Substation Alarm Manager

Transcription

1 Substation Alarm Manager Operating System, Application Patches and Updates Guide Version 1.0.0, April 2018

2 Copyright Notice 2018 Applied Systems Engineering, Inc. All Rights reserved. This user manual is a publication of Applied Systems Engineering, Inc. (ASE) and it is intended for customer use only. Content of this manual is copyrighted and reproduction in whole or in part, for use other than in support of ASE products, is prohibited without the specific written permission of ASE. Disclaimer Information in this manual is subject to change without notice. Information provided in this manual is intended to be accurate and reliable. However, ASE assumes no responsibility for its use and makes no commitment to update or keep the current information in this manual. Contact Information Applied Systems Engineering, Inc Dell Avenue, Suite 200 Campbell, California, USA Telephone: (408) Fax: (408) sales@ase-systems.com Technical Support Contact Information Online Technical Information: Support: support@ase-systems.com 2

3 Table of Contents 1. Introduction 4 2. Glossary of terms 5 3. Products and Variants 6 4. Substation Alarm Manager Operating System and Application Software Version Current Version SAM PC Operating System Patches and Updates Applicable SAM Versions Precautions Before Starting Updating the SAM PC Operating System using Windows Auto Update Manual Update 12 Appendix A: Meltdown and Spectre 14 Appendix B: Microsoft OS Manual Update List 15 Appendix C: Microsoft OS Automatic Update List 16 Appendix D: Standard Warranty and Extended Maintenance Plans 19 3

4 1 1. Introduction This document describes the procedures to update and maintain the operating system of the Substation Alarm Manager (SAM) ASE product and is applicable to select variants of SAM shipped with serial numbers 1263 and above. This document will be updated periodically as ASE continues to monitor reported issues, security updates and patches from the Operating Systems and device vendors. Please refer to on the ASE website for the latest version of this document as well as previous archived versions of this document. This procedure may require you utilize a set of supporting files. You may receive these on USB media from ASE or download them from the provided links. 4

5 2 2. Glossary of terms SAM Substation Alarm Manager SPT SCADA Protocol Translation 5

6 3 3. Products and Variants SAM provides power utilities a simple way to show current point status, data values, and alarm information within a substation. By utilizing ASE s vast protocol library, SAM can obtain data from a variety of RTU/IED devices by direct scan, eavesdropping on active communication to an external master, or through an industry standard OPC interface to any compliant OPC server. Data and alarm display and processing information is identical in all cases. The complete SAM system comes with a substation hardened PC (no moving parts), a touchscreen 19 rack-mount monitor; the data acquisition, annunciation, and data viewer software; and configuration software. Lower cost options are available to customers who provide their own PC and/or monitor. SAM allows for multiple configurable annunciation pages to be created to show digital states, analog values, and alarm conditions. Alarm calculation, color coding, font/button size, and screen layout are all configurable within the SAM software. The SAM software integrates seamlessly with ASE s SCADA Protocol Translation (SPT) software, provided as an integral part of the SAM package. SPT can gather data from downstream devices (RTUs/IEDs) using any of over 40 different protocols. The SPT component adds the capability for SAM to report acquired data values to upstream masters, optionally in different protocols. For a small non-recurring charge, SAM can operate as an integrated protocol translator, data concentrator, and alarm annunciation package. SAM-900 and SAM-750 include ruggedized/hardened PC s that run Windows Embedded Standard 7 operating system. This document details the steps to update the Windows operating system and SAM and SPT applications to the current release from ASE. 6

7 4 4. Substation Alarm Manager 4.1. Operating System and Application Software Version Current Version Component Tested Version OS: Windows Embedded Standard Windows Embedded Standard 7 with Service Pack 1 Application: SAM SAM licensed version Application: SAMEdit SamEdit version Application: SPT Editor SPT Editor Version Windows Embedded Standard 7 This update process is tested and verified with Windows Embedded Standard 7 with Service Pack 1. This information can be access and verify by opening up: Control Panel > System and Security > System SAM Version This update process supports SAM licensed version The version number can be verified by opening the SAM program. The version number is located top left of the windows, enclosed by a square bracket. If the top left window of the SAM program indicates it is a demo version, please contact us for a licensed version. SamEdit This update process supports SamEdit version The version number can be accessed and verified by opening up the SamEdit program. On the top left area of SamEdit, click on Help and then select About. SPT Editor This update process supports SPT Editor Version The version number can be accessed and verified by opening up the SPT Editor program. On the top left area of SPT Editor, click on Help and select About. Prior Versions While SAM and SPT applications are backward compatible, we verify the latest patches and security updates from Microsoft only with the current release of SAM and SPT. We highly recommend for you to update to the latest SAM and SPT software. For more information about SAM update subscriptions, please contact our sales team at sales@ ase-systems.com 7

