Installation - emerson.com · User’s Guide Ref. no: 303037E Third Edition, February 2007 Rosemount TankMaster.net Installation

User’s Guide Ref. no: 303037E Third Edition, February 2007

Rosemount TankMaster.net Installation

www.rosemount-tg.com

Rosemount TankMaster.net Installation

User’s Guide Third Edition

Copyright © 2001- 2007 Rosemount Tank Radar AB

Rosemount TankMaster.net 3 Third Edition, February 2007

Copyright © 2001 – 2007 Rosemount Tank Radar AB

Copyright law and international treaties protect this program. Unauthorized reproduction, distribution of this program or any portion of it may result in severe civil and criminal penalties, and will be prosecuted to the maximum extent possible under the law.

4 Rosemount TankMaster.net Third Edition, February 2007

Overview of Manuals

Overview of Manuals TMn2Installation.pdf

This manual describes the procedure for installing TankMaster.net on Windows 2000 Server, Windows XP Pro and Windows 2003 Server with Internet Information Services (IIS). Before installing TankMaster.net Server, minimum system requirements have to be met that are mentioned in this manual. The manual also presents the minimum system requirements for installing TankMaster.net.

TMn2Config.pdf

This manual describes the procedure for configuring the TankMaster.net Server. The information that is viewed on the TankMaster.net Website/WAP website is set by the Administrator using the TankMaster.net Configuration application. The manual describes how the Administrator can create, edit, delete and assign rights to the Users and Groups for viewing tanks.

TMn2DataCollector.pdf

This manual describes the DataCollector application, which displays the Live and Static data of the tanks polled with the current date and time. The manual also explains how to start and end the application manually or automatically. The data collected by this application is displayed on the TankMaster.net Website/WAP websites.

TMn2Website.pdf

This manual provides a detailed description of various menus, products, information etc which are viewed by the user on the website. The user can change limited details of his profile, view details of all products, individual tanks, view graphs and download tank information in Excel format.

TMn2UserStatus.pdf

This manual gives a detailed description of the information that is available on users who are logged on to the TMn2Web website. It also displays the current page being viewed by the user, the session Id assigned, session start time and session expiry time. Only the Administrator can access this website.


Overview of Manuals

TMn2Wapsite.pdf

This manual describes how the TankMaster.net WAP website works using an Internet browser. It also describes how to view details of individual tanks and product groups.


Contents

Contents 1.0 Pre-Installation ..................................................................................8

1.1 Overview ........................................................................................8 1.2 Minimum System Requirements ....................................................8 1.3 Uninstalling TankMaster.net ..........................................................9 1.4 Reinstalling TankMaster.net ........................................................12 1.5 Installing two versions of TankMaster.net....................................12 1.6 Creating a User as an Administrator............................................13

1.6.1 Creating a New User .............................................................13 1.6.2 Adding a user as an Administrator ........................................15

1.7 Installing IIS on Windows 2000 Server ........................................18 1.7.1 To install IIS with minimum settings: .....................................18 1.7.2 To install IIS with default settings: .........................................20

1.8 Installing IIS on Windows XP Pro ................................................21 1.8.1 To install IIS with minimum settings: .....................................21 1.8.2 To install IIS with default settings: .........................................23

1.9 Installing IIS on Windows 2003 Server ........................................24 1.9.1 To install IIS with minimum settings: .....................................24 1.9.2 To install IIS with default settings: .........................................27

2.0 Installation of TankMaster.net .........................................................31 3.0 Post Installation ...............................................................................33

3.1 Setting Directory Security on Windows 2000 Server ...................33 3.2 Setting Directory Security on Windows XP Pro ...........................37 3.3 Setting Directory Security on Windows 2003 Server ...................42

4.0 Configuring TankMaster Servers and TankMaster.net Server to work with Windows XP Service Pack 2. ..................................................47

4.1 Windows Firewall .........................................................................47 4.1.1 Configuring the Firewall .........................................................48

4.2 DCOM Enhancements .................................................................52 4.2.1 Configuring DCOM ................................................................52

5.0 The Next Step .................................................................................57 6.0 Troubleshooting...............................................................................60


Pre-Installation

1.0 Pre-Installation 1.1 Overview

It is very important to read the contents of this file before starting any installation/re-installation/upgrade of the TankMaster.net software.

Note! To install a new version of TankMaster.net, it is not necessary to uninstall the older version of TankMaster.net. Both installations of TankMaster.net can co-exist on the same Server. An important point to remember in such cases is that only one Data Collector should be started to poll data from TankMaster.net Servers (i.e. either TMnDataCollector or TMn2DataCollector).

