Designating the TimeServer on the Analyzer 1 Running a TimeServer as an Application 2 Allowing the TimeServer Application Through the Firewall 3 PD PA AP How To Configure Maxum II TimeServer Access Application examples TimeServer Service Under Windows 7 4 TimeServer Service Under Windows 10 5 The Windows Services Viewer 6 Firewall Considerations for the TimeServer Service 7 July 2018 IP-0040
Legal information Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger. DANGER indicates that death or severe personal injury will result if proper precautions are not taken. WARNING indicates that death or severe personal injury may result if proper precautions are not taken. CAUTION indicates that minor personal injury can result if proper precautions are not taken. NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage. Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems. Proper use of Siemens products Note the following: Trademarks WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed. All names identified by are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner. Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions. Siemens AG Division Process Industries and Drives Postfach 48 48 90026 NÜRNBERG GERMANY Document order number: IP-0040 P 07/2018 Subject to change Copyright Siemens AG 2018. All rights reserved
Table of contents 1 Designating the TimeServer on the Analyzer...7 2 Running a TimeServer as an Application...9 3 Allowing the TimeServer Application Through the Firewall...11 4 TimeServer Service Under Windows 7...15 5 TimeServer Service Under Windows 10...17 6 The Windows Services Viewer...19 7 Firewall Considerations for the TimeServer Service...23 Application examples, July 2018, IP-0040 3
Table of contents 4 Application examples, July 2018, IP-0040
In a typical facility, a number of analyzers may need to have their internal clocks synchronized from a single source. The Maxum II uses a simple RFC868 protocol to request time data from a specific IP address. This sequence is shown below. Figure 1 RFC868 TimeServer Operation Application examples, July 2018, IP-0040 5
6 Application examples, July 2018, IP-0040
Designating the TimeServer on the Analyzer 1 Each analyzer can synchronize the internal clock with a central TimeServer. The IP address of the TimeServer is entered in the appropriate box under Analyzer View/Network Settings, or from the HMI. This is the IP address of a computer running TimeServer software, or a Maxum on the same subnet. Note The computer running the TimeServer software must be on the same subnet as the analyzer. Application examples, July 2018, IP-0040 7
Designating the TimeServer on the Analyzer 8 Application examples, July 2018, IP-0040
Running a TimeServer as an Application 2 A very simple way to implement a TimeServer is to run the software as an application. 1. Download the software from the following site: http://www.bttsoftware.co.uk/timeserv.html 2. Place the timeserv.exe and timeserv.inf files wherever you prefer in your directory structure. 3. Launch the exe file as an application. (This can be set up to start automatically on system startup if desired}. 4. This also triggers a message that some features are blocked by the firewall. Clicking Allow access on this window only creates an exception in the windows firewall for connections from a domain-registered source. To enable connections from the local subnet, follow the directions in the next section, Allowing the TimeServer Application Through the Firewall (Page 11). 5. Configure analyzers to use this computer as timeserver by entering the IP address as shown above. See also http://www.bttsoftware.co.uk/timeserv.html (http://www.bttsoftware.co.uk/timeserv.html) Application examples, July 2018, IP-0040 9
Running a TimeServer as an Application 10 Application examples, July 2018, IP-0040
Allowing the TimeServer Application Through the Firewall 3 The computer that provides the TimeServer address may need to have an exception configured in its firewall. To configure the exception, Open Windows Control Panel and click on Windows Firewall. After the screen opens, click Allow a program or feature through Windows Firewall. In the next screen, click Change settings. In the next screen, scroll to the bottom of the list and click Add another program. If the RFC 868 Time Server program is not visible on the list, click Allow another program. Application examples, July 2018, IP-0040 11
Allowing the TimeServer Application Through the Firewall Select RFC 868 Time Server and click Add. Click the checkbox for the RFC 868 Time Server. For use with analyzers on the same subnet, also click the checkbox for Home/Work (Private). Click OK to close. The server should now be available. 12 Application examples, July 2018, IP-0040
Allowing the TimeServer Application Through the Firewall The Maxum II uses only TCP communication. Application examples, July 2018, IP-0040 13
Allowing the TimeServer Application Through the Firewall 14 Application examples, July 2018, IP-0040
TimeServer Service Under Windows 7 4 Download the software from the following site: http://unixwiz.net/tools/rfc868time.html Place the rfc868time.exe file wherever you prefer in your directory structure. Opening a command window as administrator Click the Windows Start button. Type "command". Right-click the Command Prompt symbol and click Run as administrator The system will display the following dialog: Click Yes on the User Account Control dialog. Commands within the command window The command window will typically open in c:windows\system32. Navigate to the directory containing the rfc868time.exe file. Enter the command "rfc868time -help" to display a list of commands. Enter the command "rfc868time -installstart". This returns a message similar to this: Application examples, July 2018, IP-0040 15
TimeServer Service Under Windows 7 The service has now been installed in the services database and has started. The command "rfc868time -remove" stops the service and deletes it from the services database. See also http://unixwiz.net/tools/rfc868time.html (http://unixwiz.net/tools/rfc868time.html) 16 Application examples, July 2018, IP-0040
TimeServer Service Under Windows 10 5 The installation procedure for Windows 10 is very similar to Windows 7. Using Windows 10, the user can choose between the command prompt or Windows PowerShell. Using Windows PowerShell 1. Click Start 2. Type "powershell" 3. Right-click Run as administrator. 4. This opens a window that is very similar ot the command prompt. The main difference for this example is that the program name must be preceded by ".\" as shown below. To stop the service and remove it, the same "-remove" command is available. Application examples, July 2018, IP-0040 17
TimeServer Service Under Windows 10 18 Application examples, July 2018, IP-0040
The Windows Services Viewer 6 To access the Windows Services Viewer: Click the Windows Start Button, and click Control Panel. In the Control Panel, and click on Administrative Tools. From the Administrative Tools window right-hand pane, double-click Services. Application examples, July 2018, IP-0040 19
The Windows Services Viewer Click on Yes in the User Account Control dialog box. The Services viewer shows all services, their state, startup type, and other information. The properties such as startup type can be edited by right-clicking on a service and choosing Properties. 20 Application examples, July 2018, IP-0040
The Windows Services Viewer Application examples, July 2018, IP-0040 21
The Windows Services Viewer 22 Application examples, July 2018, IP-0040
Firewall Considerations for the TimeServer Service 7 The computer that provides the TimeServer address may need to have an exception configured in its firewall. Below is a summary of rule configurations for Windows Firewall with Advanced Security. Other parameters will be required for specific situations. The Maxum II only supports TCP, as reflected in the lists below. Inbound rule Enabled: Yes Action: Allow Program: c:\timeserv-bin\rfc868time.exe Remote Address: Local subnet Protocol: TCP Local Port: 37 Remote Port: Any Allowed Users: Any Allowed Computers: Any Outbound rule Enabled: Yes Action: Allow Program: c:\timeserv-bin\rfc868time.exe Remote Address: Local subnet Protocol: TCP Local Port: 37 Remote Port: Any Allowed Computers: Any Application examples, July 2018, IP-0040 23
Firewall Considerations for the TimeServer Service 24 Application examples, July 2018, IP-0040