Configuration Instruction

Size: px

Start display at page:

Download "Configuration Instruction"

Sandra Barber
5 years ago
Views:

1 Configuration Instruction SIMATIC PCS 7 SIMATIC IT Integration PCS 7 / SIMATIC IT Integration Pack V6.1 Time Synchronization

2 Warranty, liability and support Time Synchronization Note The application examples are not binding and do not claim to be complete regarding the circuits shown, equipping and any eventuality. The application examples do not represent customer-specific solutions. They are only intended to pro-vide support for typical applications. You are responsible in ensuring that the de-scribed products are correctly used. These application examples do not relieve you of the responsibility in safely and professionally using, installing, operating and servicing equipment. When using these application examples, you recognize that Siemens cannot be made liable for any damage/claims beyond the liability clause described. We reserve the right to make changes to these application examples at any time without prior notice. If there are any deviations between the recommendations provided in these application examples and other Siemens publications - e.g. Catalogs - then the contents of the other documents have priority. Warranty, liability and support We do not accept any liability for the information contained in this document. Any claims against us - based on whatever legal reason - resulting from the use of the examples, information, programs, engineering and performance data etc., described in this application example shall be excluded. Such an exclusion shall not apply in the case of mandatory liability, e.g. under the German Product Liability Act ( Produkthaftungsgesetz ), in case of intent, gross negligence, or injury of life, body or health, guarantee for the quality of a product, fraudulent concealment of a deficiency or breach of a condition which goes to the root of the contract ( wesentliche Vertragspflichten ). However, claims arising from a breach of a condition which goes to the root of the contract shall be limited to the foreseeable damage which is intrinsic to the contract, unless caused by intent or gross negligence or based on mandatory liability for injury of life, body or health The above provisions does not imply a change in the burden of proof to your detriment. Copyright 2006 Siemens A&D. It is not permissible to transfer or copy these application examples or excerpts of them without first having prior authorization from Siemens A&D in writing. For questions about this document please use the following address: mailto:online-support.automation@siemens.com V /30

3 Table of Content Table of Content Table of Content Introduction Test environment Equipment for the Windows active directory domain Installed software Time master and time client overview Time synchronization of the domain controllers Settings on the time master domain controller Settings on the Client domain controller Time synchronization of the domain computers SIMATIC PCS 7 OS Servers SIMATIC PCS 7 OS Clients SIMATIC BATCH Servers and SIMATIC Engineering Systems SIMATIC IT Servers Time synchronization of the SIMATIC PLC Settings on the Engineering System for the project Settings on the SIMATIC PCS 7 OS Servers References Abbreviations V /30

4 Introduction 1 Introduction! Attention Time synchronization is very important. In a SIMATIC plant, time is used for synchronizing, tracing, documenting and archiving processes. Therefore on every computer in the plant it is mandatory to have the same time. The times between the terminal bus (computer) and process bus (PLC) must also be synchronized. It is necessary to plan and configure time synchronization for your plant which includes all SIMATIC computers and all PLC. 1.1 Test environment The following schema shows in an overview the test environment which is used to set up the time synchronization in a domain. The following figure shows the schema of the Windows active directory domain computers: Figure 1-1: Schema of the Windows active directory domain computers A private IP address band is used with fixed IP addresses. V /30

5 Introduction Equipment for the Windows active directory domain 2 Windows active directory domain controllers (DNS, WINS) 2 SIMATIC PCS 7 OS Servers (redundant) 2 SIMATIC BATCH Servers (redundant) 1 SIMATIC PCS 7 Engineering System (ES) 2 SIMATIC PCS 7 OS Clients with SIMATIC BATCH 1 SIMATIC IT Production suite 1 SIMATIC IT Historian and SIMATIC PCS 7 OS Client 1 SIMATIC IT Report/ CAB engineering 1 SIMATIC IT components software 1 SIMATIC PLC CPU 417 with a CP Installed software Operating system Table 1-1 Station Server Client Installation Windows 2003 MUI (Multilanguage User Interface) with SP1 Internet Explorer V6.1 SP1 Image software Windows XP SP2 Image software SIMATIC software SIMATIC software and its required software packages (e.g. message queuing, SQL Server,...) are installed as needed. The installed software for SIMATIC PCS 7 and SIMATIC IT are the released integration packages. Table 1-2 Product SIMATIC PCS 7 SIMATIC IT Version Process Control System PCS 7 Toolset V6.1 incl. SP1 PCS 7 / SIMATIC IT Integration Pack V6.1 incl. HF2 (Part 1) (Updates for PCS 7 V6.1 SP1) SIMATIC IT Production Suite 6.1 SP1 SIMATIC IT Historian 6.1 SP1 PCS 7 / SIMATIC IT Integration Pack V6.1 incl. HF2 (Part 2) (Updates for SIMATIC IT V6.1 SP1) V /30