Refer to the following sections for more details: 1.3 for Uninstalling TankMaster.net 1.4 for Reinstalling TankMaster.net 1.5 for Installing two versions of TankMaster.net

1.2 Minimum System Requirements

Before proceeding with the installation, make sure the following requirements are met. For Rosemount TankMaster.net, the TankMaster.net Server should be connected to the TankMaster Server on LAN and viewed on the TankMaster workstation in Windows Explorer. The TankMaster workstation and the TankMaster.net Server should be using TCP/IP protocol to communicate with each other. The software is configured to run on the following operating systems:

(a) Windows 2000 Server with IIS (b) Windows XP Pro with IIS (c) Windows 2003 Server with IIS

A user, for example, TMnAdmin should be created as Administrator and added to the Administrators Group. This user should be created on all TankMaster Servers and the TankMaster.net Server. The recommended screen resolution is 1024 x 768, on the client and Server machine. The minimum required RAM is 256 MB. Suggested RAM is 1 GB.


Pre-Installation

This software requires a minimum of 20MB hard disk space and the estimated used space for data polling is 15MB. This software will need one of the following Office applications loaded on the Server and client machine:

(a) Microsoft Office 2000 (b) Microsoft Office XP (c) Microsoft Office 2003

Office Web Components (OWC) are required by the software. OWC is loaded by default during installation of Office applications. The computer should be a Pentium 4 processor. Suggested is the fastest affordable. The client's machine should have Internet Explorer 5.0 or above installed with Cookies enabled. The manuals are in Adobe Acrobat PDF format. To read or print the manuals, Acrobat Reader version 5.0 or above should be installed. Minimum bandwidth between the TankMaster.net Server and each of the TankMaster machines is 20 Kilo bits per second per tank of that TankMaster machine. Minimum internet bandwidth of the TankMaster.net server is 64 Kilo bits per second. It is suggested that the internet bandwidth be at least 256 Kilo bits per second.

1.3 Uninstalling TankMaster.net

To uninstall an older version of TankMaster.net follow the steps mentioned below: Stop the TankMaster.net DataCollector from polling all TankMaster Servers, by clicking on “Stop All”. Once all Servers have stopped polling, exit from the DataCollector application. Backup *.mdb files (Database files) which are located in the TMnData directory. Copy the database files to another media (CD/Floppy/HDD). These files contain the details of the settings existing in the TankMaster.net Configuration (i.e. Mapped TankMaster Servers, Users and Group details with passwords, tanks allocated to users/groups etc.) Insert the TankMaster.net CD (i.e. the version which is installed on the computer) and run the Setup.exe program. The Setup program will


Pre-Installation

launch a menu with options “Install”, “Repair”, “Remove”. Select the “Remove” option to uninstall the existing version of TankMaster.net. Insert the TankMaster.net CD (i.e. the version which is installed on the computer) and run the Setup.exe program. The Setup program will launch a menu with options “Install”, “Repair”, “Remove”. Select the “Remove” option to uninstall the existing version of TankMaster.net. During un-installation, the setup wizard will ask you to delete some files. Do not select the option “Don’t display this message again.”. Click the “No” option manually on all screens as shown.

Note: If the “Don’t display this message again.” checkbox is selected and the “Yes” button is clicked, new version of TankMaster.net will not install properly. Hence, do not select the option “Don’t display this message again.” and click the “No” option manually for deletion of each file.

The screens for the Shared file deletion are as shown below.


Pre-Installation


Pre-Installation

Once the setup completes, it will ask for a “Reboot” option. Click “Yes” to reboot the system. Once the machine reboots, un-installation of TankMaster.net will be completed.

Note! After uninstalling TankMaster.net the virtual directory (tankmasternet),

which was created by the TankMaster.net setup in IIS (Internet Information Server), does not get deleted.

1.4 Reinstalling TankMaster.net

To reinstall TankMaster.net follow the steps mentioned below: Insert the new version of TankMaster.net Installation CD into the CDROM drive and run Setup.exe. Follow the installation procedure by selecting the default options in the setup program. Once the setup is completed, it displays a message, “Setup is completed. Press Yes to restart the computer” or “No to restart the computer later”. Select the “Yes to restart the computer” option. After the machine reboots, setup will create two icons, TMn2 Config and TMn2 Data Collector on the desktop. This completes the installation process for the new TankMaster.net.

Note! An important aspect to remember is, when two TankMaster.net versions

are installed on the same machine, only one Data Collector should be started to poll data from the TankMaster.net Servers. (i.e. TMnDataCollector or TMn2DataCollector).

