCore Expands into Canada. Rockwell Automation Solution Partner TriCore, Inc. has opened a new subsidiary, TriCore Canada ULC. With offices in California and Indiana, and its corporate office in Racine, Wisconsin, the expansion into Canada continues the company’s regional expansion plans. The new facility is located at 4723 1 St SW, Suite 350, Calgary AB Canada.

TriCore, Inc.http://rok.auto/tricore

TJ1712_08_10_News.indd 10 12/5/17 2:38 PM

TJ1712_FPA.indd 11 12/5/17 12:07 PM


Cyberthreats Affect More than Your

Network

TJ1712_12_19_CS.indd 12 12/5/17 11:42 AM


>> Safety and security have traditionally been viewed as separate entities, but in industrial

production, your safety and security programs are inextri-cably linked.

Attackers often go after safety systems, because safety systems detect faults, alert operators and automatically intervene. By disrupting safety systems, security breaches can force a standard control system to operate beyond its safety parameters, damage equipment and the environment, or even place employees and the general public in unsafe situations.

Therefore, you must address how cybersecurity threats affect your safety strategy. Real-time production intelli-gence is the key.

When discussing digital manufacturing and the IIoT, focus on the inherent safety implications of common secu-rity risks. The IIoT is the convergence of enterprise-level IT and plant-level operations technology (OT) systems to help companies access production, quality, safety and other data. The Connected Enterprise (www.rockwellautomation.com/go/connected) connects people, processes and things into a common network infrastructure and harnesses the power of enabling technologies, from data and analytics software to smart devices that make up the IIoT.

What does The Connected Enterprise mean for manufacturers? It means using production intelligence for measuring and improving nearly every aspect of their

By integrating safety and security programs, you can assess, manage and mitigate the safety implications of cybersecurity risks in a Connected Enterprise.

By Lee Lane, chief product security officer, Rockwell Automation

Cyberthreats Affect More than Your

Network

TJ1712_12_19_CS.indd 13 12/5/17 11:42 AM


operations, including quality, productivity, uptime and overall equipment eff ectiveness (OEE). It means enter-prise-wide connectivity for instantaneous information sharing and seamless collaboration across an organiza-tion. It means remote monitoring of critical local and remote production assets.

e Connected Enterprise off ers accessibility to device and operational status, motion monitoring, error and stoppage codes, and other secured safety-system data. With the ability to capture and analyze massive amounts of operational data accurately and thoroughly, safety personnel who have a real-time understanding of worker behaviors, machinery compliance and system details can move from merely describing what went wrong to predicting and preventing incidents.

e Connected Enterprise helps industrial automa-tion professionals gain a better understanding of risks and transform company-wide operations with safety and security in mind — enhancing safety and security in all aspects.

To mitigate security risks, many of our users are tapping IIoT technology to remotely access production machinery, allow wireless access to pumping stations, or connect plant-fl oor equipment to the IT infrastruc-ture. is Connected Enterprise is the future — how they can realize improved asset utilization, faster time to market and lower total cost of ownership.

Opportunity Brings RiskBut for all the opportunities e Connected Enterprise brings, there are also risks. More connection points can create more entrance points for security threats, which can be physical or digital, internal or external, and malicious or unintentional. And they can pose a danger in many ways, including intellectual property loss, disrupted operations and compromised product quality. Safety is perhaps the least discussed implication of security threats.

erefore, you need to start thinking of safety and security in relation to each other. To do this, consider the “three Cs of safety,” which is a set of practices that best-in-class manufacturers share:

• Culture (Behavioral): Employee and company behaviors — including values, priorities, attitudes, incentives and beliefs — that help defi ne how well a company embraces safety. In addition to protect-ing intellectual property, processes and physical assets, security personnel should make protect-ing safety systems a core value in everything they do. Greater collaboration between Environment, Health & Safety (EHS), operations and IT teams also is more important.

• Compliance (Procedural): Policies and procedures that help a company achieve compliance with appro-priate safety standards. Compliance eff orts should meet the security requirements in safety standards, such as IEC 61508 and 61511. Conversely, security eff orts should follow a defense-in-depth (DiD) ap-proach, which is recommended in the IEC 62443 (“Security for Industrial Automation and Control Systems”) standard series.

• Capital (Technical): Contemporary safety tech-nologies and techniques that help optimize both safety and productivity. Use safety technologies with built-in security features, and security technologies that both help protect against safety-system breaches and support speedy recoveries should a breach occur.

Safety is perhaps the least discussed implication of security threats

Rockwell Automation outlined some key risk mitiga-tion measures that industrial firms can implement to help determine where they’re most vulnerable. Download the free white paper, “Safety through Se-curity: Protecting People, the Environment and Critical Infrastructure against Industrial Security Threats,” at https://goo.gl/DUWQVF.

>> Free White Paper on Risk Mitigation Steps

TJ1712_12_19_CS.indd 14 12/5/17 11:42 AM

TJ1712_FPA.indd 15 12/5/17 2:31 PM


Dangerous Breaches Already HappeningSecurity breaches and vulnerabilities resulting in safety risks aren’t just theoretical. ey’re a reality:

• An oil pipeline was hacked in Turkey, causing an explosion and 30,000 barrels of spilled oil. e cyber attackers negated the existing safety system to shut down alarms, cut off communications and super-pressurize crude oil in the line.

• A regional water supplier experienced a cybersecu-rity breach that not only compromised customer data, but caused unexplained valve and duct move-ments, including manipulation of programmable logic controllers (PLCs) that “managed the amount of chemicals used to treat the water to make it safe to drink.”

• A cyberattack on a German steel mill resulted in parts of the plant failing and a blast furnace that couldn’t be shut down through normal methods. e plant suff ered “massive damage.”

• e U.S. Food and Drug Administration (FDA) put out an alert to medical device manufacturers and health care facilities about certain medical devices being vulnerable to security breaches. One of the vulnerabilities cited was the potential for the devices to be infected or even disabled by malware.

As you can see, breached machine- and process-safety systems can create cascading safety consequences. Com-promised safety systems that don’t stop machines when they reach a dangerous state or when a safety device is triggered can expose workers to the very threat from which they were supposed to be protected.

Additionally, safety systems that aren’t able to stop production beyond certain operating conditions can expose other employees or an entire plant to risks, such as fi res, chemical leaks or explosions.

Key Risk TypesSecurity risks can take many forms, including:

• Employee Errors. One of the most common security risks comes from innocent mistakes. is could include employees or contractors who unwittingly make a net-work misconnection, download the wrong program to a controller, or plug an infected device into the system.

• Disgruntled Employees. Current or former employ-ees familiar with an organization’s control system and industrial network can present security and safety threats. A prime example involved a worker in Australia who broke into a sewage-equipment control system installed by his former employer and caused 800,000 liters of raw sewage to spill into lo-cal parks and rivers.

• Hackers Seeking Political or Financial Gain. A manufacturer’s intellectual property can be a lucra-tive target for hackers. ey might want to disrupt an industrial operation for fi nancial, competitive or political reasons.

• Corporate Espionage. State-sponsored espionage targeting high-value infrastructure and production assets is a constant threat. U.S. Department of Justice offi cials have said that thousands of companies have been targeted and that such activities represent a “seri-ous threat” to national security.

• Cyberterrorism. Malicious acts could seek to disrupt, infect or cripple critical infrastructure. Potential targets include nuclear plants, water supplies and oil refi neries. One such alleged attack involved hackers attempting to seize control of a small dam in New

>> Rockwell Automation Partners Support Network Security

Many Encompass™ Partners in the Rockwell Automation PartnerNet-work™ (www.rockwellautomation.com/partners/overview.page) provide capabilities that support network security and complement Rockwell Auto-mation solutions. Visit their websites to learn more about how they might help you.

Ethernet Remote AccessHMS Industrial NetworksProSoft TechnologySpectrum Controls Network SecurityClarotyOwl Cyber DefensePanduit Corp.Schweitzer Engineering Laboratories Inc. SymantecTripwire

TJ1712_12_19_CS.indd 16 12/5/17 11:42 AM

TJ1712_FPA.indd 17 12/5/17 12:08 PM

For more information, go to: www.rockwellautomation.com/go/tjsi

SECONDRY IMAGE AREA

PartnerNetwork is a registered trademark of Rockwell Automation, Inc. Copyright © 2016 Rockwell Automation, Inc. All Rights Reserved. AD2013-23-US PUBLICATION CODE FOR

AD CREATOR FILES ONLY

Our partners, your success.Distinguished system integrators who know your business.

Solution Partners, as part of our PartnerNetwork,™ are comprised of system integrators with differentiated skills and experience in the areas of control, process, power and information. They can help design, implement, manage and maintain your automated systems and keep your facilities operating at optimum efficiency.

AIA Automation, Inc. Automated Control ConceptsApplied Control Engineering, Inc. Bachelor Controls Inc.Banks Integration GroupBarry-Wehmiller Design Group Commerce ControlsConcept Systems Inc.Cybertrol Engineering E TechnologiesElectro Design Engineering, Inc.

Elm Electrical Inc.EN EngineeringESE, Inc.GrantekInnovative Control SolutionsInterstates Control Systems Inc.Javlyn, Inc.JMP Engineering, Inc. JNE AutomationLogical Systems, Inc.Malisko Engineering

Matrix Technologies, Inc.MelfiMillennium Control Systems Inc.Outbound TechnologiesPolytron, Inc.PREMIER System Integrators, Inc.Prime Controls Pyramid ControlsRevere Control Systems, Inc.River ConsultingRoviSys Company

Stellar GroupStone TechnologiesSystems Interface Inc.Taurus Power and ControlsTechnical Systems, Inc.Thermo SystemsTriCore Inc.Wachter Electric Company, Inc. W-Industries, Inc.Western Integrated Systems Ltd.Zepplin-USA

Put our advanced technologies together with the expertise of our Solution Partners, and you have a unique resource to call on.

TJ1712_FPA.indd 18 12/5/17 12:08 PM


York. The attack failed because the dam was off-line for maintenance.

