Proficy* Workflow. Powered by Proficy SOA. Getting Started V ERSION 1.2 N OVEMBER 2009

Proficy* Workflow Powered by Proficy SOA Getting Started V ERSION 1.2 N OVEMBER 2009

All rights reserved. No part of this publication may be reproduced in any form or by any electronic or mechanical means, including photocopying and recording, without permission in writing from GE Fanuc Intelligent Platforms, Inc. Disclaimer of Warranties and Liability The information contained in this manual is believed to be accurate and reliable. However, GE Fanuc Intelligent Platforms, Inc. assumes no responsibilities for any errors, omissions or inaccuracies whatsoever. Without limiting the foregoing, GE Fanuc Intelligent Platforms, Inc. disclaims any and all warranties, expressed or implied, including the warranty of merchantability and fitness for a particular purpose, with respect to the information contained in this manual and the equipment or software described herein. The entire risk as to the quality and performance of such information, equipment and software, is upon the buyer or user. GE Fanuc Intelligent Platforms, Inc. shall not be liable for any damages, including special or consequential damages, arising out of the use of such information, equipment and software, even if GE Fanuc Intelligent Platforms, Inc. has been advised in advance of the possibility of such damages. The use of the information contained in the manual and the software described herein is subject to GE Fanuc Intelligent Platforms, Inc. standard license agreement, which must be executed by the buyer or user before the use of such information, equipment or software. Trademarks 2009, GE Fanuc Intelligent Platforms, Inc. All rights reserved. * Trademark of GE Fanuc Intelligent Platforms, Inc. All other brands or names are property of their respective holders. Any other trademarks referenced herein are used solely for purposes of identifying compatibility with the products of GE Fanuc Intelligent Platforms, Inc. Notice GE Fanuc Intelligent Platforms, Inc. reserves the right to make improvements to the products described in this publication at any time and without notice. We want to hear from you. If you have any comments, questions, or suggestions about our documentation, send them to the following email address: doc@gefanuc.com

Table of Contents Table of Contents Getting Started... 1 Proficy Workflow Powered by Proficy SOA... 1 Installation Requirements... 2 Hardware Requirements... 2 Software Requirements... 3 The Hardware Key... 6 Hardware Key Installation... 6 License and Key Checking... 7 Hardware Key Installation Troubleshooting... 8 Defective Hardware Key Replacement... 8 Common Questions About Hardware Keys... 9 Installing Proficy Workflow... 10 With Proficy SOA Server and Client... 10 To install Proficy Workflow and the Proficy SOA Server and Client... 11 To install Proficy Workflow and the Proficy Client... 13 To uninstall Proficy Workflow... 13 Logging into Proficy Client... 14 Upgrading Proficy Workflow... 15 Data Item Links... 15 Upgrading Custom Forms... 16 Proficy Real-Time Information Portal... 18 To install Proficy Real-Time Information Portal... 18 Proficy Reporting Database... 20 i

Proficy Workflow To install the reporting database... 20 To configure Component Services... 22 To uninstall the reporting database... 23 Proficy Host / Embeddable Proficy Host... 24 To install the Proficy Host / Embeddable Proficy Host... 25 Working with Proficy Host / Embeddable Proficy Host... 26 Task Controls in Proficy HMIs... 29 To install task controls... 29 Key Concepts... 31 One-Click Deployment... 38 Supported Regional Settings... 39 Daylight Saving Time... 40 Special Keyboard Buttons... 40 SQL 2005 Backup and Restore... 41 Proficy Workflow Security... 42 Introducing Security... 42 System Protection... 43 Security Concepts... 43 Security Status... 44 Understanding Security... 45 Users... 47 Groups... 47 Create Groups and Users... 48 Modify Groups and Users... 49 Delete Groups and Users... 49 Design and Plan Security... 49 Assign Key Sets... 50 ii

Table of Contents Login to Individual Workstations... 51 Limit Login Time... 51 Using Security... 52 Manual Login and Logout... 52 Security Log File... 53 Windows Security... 53 Configuring Windows User Accounts... 54 Setting passwords to expire... 54 Limiting the number of invalid login attempts... 55 Adding user accounts that log into Windows... 56 Domain Users Logging into Windows... 56 Contact Information... 58 General Contact Information... 58 Technical Support... 58 Americas... 58 Europe, Middle East, and Africa... 58 Asia Pacific... 59 Index... 61 iii

Getting Started Getting Started Proficy Workflow Powered by Proficy SOA Welcome to Proficy Workflow Powered by Proficy SOA! Before you begin installing our product, please take some time to review the Getting Started guide. This guide includes information about the following: Installation Requirements (software, hardware, and the hardware key) Installing Proficy Workflow with the Proficy SOA Server and Client Installing Proficy Real-Time Information Portal Installing the Proficy Reporting Database Installing the Proficy Host / Embeddable Proficy Host Installing ActiveX Task Controls Proficy Workflow Security 1

Proficy Workflow Installation Requirements This chapter provides general information you need in order to install Proficy Workflow, including: Hardware requirements Software requirements Installing the hardware key and replacing defective keys Hardware Requirements The minimum Proficy Workflow hardware requirements are: Server 2.6 GHz Core Duo computer with 3 GB RAM (minimum) 50 GB hard disk space (minimum) CD-ROM Drive Network interface software for network communications. The TCP/IP network protocol is required. One free direct-connect USB port XGA or better color monitor and a 100% IBM-compatible 24-bit graphics card capable of 1024x768 resolution and at least 65535 color Two-button mouse with scroll wheel or compatible pointing device (such as a touch screen) 2

Installation Requirements Client 2 GHz Pentium 4-based computer with 1 GB RAM (minimum) 20 GB hard disk space (minimum) CD-ROM Drive Network interface software for network communications. The TCP/IP network protocol is required. One free direct-connect USB port SVGA or better color monitor and a 100% IBM-compatible 24-bit graphics card capable of 1024x768 resolution and at least 65535 colors Two-button mouse with scroll wheel or compatible pointing device (such as a touch screen) Software Requirements This section describes the minimum software requirements for your installation, including the recommended operating system and database. IMPORTANT: The Proficy SOA Server and Client must be on a domain. You cannot install or use Proficy Workflow if your system is not on a domain. Server Installation The following list describes the software required to install Proficy Workflow and the Proficy SOA Server. One of the following operating systems: o o Windows Server 2003 SP1 or greater (recommended) Windows XP Professional SP2 or greater VMWare Server and VMWare ESX Server IMPORTANT: Advanced features of ESX Server (that is, VMotion, VMWare VMFS, and Clustering support) are not supported. 3