1.5 Installing two versions of TankMaster.net

The process mentioned below assumes that one version of TankMaster.net is already installed on the computer.


Pre-Installation

Note! Two versions of TankMaster.net can co-exist or can be installed on a

single machine, because both installers use separate installation directories and different application names.

To install a new version of TankMaster.net while one version is already loaded on the computer, follow the steps given below:

Insert the new TankMaster.net Installation CD into the CDROM drive and run Setup.exe . Follow the installation procedure by selecting all default options during setup.

Once the setup completes, it displays a message, “Setup is completed. Press Yes to restart the computer” or “No to restart the computer later”. Select the “Yes to restart the computer” option. On reboot, setup will create two new icons, TMn2 Config and TMn2 Data Collector on the desktop, apart from the two other icons TMnConfig and TMn DataCollector (that were created by the old TankMaster.net setup program). This completes the installation process of the new TankMaster.net.

Note! When two TankMaster.net versions are loaded or co-exist on the same

machine, it is important to remember that only one copy of Data Collector (i.e. TMnDataCollector or TMn2DataCollector) is to be started. If both copies of Data collectors are started, incorrect data details will be displayed on the TankMaster.net website.

1.6 Creating a User as an Administrator 1.6.1 Creating a New User

In the example, a user, TMnAdmin, will be created. The password for this user will also be TMnAdmin. (The password is case sensitive).

Note! The user (TMnAdmin) should be created on all TankMaster Servers and

the TankMaster.net Server machine. The password for the users should be the same on the TankMaster Servers and the TankMaster.net Server. The user (TMnAdmin) must be assigned a password, else the Data Collector application will hang when accessing the history or download functions of the TankMaster.net website.


Pre-Installation

To create the TMnAdmin user:

Click on Start>Settings>Control Panel>Administrative Tools>Computer Management. Navigate to the Local Users and Groups folder/option that is located under System Tools. In this folder there will be sub folders called Users and Groups. Right click on the Users folder and select New User. In the New User window, enter TMnAdmin as the User name and Password.

Uncheck the option “User must change password at next logon”. Check the options “User cannot change password” and “Password never expires” as shown in the figure below.


Pre-Installation

Click on Create and Close.

This completes the procedure for creating a new user (TMnAdmin).

1.6.2 Adding a user as an Administrator

In the example, a user, TMnAdmin, will be added as an Administrator . Navigate to the Local Users and Groups folder/option that is located under System Tools. In this folder there will be sub folders called Users and Groups. For Windows 2000 Server: In the Local Users and Groups folder select Groups and from the right window pane, double click on the Administrators Group. The Administrators Properties window will be shown. Click on the Add button. Select the newly created TMnAdmin user and click Add.


Pre-Installation

Click on OK / Apply and then click on the Close button. Logout of Windows and enter the login name as TMnAdmin. For WindowsXP Pro and Windows 2003 Server: In the Local Users and Groups folder select Groups and from the right window pane, double click on the Administrators Group. The Administrators Properties window will be shown. Click on the Add> Advanced>FindNow buttons. A list of existing users will be displayed in the lower window. Select the newly created TMnAdmin user and click on the Add button.


Pre-Installation

Click on OK / Apply and then click on the Close button. Logout of Windows and enter the login name as TMnAdmin.

Note! The user (TMnAdmin) should be added to the Administrators Group on

all TankMaster Servers and the TankMaster.net Server machine. The password for the users should be the same on the TankMaster Servers and the TankMaster.net Server.


Pre-Installation

1.7 Installing IIS on Windows 2000 Server

Note! IIS can be installed using Default settings or minimum settings. We

recommend using minimum settings. The Internet Information Server (IIS) gets installed when you install Windows 2000 Server using the Typical Setup option. If for some reason, IIS is not pre-loaded follow the steps given below. 1.7.1 To install IIS with minimum settings:

Click on Start>Control Panel>Add/Remove Programs>Add/Remove Windows Componets and highlight Internet Infomation Services (IIS) as shown below.


Pre-Installation

Click on the Details button and check the options Common Files, World Wide Web Service and Internet Information Services Snap-in. Uncheck all other options as shown below.

Click on the OK button and then click on the Next button. The system will ask for the Windows 2000 Server installation CD. Insert the installation CD and click on the OK button. Copying of files will start and the wizard will end. Click on the Finish button to close the wizard. This completes the installation of IIS with minimum settings on Windows 2000 Server.