Production IntelligenceThe concept of digital transformation is bringing production intelligence to industrial firms for measuring and improving nearly every aspect of their operations. For these opportuni-ties, more connection points can create more entrance points for security threats. You must account for and address how

these threats impact the safety of your people, your infra-structure and the environment around your operations.

by integrating safety and security programs, aligning with industry best practices and following key steps, you can assess, manage and mitigate the safety implications of security risks in a Connected Enterprise.

Rockwell Automation Industrial Securityhttp://rok.auto/security

#electricRULESMotion control that’s stronger, faster and smarter than pneumatics

Make your next machine everything you imagine it can be. Optimize cost, performance and fl exibility with our electric linear motion actuators.

• Simple control options via digital I/O or industrial Ethernet

• Confi gurable strokes to fi t your design

• Clean, leak-free performance

• Fast delivery

www.tolomatic.com

To learn more, visitwww.tolomatic.com/electricRULES

800-328-2174

Ask about native AB Kinetix®

drives compatibility

breached machine- and process-safety systems can create cascading safety consequences.

TJ1712_12_19_CS.indd 19 12/5/17 11:42 AM


>> Now that servers and clients are back up and

running, production systems (such as control, visualization and batch) have resumed their activities, and plants once again are producing goods, it’s time to reflect on recent events.

I remember very well how this all started. Headlines across the Web in-cluded, “Ransomware!” and “Manu-facturing companies with systems down” and “Production halted!” is

was not something you wanted to wake up to on a summer morning.

e culprit was a piece of malware called Nyetya or NotPetya. First believed to be ransomware, NotPetya turned out to be a wiper virus with wormlike methods of propagation. We’ll refer to it as a WiperWorm.

Computer Security PlansTeams with a plan chose their ac-tions carefully and executed them

with purpose. An eff ective response typically involved following a process similar to that referenced within the Computer Security Incident Handling Guide (National Institute of Standards and Technol-ogy Special Publication 800-61).

e fi rst step was to assess the impact’s magnitude and analyze what was causing it so that appro-priate steps could be taken to con-tain the event. However, in many cases, this wasn’t possible.

For some, the NotPetya Wiper-Worm hit almost every Windows computer connected to the indus-trial control system network. With prospects of recovering infected systems looking slim, the next logical step was to start going over existing system backups and attempting to recover. If backups didn’t exist, all production systems would need to be rebuilt from scratch, a costly and time-consum-ing predicament.

IS YOUR CYBERS ECURITYSTRATEGY ENOUGH?

The best defense is a good offense with a prevention and response plan to protect industrial control systems from ever-increasing cyberattacks.

By Pascal Ackerman, senior consultant of Industrial Cyber Security, Rockwell Automation

The malware NotPetya has several mechanisms used to propagate once a device is infected:

1. EternalBlue: the same exploit used by WannaCry.2. EternalRomance: an SMBv1 exploit leaked by “ShadowBrokers.”3. PsExec: a legitimate Windows administration tool.4. WMI: Windows Management Instrumentation, a legitimate Windows

component.

Source: Talos write-up about NotPety (https://goo.gl/MzdExD).

>> How Does NotPetya Work?

TJ1712_20_21_F2_strategy.indd 20 12/5/17 11:43 AM


For those lucky enough, back-ups off ered hope, but a disciplined approach to recovery still involved making sure recovered systems were placed on an isolated network to prevent reinfection. Quick action by excellent cybersecurity research-ers and engineers provided key intelligence on how to prevent rein-fection. Here’s what was necessary:

• Patching the MS17-010 vul-nerability to prevent Eternal-Blue and EternalRomance exploits from compromising a system successfully.

• Disabling WMIC.• Implementing a registry fi x

that shuts off all administra-tive shares such as C$ and ADMIN$ to cut off one of the propagation vectors.

WiperWorm Recovery ChallengesOn the path to recovery, some faced challenges because some of the WiperWorm’s propagation methods also served as key functionality for production applications, so dis-abling it or restricting access to it wasn’t always a viable option.

e takeaway? e most eff ec-tive preventive measure against a

WiperWorm is adherence to sound security practices — “the basics,” if you will. Countless articles ex-ist on the subject, but a few key points are:

• Harden systems before putting them in production.

• Run with restricted user ac-counts when possible.

• Patch your systems and invest in a competent antivirus or endpoint security solution.

Prepare, Prepare, PrepareWhen defending against a Wip-erWorm, ransomware or most other malware outbreaks, the most eff ective strategy remains to be prepared. Patch and harden your systems to prevent the outbreak. If you can’t prevent it, then make sure you’re prepared to restore critical production systems from a backup. Being prepared could mean the diff erence between being up and running and having to completely rebuild your produc-tion systems.

Rockwell Automation Industrial Security Serviceshttp://rok.auto/security

IS YOUR CYBERS ECURITYSTRATEGY ENOUGH?

Support services can help users implement sound security practices in an industrial control system environment.

Validated Windows Patch Subscription. This can deliver the latest validated Windows patches for an industrial computer environ-ment. At Rockwell Automation, patches are made available by connecting Windows Server Update Services (WSUS) server to our managed cloud-based WSUS. Then users can apply them to their systems

Remote Patch and An-tivirus Management. These ser-vices help mitigate risk associated with falling behind on Windows patches and antivirus definitions, as well as the risk associated with an improper patching procedure. For example, we establish a secure remote connection to your industri-al compute environment to monitor the health of infrastructure and im-ages, while administering changes to the environment.

We then work with you to establish a patching and antivirus update cadence and a procedure that tests the functionality of images and applications before putting them back into production.

Remote Backup Manage-ment. This service helps mitigate risk associated with not having back-ups or remote access to knowledge to help with rapid restoration of services. The service provides robust backup capability to monitor backup integrity and perform restoration.

>> How Support Services Can Help

TJ1712_20_21_F2_strategy.indd 21 12/5/17 11:43 AM


Advertisement

>> Teledyne DALSA Industrial Products is

committed to helping manufac-turers improve product quality, lower costs and increase production with easy-to-deploy, cost-effective machine vision solutions for factory f loor deployment.

“Our bOA products offer customers a compact industrial solution with diverse applicability across all manufacturing segments. We designed these products for quick set-up and easy integration to existing lines, such as attaching to the end of a robot arm,” says Steve Geraghty, vice president, Indus-trial Vision Solutions at Teledyne DALSA.

Headquartered in billerica, massachusetts, Teledyne DALSA Industrial Products is a participating Rockwell Automation Encompass™ Product Partner and manufacturer of highly integrated vision systems, simple and affordable vision sen-sors and innovative machine vision software for industrial applications. Products are used across industries including automotive, food and beverage, electronics, health and beauty, medical devices, packaging, pharmaceutical and semiconductor manufacturing.

A participating Encompass Part-ner since 2007, Teledyne DALSA’s vision solutions are designed to integrate seamlessly with Rockwell Automation devices. In the Encom-

pass program, the company offers bOA products, highly integrated vision systems specifically designed for industrial use.

“Teledyne DALSA is committed to providing Rockwell Automation customers with best-in-industry product solutions, application expertise and global support,” notes Geraghty.

bOA vision systems are pack-aged as an industrial smart camera in a small, rugged enclosure that fits easily into existing produc-tion lines. Unlike traditional smart cameras, bOA incorporates multiple processing technologies — DSP, cPU and FPGA — for algo-rithm, communication and control optimization. bOA products are available in a range of resolution for monochrome and color applica-

tions and are configured through a web browser via a standard Ether-net interface.

They’re EtherNet/IP™ confor-mance tested and include protocols for interfacing with Rockwell Automation PLcs and HmIs. Physical interfaces include Giga-bit Ethernet, RS-232 serial, and opto-isolated inputs and outputs, all of which can be connected us-ing standard m12 factory cables. A DIN-mountable breakout module simplifies control-panel wiring.

“We continue to develop prod-ucts to satisfy the broad variety of customer requirements. These include single 640 x 480 stan-dard camera configurations to high performance multi-camera models with 4,096 x 3,072 color resolution. Our bOA products are offered in small, rugged enclosures making them easy to integrate into tight-fitting applications or harsh factory environments knowing the heat, vibration or moisture will not affect performance.” Geraghty concludes.

Teledyne DALSA supplies digital imaging components for the machine vision market. Its image sensors, cam-eras, smart cameras, vision systems, frame grabbers, and software are used in automated inspection systems across many industries and applications. For more information, visit www.rockwellautomation.com/go/ p-teledyne-dalsa.

SERVICING THE MACHINE VISION INDUSTRY FOR MORE THAN 30 YEARS

PARTNER PROFILE: TELEDYNE DALSA

TJ1712_22_PartnerProfile.indd 22 12/5/17 11:45 AM

Teledyne DALSA / Vision Tools Ad—EnglishThe Rockwell Automation Journal / October Issue

7.875" x 10.5" deep (+ bleed) / ColourWednesday, September 20, 2017

Teledyne DALSA, 605 McMurray Road, Waterloo, Ontario, Canada N2V 2E9T: 519-886-6000 | [email protected]

POWERFUL CAPABILITIES THAT EXTEND TO ALL INDUSTRIES, APPLICATIONS AND USERS

LEARN MORE about our vision system software at www.teledynedalsa.com/vs-soft

Sherlock™ and iNspect™ Express vision software. The choice among integrators.

Powerful, Versatile and Flexible Vision ToolsFor diverse application needs across all industries.

From robot guidance, product traceability, assembly verifi cation, dimensional accuracy to fl aw detection, manufacturers are improving product quality, lowering costs and increasing production with Teledyne DALSA vision software.

» Smart cameras with embedded software» Multi-camera vision system for the factory fl oor» Powerful, easy-to-use vision software

TJ1712_FPA.indd 23 12/5/17 12:08 PM


>> The cyberattack on Ukraine’s power grid in December 2016 brought the industry’s

vulnerabilities into sharp relief. For decades, the more familiar territory of physical security threats had domi-nated the conversation.