6 Introduction 1.2 Time master and time client overview Domain controller The domain controllers (in our case two) will serve as time master in the domain. They are synchronized with the build in Windows NTP (network time protocol). SIMATIC PCS 7 OS Server The SIMATIC PCS 7 OS Servers will be used to synchronize directly with the domain controllers while the SIMATIC PCS 7 OS Client computers will use the SIMATIC PCS 7 OS Servers as there time masters. Other SIMATIC PCS 7 computers SIMATIC PCS 7 computers which have no SIMATIC PCS 7 OS Client installed (e.g. SIMATIC BATCH, SIMATIC ES) use a 3rd party tool called DCF77 service to synchronize with the SIMATIC PCS 7 OS Server. SIMATIC IT Foundation Server The SIMATIC IT Foundation Server will use the SIMATIC PCS 7 OS Servers to synchronize their time with the installed SIMATIC PCS 7 OS Client software. The Foundation Server synchronizes the other SIMATIC IT computers over the build in time alignment function in the System Configuration editor tab Foundation Servers inside the management console. SIMATIC PLC The SIMATIC PLC will use time synchronization within settings made in SIMATIC PCS 7 STEP7 and the SIMATIC PCS 7 OS Server project. V /30

7 Time synchronization of the domain controllers 2 Time synchronization of the domain controllers As the domain controllers are used as time master in the environment you should make sure that the domain controllers in your environment are time aligned. Just imagine that if one domain controller fails and the other takes over the time master ship and the times of these domain controllers would be different. Clearly the time must be aligned. To do this we use the Windows NTP (network time protocol) for synchronizing the domain controllers. We are not synchronizing our domain time to an outside UTC time source. There exists e.g. the possibility to synchronize the domain time over external devices ( Windows time synchronization using NTP The NTP is a protocol that can be used for synchronizing times of computers. NTP Explanation NTP is used for synchronizing clocks of computers. NTP is using UDP port 123 and is one of the oldest protocols still in use. Inside Windows 2003 the W32time service can be used to synchronize times between computers. Inside the Microsoft support pages you will find some addition hints to this topic ( ). The W32Time service is an integrated service in Microsoft Windows 2000/2003. The W32Time service synchronizes an authoritative time server with an outside time source. The authoritative time server is a domain controller that uses the W32Time service to make sure that the computer date and time settings are correctly synchronized throughout an organization. With the settings described in the document under the Microsoft support page it is possible to set one domain controller as the base time while the second one uses the provided time. V /30

$1 Settings on the time master domain controller [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Ti me\config] "AnnounceFlags"=dword:0000000a$

8 Time synchronization of the domain controllers 2.1 Settings on the time master domain controller [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Ti me\config] "AnnounceFlags"=dword: a [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Ti me\parameters] "ServiceMain"="SvchostEntry_W32Time" "ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\ 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33, 00,\ 32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00 "NtpServer"="time.windows.com,0x1" "Type"="NoSync" The setting AnnounceFlags indicates that this computer is using an internal clock rather than an external time source. The Type NoSync indicates that this Server does not synchronize with an external time source. Due to this the original setup setting NtpServer which is referenced to an external time source can be still in the registry. Figure 2-1: Registry setting of the time master domain controller V /30

$2 Settings on the Client domain controller [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Ti me\parameters] "ServiceMain"="SvchostEntry_W32Time"$

9 Time synchronization of the domain controllers 2.2 Settings on the Client domain controller [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Ti me\parameters] "ServiceMain"="SvchostEntry_W32Time" "ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\ 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33, 00,\ 32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00 "NtpServer"="AD01.adcgoa.com,0x1" "Type"="Ntp" The Type Ntp indicates that this Server is synchronizing with an external time source. Due to the setting in the NtpServer, where the master domain controller is referenced, this domain controller is using the time provided from the master Server by using the NTP (network time protocol). Figure 2-2: Registry setting of the second domain controller! DANGER Please note that a change to the registry can lead to an unstable system. Changes in the registry happen on your own responsibility. Please make sure you document your changes and have only authorized personal working in the registry. V /30

Time synchronization of the domain computers 3 Time synchronization of the domain computers There exist several possibilities to setup time synchronization for the domain computers.