Pre-Installation

1.7.2 To install IIS with default settings:

Click on Start>Control Panel>Add/Remove Programs>Add/Remove Windows Componets and select Internet Infomation Services (IIS) as shown below and click on the Next button.

The system will ask for the Windows 2000 Server installation CD. Insert the installation CD and click on the OK button. Copying of files will start and the wizard will end. Click on the Finish button to close the wizard. This completes the installation of IIS with Default settings on Windows 2000 Server.


Pre-Installation

1.8 Installing IIS on Windows XP Pro


recommend using minimum settings. 1.8.1 To install IIS with minimum settings:

Click on Start>Control Panel>Add/Remove Programs>Add/Remove Windows Components and highlight Internet Infomation Services (IIS) as shown below.

Select the Details option and check the options Common Files,World Wide Web Service and Internet Information Services Snap-in.


Pre-Installation

Uncheck all other options as shown below.

Highlight the World Wide Web Service and click on the Details option. Uncheck all options except the World Wide Web Service checkbox as shown below.

The system will ask for the Windows XP Installation CD.

Insert the installation CD and click on the OK button.


Pre-Installation

Copying of files will start and the wizard will end. Click on the Finish button to close the wizard. This completes the installation of IIS with minimum settings on Windows XP Pro.


Click on Start>Settings>Control Panel>Add/Remove Programs>Add/Remove Windows Components. The Windows Components Wizard screen will be displayed as shown below. Select Internet Information Services (IIS) and click on the Next button.

The system will ask for the Windows XP Installation CD. Insert the installation CD and click on the OK button. Copying of files will start and the wizard will end. Click on the Finish button to close the wizard. This completes the installation of IIS with Default settings on Windows XP Pro.


Pre-Installation

1.9 Installing IIS on Windows 2003 Server


recommend using minimum settings. 1.9.1 To install IIS with minimum settings:

Click on Start>Control Panel>Add/Remove Programs>Add/Remove Windows Componets and highlight Application Server as shown below.

Click on the Details button and select Internet Information Services (IIS) and Enable network COM+ access.


Pre-Installation

Uncheck all other options as shown below:

Highlight the Internet Information Services (IIS) and click on the Details button. A window will be displayed as shown below.


Pre-Installation

Select the World Wide Web Service option and click on the Details button. A window will be displayed as shown below.

Select the World Wide Web Service and click on the OK button. The system will ask for the Windows 2003 Server Installation CD. Insert the installation CD and click on the OK button. Copying of files will start and the wizard will end. Click on the Finish button to close the wizard. This completes the installation of IIS with minimum settings on Windows 2003 Server.


Pre-Installation


Click on Start>Control Panel>Add/Remove Programs>Add/Remove Windows Components. The Windows Components Wizard screen is shown below.

Highlight Application Server and click on the Details button. The window of the Application Server is shown below.


Pre-Installation

Select Internet Information Services (IIS). Enable network COM+ access option gets is selected by default. Click on the OK button and then the Next button. The system will ask for the Windows 2003 Server Installation CD. Insert the installation CD and click on the OK button. Copying of files will start and the wizard will end. Click on the Finish button to close the wizard. This completes the installation of IIS with Default settings on Windows 2003 Server.

The newly created user (TMnAdmin) should be added to the IIS_WPG group. Adding a user to the IIS_WPG Group Click on Start>Control Panel>Administrative Tools>Computer Management. This will open the Computer Management window. In the left window pane, select the Groups option that is located under System Tools> Local Users and Groups. Click on the Groups folder that will show the available groups in the right window pane. The Computer Management window is as shown below.


Pre-Installation

Double click on the IIS_WPG group and click on the Add button.

From the Select Users or Groups window, click on the Advanced button, then Find now.


Pre-Installation

Existing Users and Groups on this machine will be displayed. Select the user TMnAdmin and click on the OK button.

The selected user (TMnAdmin) will be added to the IIS_WPG group. Click on the OK button. On the IIS_WPG properties window, click on the Apply and OK buttons. This completes the installation of IIS on Windows 2003 Server.


Installation of TankMaster.net

2.0 Installation of TankMaster.net The following steps should be taken to install TankMaster.net:

A new user (for example, TMnAdmin) should be added as an Administrator. For creating a new user (TMnAdmin), refer to section 1.6 The administrator will need to setup the Internet Information Server (IIS) before installing TankMaster.net. To setup this Server, refer to the following sections: 1.7 for setting up Internet Information Server on Windows 2000 Server.1.8 for setting up Internet Information Server on Windows XP Server.1.9 for setting up Internet Information Server on Windows 2003 Server. The administrator will have to setup Microsoft Office 2000, Microsoft Office XP or Microsoft Office 2003 on the TankMaster Server and on the TankMaster.net Server. This is required for generating graphs and Excel spread sheets. To setup the TankMaster.net software, the administrator should insert the TankMaster.net CD that will auto run and launch the setup. If the CD does not auto run, manually run the setup from “x:\setup.exe” where “x” is the letter representing the CD drive. To setup the TankMaster.net software accept the License Agreement and follow the instructions on the screen.