Right before Christmas, the grid attack cut power to 103 cities and towns, putting almost 200,000 Ukraini-ans without power for several hours, and the global util-ity industry felt the ripple eff ects. e urgency to address and attempt to prevent cybersecurity threats mounted.

Power Industry Makes Up for Lost TimeFor years, cybersecurity trailed behind reliability, environ-mental regulations and aging infrastructure in the list of issues confronting power producers. Cybersecurity moved to the No. 2 spot in 2016. In fact, U.S. industrial control systems were hit by cyberattacks at least 245 times over a 12-month period between 2014 and 2015, according to the U.S. Department of Homeland Security’s Industrial Con-trol Systems Cyber Emergency Response Team.

While every industry is prone to attack, the energy sector led all other industry verticals with almost one-third of the attacks. Power is a fundamental resource. Because it fuels civilization and is critical to economic and military defense infrastructure, it’s an obvious target for security threats.

For that reason, power generators are actively working and evolving in how to eff ectively navigate the cybersecu-rity landscape. We’ll take a look at where the challenges are and the ways power producers can address cybersecurity concerns and regulations more effi ciently and eff ectively.

Challenges for Bulk Electrical SystemsWhen it comes to acting on relevant regulatory standards, power producers have to take a holistic approach. e posi-tive news is that, in general, power producers are ahead of the curve when it comes to cybersecurity compared to other industrial companies.

Consider the recent “Presidential Executive Order on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure,” which calls for an assessment of

POWER PRODUCERS STEP UP CYBERSECURITYPower providers seek a tailored approach that combines physical, electronic and procedural safe-guards to meet facility and cybersecurity needs.

By Tom McDonnell, North American Power Generation Industry Leader, Rockwell Automation

TJ1712_24_28_F3_powergen.indd 24 12/5/17 11:45 AM


cyber readiness and vulnerabilities. e electrical industry already is doing this to comply with industry regulations and standards, including the North American Electric Reliability Corp.’s (NERC) CIP™, the Cybersecurity Act of 2015 and National Institute of Standards and Technology (NIST) standards.

People rely on power producers to provide economic security, environmental stability and health infrastructure service in their daily lives. Given the potential for national security threats, these standards are crucial.

e integration of renewable generating assets, propaga-tion of distributed generation and need for an integrated regeneration infrastructure has led to multiple progressions in the industry. e fi rst is the convergence of IT and opera-tional technology (OT) systems into a Connected Enter-prise for greater collaboration and plantwide effi ciency.

e second industry shift is the increase of intelligent devices and smart equipment, which serve as the founda-tion of a connected power plant.

As power producers work to implement IT/OT con-vergence and intelligent devices, they must keep cyberse-curity threats top of mind. e electric power industry, for instance, follows threat mitigation methods that focus on areas such as preparation, prevention, response and recovery.

It’s no secret that the goal for every facility is to manage risk properly, which might include system upgrades. Still, according to the Edison Electric Institute, tens of thousands of power plants in North America cannot be protected from all threats 100% of the time.

System and Technology UpgradesIn fact, not all producers will be able to upgrade systems and technologies to the same level or at the same pace. For producers that are building new plants or completely overhauling existing facilities — such as moving to a more modern infrastructure, control system or electrical product — this can be an ideal time to investigate and implement cybersecurity protections and processes as part of that larger design and imple-mentation.

For many established facilities, however, it’s more complicated. ey may not have the capital funds available to upgrade problematic legacy systems. We’re going to see producers running with their reliable and proven programmable logic controllers (PLCs) in many locations for the remainder of the plant’s life cycle.

at doesn’t mean these systems can’t get connected or be secured. It just means we’re going to see a rise in hybrid solutions that allow these facilities to achieve the improved production that comes with greater connectivity and the security required for customer satisfaction and regulatory compliance in a way that’s more immediately fi nancially feasible.

Piecing together the right combination of technol-ogy and processes for a hybrid solution presents its own challenge. You have access to a plethora of rapidly evolving technologies. Sorting through everything that’s available and articulating how that will translate into the desired functionality and outcomes for an individual facility takes skill.



No plant has staff with the knowledge and resources required to assess which systems are needed, much less design, deploy or main-tain more secure and connected systems. This issue can be addressed

via workforce training and develop-ment, or though vendor-provided services and support.

Such systems can be successfully designed and deployed only if you look at cybersecurity in a holistic

manner (see Rockwell Automation services, http://rok.auto/security).

A Holistic Approach to Cybersecurity Industrial security must be holistic to be effective. It’s enterprisewide, start-ing at the plant level and encompass-ing every individual end device. It addresses risk from all sides: people, processes and technologies. And it brings together IT and OT teams, both of which are indispensable in securing network architecture.

Three key areas need consideration when taking a holistic approach. The first is moving forward with a security assessment to understand your risk areas and potential threats. The next is deploying defense-in-depth (DiD) security to establish multiple fronts of defense. The third is working with trusted vendors that follow core security principles when designing their products.

Security AssessmentPower producers must cultivate a deep understanding of all risks and vulnerabilities that exist within their organization. A security as-sessment offers a fresh and un-flinching look at site infrastructure nuances, software, networks, control system, policies, procedures and even employee behaviors. It’s the foundation for a successful security policy.

Key deliverables for any security assessment include:

• Inventory of authorized and un-authorized devices and software

• Detailed observation and docu-mentation of system performance

• Identification of tolerance thresholds and risk/vulnerability indications

• Prioritization of each vulnerability based on impact and exploitation potential

© 2016 by AMETEK. All rights reserved.

Automation solutions require accurate feedback of continuous position regardless of the application environment. Analog position sensing devices can have shortcomings in automation applications, including limited features, resolution and cable lengths. That’s why the ReadyLink Linear Displacement Transducer is a far better solution. Feature for feature, it lets you do—and measure—so much more.

Learn more about this smart device technology at ametekfactoryautomation.com.

What to do when analog won’t do?Get the ReadyLin k™ Network LDT

Magnetostrictive noncontact technology; resolution to 1 micron

Set IP address from network PC or the last octet via the RapidRecall DIP switches

Five status LEDs monitor LDT and network status

RapidRecall™ module storesall user confi guration settings

Three standard M12 connectors — 1 power, 2 communications

Built-in web pages for easy confi guration

Status bitswarn of position/velocity outside of programmed range

Supports Star, Line or DLR topology

Wide input power supply range (7–30V) may reduce external power supply requirements

AMETEK 16994-R ReadyLink LDT ad_4.5625x7.5- RockwllJrnl- 2016.indd 1 7/8/16 3:55 PM



• Mitigation techniques required to bring an operation to an acceptable risk state

With an assessment in hand, implementation can begin.

DiD SecurityDiD security is based on the idea that if any one point of protection is defeated, additional layers subsequently will need to be defeated. Therefore, DiD security establishes multiple layers of protection through a combination of physical, electronic and procedural safeguards. Just as a bank uses multiple security measures — such as video cameras, a security guard and a vault — this helps make sure threats encounter more than one line of defense.

A DiD security approach consists of six main components:

• Policies and Procedures: They play a critical role in shaping workers’ behaviors to follow good security practices and confirming the appropriate security technologies are used.

• Physical Security: Physical security should limit personnel access not only to certain areas of a facility but also to entry points on the physical network infra-structure, such as control panels, cabling and devices.

• Network: A network security framework should be established to help safeguard your network infrastruc-ture against cyberattacks.

• Computer: The top means of intruder entry into au-tomation systems is through software vulnerabilities. Security patch management should be established to track, evaluate, test and install cybersecurity software patches.

• Application: Security devices also should be incorpo-rated at the manufacturing or industrial application level as part of a DiD approach.

• Device: Device authentication and unauthorized device identification can help make sure only trusted devices are used.

Trusted VendorsYour plant’s automation system likely is a small part of capital assets or costs. However, it can have an outsized impact on helping you meet your security goals, similar to the impact it has on your production, quality and safety goals. before selecting vendors for any system that will be connected to your network, request they disclose their security policies and practices. At Rockwell Automation, we’ve defined five core security principles for designing products used in a control system.

1. Secure Network Infrastructure. Vendors can help keep information in the automation layer secure and confi-

Given the many regulations and standards affecting power producers, it’s hard to process everything at once. The high-est priority has to be what must be implemented — namely, NERC CIP.

Plan to protect your cyber critical assets. CIP-003, -007, -008 and -009 all offer guidance on securing individual assets within a system.

• Requirements for identifying who owns cyber critical assets and documenting any exceptions.

• Requirements for protecting the information associated with cyber critical assets and evaluating how you man-age the security controls.

• Definition of how to maintain security standards.• Guidelines for reporting and responding to system

threats.• Guidelines for recovery recommendations if a com-

pany loses access to an asset.

Know what you have and where it is. CIP-002, -005 and -011 deal with understanding what critical assets exist within a system and what cyber critical assets are essential for the operation of the other assets.

• Systems and facilities at master and remote sites.• Monitoring and control.• Real-time power system monitoring.• Real-time inter-utility data exchange.• An electronic security perimeter in which all cyber-

critical assets reside — and documentation of the perimeter.

• Perimeter must include electronically monitored access control.

• Conduct an annual review of the perimeter’s cyber vulnerability.

Tend to the physical security of your assets. CIP-004, -006 and -010 describe how to create and maintain a physical security plan that complements the cyber security measures already in place.

• Requirements for documenting physical access controls.• Processes for hiring and training employees on security

measures.• Proper screening for new employee hires.• Raising awareness of security measures with existing

employees.• Training appropriate personnel to use security mea-

sures.

>> Tackling the NERC CIP Standards



dential. For example, technology can validate and authenti-cate devices before they are granted access to a network.

2. Authentication and Policy Management. Company policies dictate data-access levels for employees. Automation products can support these policies using access control lists to manage user access to devices and applications.

3. Content Protection. Automation solutions can help protect intellectual property by assigning passwords to rou-tines and add-on instructions and by using digital-rights man-agement to limit a user’s ability to view and edit device data.