8 4.2. SAM PC Operating System Patches and Updates Note: This update procedure contains instructions to update the SAM using two mechanisms, the Window Automatic Update or a Manual method. ASE recommends using the Automatic Update first Applicable SAM Versions This Windows update process is tested and verified for the SAM with serial numbers starting at 1263 and upwards Precautions Before Starting List of precautions before starting the update process: Close all applications before starting the updating procedures. The only programs that should be open are Windows Explorer and Windows Updater. If the SAM s monitor begins flickering or becomes slow or unresponsive, please wait a few minutes for the SAM to respond. If the SAM is still unresponsive, restart the device by toggling the power switch. This issue is caused by the SAM running out of memory (RAM) during the installation process. It is important that no other programs are running in the background during installation. Please make sure that the system clock is accurate to your local time. This may cause synchronization issues when enabling the automatic update. If possible, refer to another time keeping device (i.e. watch, cellular phone, another computer). If your machine s time/date is not consistent with local time/date, change the date on the machine by going to: Control Panel > Clock, Language, and Region> Date and Time There will be some updates that will not install through the manual process. To get these updates, please use the Windows automatic updates. Please refer to the Appendix for a full list. If you go through the manual update process and need to use the Windows Update in the future, you do not need to enable the automatic updater; it should be enabled during the manual process Updating the SAM PC Operating System using Windows Auto Update Prerequisites This updating procedure requires the machine to be connected to the Internet for the duration of the update. The installation process takes approximately two hours from start to finish. Windows6.1-KB x86.msu (for Correction 1) This file can be located in the AutomaticUpdate directory (USB:\AutomaticUpdate\) This file can also be retrieve through the following link: Windows6.1-KB v34 -x86.msu (for Correction 2) This file can be located in the AutomaticUpdate directory (USB:\AutomaticUpdate\) This file can also be retrieve through the following link: Standard Installation Procedures The SAM comes with a lightweight version of Windows Embedded Standard 7. In order to install the latest security updates from Microsoft, Windows Update feature must be turned on. 8

9 Check for updates to make sure that Auto Update is enabled. This can be done in: Control Panel > System and Security > Windows Update > Check for Updates If there are warnings after the machine checks for updates (Error code E, C80003F3, F as shown above), proceed to Correction 1. If there are no warning after the machine checks for updates, skip Correction 1 and 2 and proceed to the installation process. Procedures to Enable Auto Update Correction 1: 1. Install KB patch located in the directory USB:\AutomaticUpdate\ 2. After the installation of KB is finished, Press Win+R to enter the Run Window 3. Enter in services.msc, shown below 9

10 4. As shown below, a services windows should pop up. Locate the Windows Update service 5. Right click on Window Update and select stop 6. Open Explorer and delete C:\Windows\SoftwareDistribution folder. See image below 10

11 7. Go back to the Services Windows and start Windows Update. See image below 8. Check for updates by going to Control Panel > System and Security > Windows Update > Check for Updates 9. Skip Correction 2 if checking for updates does not give any errors. If there are any errors, proceed to Correction 2 Correction 2: 1. Locate and execute the standalone file USB:\AutomaticUpdate\Windows6.1-KB v34 -x86.msu. This step should take 15 minutes. 2. After the installation process finished, restart the machine. Installation Process: After Enabling the Auto Updates 3. Check for updates in Control Panel > System and Security > Windows Update > Check for Updates 4. Only install the updates that are flagged Important. There should be around 120 updates. 5. Click install updates 6. Restart the machine when the automatic update process is finish Verification After the installation process, there should be approximately 120 updates (including Service Pack 1) on the unit after the installation process. Please refer to the Appendix for a full list of updates. 11

12 Manual Update Prerequisites The installation process will take approximately 2-3 hours. Required Files: All the standalone installers inside the directory USB:\ManualUpdate\. There should be 111 files in total. The required files have.msu extension. These files can also be access with the following link: Standard Installation Procedures Procedures: Go in folder with a list.msu files. Sort.msu files by name in ascending order. The file with the lowest KB number should be at the top and the file with the highest KB number should be toward the bottom of the list. Start with the first file. It should be KB msu file. See image above. After doubleclicking on the standalone installer, there should be a message prompting to install the update. See image below. 12