Proficy Workflow Microsoft SQL Server 2005 Standard SP2, Professional SP2, or Enterprise Edition SP2 NOTE: o o You must create a SQL Server database before you install Proficy Workflow and the Proficy SOA Server. The SOA project is installed into this SQL Server database. SQL Server can be installed on a different computer that is also on the domain. Although the system uses SQL Server 2005, there are some dependencies on certain libraries for SQL 2008. Therefore, if errors about missing Microsoft files display while using reporting, you may need to install the SQL Server Management Objects or Microsoft SQL Server System CLR Types, or both, available from http://www.microsoft.com/downloads/details.aspx?familyid=c6c3e9e F-BA29-4A43-8D69-A2BED18FE73C&displaylang=en. These libraries may already be installed on the system because they are used by other applications and may have been installed with one them. Microsoft.NET Framework 3.5 SP1 Microsoft ADAM (Active Directory Application Mode) with SP1 (available from http://www.microsoft.com/downloads/details.aspx?familyid=9688f8b9-1034-4ef6- a3e5-2a2a57b5c8e4&displaylang=en) Microsoft Excel 2003 or greater, and its Primary Interop Assemblies (for Import/Export operations) Java Run-time plug-in v6.0 or greater (to view Proficy Real-Time Information Portal displays) Internet Explorer 6 or 7 Client-only Installation A Client-only machine contains only the Proficy Client application and must connect to another machine that has the Proficy Server installed. 4 One of the following operating systems: o Windows XP Professional SP2 or greater (recommended)

Installation Requirements o Windows Server 2003 SP2 or greater Microsoft Excel 2003 or greater, and its Primary Interop Assemblies, for Import/Export operations Java Run-time plug-in v6.0 or greater (to view Proficy Real-Time Information Portal displays) Internet Explorer 6 or 7 Proficy Reporting Database Installation One of the following operating systems: o o Windows XP Professional SP2 or greater (recommended) Windows Server 2003 SP2 or greater Microsoft SQL Server 2005 Standard SP2, Professional SP2, or Enterprise Edition SP2 o SQL Server Integration Service Internet Explorer 6 or 7 Proficy Host / Embeddable Host Installation One of the following operating systems: o o Windows XP Professional SP2 or greater (recommended) Windows Server 2003 SP2 or greater Microsoft SQL Server 2005 Standard SP2, Professional SP2, or Enterprise Edition SP2 Internet Explorer 6 or 7 5

Proficy Workflow The Hardware Key The hardware key supports USB port configurations. The hardware key you use to run the Proficy SOA Server: Controls and enables software options available to your installation. Uses a utility to electronically reprogram options you choose to upgrade or change (for HASP M4 keys only). Proficy Workflow runs in demo mode, which limits you to two clients, one administration Client and one operational Client, if the key is not installed or found. Be sure to file your hardware key packing slip in a safe location. The codes on this slip are necessary for us to quickly duplicate the key in case it is damaged or misplaced. You can verify that your serial number matches the serial number on the hardware key packing slip by using the Proficy License Viewer utility to detect and display your hardware key settings. For more information, see the License and Key Checking section. Hardware Key Installation A hardware key is included with your Proficy Workflow software. You must install your hardware key in order to access all the components of the Proficy Workflow software you purchased. Typically, you install your hardware key as you install the Proficy Workflow product. Refer to the Installing Proficy SOA section for more details. If you insert the key after you install Proficy Workflow, it should be detected automatically when the software starts. It is recommended that you shut down your computer before plugging in a new hardware key. 6 IMPORTANT: Do not remove the hardware key from your node while Proficy Workflow is running. If you do, some features will shut down and you will need to restart Proficy Workflow. You may also damage the hardware key if you remove it while the software is running.

The Hardware Key We support the installation of the USB port hardware key only on systems running Windows 2000, Windows XP, Windows Server 2003, or Windows Vista. At this time, we do not support USB keys connected through an external USB hub. On new installs on Windows XP SP1, we recommend that you insert your USB key after you run the Proficy Workflow install. License and Key Checking To use Proficy Workflow and other Proficy products, you must purchase the product with the desired options from us. Depending on the options you buy, you may need to replace your current key or run an update program on your existing key to enable the options. If you want to determine the options that are enabled on the computer you are currently working on, use the Proficy License Viewer to view the options enabled. TIP: The Proficy License Viewer programs can be used to provide technical support personnel with information about your hardware key. To use the Proficy License Viewer to determine the enabled options 1. From the Start menu, point to Programs, Proficy Common, and then click License Viewer. 2. In the Proficy Products list, select the Proficy Workflow product. The License and Key Diagnostics area should display the available options. For information on upgrading your key to add other options, contact us. We will provide the steps for upgrading your Proficy license file when you purchase new options or products. 7

Proficy Workflow Hardware Key Installation Troubleshooting If the hardware key does not install properly, you may see a message displayed on the Client at startup. First, check to see that your hardware key is firmly attached. Next, uninstall and reinstall the driver for the hardware key. If this driver has been incorrectly uninstalled, it may behave unpredictably. Troubleshooting the Aladdin HASP Key If the Aladdin HASP USB key does not appear to be working, you can reinstall the licensing to recover from the improper install. When the Aladdin HASP key is not communicating correctly, you will notice that the indicator light at the end of the key is off. To reinstall Proficy Licensing 1. Click the ProficyClientInstaller.exe file in the License folder on the Proficy Workflow product installation CD to reinstall the license. 2. Click Finish when the licensing install completes. Defective Hardware Key Replacement A defective hardware key causes your Proficy product to run in demo mode. Be sure to check that the key is firmly attached to your USB or parallel port before assuming it is defective. Additionally, for USB keys, if the indicator light at the end of the key is off, then the key is not communicating correctly. You can also use the License Viewer to determine if the hardware key is defective. If your hardware key is defective, the License Viewer does not display the proper enabled options. Or, an error message stating that a hardware key is required to view the enabled options 8

The Hardware Key may appear. For more information on using the License Viewer, refer to the License and Key Checking section. We replace defective keys as quickly as possible. To obtain a replacement hardware key: 1. Call your local technical support representative. The support representative will instruct you to FAX a completed copy of a Merchandise Return Authorization form. On receipt of the form, we can program a new hardware key and send it to you overnight. 2. When you receive the hardware key, you must return the old one along with a copy of the form sent with the new hardware key. We reserve the right to invoice you for defective hardware keys that are not returned. Common Questions About Hardware Keys This section describes some frequently asked questions about Proficy hardware keys. What does the light at the end of the USB key indicate? For the Aladdin HASP USB key, the light indicates that the key and the software are communicating. If this light is off, it indicates a problem with the key. If I move the USB key to another port, is it automatically detected? Yes. The USB key is automatically detected when moved to another USB port. There are no additional screens requesting software to be installed for the Aladdin HASP USB key. 9