4. Tamper Detection. Built-in tamper detection can detect any unauthorized system activity and alert the right personnel. It also can log key details, such as where the at-tempted intrusion took place, how it occurred and whether anything was modifi ed.

5. Robust Vendor Security. A robust vendor-security approach includes providing security training to employees,

using design-for-security development practices, testing products to global security standards, conducting fi nal secu-rity reviews before products are released, verifying processes stay current with standards and technologies and having a plan in place to address vulnerabilities.

Power producers should look for a structured and tai-lored approach to meet physical and cybersecurity require-ments. is approach can include multiple layers of protec-tion through a combination of physical, electronic and procedural safeguards. It might include a highly integrated cybersecurity suite that consolidates solutions such as antivi-rus, application whitelisting, security information and event management and compliance into a unifi ed solution.

Rockwell Automation Power Generation Industry Solutionshttp://rok.auto/powergen

HELM INSTRUMENT COMPANY, INC.361 West Dussel Drive • Maumee, OH 43537419-893-4356 • www.helminstrument.com • [email protected]

uTwo Channelu24-bit Resolutionu1 Millisecond UpdateuDirect Connection to Standard Load Cells – no Analog Input or Summing Box RequireduWeighing, Packaging and FillinguStamping, Forging, and DiecastuThermoforminguPharmaceuticaluAssembly

Our expertise comes from experience…since 1962

With Helm Load Cell Input ModulesWith Helm Load Cell Input ModulesWith Helm Load Cell Input ModulesWEIGH YOUR OPTIONS

HM1734 HM1525 HM1756 HM604 HM2085

Micro850® expansion module

While every industry is prone to attack, the energy sector led all other industry verticals with almost one-third of the attacks.



>> The unglamorous yet crucial task of sewer and wastewater treatment has direct impacts

on public health and the environment, yet rapid popu-lation growth is stretching the capabilities of the na-tion’s water treatment infrastructure. According to the 2017 Infrastructure Report Card for Wastewater (www.infrastructurereportcard.org/cat-item/wastewater) from the American Society of Civil Engineers (ASCE), more than 56 million new users will be connected to centralized treatment systems across the U.S. over the next 20 years.

One municipal wastewater treatment plant built in the 1970s is taking steps to enhance its capacity, operational effi -ciency and reliability. Located in a small, coastal U.S. city, the plant has 1.1 million gallons per day of processing capacity.

To address continually growing demand, the decision was made in early 2015 to incorporate a greater level of plant automation and control. e plant required modifi cations, including new instrumentation and controls (I&C) support-ed by a high-availability, mission-critical communications network and an extension of the plant’s existing outfall.

e water district chose Carollo Engineers (www.carollo.com) to design and engineer the solution, which leverages the Converged Plantwide Ethernet (CPwE) Reference Architecture (http://rok.auto/cisco-refarch) developed by

Rockwell Automation and its Strategic Alliance Partner Cisco (www.rockwellautomation.com/global/go/p-cisco). It features a robust, redundant, fault-tolerant fi ber-optic communications network from Rockwell Automation En-compass™ Product Partner Phoenix Digital Corp. (PDC), as well as Rockwell Automation control system products the customer specifi ed.

Core Challenges Limit the OptionsBudgets are tight in small, municipal water treatment plants such as this one, which makes the operational effi ciencies aff orded by industrial automation highly desir-able. However, any potential savings must be weighed against implementation and maintenance costs.

e plant sought access to real-time data and diagnos-tics to help improve decision-making, increase uptime and minimize manual processes such as paper-based charts and graphs. Fast, secure Ethernet connectivity was needed for the central control system to collect data and gener-ate the required reports automatically. e underlying communications network needed to be cost-eff ective and industrially hardened — capable of providing fault toler-ance and redundancy to help achieve maximum availabil-ity and reliability.

REDUNDANT FIBER-OPTIC NETWORK HELPS PLANT MEET GOALSAging wastewater treatment plant slashes costs and downtime by adopting cutting-edge automation that gathers real-time data and reduces maintenance.

By Sheila Kennedy, Contributing Writer

TJ1712_29_32_F4_phoenixwww.indd 29 12/5/17 11:47 AM


e network also had to be as immune as possible from electro-magnetic noise. “Water treatment environments are prone to electri-cal noise and static due to electrical drives and other powered equipment, which have the potential to corrupt electronic communications,” explains Amit Sahdev P.E., senior I&C engi-neer at Carollo Engineers.

“If a copper or metal conductor is introduced into that environment, it may pick up extraneous electromag-netic noise and interfere with a signal being transmitted through it,” he says.

Another key consideration was the lack of IT personnel on staff who had the necessary skills to support a typical Ethernet network for the advanced control systems. e water district had no budget to outsource the role under a maintenance service contract, so installation and mainte-nance simplicity was a must for the new communications network.

Finally, to be adaptive and eff ective for the long term, the solution needed to be scalable, expandable and capable

of accommodating future I&C and networking technologies.

Optimal Proposal Simplifi es the Selection e water district specifi ed its preference for Rockwell Automation products in its request for propos-als (RFPs). Carollo Engineers had a history of Rockwell Automation solu-tion knowledge, having specifi ed and worked with its technologies for more than 50 years.

Carollo also had a successful track record with the water district, includ-ing preparing the wastewater treat-ment plant’s facility plan. After as-sessing the RFP responses, the water district awarded Carollo Engineers the two-part, $9-million project, which included both the plant modi-fi cations and outfall extension.

e solution Carollo proposed for installation at the existing water treat-ment plant was tailored to the plant’s skill sets and budget and provided all of the requested capabilities. e cost-eff ective, low-maintenance, energy-

effi cient solution was designed to help provide maximum availability.

Based on the Cisco-Rockwell Automation CPwE architecture (see Figure 1), it incorporated:

• An Allen-Bradley® programma-ble logic controller (PLC) plat-form, including Bulletin 1756 ControlLogix® I/O chassis-based modules (http://rok.auto/1756) and Bulletin 1768 Compact-Logix™ controllers (http://rok.auto/1768).

• Rockwell Software® Studio 5000® environment for PLC programming.

• Rockwell Automation Facto-ryTalk® View software (www.rockwellautomation.com/global/go/hmi) for human-machine interface (HMI) programming.

• Secure, noise-immune fi ber-optic communications network from PDC that included its OCP module (see Figure 2).

New Solution Fits the BillPDC provided the network backbone for all of the Allen-Bradley PLCs, which included a full two-channel redundant fi ber-optic network in the in-chassis CompactLogix platform running at a full gigabit and commu-nicates with the Rockwell Automa-tion process control system.

is product combination builds on years of success. PDC technology has been used in all of the automation platforms Rockwell Automation has off ered, from the Allen-Bradley PLC-5® control system to ControlLogix products and now also CompactLogix. Multiple protocols for Rockwell Automation also have been supported — originally remote I/O and the data highway, followed by ControlNet® networks, and now Ethernet®.

PDC passes any version of Ether-net without software programming, setup or confi guration. e average

Figure 1. The low-maintenance, energy-effi cient solution recommended for the water district is based on

the Cisco-Rockwell Automation CPwE Reference Architecture and designed for maximum availability.



technician can install, troubleshoot and maintain the PDC network in minutes, without special certifi ca-tion, in a secure fashion.

e use of fi ber cable has mul-tiple benefi ts. “Fiber-optic cables are inherently immune from electro-magnetic interference as they are nonconductive in nature and cannot pick up extraneous electromagnetic interference, making them a better solution in electrically noisy envi-ronments,” says Sahdev.

Because fi ber provides redun-dant connections, not just one like traditional cable, the PDC solution provides a more robust system. It is not just resilient; it provides a truly two-channel redundant network. Fi-ber also operates at the speed of light.

“ is is the perfect example of where Phoenix Digital and Rockwell Automation work well together; it’s the small-to-medium-sized munici-pality that needs the technology but struggles with the maintenance of

the application,” says Tom Schaefer, president and CEO of PDC. “When Carollo presented us with the project requirements and the skill set of the local maintenance team, the PDC system was the natural choice.”

Figure 2. The secure, noise-immune fi ber-optic

communications network includes the OCP

plug-and-play fi ber-optic module from Phoenix

Digital Corp. that provides fault-tolerant, redun-

dant communication.



Plant Awaits Highly Anticipated Benefi tsCarollo Engineers completed the engineering design in September 2016. Construction of the modifi -cation and outfall projects began

in March 2017 and is scheduled to fi nish in January 2018. e engineering fi rm is providing qual-ity management and construction support services throughout the implementation.

Once completed, the wastewater treatment plant will realize the many benefits of the new auto-mation systems and a network designed for reliability. “Customers like the robustness of the full two-channel redundancy network,” says Schaefer. “Our network is designed to operate in zero-downtime ser-vice applications.”

Plug-and-play simplicity minimizes the time spent on network mainte-nance. A technician — not an IT-trained and certifi ed individual — can replace a unit if the PDC network goes down. “Replacements can be made in and out of a hot running network in 30 seconds, with no data loss, without a laptop or instruction manual; just set up the switches on the new unit the same way as the old one, and it fi res up and goes,” adds Schaefer.

In addition, should a power outage occur, the PDC system will reestab-lish itself in less than 10 seconds. is allows for the automation devices and the PLC to come back online and become operational into an active running network. All of this provides a more robust solution that the water district doesn’t have to worry about because it can self-maintain.

Phoenix Digital Corp., based in Scottsdale, Arizona, is an Encompass™ Product Partner in the Rockwell Au-tomation PartnerNetwork™ program. e company provides simplifi ed, high-availability industrial network-ing for e Connected Enterprise, as well as fault-tolerant, self-healing, plug-and-play fi ber optics for in-dustrial control, process control and automation networking.

Phoenix Digital Corp.www.rockwellautomation.com/go/p-phoenixdigital

Rockwell Automation Encompass Product Partner Programhttp://rok.auto/tjencompass

Go wireless!

Ideal for BYOD Bring your own tablet

or smartphone to a machine and use it as

an HMI.