13 Install each.msu file sequentially, See below for list of warnings that may be prompted. As shown in the image below, there will be some warnings during the installation process. These warnings are common and can be ignored. Click Close or Postpone if prompted to restart the machine. You do not need to restart the machine every time an update finishes installing. If there are warnings regarding low memory issues, you can ignore it. If there is a not applicable error (shown below) rerun the installation file that failed. If the installation file still fails, continue on to the next file. After the installation is finished, restart the machine to ensure all the patches are applied correctly. During initialization, Windows Update will indicate that the updates are being applied. Please do not power off the machine during this time. All the installed updates will be reverted if the machine is powered off during this process. Verification After the update process, there should be around 113 updates (including Service Pack 1 updates) installed on your machine. Please refer to the Appendix for the full list. 13

14 A Appendix A: Meltdown and Spectre With the available information to date from various public announcements and published vendor information, we have assessed the SAM and determined that it is not vulnerable to Meltdown and Spectre. We are actively monitoring updates from vendors and as additional information or changes become available that changes the information below, we will publish an update to the Security Advisory which can be found on the website at: 14

15 B Appendix B: Microsoft OS Manual Update List Manual Update List: KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB

16 Appendix C: Microsoft OS Automatic Update List Automatic Updates List KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB KB C 16

17 List of updates that cannot be installed manually. If using the Manual update method, please enable Auto Updates for these updates. The information in the table below is based on information from Microsoft. For more information regarding specific updates, refer to the following Microsoft website: or KB number> For example: KB Number Year Title Brief Description MSRC Severity KB Security Monthly Quality Rollup for Windows 7 KB Security Update for Windows 7 KB Update for Windows 7 KB Update for Windows 7 This security update includes improvements and fixes that address the following issues: Issue where users of SQL Server Reporting Services may not be able to use the scrollbar in a drop-down list. Additional issues with updated time zone information. Security updates to the Microsoft Scripting Engine and Windows Server. MS14-007: Vulnerability in Direct2D could allow remote code execution: February 11, 2014 Update is available that improves the network performance of Internet Explorer 11 in Windows Internet Explorer 10 does not save credentials for a website after you log off or restart a computer that is running Windows 7 SP1 or Windows Server 2008 R2 SP1 Critical Critical Unspecified Unspecified ASE Advisory The SAM product does not use this feature. This update will not affect the SAM in any ways. The SAM does not use Direct2D for any of its application. The SAM will not be affected by this vulnerability. The SAM does not use Internet Explorer for any of its native application. The SAM does not use Internet Explorer for any of its native application. 17

18 KB Update for Windows 7 An update that provides new APIs for conversion between local time and UTC in Windows 7 or in Windows Server 2008 R2 is available Unspecified The SAM does not use this features in its native application KB Update for Windows 7 An update for the Segoe UI symbol font in Windows 7 and in Windows Server 2008 R2 is available Unspecified The SAM does not use this feature in its native application KB Security Update for Windows 7 Security Update for Windows 7 Unspecified The SAM does not use this feature in its native application KB Security Update for Windows 7 Microsoft Security Advisory: Insecure library loading could allow remote code execution Unspecified SAM does not use this feature If your organization feels that some of these updates are mandatory, please use the automatic Windows Update to obtain them. If the automatic Windows Update is not a viable option, please send your CompactFlash card back to us and we will install the updates for you. These CompactFlash card slot is located in the front of the SAM (facing the power switch). The card slot is labeled Cfast. Release the locking mechanism and push on the button next to the card slot to safely remove the card. 18

19 D Appendix D: Standard Warranty and Extended Maintenance Plans The company offers customers extended hardware and software packages that assist in maintaining the products and assure access to software upgrades which may include new functionality as well as minor updates and security patches. One and three-year extended warranty, support and maintenance plans are available. Standard Product Warranty The standard hardware warranty for new purchases is one year from the product ship date. The warranty guarantees repair or replacement of hardware that fails under general use. The standard software warranty for new purchases is one year from the product ship date. The warranty provides phone/ access to customer support and rights to software update releases made during the warranty period. For additional standard product warranty information, please refer to the website: ase-systems.com/warranty/ Extended Hardware and Software Maintenance Plans Maintenance plan options for products to extend product life and uptime by providing customers with access to new software features and technical support experts. Extended Hardware Maintenance Available for one or three years, it extends the standard hardware warranty beyond the initial year by one or three years. It provides repair or replacement of hardware that fails under general use. Extended Software Maintenance Available for one or three years, it extends the standard software warranty beyond the initial year by one or three years. The warranty provides access to new software releases which may include new features, OS updates, and security patches. It also includes priority notice of critical issues that may affect the product, along with actions being taken by the company and recommendations on customer actions. Up to two hours of phone or support is included to provide additional guidance on product/features and address any questions. Combined Extended Hardware and Software Maintenance This plan is available for one or three years and is customers that desire the highest level of reliability. It includes all the features of the Extended Hardware Maintenance and Extended Software Maintenance offerings. To learn more about any of these extended maintenance offerings, please contact your company sales representative. 19