Proficy Workflow Installing Proficy Workflow With Proficy SOA Server and Client The steps that follow outline how to install Proficy Workflow with the Proficy SOA Server and Client from the product install CD-ROM. IMPORTANT: The Proficy SOA Server and Client must be on a domain. Before you begin the Proficy Workflow installation, make sure that you have installed the following: o o o Microsoft ADAM (Active Directory Application Mode) with SP1.NET Framework 3.5 SP1 or higher SQL Server 2005 SP2 (Standard, Professional, or Enterprise Edition) The SQL Server can be installed on a different computer than the one Proficy Workflow is installed on, and must use SQL authentication to connect to the database. You must create a SQL Server database before you install the Proficy SOA Server. The SOA project is installed into this SQL Server database. Make note of the database name as you will need it during the installation process. The SQL Server user name that is used for SQL authentication must have administrator access to the database. To connect to and view Proficy Portal displays, you must install Java Run-time v6.0 or greater. 10

Installing Proficy Workflow To install Proficy Workflow and the Proficy SOA Server and Client The following information guides you through the Proficy Workflow and Proficy SOA Server and Client installation process. During this process you are required to create an Administrator user. This Administrator user is automatically assigned all permissions, which will allow you to create and define your users, groups, and key sets, and to set up your production security. 1. Place the Proficy Workflow installation CD in the CD-ROM drive. If you have Autoplay enabled, the installation launcher splash screen should appear. If it does not appear, run Setup.exe on the root directory of the Proficy Workflow CD. 2. Click Install Proficy Workflow. Follow the on-screen prompts, clicking Next each time, until you reach the Customer Information page. 3. On the Customer Information page, enter a user name and organization, select whether the installation applies to all users of the computer or only to you, and then click Next. The Destination Folder page appears. 4. Accept the default destination folder or browse for a new location, and then click Next. The Select a Computer Type page appears. 5. Click the Proficy Server option, and then click Next. The Setup Administrator User page appears. 6. Enter the following information: a. In the Proficy Workflow Administrator Name field, enter a user name for the Administrator user. b. In the Proficy Workflow Administrator Password field, enter a password for the Administrator user. c. In the Confirm password field, re-enter the password for the Administrator user, and then click Next. The Configure New ADAM Server page appears. 7. Enter the following information: a. In the ADAM Instance Name field, enter an instance name for the ADAM directory. 11

Proficy Workflow b. In the TCP Port and SSL Port fields, enter port numbers from the range of 1025 to 65535. c. In the ADAM Username field, enter <domain name>\<username>, where <domain name> is the name of your domain, and <username> is the name of a user that is a member of the local computer s Administrator Group. IMPORTANT: Your system must be on a domain. d. In the ADAM Password field, enter the password for the user you entered in the ADAM Username field, and then click Next. The Configure SQL Authentication Credentials to Connect to SQL Server page appears. 8. Enter the SQL username and password you configured for SQL Authentication on your SQL Server, and then click Next. This user must have administrator access to the database. The Add Project to SOA Server page appears. IMPORTANT: You must install SQL Server 2005 SP2 (Standard, Professional, or Enterprise Edition) before you install Proficy Workflow. 9. Enter the following information: a. In the SQL Server Name field, enter a SQL Server name or browse your network for the SQL Server you want to connect to. b. In the SQL Database Name field, enter the name of your SQL database. The SQL database you want to use must reside on the selected SQL Server. IMPORTANT: You must create a SQL database before you install Proficy Workflow. c. Click Next. The Ready to Install the Program page appears. 10. Click Install. When the installation completes, the InstallShield Wizard Completed page appears. 11. Click Finish. 12

Installing Proficy Workflow To install Proficy Workflow and the Proficy Client This information guides you through the process of installing the Proficy Client on a different machine than the Proficy Server. You must have installed your Proficy SOA Server before you can install a Client. 1. Place the Proficy Workflow installation CD in the CD-ROM drive. If you have Autoplay enabled, the installation launcher splash screen should appear. If it does not appear, run Setup.exe on the root directory of the Proficy Workflow CD. 2. Click Install Proficy Workflow. Follow the on-screen prompts, clicking Next each time, until you reach the Select a Computer Type page. 3. Click the Proficy Client Workstation option, and then click Next. The Connect Client Workstation to a Proficy SOA Server page appears. 4. Enter the following information: a. In the Proficy SOA Server Computer Name field, enter the name of the computer that your Proficy SOA Server is installed on. b. In the Proficy Workflow VM Server Name field, enter the name of your Proficy SOA Server, and then click Next. The Ready to Install the Program page appears. 5. Click Install. When the installation is complete, the InstallShield Wizard Completed page appears. 6. Click Finish. To uninstall Proficy Workflow 1. From Control Panel, double-click Add or Remove Programs. The Add or Remove Programs dialog box appears, displaying all of the programs installed on the computer. 2. Select ADAM Instance SOAAdam, and then click Remove. 3. In the confirmation message box, click Yes. 13

Proficy Workflow 4. Select Proficy Workflow, and then click Remove. 5. In the confirmation message box, click Yes. Logging into Proficy Client 1. On the Proficy Client button toolbar, click the Login button. The Proficy Platform Login dialog box appears. 2. In the Authentication Method section, select an authentication method. Your user name and password are verified in the applicable system. Select Proficy Authentication Windows Authentication If Your user profile is part of the Proficy SOA application. Your user profile is part of the Windows domain. NOTE: If you are using Windows Authentication, you must create a Windows Group and after adding your users to Proficy Workflow and creating a login account for each, assign them to the Windows Group. For more information, see Domain Users Logging into Windows in the online help. 3. In the User Name field, enter your user name. 4. In the Password field, enter your password. 5. If applicable, in the Domain field, enter the domain name. NOTE: If you selected Windows Authentication as the authentication option, then you must enter the Windows domain name here. 6. Click Log In. 14

Upgrading Proficy Workflow Upgrading Proficy Workflow You must uninstall older versions of Proficy Workflow before installing a new version. The following upgrade paths are supported: Upgrade from Proficy Workflow 1.01 to Workflow 1.2. Uninstalling Proficy Workflow does not remove the SQL Server database or the ADAM instance; all of your project data is preserved. When you install a new version and specify the same SQL Server database and ADAM instance, then the previously configured project is automatically upgraded. Data Item Links If, in an earlier version of Proficy Workflow, you created data item links to Historian tag names that contain special characters, those data item links will not upgrade. You must recreate those links in the new version of Proficy Workflow. The special characters are:, ~,!, @, #, and $. For example, if you have an equipment property, MyProperty1, linked to a Historian tag, HistTag#1, in Proficy Workflow version 1.01, that link will break when you upgrade to version 1.2. The special character - is fully supported in the upgrade process; that is, data item links to Historian tags containing the - character will upgrade correctly. NOTE: Proficy Workflow 1.2 supports all of these special characters. When you upgrade from Proficy Workflow 1.01, the display names of data item links from workflows or condition events to equipment properties will contain a GUID. You must reconfigure these data item links to remove the GUID. After reconfiguring the data item, the display name is updated correctly as <EquipmentOwnerName.PropertyName>. 15