Anybus Wireless Bolt gives a machine wireless access

• Range up to 100m• Wireless communication via Bluetooth or Wireless LAN• For machines using serial, CAN or Ethernet• IP67-classed

www.anybus.com

Wireless Bolt



>> Industrial control systems (ICSs) are the workhorses of our physical world, and ICSs

are becoming more Internet-connected, more virtualized in many cases, and more remotely accessible by the day. Gartner Research (https://goo.gl/CmwKtK) indicates there will be 8.4 million devices by the end of 2017, a pace that leads to an estimated 20.4 billion Internet-connected “things” running our world by 2020.

Security experts worry that the growing dependence on Internet-connected devices is outpacing our ability to secure them. This is particularly true within industrial and critical infrastructure, because cyberthreats could result in physical disruption, loss of availability and even risk to public safety.

On the other hand, many ICS professionals continue to feel that the actual threat to plant operations and industri-al automation is slim given highly purpose-built industrial equipment, specialized communications protocols, air gaps, unique automation systems and processes, and safety instrumented systems. Unfortunately, that’s not what the data shows in a National Cybersecurity and Communica-tions Integration Center/ Industrial Control Systems Cy-ber Emergency Response Team report for the U.S. Dept. of Homeland Security (see chart on page 34).

Example: Hack of U.S. Water Treatment PlantICS security can and should be seen as an enabler to availabil-ity — usually the top priority for operations and plant teams.

INDUSTRIAL CYBERSECURITY IS A KEY SUPPORT TO AVAILABILITYDon’t believe there’s a real cyberthreat to your network? Data shows otherwise. Better controls and

security practices can help prevent operations disruptions.

By Katherine Brocklehurst, director of Industrial Cybersecurity, Tripwire

TJ1712_33_36_F5_tripwire.indd 33 12/5/17 11:48 AM


As some say, “offense informs defense,” so let’s examine a recent industrial inci-dent, and then summarize some useful lessons learned for availability goals.

An unnamed water district, dubbed the Kemuri Water company (KWc) in Verizon’s Data breach Digest (https://goo.gl/c56eo1), experienced unexplained patterns of valve and duct movements over at least 60 days. It was discovered that attackers were manipu-lating the chemicals used to assure safe drinking water, and also altering the water flow rates, causing disruptions

to water distribution. many other activities went unnoticed, including theft of more than 2.5 million unique data records, until Verizon’s forensic investigation started.

In this case, physical harm and safety was at risk, but luckily didn’t happen due to alert functionality that caught the chemical and flow control issues. Also, it appeared that the type of outside attackers who gained access were likely “hacktivists” — usually not motivated by financial gain. Indicators are they were experimenting and shop-

ping their access around to others with more knowledge of the environment.

What’s Wrong with This Picture?Verizon’s forensic investigation of KWc’s network design found that three known threat actor IP addresses had gained access multiple times to the water district’s operations technology (OT) and IT assets, including:

• The supervisory control and data acquisition (ScADA) application, valve and flow control applica-tions, and the programmable logic controller (PLc) systems.

• IT management systems.• Internet webserver application.• Financial and customer account

information.

Cybersecurity Lessons LearnedKWc had multiple foundational security control weaknesses or exploit-able vulnerabilities that Verizon said made them a great candidate for easy hacking, with a potential high impact to availability:

• Weak password hygiene in the customer web application. Water cus-tomers used an Internet payment ap-plication to access their accounts from laptops, desktops or mobile devices. This application only required weak credentials (user name and password — no second authentication factor) to gain access to customers’ personally identifiable information (PII), payment data and water usage.

• Direct Internet access to ICS (and bad network architecture). The Internet-facing webserver that hosted the customer payment application was directly connected by cable to the AS400 system, which in turn housed the ScADA management application, giving the administrator (and threat ac-

This offers a snapshot of which sectors experienced cybersecurity incidents in 2015. Critical manu-

facturing, energy, transportation and water sectors were most affected. Source: NCCIC/ICS-CERT

Year in Review, 2015 (page 19).

Critical Manufacturing,

97

Energy, 46

Transportation Systems,23

GovernementFacilities,

18

Healthcare and Public Health, 14

Water, 25

Dams, 6

Nuclear Reactors, Materials and Waste, 7

Defense Industrial Base, 2

Financial, 2

Food and Agriculture, 2

Information Technology, 6

Chemical, 4

Commercial Facilities, 3

Communications, 13

Unknown, 27

>> Incident Response FY 2015 Metrics



tors) direct access to interact with the control level. e water district’s valve and fl ow control application on the AS400 was used by the three known threat actors to manipulate the PLCs and water chemistry.

• Privileged administrative user. e lone AS400 system administrator had no corporate oversight, and for convenience was using the same login credentials for remotely accessing both the AS400 and the payment application webserver from his laptop. Least-privilege rules would’ve been diffi cult for this smaller utility with only one system administrator. However, some better practices could have been in place.

• Login credentials in cleartext accessible from the Internet. e login credentials and IP address were found in clear text within the initialization fi le (.ini) — an old-school technique known as “Security through Obscurity.” e same credentials worked to log into the payment application web-server. A simpler way to say this? “Hey, here’s how to log onto our systems — all of them…”

• Single Point of Failure. One AS400 served as the water district’s SCADA Application system. e system

was old, operating system (OS) updates and patches weren’t installed, and again, one lone administrator was working to make things easier but not with security in mind.

• Unnoticed Data Exfi ltration. (“Exfi ltration” is cybersecurity parlance for saying “information electroni-cally removed from the premises”). More than 2.5 million unique records were stolen. is was good news, because the bad news was that the other activities indicated the hackers had greater interest in disrupting process controls and denying the water district the ability to conduct their

The perfect card for the holidays.

n Monitors roller motor lifen Available Add-On-Profile (AOP)n Device Level Ring (DLR) built inn Discrete I/O (3 inputs and 5 outputs)n Onboard logic capability allows for custom ladder programmingn ODVA CONFORMANCE TESTED

ITOH DENKI IB-E03/IB-E04 2 Zone Control Cards Integrate your system today. Each card controls 2 motor driven rollers (MDR). Additional features include:

Onboard logic capability allows for custom ladder programming

888-310-8811 n www.itohdenki.com

Visit http://rok.auto/security to learn how Rockwell Automation Industrial Security Services might be able to help you improve industrial control system (ICS) and SCADA security practices to help prevent process controls and business activities from being disrupted by cyberthreats.

>> Third-Party Cybersecurity Assessments


WWW.ROCKWELLAUTOMATION.COM/THEJOURNAL36

business — up to and including the potential for causing public harm.

It Can Happen to You is is a clear example of how better ICS and SCADA security practices could’ve prevented process controls and business activities from be-ing disrupted. For industrial fi rms, availability, along with safety, is a top priority, and operations teams often see industrial cybersecurity as unnecessary.

It’s easy to believe “it could never happen to us.” However, noting the weak or absent foundational ICS and SCADA security in the Kemuri analysis gives pause to consider what your environment holds. You might not realize similar risks are probably present to some degree.

Maybe it would be a stretch to catch plant engineers or contractors charging their phone or tablet on your PLC or HMI USB ports or allowing a contractor or family member wire-less access from the hidden router in the back room. ese are real-world examples among many others. ICS security “best practices” and aware-ness training may be something to consider for your own environment.

Two suggestions to get started:

1. Start with a third-party cyber-security assessment to discover gaps you can then discuss and prioritize internally. Given how connected most organizations are becoming, consider including the corporate side as well as plant operations in the assessment — plus, IT may be where the budget ex-ists for taking this important fi rst step.

2. Determine what industrial se-curity standards and best practices you need to measure against. Most

assessments will work to identify weaknesses and countermeasures according to some type of industrial cybersecurity standard appropriate to your industry.

For water utilities and treat-ment, industrial standards to consider are: the American Water Wastewater Association’s Process Control System Security Guidance for the Water Sector (https://goo.gl/PTWiJN); the National Insti-tute of Standards and Technology’s (NIST’s) Cyber Security Frame-work (new draft in 2017 at https://goo.gl/dcz4eE); and the Industrial Automation and Control Systems Security (ISA)/International Elec-trotechnical Commission (IEC) 62443 (https://goo.gl/7ggDWD) set of cybersecurity standards.

Tripwire, based in Portland, Oregon, is an Encompass™ Product Partner in the Rockwell Automation PartnerNet-work™ program. e company supplies the Tripwire Confi guration Compliance Manager (CCM) for industrial automa-tion, which delivers a unique “no-touch” approach for securing ICS environments. It’s easy to install and helps operations and enterprise personnel monitor change, detect cyber threat indicators, and prevent malicious or unintentional errors that could increase risk of disruption and downtime. Sign up for Tripwire’s State-of-Security blog at www.tripwire.com/state-of-security.

Tripwirewww.rockwellautomation.com/global/go/tripwire

Rockwell Automation Encompass Product Partner Programhttp://rok.auto/tjencompass

Unlock new services with your machines data!

IIoT gateway & Remote access router

ewon.biz/flexy205

• Read & monitor your machine’s data in real-time (alarms, HMIs, etc.)

• Collect data from your PLC and push towards value-added services (Remote/Cloud)

• Benefit from a world-class Remote Access solution

...and much more!

NEWFlexy205!

Verizon’s breach investigation showed that attackers were manipulating chemicals used

to assure safe drinking water.



COLUMBIA MACHINE DELIVERS VERSATILITYOEM’s fl oor-level palletizer reduces complexity with a standardized, conventional design while achieving robotic-like precision to address packaging and changeover challenges.

>> Across the packaging industry, speed and flex-

ibility are the watchwords that guide every investment. At the end of the line, palletizers must quickly respond to new marketing trends and retail demands that alter product packag-ing and pallet configurations.

“New packaging equipment and methods can dramatically impact downstream processes,” says Ted Yeigh, director of marketing, Colum-bia Machine, a Rockwell Automation OEM Partner. “Our goal is to build solutions that can meet the demands of the products our customers are familiar with today — as well as tomorrow’s unknown products.”