10 Time synchronization of the domain computers 3 Time synchronization of the domain computers There exist several possibilities to setup time synchronization for the domain computers. In this document one possible way is described. For other possibilities of setting up time synchronization please refer to the references provided at the end of this document. 3.1 SIMATIC PCS 7 OS Servers In general In the test domain are two redundant SIMATIC PCS 7 OS Servers. These Servers have a key role for the time synchronization as these Servers are directly synchronized with the domain controllers. The other SIMATIC computers receive there time from the PCS 7 OS Servers. Settings in the Time synchronization editor To synchronize the PCS 7 OS Servers with the domain controllers use the Editor Time Synchronization inside the WinCC explorer on the Engineering System. Due to marking the check box Synchronization via Terminal Bus (Slave) and using the option Use the time from a specific computer the software allows you to browse for computers on the network with help of the browsing buttons The domain controllers in our environment are called AD01 and AD02 as you can see in figure 3-1. Figure 3-1: Time synchronization opened from inside WinCC explorer V /30

11 Time synchronization of the domain computers 3.2 SIMATIC PCS 7 OS Clients To synchronize a SIMATIC PCS 7 OS Client you can also use the editor Time Synchronization inside the WinCC explorer (like on the Servers). Simply mark the check box Synchronization via Terminal Bus (Slave) and by using the option Use the time from a connected WinCC Server your Client will be synchronized with the SIMATIC PCS 7 OS Server which is synchronized with the domain controllers. Figure 3-2: Setting of the time synchronization V /30

12 Time synchronization of the domain computers 3.3 SIMATIC BATCH Servers and SIMATIC Engineering Systems The time synchronization on a computer without a SIMATIC PCS 7 OS Client is a little bit different because you cannot use the editor Time synchronization. On the PCS 7 DVD PCS 7 V6.1 SP1 is an additional tool called DCF77 in the path _ \DVD\Additional_Products\DCF77Client which you can use to synchronize your time. The DCF77 Client program is an additional tool for synchronizing the time of computers. In the following chapters the installation and maintaining of this tool is described. General Information about DCF77 DCF77: Official German time transmitter Location: Transmitter power: Carrier frequency: Transmission range: Installation of DCF77 Client Mainflingen near Frankfurt (Main) approx. 28 kw 77.5 khz highly stabilized, usable as a frequency-standard. approx km! Attention There exist some restrictions with the tool DCF77. These can be found in the DCF77_english.wri in the setup folder. While installing the software on a Windows 2003 Server SP1 or XP SP2 system you will receive a failure message which states you cannot use this software on this operating system. Ignore this message and install the software. You find information to this topic also mentioned in the release notes of SIMATIC PCS 7. V /30

Time synchronization of the domain computers Table

Press the Yes button. 2. Continue with Next. 3.

13 Time synchronization of the domain computers Table 3-1 Step Activity Screenshot 1. The message on the right must be ignored while using Windows 2003 or Windows XP. Press the Yes button. 2. Continue with Next. 3. Change the standard destination path if you like and / or continue with Next. V /30

14 Time synchronization of the domain computers Step Activity Screenshot 4. Continue with Next. 5. Confirm the message with OK. 6. Press OK to restart your system. V /30

Time synchronization of the domain computers Creating a matching user account Table 3-2 The following instruction is a workaround for computers with Windows Server 2003 SP1 or XP Professional SP2.

$The procedure corresponds to the description from the installation DVD (Additional_Products\DCF77Client\DCF77_english.wri). Step Activity Screenshot 1.$

15 Time synchronization of the domain computers Creating a matching user account Table 3-2 The following instruction is a workaround for computers with Windows Server 2003 SP1 or XP Professional SP2. You have to add a local power user (e.g. DCF77) for every computer which is using the DCF77 Client (in our system the SIMATIC PCS 7 BATCH Servers, SIMATIC Engineering System and also the SIMATIC PCS 7 OS Servers). The procedure corresponds to the description from the installation DVD (Additional_Products\DCF77Client\DCF77_english.wri). Step Activity Screenshot 1. Open the user administration in the computer management via the menu command Start > Control Panel > Administrative Tools > Computer Management > Local Users and Groups > Users. 2. Add a new user, for example DCF77, with an identical password on every computer. V /30