Proficy Workflow Upgrading Custom Forms Before upgrading and starting the Proficy Workflow 1.2 server, ensure that all of your custom form DLLs are located in the following directory:..\data\allusers\displays. If you added forms or user displays using Proficy Workflow 1.0 or 1.1, and those forms had dependencies on any Proficy assemblies, there are additional steps for upgrading. For each form or user display in the system, do the following: 1. Check for errors. In the Navigator, select the form or user display, and then click Global Viewer. If additional upgrade steps are required, an error displays in the Feedback Zone, indicating that the existing item could not be loaded. 16 NOTE: If you are using GEFanuc.Platform.FormsLibrary.dll, skip to step 3 and use the new file, Proficy.Platform.FormsLibrary.dll, found in the Program folder in the install directory. 2. Update the project. a. In Visual Studio, open the source code project you originally used to build the custom form. NOTE: This source code should be found somewhere on your system; it is not persisted in the Proficy Workflow database. b. Update references to GEFanuc assemblies. View the project s references to see the list of assemblies it is dependent upon. NOTE: Since Proficy Workflow version 1.01, the Proficy assemblies have been renamed from GEFanuc.*.dll to Proficy.*.dll; therefore, any references to assemblies named GEFanuc.* must be removed and readded to point to the renamed assembly. For example, if the project previously referenced GEFanuc.Platform.Core.DisplayFramework.dll, then the project must be updated to reference Proficy.Platform.Core.DisplayFramework.dll. c. Update references to GEFanuc namespaces. The namespaces have also been changed from GEFanuc.* to Proficy.*. Therefore, any other references to GEFanuc in your project must also be changed to Proficy.

Upgrading Proficy Workflow 3. Build the project. Build your project and continue fixing errors until you have a successful build. 4. Save your changes. In the Proficy Client, select the form or user display in the Navigator and open it in the Display Editor. An error may display indicating that the assembly or class is invalid. If the error displays, do the following: a. In the.net Assembly field, browse to the updated version of the assembly you want to use for the form. b. In the Class Name field, select the appropriate class name to use. c. Click Save to save your changes to the server and make the form available to other Clients. 5. Validate the form. Open the form in the Global Viewer or run it in a workflow to ensure the form works as expected. 17

Proficy Workflow Proficy Real-Time Information Portal The Proficy SOA Server provides the ability to connect to Proficy Real-Time Information Portal and view displays created there. Most businesses use tools to help their decision-makers analyze sales, visualize financial data, and make process improvements that enhance the manufacture of their products. Analysis of business and process data is critical to knowing where to make investments and to learning how to improve a company s performance. Proficy Portal provides superior data analysis tools in a personalized web environment. Using Proficy Portal and a web browser, you can make key decisions by analyzing and visualizing data from historians, SQL relational databases, process databases, or OPC servers. By combining and comparing historical, real time, and SQL data, you can see how the leading performance indicators for your company are progressing, allowing you to make sound business decisions. Proficy Portal integrates well into your existing intranet or web site. You can create links between your web server and Proficy Portal displays, allowing you to create seamless navigation between the web pages on your site and the analysis displays on the Proficy Portal server. Proficy Portal also integrates with the Proficy SOA Server. From Proficy SOA, you can connect directly to your Proficy Portal server to view and use your Portal displays and to retrieve data tags. NOTE: To connect to and view Proficy Portal displays, you must install Java Run-time v6.0 or greater. For information on adding a Proficy Portal connection, see Proficy Portal Service Provider in the online help. To install Proficy Real-Time Information Portal The Proficy Real-Time Information Portal installation files are included on the Proficy Workflow CD. 18 IMPORTANT: You must install the Proficy Portal SIMs included on the

Proficy Real-Time Information Portal NOTE: installation CD in order to use Proficy Portal with Proficy Workflow. Proficy Portal can be installed on a different computer than the one Proficy Workflow is installed on. To connect to and view Proficy Portal displays, you must install Java Run-time v6.0 or greater. The Proficy Real-Time Information Portal Getting Started guide is included as a PDF in the Proficy Portal folder on the Proficy Workflow installation CD. 1. Place the Proficy Workflow installation CD in the CD-ROM drive. If you have Autoplay enabled, the installation launcher splash screen should appear. If it does not appear, run Setup.exe on the root directory of the Proficy Workflow CD. 2. Click Browse the CD. Windows Explorer appears, displaying the folders contained on the installation CD. 3. Locate the Proficy Portal folder. The installation files are located in this folder. 4. Double-click Setup.exe, and then follow the installation instructions in the Proficy Real-Time Information Portal Getting Started guide. 19

Proficy Workflow Proficy Reporting Database Proficy SOA includes an option to install a reporting database. This database can be used with any valid reporting tool, and allows you to build reports on up-to-date data that you synchronize from your production database. For more information on the Proficy Reporting Database, see Reporting in the online help. To install the reporting database The reporting database allows you to use the data synchronized from your production database to build reports for your facility. You can use any reporting tool to extract the information from the reporting database and create your reports. You must have installed SQL Server 2005 Standard SP2, Professional SP2, or Enterprise Edition SP2 before you install the reporting database. In addition, you must select the SQL Server Integration Service component when you install SQL Server. Select the SQL Reporting Services component, as well, if you want to use SQL as your reporting tool. NOTE: We recommend that you install the reporting database on a separate computer from the production database to prevent performance issues on the production database. However, if the Proficy SOA Server computer meets the requirements for both databases, they can be installed on the same computer. 20 1. Place the Proficy Workflow installation CD in the CD-ROM drive. If you have Autoplay enabled, the installation launcher splash screen should appear. If it does not appear, double-click PlatformReportingInstall.msi on the root directory of the Proficy Reporting CD. 2. Click Browse the CD and navigate to the Reporting folder. 3. Double-click the PlatformReportingInstall.msi file and follow the on-screen prompts, clicking Next each time, until you reach the Configure Reporting dialog box. 4. In the Reporting database area, enter the following information:

Proficy Reporting Database a. In the SQL Server instance field, accept the default value if the reporting database is on the local machine with the default instance. If the SQL Server named instance is used, enter the SQL server name and instance name; for example, <servername>\<instance name>. NOTE: The Reporting SQL Server must be local. b. In the Database field, enter the name of the reporting database. This creates a new database; however, if a database of the same name already exists, this database will append to the existing one. c. From the Authentication list, select the type of authentication you want to use. If you choose to use integrated security, select Windows Authentication; otherwise, select SQL Server Authentication, and then enter the user name and password for the SQL server. 5. In the Proficy server database area, enter the following information: a. In the SQL server instance field, enter the name of the SQL Server where the SQL database is located. b. In the Database field, enter the name of the production (SQL) database that you will connect to for synchronization. c. From the Authentication list, select the type of authentication you want to use. If you choose to use integrated security, select Windows Authentication; otherwise, select SQL Server Authentication, and then enter the user name and password for the SQL server. 6. In the Proficy Server area, enter the following information: a. In the Server computer name field, enter the fully qualified name of the server computer. b. In the VM server name field, enter the VM name of the Proficy SOA Server. 7. In the Proficy server login area, enter a Proficy SOA user name and password. This can be the user name and password of any valid Proficy SOA user. 8. Click Configure. 9. Click Finish. 21

Proficy Workflow To configure Component Services If your production database is on a different computer than the Proficy Reporting Database, the following configuration changes are required. 22 IMPORTANT: You can perform these steps either before or after installing the Proficy Reporting Database; however, you must complete these configuration changes before you run your reporting data synchronization. NOTE: For this procedure, your production database server is the Server, while the reporting database server is the Client. 1. Verify that the Distributed Transaction Coordinator service is running on both the Server and Client computers. a. From the Start menu, point to Administrative Tools, and then click Services. b. If the Distributed Transaction Coordinator service is not running, rightclick it, and then click Start. 2. On the server computer, from the Start menu, point to Administrative Tools and click Component Services. 3. In the left navigation tree, click Component Services, and then expand Computers. 4. Right-click My Computer and select Properties. The My Computer Properties dialog box appears. 5. Click the MS DTC tab. 6. Click Security Configuration. The Security Configuration dialog box appears. 7. Select the following check boxes: Network DTC Access Allow Remote Clients Allow Inbound/Outbound Administration Enable Transaction Internet Protocol (TIP) Transactions

Proficy Reporting Database 8. Click OK. A message appears telling you MS DTC Service will be stopped and restarted. All dependent services will be stopped. Please press Yes to proceed. Click Yes. 9. In the My Computer Properties dialog box, click OK. 10. If required, reboot your production database server. NOTE: We recommend that you reboot your production database server. 11. On the Client computer, repeat steps 2 through 6. 12. Select the Network DTC Access and Allow Inbound/Outbound Administration check boxes. 13. The DTC Service is stopped and restarted. 14. Restart the Client computer. 15. Verify that the Distributed Transaction Coordinator service is running on both the Server and Client computers, and if required, repeat steps 1a and 1b. To uninstall the reporting database When you uninstall the reporting database, you can choose to remove it completely from the computer, or maintain the database but lose the ability to synchronize the data from your production database. Uninstalling the reporting database does not affect the production database or the data contained in it. 1. From Control Panel, double-click Add or Remove Programs. The Add or Remove Programs dialog box appears, displaying all of the programs installed on the computer. 2. Select Proficy Reporting, and then click Remove. 3. In the confirmation message box, click Yes. 4. In the Uninstall Reporting message box, click Yes if you want to completely remove the reporting database from the computer. If you select No, the reporting database remains on the computer, but the ability to synchronize with the production database is lost; however, you can still run reports on the data stored in the database. 23

Proficy Workflow Proficy Host / Embeddable Proficy Host Proficy SOA provides support that allows service providers from other products in the Proficy product family, such as Proficy Plant Applications, to integrate and interact with a master Proficy SOA Server. This integration allows you to publish data from these products to the Directory of Resources and access it from within the Proficy Client. You can create one of the following types of Proficy Hosts to integrate your product with Proficy SOA: Proficy Host Embeddable Proficy Host 24 Select this option to create a unique server instance that runs within the Proficy SOA Server. The Proficy Host creates a Windows service to support the Proficy Host instance configuration. Select this option to create a server instance that is embedded into the ProficyServer.exe Windows service. You must write a Windows service executable program and embed the Proficy Host in that executable. After a Proficy Host instance is created, the contents of any AppServer.xml files that are included in the installation can be read by the Proficy Host, and the services defined in those files become available to the Proficy system. The contents of an AppServer.xml file informs the Proficy Host of the service provider(s) to load for the product and where to find them. The System Status Monitor Display shows the structure of your Proficy system, including any Proficy Hosts connected to your Proficy SOA Server and their corresponding projects, application servers, and services. For more information about the structure of your Proficy system, see System Status Monitor Display in the Proficy SOA online help. For information on a specific product service provider and the data that will be available in the Proficy Client, see the product online help and documentation.

Proficy Host / Embeddable Proficy Host To install the Proficy Host / Embeddable Proficy Host A Proficy Host allows service providers from other products in the Proficy product family to integrate and interact with a master Proficy SOA Server. This installation procedure is used to install the Add or Remove Proficy Host utility. This utility allows you to add or remove Proficy Host instances. The install files are located on your product s installation CD. For example, if you want to install a Proficy Host for Proficy Plant Applications service providers, use the Plant Applications installation CD. NOTE: You are not required to configure your Proficy Host at installation time; you can choose to configure it at a later date. If you choose to wait to configure the Proficy Host, skip steps 4 through 7, and then click Cancel on the Configure New Proficy Host dialog box. When you are ready to add a Proficy Host, see Working with Proficy Host / Embeddable Host. 1. Place the product installation CD in the CD-ROM drive. If you have Autoplay enabled, the installation launcher splash screen should appear. If it does not appear, run Setup.exe from the Proficy Host directory on the installation CD. 2. Click Install Proficy Host. 3. Follow the on-screen prompts, clicking Next each time, until you reach the Ready to install Proficy SOA Host / Embeddable Host page. 4. Click Install. A progress bar displays, and then the Configure New Proficy Host dialog box appears. 5. In the Configuration type area, select the type of Proficy Host you want to install. NOTE: If you install an Embeddable Proficy Host, you must create a Windows service executable file and embed the Proficy Host in that file. 6. In the Local machine configuration area, enter the following information: a. In the Project name field, enter a name for the project that the Proficy Host will run. 25

Proficy Workflow b. In the Server Instance field, enter the logical name of this Proficy Host. This name is published to the Directory of Resources. 7. In the Proficy SOA configuration area, enter the following information: a. In the Proficy server instance field, enter the name of the Proficy SOA Server that you want to publish to. b. In the Proficy server DNS field, enter the complete DNS name of the computer where the Proficy SOA Server is running. 8. Click Configure. The Completed the Proficy SOA Host / Embeddable Host Setup Wizard page appears. 9. Click Finish. Working with Proficy Host / Embeddable Proficy Host To add a Proficy Host / Embeddable Proficy Host instance 26 1. Click Start, point to All Programs, then Proficy, then Proficy Host, and then click Configure Proficy Host. The Add or Remove Proficy Host dialog box appears. 2. Click Add New. The Configure New Proficy Host dialog box appears. 3. In the Configuration type area, select the type of Proficy Host you want to install. 4. In the Local machine configuration area, enter the following information: a. In the Project name field, enter the name of the project that the Proficy Host will run. b. In the Server Instance field, enter the logical name of this Proficy Host. This name is published to the Directory of Resources. 5. In the Proficy SOA configuration area, enter the following information: a. In the Proficy server instance field, enter the name of the Proficy SOA Server that you want to publish to. b. In the Proficy server DNS field, enter the complete DNS name of the computer where the Proficy SOA Server is running.