A supplier of palletizers in North America, Vancouver, Washington-based Columbia Machine manufac-tures equipment built to help meet the diverse needs of the food and bever-age, personal care, tissue towel, chemi-cal and other industries. e company has more than 3,500 installations worldwide, and a complete line of conventional and robotic palletizers.

Servo Technology Boosts Palletizer PerformanceColumbia Machine recently in-troduced the FL6200 high-speed palletizer, a fl oor-level design that

combines robotic-like precision with the simplicity of a conven-tional system.

e FL6200 can palletize up to 100 cases per minute, depending on layer pattern — and can manage standard and challenging products, including shallow unwrapped trays, shrink pads, fi lm-only bundles and more.

One of the keys to the palletizer’s performance and fl exibility is the incorporation of servo technology.

“With the extensive use of servos on this machine, we are able to deliver the same type of speed and precise movements that many robotic systems off er — and at a higher rate of speed,” Yeigh says.

To build the pallet seamlessly and continuously, servo actuators control both the layer-transfer and load-building hoists, which work in tan-dem, along with the servo-controlled bi-parting stripping plates.

Figure 1. The FL6200 high-speed palletizer is a fl oor-level design that combines robotic-like preci-

sion with the familiar simplicity of a conventional system.

OEM PARTNER PROFILE

TJ1712_37_38_oemprofile.indd 37 12/5/17 11:49 AM


“The servo technology delivers the accurate, smooth movement you would expect with a robotic system,” Yeigh explains. “The palletizer can handle an array of package types because it never picks up the product — and isn’t constrained by traditional robotic arm and end effector limitations.”

In addition, the FL6200 can changeover from one package type or layer pattern to another automati-cally, based on information received from barcode scanners or other input methods.

“The palletizer features “zero-time” changeover,” he notes. “The machine can adjust from an unwrapped tray to a shrink bundle to a telescoping lid case to a standard case instanta-neously.”

The palletizer’s flexibility also extends beyond package types to its modular construction, which allows for multiple layout configurations to meet site constraints. The future-ready design includes an optional dual-infeed, which can be added to increase capacity when required. An integrated stretch wrapper also is offered as an option.

Safety is a key priority for columbia machine; the pallet-

izer’s safety and guarding package includes category 3, Performance Level D safety components.

To minimize complexity, the FL6200 is built on a single control architecture featuring an Allen-bradley® compactLogix™ controller (www.rockwellautomation.com/go/tjcompactlogix) with integrated motion, and Allen-bradley Kinetix® 5700 servo drives and VPL servo motors. The system is integrated on an EtherNet/IP™ network and uses an Allen-bradley PanelView™ Plus 6 graphic terminal for machine interface functions (www.rockwellautomation.com/go/2711).

The Kinetix servo drives’ built-in “load observer” tuning features help to achieve the motion control system’s precision and repeat-ability. During commissioning, load observer simplifies the tuning process — and during operation it estimates the mechanical load inertia on the motor and auto-matically compensates for it in real time. This feature helps maintain accurate, smooth performance regardless of the product being palletized.

Integration Offers SimplicityFrom an operational and mainte-nance standpoint, using a common control architecture and network for the complete system offers distinct advantages.

“There is no separate robotic controller or subsystem,” Yeigh says. “Our customers have a comfort level with Rockwell Automation technol-ogy and this palletizer offers that familiar control environment for the entire machine.”

The machine also includes intui-tive HmI screens, designed to speed diagnostics and improve overall equipment effectiveness (OEE). The company’s Product manager HmI software is built on the Rockwell Automation platform.

“The analytics and data the Prod-uct manager HmI can deliver are significant,” Yeigh claims. “Over the years, we incorporated input from customers and collaborated with Rockwell Automation as we devel-oped and perfected that platform. We look forward to our continued relationship.”

Columbia Machine, based in Vancouver, Washington, manufactures palletizers, serving a variety of major industries including food, beverage and consumer products.

Columbia Machinehttp://rok.auto/columbiamachine

Rockwell Automation OEM Partner Programwww.rockwellautomation.com/global/sales-partners/oem-partners

From an operational and maintenance standpoint, using a common control architecture and network for the complete system offers

distinct advantages.

Rockwell Automation works with many OEMs around the globe to design, develop and deliver equipment for a variety of industries. Some are recognized OEM Partners within the Rockwell Automation PartnerNetwork™ program. These OEMS are committed to providing high-quality, innovative equipment that use Rockwell Automation solutions to help you reduce your total cost of ownership and give you a competitive advantage. Find an OEM Partner at www.rockwellautomation.com/global/sales-partners/oem-partners.

>> OEM Partner Program

OEM PARTNER PROFILE

TJ1712_37_38_oemprofile.indd 38 12/5/17 2:39 PM


3D Machine Vision

The SL-1880 Sheet of Light Scanner provides 3D machine vision allowing end users to achieve levels of efficiency and productivity in manufac-turing that go beyond what is humanly possible. The SL-1880 has geometric scan rates up to 1.25 kHz, making it ideal for automation and optimization across many industries. It’s meticulously engineered compact design and extreme durability makes installation into existing systems effortless while ensuring long-term, precision performance in the most demanding environments. www.hermary.com/products

HERMARY

Find Faults Before They Find You

GraceSense™ Hot Spot Monitor (HSM) is a nonconductive temperature monitoring device that identifies potential hot spots and enables user to predict the failures in electrical equip-ment. Identifying faults before they occur saves money when unplanned outages, service inter-ruptions, and equipment failures are avoided. Design and communication flexibility allows the HSM to be used either stand-alone or fully integrated into a plantwide information system. Watch a demo at https://goo.gl/SYgvos, and learn more by visiting www.gracesense.com or by emailing [email protected].

GRACE ENGINEERED PRODUCTS, INC.

POSITAL Multi-Turn Motor Feedback Kits

POSITAL’s magnetic sensor kit assemblies pro-vide accurate absolute position feedback for servomotors, stepper motors, robot joints or other applications requir-ing precise control of rotary motion. Occupying the sweet spot between analog magnetic resolvers and complex, expensive optical encoders, these new de-vices are robust, easy to install and maintenance-free. 17-bit resolution and multi-turn capabilities satisfy most control system requirements. Open source, no-charge BiSS C, BiSS Line or SSI interfaces. For more information, visit www.posital.com.

POSITAL-FRABA

System Integration Just Got a Whole Lot Easier

HMS provides a family of network connectiv-ity products based on the Anybus technology, which offers full integra-tion into Rockwell Automation Control-Logix® and Compact-Logix™ PLC controllers on EtherNet/IP™ to seamlessly communicate with Modbus™, DF1™ and serial devices. https://goo.gl/qvcCKL

HMS INDUSTRIAL NETWORKS

Process Diagnostic & Optimization Technology

Is your goal to optimize production? PlantESP actively monitors control loop per-formance on a plant-wide basis. It utilizes existing process data to uncover mechani-cal issues, PID tuning opportunities and more. PlantESP identifies issues, isolates root causes and recommends corrective actions. PlantESP’s powerful diagnostics and intuitive design make it easy to improve production throughput and efficiency. Customizable reports and alerts keep you informed of all performance changes. Contact us at (860) 872-2920 ext. 1602, or visit www.controlstation.com/plantesp.

CONTROL STATION, INC.

Smart Wiring Application

EPLAN’s Smart Wiring is a web-based application that helps installers work faster and avoid errors when wiring switchgear systems. It provides step-by-step connection instructions in visual form. The touch-optimized interface is ideal for mobile devices, so it’s always ready for use right at the cabinet. Smart Wiring can improve productivity and help new installers work more confidently on complex jobs. Input to Smart Wiring can come from EPLAN’s Pro Panel, or from MS Excel formatted wiring lists. www.rockwellautomation.com/go/p-eplan

EPLAN SOFTWARE & SERVICE

ENCOMPASS SHOWCASE

TJ1712_39_41_ECS.indd 39 12/5/17 11:50 AM


Excel Reports and Forms for Industry

Finally, a reporting solution that gives the information you need, in the form you want, with absolutely no programming. With XLReporter, you use Excel as your “design studio,” complete with our easy-to-follow Fast-Start wizard. Your reports are ready within minutes in Excel, Web, PDF and email. The product is compatible with RSLinx®, RSView®, FactoryTalk® View, PanelView™ Plus, OPC, OPC-HDA, databases and much more. For more information, contact us at (508) 520-9957 or [email protected]. Download your free evaluation copy from www.SyTech.com.

SYTECH INC.

POINT I/O Plug-In Weight Processing Module

The Hardy HI 1734-WS POINT I/O™ Series weight processing module is a new plug-in module for the Rockwell Automation POINT I/O chassis. This module is exceptionally easy to mount, set up, calibrate and maintain. The HI 1734-WS is a true weight processing module designed for POINT I/O systems, as opposed to passing raw A/D counts through to the PLC. It is easy to configure using a Rockwell Automation Add-On-Profile (AOP) and Faceplate with Add-On Instructions. Visit https://goo.gl/4Jr4hL for more info.

HARDY PROCESS SOLUTIONS

1326AB Motors on Kinetix 5700 Drives

Elwood supports migration of 1326AB Series servo motors on legacy systems to Allen-Brad-ley® Kinetix® 5700 drives. Motors with either high-resolution or resolver feedback receive ongoing support. Connectorized resolver-to-digital-encoder converters from Encompass™ partner VEGA support resolver feedback motors. Updated custom motor files keyed for 5700 drives support high-resolution feedback motors. Elwood supports either feedback with cable sets designed for modern drive system switching frequencies, and white papers to simplify migration. For more information visit elwood.com/1326AB.