The power user requires additional write permission for the Windows event log: Add the user with full access

16 Time synchronization of the domain computers Step Activity Screenshot 3. The user should be a power user or administrator! 4. The power user requires additional write permission for the Windows event log: Add the user with full access permission in the registry. Start > Run > regedit HKLM\System\CurrentContr olset\services\eventlog Click on the Permissions item in the context menu to open the permission dialog. V /30

Time synchronization of the domain computers Step Activity Screenshot 5. Give the local power user (e.g. DCF77) rights for writing to the event log.

17 Time synchronization of the domain computers Step Activity Screenshot 5. Give the local power user (e.g. DCF77) rights for writing to the event log. Starting the DCF77 Client Table 3-3 Step Activity Screenshot 1. Open the Windows services over Start > Control Panel > Administrative Tools > Services. Open there the Properties of the "DCF77 Time Signal Reception Service" and switch into the "Logon" tab. V /30

18 Time synchronization of the domain computers Step Activity Screenshot 2. Under "This account:", enter the user you have created and close the dialog. 3. Confirm the two messages with OK. V /30

Maintaining DCF77 Client After installing and configuring the local power user you can

19 Time synchronization of the domain computers Step Activity Screenshot 4. Stop and restart the service. Maintaining DCF77 Client After installing and configuring the local power user you can change and control the settings for the DCF77 Client as followed. Start the DCF77 service over Start > Control Panel > DCF-77. Figure 3-3: DCF77 Client settings V /30

Time synchronization of the domain computers Make the settings corresponding: Port (Browse the computer you want to use as master computer for the time.

20 Time synchronization of the domain computers Make the settings corresponding: Port (Browse the computer you want to use as master computer for the time.) As you can see the DCF77 Client software on these computers is configured to talk with the local power user to the OS03. Due to this configuration you have the computers which are using the DCF77 Client synchronized to the domain controllers over the synchronization with the OS03 Server.! Warning Please note that on the SIMATIC BATCH and the engineering stations, where the DCF77 Client service is used you have no redundant time synchronization. If in this case the OS03 Server is not available you have no time alignment for the computers which use the DCF77 Client. First Update after (After what time starts the time synchronization?) Interval (How often will a time synchronization happen?) Maximum deviation (What time shift is allowed to the time master inserted in the port?) Checking the event viewer You can open the event viewer over Start > Control Panel > Administrative Tools > Event Viewer. Figure 3-4: A lot of information is entered in the event log when checking every check box! Attention If you check all checkboxes for the event log Time, All valid telegrams and Quality changes you will have a lot of messages in your event log (see Figure 3-3). V /30

Time synchronization of the domain computers The following figure shows an example for an event log message: Figure 3-5: Example for an event log message when checkbox Time is marked There is a

21 Time synchronization of the domain computers The following figure shows an example for an event log message: Figure 3-5: Example for an event log message when checkbox Time is marked There is a difference of -40 (a=10 x 100 ns, elapsed=0) ms between your system time and correct time. The message will be written every x minutes (where x is the time you entered as interval) to the event log. If you uncheck the checkbox "time" inside the DCF77 service event log options, you will not have this message every x minutes but you are missing also the following messages: The time signal is good and stable (again). Service V1.22 (Lizenz-Nr ) started, Signal via NetRemote- TOD("\\OS03"). The parameter settings have been changed. You still receive the message: The system time was set (256 ms). Hint Make sure you test the event log messages and make sure they meet your goals and expectations. V /30

22 Time synchronization of the domain computers 3.4 SIMATIC IT Servers If there is a SIMATIC PCS 7 OS Client installed on the historian computer or another SIMATIC IT computer, it is possible to use the internal time synchronization of the SIMATIC PCS 7 OS Client. Time synchronization of the SITHIST computer The settings are the same as shown in chapter 3.2 "SIMATIC PCS 7 OS Clients. Figure 3-6: Time synchronization of the SITHIST computer V /30

Time synchronization of the domain computers Declaration as Foundation Server SITHIST is also Foundation Server and is used to time align all computers in the SIT network.