Proficy Host / Embeddable Proficy Host 6. Click Configure. The new Proficy Host instance is added to the list. 7. Click Close. To remove a Proficy Host / Embeddable Proficy Host instance 1. Click Start, point to All Programs, then Proficy, then Proficy Host, and then click Configure Proficy Host. The Add or Remove Proficy Host dialog box appears. 2. Select the Proficy Host instance you want to remove, and then click Remove. 3. In the Confirm Removal dialog box, click Yes. The selected Proficy Host instance is removed from the list. 4. Click Close. To configure the Proficy SOA Server certificate for the Proficy Host Configuring the Proficy SOA Server certificate allows your Proficy Host to communicate with the Proficy SOA Server. NOTE: You must have installed the Proficy SOA Server and the Proficy Host before configuring the certificate. 1. On the Proficy SOA Server computer, double-click ProficySTSConfiguration.exe. The default location of this utility is <install dir>\program Files\Proficy\Proficy Workflow\Program. The Proficy STS Configuration Tool appears. 2. Under Proficy STS Overview, click Proficy Servers Configuration. 3. Under General, click Add New. A new address is added to the Proficy Servers Configuration list. 4. In the Address field, enter the address of the computer that the Proficy Host is installed on. 5. Click Select. A dialog box appears displaying a list of certificates. 6. Under the Issued To list, select ProficyPlatform, and then click OK. 27

Proficy Workflow 7. Close the Proficy STS Configuration Tool and when prompted to save your changes, click Yes. 8. Restart the ProficySTS Server. a. On the Control Panel, point to Administrative Tools, and then select Services. The Services dialog box appears. b. Select ProficySTS, and then click Restart the service. To uninstall the Proficy Host / Embeddable Host 1. From Control Panel, double-click Add or Remove Programs. The Add or Remove Programs dialog box appears, displaying all of the programs installed on the computer. 2. Select Proficy SOA Host / Embeddable Host, and then click Remove. 3. In the confirmation message box, click Yes. 28

Task Controls in Proficy HMIs Task Controls in Proficy HMIs The Proficy Workflow Task List can be integrated into other Proficy HMI applications. You can integrate workflow tasks into existing HMI applications, such as Proficy HMI/SCADA CIMPLICITY and Proficy HMI/SCADA ifix. Workflow tasks are displayed in your application so you can operate them from within these applications. You use the Task List and Task Indicator controls to interact with and view workflow tasks. The Task List provides users with a list of tasks for a workflow. The Task Indicator provides a user with relevant information regarding the status of the Task List. To install task controls 1. Place the Proficy Workflow installation CD in the CD-ROM drive. 2. Open the ActiveX Task List Install folder, and double-click Proficy Task List.msi to start the Proficy Task List - InstallShield Wizard. 3. Follow the on-screen prompts, clicking Next each time. In the following window License Agreement Customer Information Destination Folder Proficy Server Name Select or Enter I accept the terms in the license agreement to continue the installation. Next to accept the default fields. Otherwise, enter your information. Next to accept the default installation location. Otherwise, click the Change button to set up a new location. your workgroup or fully qualifies domain server name. 29

Proficy Workflow In the following window Server Communication Authentication Ready to Install the Program Select or Enter one of three login options. If you want the user name and password: Install and Finish. entered manually, select Manual Login, or saved automatically after initial setup, select Password Encryption, or exposed in plain text, select Control Property. 30

Key Concepts Key Concepts Proficy Workflow Powered by Proficy SOA is a unifying architecture for our software products, and a framework to leverage existing applications and functionality. The role of Proficy Workflow is to provide the components and services which, when adopted by a product line, drives common operational behavior and support. Proficy Workflow implements the S95 standard, giving you a flexible, standards-based foundation for building applications and interfacing with other software. Proficy Workflow contains the tools you need to create applications that can be used to facilitate the management and analysis of activities in your enterprise. Proficy Workflow provides a customizable environment that can: host editors for building Proficy applications display HMI screens for monitoring plant activities display workflow tasks to operators on the plant floor accept input into forms that can be created and routed to clients throughout the enterprise Proficy Workflow also provides a configurable event engine that can trigger workflows and other code based on different types of internal and external triggers. Proficy Workflow consists of the following key concepts: The Client Models Solution Displays and Object Views Data Communication Service Providers Forms Designer Integrated Products Workflow Proficy Host / Embeddable Proficy Host Security Navigation and Search The Feedback Zone One-Click Deployment Proficy Task List Configuration Utility Reporting Database Help 31

Proficy Workflow The Client The Proficy Client provides a customizable environment for using various views and displays to access and use your data. Access to specific views and displays is determined by the permissions assigned to you or any group you are a member of. The Proficy Client: Provides you with a command center for interfacing to Proficy applications and third-party legacy systems. Provides you with a single solution-centered environment that allows you to link all aspects of the plant floor, from operations to analytics. Allows you to customize the environment, tailoring it to your specific needs. The diagram displays the main components of Proficy Client. The following table describes these components: 32

Key Concepts Figure 1. Proficy Client Cross Reference Description Menu bar: includes access to product information, Help Menu, Client layout modes, Global Displays, Task List, login/logout, system status. Models list: Production, Material, Equipment, Personnel, Events, Workflows, Global Displays, Proficy System. Resource type list: includes all the types that you can add a resource to. Resources: includes all the resources that you have added to the model. Navigator: includes all the information related to your input, such as the ability to locate, add, delete, and duplicate resources. Compatible view: displays information on the model that has been selected in the Navigator. Solutions and Displays view: displays compatible options for viewing and working with the selected resource. Workspace: displays information related to the selected resource after an appropriate view, such as an editor, has been selected. Information bar: includes warnings and the Feedback Zone. Security The Security feature is intended for system administrators who must configure and maintain security for Proficy Workflow. In some companies, access to the production configuration and management environment is available to everyone. In such an environment, changes to the data files and access to files and applications are not critical to the process. However, in other companies, these applications and data are available only to authorized personnel because they are critical to the process. For more information, see Proficy Workflow Security in this manual and Personnel Model in the online help. 33