ELWOOD CORP.|HIGH PERFORMANCE MOTORS GROUP

EtherNet/IP Process Video Recorder

IMPERX’s EtherNet/IP™ Process Video Recorder (EIPVR) is an event-recording system that captures high-speed video when you need it. This product is Ether-Net/IP-conformance tested, compatible with IEEE 1588 and uses Power-over-Ethernet cabling for a simple installation. EIPVR records up to 60 seconds of video at 250 fps, automatically saves video to a server and plays video for quick feedback. EIPVR is triggered via EtherNet/IP, is ODVA tested and approved, and is compatible with EtherNet/IP devices. http://imperx.com/rockwell-encompass-partner-program

IMPERX, INC

Molex CompactLogix Modules Are Now cULus Listed

Selecting a communication module for any application that connects a CompactLogix™ to either a Modbus™ or PROFIBUS® networks is now easier. These Molex modules are not only comprised of leading technology and innovative software, but now are also cULus listed, offering the most functional and economical solution on the market today for your CompactLogix system. https://goo.gl/R1UkzF

MOLEX

Remote Equipment Monitoring

RACO offers three field-proven remote monitoring products that fully integrate with your existing Allen-Bradley® controllers. Both Verbatim Gateway and Catalyst allow for easy, cost-effective integration with PLCs using Allen-Bradley EtherNet/IP™ and other protocols. Plus, AlarmAgent.com allows for low-cost, wireless, web-based alarm detection and notification that easily integrates into your SCADA/HMI system via OPC. All three provide the peace of mind that comes with knowing your systems are secure. For more information, call (800) 722-6999 or visit www.racoman.com/allen-bradley.

RACO MANUFACTURING & ENGINEERING CO.

ENCOMPASS SHOWCASE

TJ1712_39_41_ECS.indd 40 12/5/17 11:50 AM


Get a Free SMD Motor Demo

AMCI offers free SMD motor demos so customers can evaluate the SMD Series’ ease of programming and torque over speed performance before purchasing the complete package. The demos include free bench testing software to further simplify testing. SMD Series integrated motors take the drive and controller out of the cabinet and put them right on the motor, reducing wiring and system costs. There is no software to buy or learn; the SMD Series works seamlessly with Studio 5000®, RSLogix™ 500, or Connected Components Workbench™ over EtherNet/IP™. https://goo.gl/2DqsXw

ADVANCED MICRO CONTROLS INC. (AMCI)

WITTENSTEIN alpha V-Drive Basic Worm Gear

The V-Drive Basic worm gear is designed for price sensitive applications with no high-end requirements for maximum torsional backlash. Available with hollow or solid shaft, and a total of five different reduc-tion ratios. At just 7.4 kg and 12 kg respectively, the lightweight V-Drive helps save energy when the gearhead is used in moving machine axes. www.wittenstein-us.com

WITTENSTEIN, INC.

Download The Journal’s iPhone App!

Simply search “ROKJournal” in your iPhone App Store to download it.

Get the product information and educational material quickly and

easily whenever, wherever you want it.

With this free iPhone app, you have a convenient way

to access product information, videos, websites, feature articles,

Rockwell Automation event information and other resources.

Search “ROKJournal” in your iPhone App Store to download it today.

ENCOMPASS SHOWCASE

TJ1712_39_41_ECS.indd 41 12/5/17 11:50 AM

www.rockwellautomation.com /connectedenterprise

Learn more at

Copyright © 2014 Rockwell Automation, Inc. All Rights Reserved. * MESA Research.

AD2014-43-US

BudgetThe Connected Enterprise

Connect your Enterprise. Help improve your performance. With top performers achieving 24% net margin improvement, the world’s leading industrial and manufacturing companies reduce time to benefit with better inventory management, cycle times and quality control.

net margin improvement*

24%Top performers achieved

TJ1610_FPA.indd 31 9/27/16 11:24 PMTJ1712_FPA.indd 42 12/5/17 12:08 PM


>> Integrated Stepper Drives with DLR SupportEncompass™ Product Partner Advanced Micro Controls Inc. (AMCI) has added sup-port for Device Level Ring (DLR) to its SD31045E2 and SD17060E2 integrated stepper controller/drives. The drives incorporate EtherNet/IP™ through a built-in Ethernet switch, enabling support for DLR installations to provide a fault-tolerant connection.

DLR topology provides a fault-tolerant connection that can detect a break in the net-work and redirect the network traffic, maintaining communication and system up-time.

The AC line-powered stepper motor controller/drives are self contained with their own power sup-plies and easily configured and commanded through the PLC’s existing software; there’s no need for a sepa-rate plug-in card controller.

The SD31045E2 and SD17060E2 provide up to 4.5 Arms or 6.0 Arms (respectively) of output current. In addition to a built-in network interface and switch, the drives include onboard indexers, encoder feedback, microstepping, programmable output current, anti-resonance circuitry, vari-step velocity control, compact design and simplified set-up.

Advanced Micro Controls Inc. (AMCI)www.rockwellautomation.com/go/p-amci

>> Digital Solution for Oilfield ProductionConnectedProduction technology from Rockwell Automation creates seamless access to oilfield expertise and production advisory systems. The system optimizes production by connecting upstream operations with critical, real-time analytics and domain insights.

The technology, when combined with oil and gas software, services and domain knowl-edge from Schlumberger, creates an end-to-end production advisory system. This system allows self-declaring wells to be automati-cally discovered and integrated into the production environment. This helps reduce deployment risks, costs and complexity.

The solution helps bridge the skills gap in the oil and gas industry by providing real-time control and analytics at the wellhead. It also provides communication technologies that allow information to be gathered and analyzed both remotely and in the field.

When production anomalies arise that workers cannot readily resolve, they can quickly connect with domain specialists and share information using any digital device. This in-the-field collaboration between the wellsite, control room and other locations speeds decision-making and streamlines operations.

Rockwell Automation Connected Productionhttp://rok.auto/digitaloil

>> PRODUCT SPOTLIGHT

Digital Pneumatic Valve Terminal

The VTEM digital pneumatic valve terminal from Rockwell Automation Encompass™ Partner Festo changes functionality based on various combinations of downloadable apps. It also conforms to the National Science Foun-dation’s definition of a cyber-physical system.

Downloadable applications control valve functionality so that one valve can potentially replace up to 50 different pneumatic compo-nents. The unit integrates with the mobile device collaborative app FactoryTalk® TeamONE from Rockwell Automation and with FactoryTalk Analytics for Devices that provides health and diagnostic analytics directly from industrial devices over EtherNet/IP™.

With downloadable motion apps, one digitally controlled valve within the VTEM digital pneumatic valve terminal can replicate traditional valve functions, including 2/2, 3/2, 4/2 or 4/3 way, and proportional technol-ogy and servo-pneumatic functions. One flexible valve also can include apps that preset travel time, reduce costs by operating actua-tors with minimum pressure, and detect leaks for faster fault detection and less downtime.

Because changing parameters in this cyber-physical system doesn’t necessarily require a change in hardware, adaptation costs are kept within tight margins, even when changes are made after installation. The VTEM is offered in either four-valve or eight-valve platforms.

Festo Corp.www.rockwellautomation.com/go/p-festo

PRODUCT FOCUS

TJ1712_43_46_Products.indd 43 12/5/17 12:05 PM


Project Scio from Rockwell Automation introduces new analytics capabilities to help reduce the hurdles to unleashing information. These capabilities open up access to ad-hoc analytics and perform advanced analysis by pulling structured and unstructured data from virtually any existing source in the enterprise.

Project Scio also can intelligently fuse related data, delivering analytics in intui-tive dashboards, called storyboards, that users can share and view. Users then have the ability to perform self-serve drill downs to make better decisions, dramatically reducing the time to value.

Manually mapping software to each plant-floor device can be a time-consuming and error-prone process. Project Scio can auto-discover Rockwell Automation devices and tags, and third-party device data, to save time and help reduce risk. Additionally, the auto-discovery process gives users access to more detailed informa-

tion than is typically available through manual mapping, such as device name, line location and plant location.

Rather than leave data at its source and take database snapshots, Project Scio also can bring data into a centralized location and continually refresh that data. Connections to data sources only need

to be established once. This allows users to create custom analytics and refresh them at their pre-ferred rate without the support of a data scientist.

Project Scio also provides closed-looped analytics using either machine learning or predefined settings. This can monitor operations and automatically trigger control adjustments if processes start to fall outside allowable parameters. An applications marketplace will be

introduced for applications developed in-house and by third parties.

Project Sciohttp://rok.auto/projectscio

>> Non-Contact Voltage TestersThe Fluke T6 electrical testers with FieldSense Technology from Encom-pass™ Product Partner Fluke are designed to make troubleshooting safer and more efficient. FieldSense Technology allows simultaneous, reliable voltage and current readings without test leads — not just simple go/no-go voltage detection.

The testers make it possible to take re-liable true-rms measurements in crowded junction boxes or along conductors with inaccessible end points, saving time, minimizing potential errors, and greatly reducing the possibility of arc flash.

With the Fluke T6-600 and T6-1000 testers, users can measure voltage up to 1,000 V through the open fork without test leads or exposed conductors. In addition, there’s no need to open panels or remove wire nuts, speeding troubleshooting.

The T6-1000 simultaneously measures and displays voltage and current, and also measures resistance up to 100.0 kΩ. The testers are 1,000V CAT III, 600V CAT IV safety rated (600V CAT III for the T6-600 model) and feature an easy to read display with a backlight.

Fluke Corporationwww.rockwellautomation.com/go/p-fluke

>> Mobile Devices for Hazardous EnvironmentsEncompass™ Product Partner Pepperl+Fuchs recently integrated ecom’s cell phones, 4G smartphones and tablets into its intrinsically safe product portfolio.

As the Industrial Internet of Things gains pace, ecom’s mobile worker platform wirelessly integrates devices to maximize workforce productivity and protection — essential elements for the prolonged sustainability of companies with hazardous areas.

The use of digital tools such as smartphones and tablets are improving safety, productivity and security in haz-

ardous areas. These tools also help provide more efficient workflows, effective maintenance, and streamlined decision-making processes, along with higher profit margins.