Installation of TankMaster.net

If TankMaster.net is not installed on your machine, the setup will install the software in the “C:\Program Files\Saab\TankMasternet” directory. If TankMaster.net was previously installed, or the folder already exists on the machine, the software will be installed in the said directory. During the software installation of TankMaster.net, it will also install the Sentinel System Driver. The Setup Type window will be displayed. Select the Typical option and click on the Next button.

Once the setup completes, it will ask for a “Restart” option. Click on the “Yes” button to restart the system. Once the machine restarts, the installation of the TankMaster.net Server is completed.


Post Installation

3.0 Post Installation

3.1 Setting Directory Security on Windows 2000 Server Select the virtual directory “tankmasternet” which has been created by the setup of TankMaster.net. This directory will be under Internet Information Services>Default Web Site. Right click on it and select Properties.


Post Installation

Select the Directory Security option tab as shown in the screen below.

Click on the Edit button under the “Anonymous access and authentication control” section. The “Authentication Methods” window will be displayed as shown below.


Post Installation

Click on the Edit button under the “Anonymous access” section. The “Anonymous User Account” window will be displayed as below. Enter the Username and Password that was used for logging into this computer. Uncheck Allow IIS to control password. Click on the OK button.

It will ask to confirm the password. Enter the password again and click on the OK button.

Note! The user (TMnAdmin) must be assigned a password, else the Data Collector application will hang when accessing the history or download functions of the TankMaster.net website.

Select the virtual directory “tmn2wap” under the “Default Web Site” folder. Right click and select Properties.


Post Installation

The “tmn2wap Properties” window will be displayed. Select the Directory Security options tab.

Click on the Edit button under the “Anonymous access and authentication control” section. The “Authentication Methods” window will be displayed as shown.


Post Installation

Click on the Edit button under the “Anonymous access” section. The “Anonymous User Account” window will be displayed as below.

Enter the Username and Password that was used for logging into this computer.


Uncheck Allow IIS to control password. Click on the OK button. It will ask to confirm the password. Enter the password again and click on the OK button. Close the “Internet Information Services” window. This completes the Setup and Configuration of IIS for TankMaster.net on Windows 2000 Server.

3.2 Setting Directory Security on Windows XP Pro Click on Start>Control Panel>Administrative Tools>Internet Information Services (IIS) Manager. This will open the IIS management tool. Select the virtual directory “tankmasternet” which has been created by the setup of TankMaster.net. This directory will be under Internet Information Services>Default Web Site. Right click on tankmasternet virtual directory and select Properties.


Post Installation

Select the properties option of the virtual directory. Select the Directory Security option tab as shown in the screen below.

Click on the Edit button under the “Anonymous access and authentication control” section.


Post Installation

The “Authentication Methods” window will be displayed as shown below.



Uncheck Allow IIS to control password. Click on the OK button. It will ask to confirm the password. Enter the password again and click on the OK button. Select the virtual directory “tmn2wap” under the “Default Web Site” folder.


Post Installation

Right click on the directory and select Properties.

The “tmn2wap properties” screen will be displayed. Select the Directory Security options tab as shown below.

Click on the Edit button under the “Anonymous access and authentication control” section.


Post Installation

The “Authentication Methods” window will be displayed as below.



Uncheck Allow IIS to control password. Click on the OK button. Close the “Internet Information Services” window.

Note! If the operating system is Windows XP Pro with Service Pack 2, additional steps will be required. Refer to section 4.0 for details.

This completes the Setup and Configuration of IIS for TankMaster.net on Windows XP Pro.


Post Installation

3.3 Setting Directory Security on Windows 2003 Server Click on Start>Control Panel>Administrative Tools>Internet Information Services (IIS) Manager. Double click on the IIS Manager. The Web Service Extensions window will be shown in the right window. Select Active Server Pages and click on the Allow button as shown below.

Select the virtual directory “tankmasternet” that will be viewed under Web Sites>Default Web Site.

Right click on it and select Properties.


Post Installation

The tankmasternet Properties window will be displayed. Select the Directory Security option tab.

Click on the Edit button under the “Authentication and access control” section.