Proficy Workflow Models In Proficy Workflow, models are used to define and organize system and application information. A model is a representation of a physical structure or conceptual idea and is composed of resources that have hierarchical or other relationships between them. Rules or schemas outlining resource nesting, order, number, and requirement define the structure of a model. Production and manufacturing models are used to represent your production or manufacturing organization and operation. Based on the industry standard ISA-95, these models define basic structure rules and resource relationships. Production models share a common object-oriented system of definition using properties that can be used to define classes, definitions, and specifications. When you create your production or manufacturing structure and resource relationships, the properties, classes, definitions, and specifications are used to define your processes and can be inherited by another resource as a result of direct associations. For more information, see Models in the online help. Navigation and Search The Navigator is one of the main components of Proficy Workflow, and is used to navigate models to target elements. Using the Navigator, you can locate an element of focus, whether by browsing or searching. The Navigator provides two tabbed panes: Navigate and Search. The Navigator is a point and click interface on all tabbed areas. The Navigate tab is the main tab that is used to configure, add, delete, and browse resources within Proficy Workflow. The Search tab provides a unique way to search all available resources created within Proficy Workflow. By using the search you can quickly locate and use resources within the system. For more information, see Navigate Tab and Search Tab in the online help. Solution Displays and Object Views Proficy Workflow uses solutions to organize editors and resource information into relevant groupings that make it easy to select, view, and configure resources. You can view and configure model resources within Proficy Workflow. 34

Key Concepts When you are in Solution Displays mode, all views are displayed; however, only the green icons display compatible views. When you are in Object Views mode, all views displayed are compatible with the selected resource. For more information, see Solution Displays and Object Views in the online help. The Feedback Zone The Feedback Zone is a tool that displays error and informational messages about the currently executing process or the operation last performed. Various components that are hosted within Proficy Workflow can also post messages about the results of operations and tasks in the Feedback Zone. For more information, see Feedback Zone in the online help. Data Communication Service Providers Proficy Workflow provides the ability to connect to other GE Proficy products using the data communication service providers. These service providers are Proficy Historian, Proficy Portal (Proficy Real-Time Information Portal), and any locally installed OPC Server. The Historian service provider allows you to connect to Proficy Historian to read and write to historian tag data. The Portal service provider allows you to connect to Proficy Portal to read and write to ifix and OPC tags, and execute SQL statements. With the Portal service provider, you have access to Portal displays and can select and view them using the Global Viewer. For more information, see the Proficy Real-Time Information Portal section and Data Communication Service Providers in the online help. NOTE: Proficy Portal installation CD is included with the Proficy SOA installation package. For information about Proficy Portal, see the Proficy Portal Real-Time Information Portal Getting Started guide and the Proficy Real-Time Information Portal online help. 35

Proficy Workflow One-Click Deployment One-click deployment allows you to deploy Proficy Workflow to users without running a full Client installation on their computers. For more information, see One-click Deployment. Forms Designer The Forms Designer allows you to develop custom forms without using Visual Studio. You then publish the forms to the server where other form and workflow authors can access them and use them in form activities. For more information, see Forms in the online help. Task Controls Task Controls allow you to integrate Workflow tasks into existing HMI applications, such as Proficy HMI/SCADA ifix and Proficy HMI/SCADA SIMPLICITY. Workflow tasks are displayed in your HMI application so you can operate them from within these applications. For more information, see The Task List Host Control in Proficy HMIs in the online help. Integrated Products Workflow The Proficy SOA installation includes Proficy Workflow a user-configurable, dynamic decision-making engine for integrating automated and manual business and production processes. Proficy Workflow consists of the following components: An execution engine (workflow) that uses a graphical editor for easily building complex logic. Workflows are programs that can carry out complex activities and respond to events and data changes, and write values back to the Proficy SOA models or through external connectors. For more information, see Proficy Workflow in the online help. Reporting Database Proficy Workflow includes the option to install a reporting database. This database can be used with any valid reporting tool, and allows you to run reports on up-to-date data that you synchronize from your production database. 36

Key Concepts For more information, see Reporting Database and Reporting Data Synchronization in the online help. Proficy Host / Embeddable Proficy Host Proficy Workflow provides support that allows service providers from other products in the Proficy product family, such as Proficy Plant Applications, to integrate and interact with a master Proficy SOA Server. This integration allows you to publish data from these products to the Directory of Resources and access it from within the Proficy Client. Help There are three ways to access the Proficy Workflow help: Ribbon Bar: Click F1: Click anywhere in the Proficy Client and press F1 on your keyboard. Program Group: From the Start menu, point to All Programs, then Proficy, then Proficy Workflow, and then click Proficy Help. There are several ways to use the help: Table of Contents: The table of contents is organized into books and pages. Click a book or page to display its contents. Double-click a book to expand it and display the books and pages nested below it. Index: To access the online help index, click the Index tab in the left-hand pane. In the Proficy Workflow help index, you can search for topics by keyword. Type a keyword in the box, or select one from the list. When you find the topic that you want, double-click it to display that topic. If more than one topic applies to the keyword, the Topics Found dialog box appears listing all topics that apply to that keyword. Full-text Search: To access the online help full-text search, click the Search tab in the left-hand pane. Use the Search tab to perform full-text searches in the help. If your search results include too many results, you can enter additional terms to narrow down the list. Click the button to add boolean terms to your search expression, such as AND, OR, NEAR, and NOT. If you want to search for a specific phrase, enclose the phrase in quotation marks. 37

Proficy Workflow One-Click Deployment One-click deployment allows you to deploy Proficy Workflow to users without running a full Client installation on their computers. When an administrator installs Proficy Workflow on a server computer, the files required for the one-click deployment are installed when you perform a server installation. These files are located in a folder called Deployment in the following location: 38 <install dir>\program Files\Proficy\Proficy Workflow\Program\Deployment An Administrator user must share this folder on the server computer and then users can access it through a web page. The file used for one-click deployment is: ProficyClient.application You can create a web page, a button, or any means of access you want to use to make oneclick deployment available to your users. IMPORTANT: Security certificates cannot be deployed remotely. Therefore, before users can use the one-click deployment, an administrator user must run the ProficySecuritySetup.msi file, which is also located in the Deployment folder. This executable file sets up Proficy Workflow security and the security certificates on the specific computer and must be run on each computer that will use oneclick deployment. Each time a user uses the one-click deployment, it checks for any code updates, such as patches and service packs, that have been applied to the server (and subsequently to the one-click deployment files) and applies those changes to the one-click Client. This allows your users to always be working with the same version of code as the server. After installing Proficy Workflow on the server computer, you can copy the Deployment folder to another location for users to access. If you copy the folder to another location, you must re-copy the folder whenever code updates are applied in order for users to get the updates. IMPORTANT: Do not move the Deployment folder from its install location. If this folder is moved, code updates cannot be applied to it.