23 Time synchronization of the domain computers Declaration as Foundation Server SITHIST is also Foundation Server and is used to time align all computers in the SIT network. Figure 3-7: SITHIST is also foundation server and is used to time align all computers in the SIT network Due to the setting time alignment over the Foundation Servers all SIMATIC IT computers in the network are aligned to the common domain time. If the management console is not up and running, the computers will not are time synchronized. If in this case the PCS 7 OS Client is not started on the SITHIST = Foundation Server you have no time synchronization aligned to the domain controllers for the SIMATIC IT network. Only internal all computers in the SIMATIC IT network will be aligned.! Attention The time alignment of the SIMATIC IT computers over the Foundation Servers is only functional when the SIMATIC IT management console is started and running. V /30

24 Time synchronization of the domain computers Figure 3-8: SIMATIC IT network! Attention In case you do not have a SIMATIC OS Client installed on your SIMATIC IT Historian computer (or on the other Foundation Servers) you can install the DCF77 Client software on these Servers (see page 12 under Installation of DCF77 Client ). Due to this you can synchronize your foundation Servers to the SIMATIC PCS 7 environment and you have also time synchronization (not redundant). V /30

Time synchronization of the SIMATIC PLC 4 Time synchronization of the SIMATIC PLC After synchronizing the computers in the environment it makes no sense using a SIMATIC PLC which would have another

25 Time synchronization of the SIMATIC PLC 4 Time synchronization of the SIMATIC PLC After synchronizing the computers in the environment it makes no sense using a SIMATIC PLC which would have another time as the SIMATIC computers. Therefore you need to synchronize the time of your SIMATIC PLC in your test environment to the master time in your domain. 4.1 Settings on the Engineering System for the project Table 4-1 To insert the time synchronization for the PLC you have to do some steps in the project on the Engineering System. Step Activity Screenshot 1. Open the HW Config of the CPU and switch into the tab Diagnostics/Clock. Check Synchronization Mode As slave for the PLC. V /30

synchronization in the corresponding tab. 3.

26 Time synchronization of the SIMATIC PLC Step Activity Screenshot 2. Open afterwards the properties of the CP443-1 and check the option Activate SIMATIC time-of-day synchronization in the corresponding tab. 3. Open the HW Config of the OS Server and there the properties dialog of the CP1613. Activate the settings for the Time-of-Day Synchronization in the tab Option. V /30

27 Time synchronization of the SIMATIC PLC Step Activity Screenshot 4. Open the Time Synchronization editor inside the SIMATIC PCS 7 OS Server project. Insert the settings for the Synchronization via System Bus (Master, Slave) for the CP1613 network card. V /30

28 Time synchronization of the SIMATIC PLC 4.2 Settings on the SIMATIC PCS 7 OS Servers After downloading the HW Config and Net Pro settings for the SIMATIC PCS 7 OS Servers you can check on the Servers the settings for the 1613 card as followed: Start > All Programs > SIMATIC > SIMATIC NET > Configuration Console Figure 4-1: Time of day function of the CP1613 card is activated Make sure that the Time-of-day adjustment is activated. Hint You need Administrator rights to change anything by hand in the configuration console of the CP1613. You should download and handle everything from the engineering station and should not configure these settings by hand on the SIMATIC PCS 7 OS Servers. V /30

29 References 5 References The following documents, help files and FAQ where used in setting up the test environment. PCS 7 engineering handbook: OS (English) (German) PCS 7 engineering handbook: ES (English) (German) Security handbook (English) (German) SIMATIC IT / PCS 7 Integration SICLOCK World Wide Web: V /30

30 Abbreviations 6 Abbreviations In this manual are used several abbreviations. Please find here the corresponding complete name. Table 6-1 AD CAB CP DB DHCP DNS ES FAQ HF HMI IP MUI NTP OS PLC SIT SQL SP UDP UTC WINS Abbreviation Complete name Active Directory Client Application Builder Communication Processor Data Base Dynamic Host Configuration Protocol Domain Name Service Engineering System Frequent Asked Question Hot Fix Human Machine Interface Internet Protocol Multilanguage User Interface Network Time Protocol Operator Station Programmable Logical Unit SIMATIC IT Structured Query Language Service Pack User Datagram Protocol Coordinated Universal Time Windows Internet Naming Service V /30

Configuration Instruction

Configuration Instruction SIMATIC PCS 7 SIMATIC IT Integration PCS 7 / SIMATIC IT Integration Pack 2007 Time Synchronization Warranty, liability and support Note The application examples are not binding