Many of the ecom devices are rated for Zone 1/21, Division 1 hazardous areas or Zone 2/22, Division 2 areas. The line also includes PDAs. These solutions are designed for chemical and pet-rochemical process automation, the pharmaceutical industry, oil and gas exploration, mining and energy and environmental technologies.

Pepperl+Fuchswww.rockwellautomation.com/go/p-pepperlfuchs


Scalable Analytics Capabilities for IIoT Applications

PRODUCT FOCUS




Wireless Emergency Stop

Encompass™ Product Partner Laird has developed the Safe-E-Stop wireless e-stop system for integration into existing assembly and production line hard-wired emer-gency stop systems. It allows an individual or group of operators to immediately shut down a production line without having to run to a hard-wired e-stop station.

In some cases, the closest machine-mounted e-stop could be in the same danger zone created by the emer-gency. Rushing to the next available e-stop can also be a hazard and add precious seconds, if not minutes, to an emergency’s response time.

The SIL 3-rated wireless personal safety system provides continuous status indicators with LED and LCD displays. The EtherNet/IP™ port on the machine safety device (MSD) can be used to fully report the status of actuated wireless e-stops to operations personnel.

Up to five personal safety devices (PSDs) can be simul-taneously linked to the MSD, which permits multiple opera-tors to work independently or collaboratively to oversee an operation or solve a problem. If an e-stop on any of the linked PSDs is activated, the MSD commands a stop.

All PSDs are immediately notified of the “stop” condi-tion, the machine is shut down, and the system identifies the PSD responsible for the stop. The PSDs have visual and haptic (vibration) warning systems for conditions such as low battery and low RF signal, designed to allow workers to move about the area (within a 100m line-of-sight range of the MSD).

Lairdwww.rockwellautomation.com/go/p-laird

>> Open Architecture Industrial Computers With the new family of Allen-Bradley® VersaView® 5000 industrial comput-ers, thin clients and monitors from Rockwell Automation, manufacturers can modernize their standalone or distributed HMI applications to support smart manufacturing.

Part of the Rockwell Automation scalable compute offerings, the portfolio includes five products: VersaView 5400 display and nondisplay computers; VersaView 5200 display and nondisplay thin clients; and VersaV-iew 5100 monitors. Display options include edge-to-edge glass, a new 22-in. widescreen option (in addition to 12-, 15- and 19-in. offerings), full HD and 10-point multitouch capabilities to help improve operator productivity.

When combined with FactoryTalk® View Site Edition software from Rock-well Automation in distributed applications, the computers can provide cost-effective compliance with 21 CFR Part 11. The software stores, processes and transmits electronic records and signatures to show which employees made changes. This is critical for highly regulated industries.

To reduce maintenance needs, a supercapacitor mitigates battery re-placement and simplifies air shipment logistics. In addition, an edge-to-edge, all-glass touchscreen reduces cleaning efforts by eliminating the residue buildup that can occur on traditional systems

VersaView 5400 Industrial Computerswww.rockwellautomation.com/global/go/versaview5400

>> True RMS AC or DC Voltage TransducerEncompass™ Product Partner NK Technologies introduces the VTU-DIN Series, a RMS transducer for sensing voltage in single, three-phase or DC installations.

The VTU-DIN measures 0-15 to 0-600V with an industry standard output proportional to connected voltage in AC circuits with sinusoidal

or non-sinusoidal (variable frequency) applications or DC circuits. Standard outputs make the VTU-DIN reliable and

easy to use with existing controllers, data loggers and SCADA equipment. It is housed in a space-saving 35-mm wide, easy-to-install DIN rail mounting enclosure.

The transducer features 0 to 5-KHz measurement for situations where the power supplied is non-sinusoidal (such as VFD applications), poor quality installations or other electrically harsh or challenging environments. It effectively detects a range of conditions that may

cause damage to the motor or soft starter components (SCRs), including below normal/brown-out, phase loss

and over voltage conditions.

NK Technologieswww.rockwellautomation.com/global/go/nktechnologies

PRODUCT FOCUS



>> Threat Detection Services The new threat detection services from Rockwell Automation help manufacturers and industrial operators monitor, detect and respond to increasingly complex security threats.

Designed for industrial networks, the services map normal net-work behavior, and detect and alert operators of irregularities and potential threats in real time.

The threat detection services take a product-agnostic approach to create an asset inventory across both IT and OT systems in an industrial operation. Diving deep into industrial network protocols, threat detection software maps all of the end user’s network assets and how they communicate with each other.

Once the entire environment is charted, the tool identifies normal operating procedures and creates a baseline. Context-rich alerts no-tify of any deviations from the baseline. The alerts are integrated with Rockwell Automation monitoring services to help inform the response and recovery process. This includes incident impact analysis, contain-ment and eradication protocols.

The services are built on top of threat detection software, created by Claroty, an Encompass™ Product Partner in the Rockwell Automa-tion PartnerNetwork™ program.

Industrial Security Serviceshttp://rok.auto/security

Advanced Micro Controls, Inc. (AMCI) 41

Ametek 26

Apex Dynamics Inc. 17

Control Station, Inc. 39

Elwood Corp. - High Performance Motors Group 40

Endress+Hauser, Inc. 3

EPLAN Software & Service 39

Fluke 6

Grace Engineered Products Inc. 39

Hardy Process Solutions 40

Helm Instrument Co. Inc. 28

Hermary. 39

HMS Industrial Networks Inc. 32, 36, 39

IMPERX, Inc. 11, 40

Itoh Denki USA, Inc. 35

Molex 48, 40

Posital FRABA Inc. 39

RACO Manufacturing & Engineering Co. 40

Rockwell Automation Catalyst Award 47

Rockwell Automation Connected Enterprise 42

Rockwell Automation Solution Partner Program 18

Southwire Co. 31

Spectrum Controls, Inc. 15

Sytech Inc. 40

Teledyne DALSA 22, 23

Tolomatic, Inc. 19

WITTENSTEIN, Inc. 2, 41

ADVERTISERS INDEX

>> Industrial Flow MonitorThe Blancett B3100 Series flow monitor from Encom-pass™ Product Partner Badger Meter is a flexible digital signal processing platform for demanding flow metering applications. Data logging, remote data access and programming are available without opening the enclosure. Programming software makes remote configuration easy and efficient.

The monitor processes a frequency output from a flow meter and interprets the signal to calculate flow rate and total flow simultaneously with 16-point linearization of the flow curve (with interpolation) for improved accuracy. The unit features simplified K-factor and engineer-ing unit configurations for volumetric or mass readings.

It is explosion-proof in accordance with ATEX, IECEx, FM and CSA c-us. A 1-in. NPT thread is included for mounting. The monitor’s backlit LED display provides seven-digit flow rate/total and 11-digit accumulated total.

Remote programming capabilities allow for full configuration. Software automatically detects the monitor and downloads its data.

Badger Meterwww.rockwellautomation.com/go/p-badgermeter


Our Culture of Inclusion Journeyexplained in 300 words www.rockwellautomation.com/global/go/catalystCopyright © 2017 Rockwell Automation, Inc. All Rights Reserved.

Inclusion Fuels InnovationWe create an environment where our almost 22,000 people can bring their best work, be heard, and work together as partners. It’s about all of us bringing our best to transform our company. Our Culture of Inclusion fuels innovation for everyone.

We are honored and humbled to win the 2017 Catalyst Award, which recognizes innovative organizational approaches with proven, measurable results that address the recruitment, development, and advancement of women. Our work continues — we’re not done yet.

TJ1712_FPA.indd 47 12/5/17 12:09 PM

For more than 20 years, Molex has been a Rockwell Automation Encompass™ Product partner, successfully delivering SST™ solutions that provide:

• Reliability that reduces total cost of ownership

• A more efficient global supply chain, with faster time to market

• Complete solutions that maximize your existing assets without disrupting productivity

• The latest innovations, tailored to your needs

Higher Reliability, Lower Cost of Ownership

Simply Solved

Molex delivers a more reliable solution that can save you money, simply solving your industrial automation challenges.

Start building your solution today by visiting molex.com/a/encompasspartner

MOL-15506C_Rockwell-Encompass_FP4C_TJ_160122-r1.indd 1 1/22/16 2:04 PM

O U R T E C H N O L O G Y D I F F E R E N T I A T I O N

www.dialight.com

DIALIGHT IS THE WORLD LEADER IN INDUSTRIAL LED LIGHTING

Learn more about Dialight & the industries we serve at:Automation Fair Booth #932

Leading Optical Designprecision optics, high-CRI and low glare illumination, ensures visual clarity and improves visibility and safety

Seamless Integration with Rockwell Automation Controllersallows site managers to consolidate control systems and simplify maintenance procedures

Integrated Designsimple installation with a wide range of retrofit kits and extended

lifespan that virtually eliminates maintenance for up to 10 years

Advanced Lighting Controlsprovides flexibility to group, dim and schedule lights

around the unique needs of your facility

S E T S U S A P A R T

Custom Power Supplyconfigured for optimal performance and longevity in harsh environments

O U R T E C H N O L O G Y D I F F E R E N T I A T I O N

www.dialight.com

DIALIGHT IS THE WORLD LEADER IN INDUSTRIAL LED LIGHTING

Learn more about Dialight & the industries we serve at:Automation Fair Booth #932

Leading Optical Designprecision optics, high-CRI and low glare illumination, ensures visual clarity and improves visibility and safety

Seamless Integration with Rockwell Automation Controllersallows site managers to consolidate control systems and simplify maintenance procedures

Integrated Designsimple installation with a wide range of retrofit kits and extended

lifespan that virtually eliminates maintenance for up to 10 years

Advanced Lighting Controlsprovides flexibility to group, dim and schedule lights

around the unique needs of your facility

S E T S U S A P A R T

Custom Power Supplyconfigured for optimal performance and longevity in harsh environments

TJ1712_FPA.indd 48 12/5/17 12:09 PM

Documents

Cyberthreats A ﬀ e c t Mor e than Your Network · Power Producers Step Up Cybersecurity Redundant Fiber-Optic Network Helps Plant Meet Goals Safety and security have been viewed