Post Installation

The “Authentication Methods” window will be displayed as below.



Click on the OK button. It will ask to confirm the password. Enter the password again and click on the OK button.


Post Installation

Select the virtual directory “tmn2wap” under the Web Sites>Default Web Sites folder and right click. Select the Properties option.

The tmn2wap Properties window will be displayed. Select the Directory Security option.

Click on the Edit button of “Authentication and access control” section.


Post Installation

The “Authentication Methods” window will be displayed.



Click on the OK button. It will ask to confirm the password. Enter the password again and click on the OK button. Close the “Internet Information Services” window. This completes the Setup and Configuration of IIS for TankMaster.net on Windows 2003 Server.


Configuring TankMaster with Windows XP Service Pack 2

4.0 Configuring TankMaster Servers and TankMaster.net Server to work with Windows XP Service Pack 2.

The major goal of Windows XP Service Pack 2 is to reduce common available scenarios for malicious attack on Windows XP. The Service Pack will reduce the effect of most common attacks in four ways: Improvement in shielding Windows XP from the network:

RPC and DCOM communication enhancements. Enhancements to the internal Windows firewall.

Enhanced memory protection. Safer handling of e-mail. Internet Explorer security enhancements. Most OPC Clients and Servers use DCOM to communicate over a network and thus will be impacted due to the changes in Service Pack 2. When Service Pack 2 is installed with its default configuration settings, OPC communication via DCOM will cease to work.This section describes the settings necessary to restore OPC communication when using XP Service Pack 2 (SP2). SP2 includes many changes and security enhancements, two of which directly impact OPC via DCOM. First, new DCOM limit settings have been added. Secondly, the software firewall included with XP has been greatly enhanced and is turned on by default. Since the callback mechanism used by OPC essentially turns the OPC Client into a DCOM Server and the OPC Server into a DCOM Client, the instructions provided here must be followed on all nodes that contain either OPC Servers or OPC Clients.

Note! OPC communication that is confined to a single machine (using COM, but not DCOM) will continue to work properly after installing XP SP2 without following the instructions in this section. 4.1 Windows Firewall

The Windows Firewall allows traffic across the network interface when initiated locally, but by default stops any incoming “unsolicited” traffic. However, this firewall is “exception” based, meaning that the administrator can specify applications and ports that are exceptions to the rule and can respond to unsolicited requests.



The firewall exceptions can be specified at two main levels, the application level and the port and protocol level. The application level is where you specify which applications are able to respond to unsolicited requests and the port and protocol level is where you can specify the firewall to allow or disallow traffic on a specific port for either TCP or UDP traffic. To make any OPC client/Server application work via DCOM, changes need to be made on both levels.

4.1.1 Configuring the Firewall

By default the windows firewall is set to “On”. This setting is recommended by Microsoft and by OPC to give your machine the highest possible protection. For trouble shooting, you may wish to temporarily turn off the firewall to prove or disprove that the firewall configuration is the source of any communication failure. To configure the Windows Firewall, click on Start>Control Panel>Windows Firewall.

Note! It may be appropriate to permanently turn off the firewall if the machine is

sufficiently protected behind a corporate firewall. When turned off, the individual firewall settings outlined here need not be performed to allow OPC communication.



Select the “Exceptions” tab and add all OPC Clients and Servers to the exception list. Also add Microsoft Management Console (used by the DCOM configuration utility in the next section) and the OPC utility OPCEnum.exe found in the Windows\System32 directory.

In the Add a Program dialog, there is a listing of most applications on the machine, but note that not all of them show up on this list. Use the “Browse” button to find other executables installed on the computer. For the OPC Server and clients to work properly with Firewall enabled, one needs to add four programs to this exception list:

StrServer.exe which is located in \Program Files\Saab\TankMasternet \TmnLibs. OPCENUM.exe which is located in \Windows\System32. TMn2DataCollx3.exe which is located in \Program Files\Saab\TankMasternet\TmnLibs



TMn2Config.exe which is located in \Program Files\Saab\TankMasternet \TmnApp.

Note! Only EXE files are added to the exceptions list. For in-process OPC Servers and Clients (DLLs and OCXs) you will need to add the EXE applications that call them to the list instead.

Add TCP port 135 as it is needed to initiate DCOM communications, and allow for incoming echo requests. In the Exceptions tab of the Windows Firewall, click on Add Port.



In the Add a Port dialog, fill out the fields as follows: Name: DCOM Port number: 135 Choose the TCP radio button.



4.2 DCOM Enhancements

Service Pack 2 for Windows XP has also made some security enhancements to DCOM; two in particular need to be taken into consideration when using OPC on a network: First, the default Launch and Access permissions dialogs have been modified to allow the user to configure “limits” on the permissions given to applications using DCOM. Secondly, for each user now defined in the Launch and Access permissions, both local and remote access can be explicitly defined. A brief background on default Launch and Access permissions in DCOM: Launch permissions define who can launch a COM based application (such as an OPC Server) both over the network or locally. Access permissions define who can access that application once it has been launched. Applications can get their Launch and Access permissions from one of three places: they can use explicitly defined setting for their application, they can use the default permissions or they can set their own permissions programmatically. Because an application could set its own permissions programmatically, the explicitly defined or default settings, although set properly, may not be used and therefore the user is not able to explicitly have control over these settings. To overcome this security flaw, Microsoft has added “limits” to the DCOM security settings from Launch and Access to limit the permissions that an application can use. This limit prevents the application from using permissions beyond what is specified in the DCOM configuration settings. By default the limits set by Service Pack 2 will not allow for OPC communications over the network.

In addition to the new permissions limits, one must now specify if the user or group specified has permissions locally or remotely (or both). In order for OPC applications to work over the network with DCOM, the permissions must be set such that remote users can launch and/or access the OPC Servers and clients on the machine. 4.2.1 Configuring DCOM

Follow these steps to configure DCOM for OPC Communications using Windows XP Service Pack 2: Click on Start>Run and type DCOMCnfg and click on the OK button.



Click on Component Services under the Console Root to expand it. Click on Computers under Component Services to expand it. Right click on My Computer in the right window and select Properties.

Click on COM Security tab and note these are the four permission configurations that we will have to edit:



Edit the Limits for Access and Launch

Access Permissions – Edit Limits... You need to check the Remote Access box for the user labeled ANONYMOUS LOGIN in this dialog.

Note! This setting is necessary for OPCEnum.exe to function and for some

OPC Servers and Clients that set their DCOM 'Authentication Level' to 'None' in order to allow anonymous connections. If you do not use OPCEnum you may not need to enable remote access for anonymous users.



Launch and Activation Permissions – Edit Limits... You need to check the remote boxes for the user labeled Everyone in this dialog.

Note! Since Everyone includes all authenticated users, it is often desirable to

add these permissions to a smaller subset of users. One suggested way to accomplish this is to create a group named “OPC Users” and add all user accounts to this group that will execute any OPC Server or Client. Then substitute “OPC Users” everywhere that Everyone appears in these configuration dialogs.



Edit Default Permissions for Access and Launch For each user (or group) that participates in OPC communication (e.g. “OPC Users”), make sure that both the Local Allow and Remote Allow checkboxes are both checked. Access Permissions per user:

Launch and Activation permissions per user:


The Next Step

5.0 The Next Step

After installation and configuration of Internet Information Services (IIS) and TankMaster.net is complete, the administrator needs to configure the TMn2Config and the TMn2DataCollector applications.

When the machine boots up, two icons will be seen on the desktop. 1. A blue icon named TMn2 Config.

Open TMn2 Config and configure items in the order mentioned below: Map Servers & Tanks The Map Servers & Tanks tab allows the administrator to map Servers to the client machine. The Mapping of Servers on the client machine allows the administrator to connect to the TankMaster Server. You can access the tanks available in the TankMaster Server only if the TankMaster Server is mapped to your local machine. To view the data of the tanks on the web site you have to map at least one Server on the client machine. Refer to Section 4.1 in TMn2Config.pdf for details on Map Servers & Tanks Setup Users The Setup Users tab allows the administrator to add, edit and delete users. Only these users have access to the TankMaster.net website. The administrator assigns the users their LoginID and Passwords in the Setup Users tab of the TankMaster.net Configuration. Refer to Section 4.2 in TMn2Config.pdf for details on Setting Up Users Setup Groups The Setup Groups tab allows the administrator to create groups by adding existing users. The users of the group will be able to view, on the website, details of the tanks that are assigned to them by the administrator. Refer to Section 4.3 in TMn2Config.pdf for details on Setting Up Groups Setup HTML Info The Setup HTML Info tab of the TankMaster.net Configuration allows the administrator to set up the Company’s name and location that will be displayed on the TankMaster.net website on the top left corner. Refer to Section 4.4 in TMn2Config.pdf for details on Setting Up HTML Info. For details on configuring TMn2Config, refer to the document TMn2Config.pdf


The Next Step

2. A grey & blue icon named TMn2 Data Collector.

The TankMaster.net DataCollector’s function is to poll the Live and Static Data from the locally mapped TankMaster Servers that are configured using the TankMaster.net Configuration application. Before starting the DataCollector, make sure that the security lock is connected to the parallel/USB port of the TankMaster Server. If the security lock is not connected to the TankMaster Server, the DataCollector will start in DEMO MODE, which will automatically shut down after eight hours. When started, it also shows the status of the TankMaster Server and the status of the data polled. The status of the Servers is shown in the upper window pane and the status of the data polled is visible in the lower window pane. If the Servers are not started in the DataCollector, the user will not be able to view the current status of the tank data.

For details on using TMn2DataCollector, refer to the document TMn2DataCollector.pdf

TankMaster.net Website The main aim of TankMaster.net is to make data of the tanks and products available to users all over the world from offices, residences or WAP phones. This data is available to users who are assigned a Username and Password by the administrator. Users can only read the data available on the website and view/download data in the form of Excel spreadsheets for editing. The configuration of TankMaster.net is achieved with the help of the TankMaster.net Configuration and TankMaster.net DataCollector applications. If the TankMaster Server does not have a hardware lock, the DataCollector and the website will run in DEMO MODE. To access the Tankmaster.net website open the Internet browser and in the address field enter http://servername/tankmasternet. The servername should be replaced by the internet name of the TankMaster Server or its IP address. (E.g. http://mpix191/tankmasternet or http://59.181.101.23/tankmasternet) For details on using TMn2Website, refer to the document TMn2WebSite.pdf


http://servername/tankmasternet

http://mpix191/tankmasternet

http://59.181.101.23/tankmasternet

The Next Step

TMn2UserStatus Website The UserStatus website is accessible only to administrators. It contains Information about users connected to the TankMaster.net website. It displays fields Session ID, Login ID, Page Description, Start Time and Expiry time details on users accessing the TankMaster.net website. To access the TMn2UserStatus website open the Internet browser and in the address field enter http://servername/tankmasternet. The servername should be replaced by the internet name of the TankMaster Server or its IP address. (E.g. http://mpix191/UserStatus.asp or http://59.181.101.23/UserStatus.asp) For details on using TMn2UserStatus website, refer to the document TMn2UserStatus.pdf

TMn2Wap Website This website has been developed for the sole purpose for being viewed by mobile devices (WAP enabled phones) that have access to the Internet. This will allow the user to view all data of the tanks which the administrator has given rights. The data and figures, displayed on the WAP phones will vary for different WAP phones. The reason being that the screen resolution of WAP phones differ (monochrome, 256 colors etc.) Users having no access to WAP phones can view the TankMasternet WAP website on their desktop using Internet browsers. To access the TMn2Wap website open the Internet browser and in the address field enter http://servername/tmn2wap. The servername should be replaced by the internet name of the TankMaster Server or its IP address. (E.g. http://mpix191/tmn2wap or http://59.181.101.23/tmn2wap) For details on using TMn2Wap website, refer to the TMn2Wap.pdf


http://servername/tankmasternet

http://mpix191/UserStatus.asp

http://59.181.101.23/UserStatus.asp

http://servername/tmn2wap

http://mpix191/UserStatus.asp

http://59.181.101.23/tmn2wap

Troubleshooting

6.0 Troubleshooting What if I cannot view graphics on the web server? If you are unable to view graphics on the web server, Office Web Components for Microsoft Office 2000, 2003, XP or the Excel applications have not been installed or have been corrupted. Office Web Components are a set of Active-X components that work in conjunction with XML coding on web pages to provide interactive spreadsheet capability. Unless you know for certain that the OWC components are installed on your machine (the file might be on the computer but not installed), you might try installing the OWCs from the Microsoft Office CD.

What if I cannot view the TankMaster.net website? If you cannot view the TankMaster.net website, you have not installed Internet Information Services (IIS) or you have not pointed to the correct virtual directory in IIS. What if I cannot view/download spreadsheets? If you cannot view/download spreadsheets, Microsoft Office may not be installed. Install Microsoft Office to overcome this problem.


User’s Guide Ref. no: 303037E Third Edition, February 2007

Emerson Process Management Rosemount Tank Gauging Box 130 45 SE-402 51 Göteborg SWEDEN Tel (International): +46 31 337 00 00 Fax (International): +46 31 25 30 22 E-mail: [email protected] www.rosemount-tg.com

Copyright © Rosemount Tank Radar AB. Third Edition. February 2007. Ref. no: 303037E.

Documents

Installation - emerson.com · User’s Guide Ref. no: 303037E Third Edition, February 2007 Rosemount TankMaster.net Installation