Supported Regional Settings Supported Regional Settings Proficy SOA supports the following regional settings available in the Windows Control Panel: Decimal symbol - one character Digit grouping symbol List separator - one character Time style Time separator Short date style Date separator NOTE: The decimal symbol and the digit grouping symbol cannot be the same character. Also, the time separator and the date separator cannot be the same character. Formatting the Time and Date Avoid changing the time style or short date style in regional settings to values that are outside of the standard styles provided. Changing these values to non-standard styles may result in improperly formatted times and dates in some parts of Proficy SOA. Proficy SOA supports the following short date formats, some of which may not be available in certain language versions of Windows: dd/mm/yy or dd/mm/yyyy dd/yy/mm or dd/yyyy/mm mm/dd/yy or mm/dd/yyyy mm/yy/dd or mm/yyyy/dd yy/dd/mm or yyyy/dd/mm yy/mm/dd or yyyy/mm/dd 39

Proficy Workflow Formatting the Regional Language Setting Avoid changing the language setting when Proficy SOA is running. Setting the System Default Locale The selected locale must be set as the system default. Daylight Saving Time In Proficy SOA, all dates and times are stored independent of time zones, in UTC format. Special Keyboard Buttons Some computer keyboards have special buttons for e-mail launch, Internet launch, search, and other functions. These keyboard buttons may disable certain key macros or allow users to circumvent Proficy SOA security measures. We recommend that you reprogram or disable the software that operates such special buttons. Refer to your computer's documentation for instructions on disabling these buttons. 40

SQL 2005 Backup and Restore SQL 2005 Backup and Restore Proficy Workflow utilizes SQL Server 2005 to store information. In order to ensure that the integrity of the information is maintained, it is important to back up your database on a regular basis. In addition to backing up and restoring your Microsoft SQL Server database, maintenance plans can assist in keeping your systems up and running. Refer to your SQL Server 2005 manual or Microsoft s web site for additional information on backing up, restoring, and maintaining your SQL 2005 database. 41

Proficy Workflow Proficy Workflow Security The Security feature is intended for system administrators who must configure and maintain security for Proficy Workflow. This chapter explains the concepts of Proficy Workflow security and steps you through the implementation process. This section includes the following: Introducing Security Understanding Security Using Security Windows Security Introducing Security In some companies, access to the production configuration and management environment is available to everyone. In such an environment, changes to the data files and access to files and applications are not critical to the process. However, in other companies, these applications and data are available only to authorized personnel because they are critical to the process. Proficy Workflow provides an integrated security program to assist you in protecting your process. Refer to the following sections for more information: System Protection Security Concepts Security Status 42

Proficy Workflow Security System Protection There are different levels of security that you can implement to protect your system. On one level, you can control the security of your machines and buildings, as well as your processes. On another level, you can implement security for your operating system and your network using firewalls, passwords, and filters. You can also protect your data from unauthorized changes by restricting access to your system. The information in this section focuses on the security in Proficy Workflow, not your operating system or network. Logging into Proficy Workflow requires a login name and password. Depending on your configuration, this data can be the same or separate from your Windows login name and password. For more information on Windows login, refer to the Windows Security section. Security is user-based, meaning operators cannot access anything unless you assign access to the specific areas. Proficy Workflow security is flexible and easy to use, allowing you to assign operator rights, login names, and passwords. Refer to the Personnel Model topic in the online help for more information about configuring your users, groups, and key sets. Security Concepts Before you restrict access to Proficy Workflow features, you need to understand how security works. The security concepts described here are described in more detail in the Understanding Security section. For information on implementing the concepts, see the Personnel Model topic in the online help. People - allow you to define security credentials and properties that are specific to an individual user. Security credentials and properties are defined in the S95 Model Editor. Key Sets - allow you to assign permissions to users who hold a specific key set. In addition, key sets inherit permissions from their child sets. Proficy Workflow provides the following predefined high level key sets: 43

Proficy Workflow o o o Guest S95 Configurator Workflow Author The S95 Configurator key set includes the following child key sets: o o o Equipment Configurator Material Configurator Personnel Configurator The Workflow Author key set includes the following child key sets: o o o o Workflow Builder Workflow Manager Workflow Supervisor Workflow Operator You can also create your own key sets at any level. Groups - allow you to create groups of users who share the same key sets. Proficy Workflow provides the predefined groups Administrators, Guests, and Windows Users. Client Access - allows you to configure automatic login and logout, lockdown mode, default startup options for an individual workstation, and user overrides. Security Status Proficy Workflow security is always enabled. This prevents any unauthorized users from accessing or modifying any part of the system. With security, all users must log in with their user accounts to gain access to the areas they have been given permissions to. 44

Proficy Workflow Security Understanding Security Your main design goal when developing a Proficy Workflow security strategy is to effectively use the Proficy Workflow security configuration. Proficy Workflow simplifies security configuration by abstracting the three main areas that are constantly changing in a plant or facility. These main areas are: people/personnel equipment/machinery operational hierarchy of the people New personnel are hired and some retire in an organization. Machinery is added, replaced, and updated. People are promoted; for example, from being an operator to a supervisor, and so on. Proficy Workflow security accommodates all of these cases using three different constructs. People can be configured in groups; for example, Production Group, Maintenance Group. Machinery is modeled with the Equipment model using the S95 Model Editor, which defines a plant in a hierarchical fashion. An Enterprise can have multiple sites and sites can have multiple areas, and so on. An operational hierarchy can be defined as a set of keys that each person can hold. For example, an Operator can have keys to Start and Stop a workflow. A Supervisor can have additional keys to Create and Delete a workflow. The first step in configuring security is to add people (users) to the system, then configure groups, and then define the key sets. Only an Administrator user can define these three fundamental pieces of security configuration. An Administrator user is created when Proficy Workflow is installed. After the groups and key sets are defined, security can be applied to any resource in the system. For example, a group can be granted a key set on a resource such as an Enterprise in the Equipment model. Any user who belongs to the configured group will then, upon logging in to the Proficy Client, have the rights granted by the key set on the Enterprise. 45

Proficy Workflow Using groups minimizes the amount of work needed to create similar users while providing you with flexibility and power. For example, when a new user comes in the plant, the user can simply be added to an existing group and will automatically inherit all the rights defined for that group. In the following example, John, Dave, Tim, and George are all line operators. Their needs are summarized in the table. User Name Key Set Permissions John Workflow Permissions Execute Workflows, Execute Schedules, Perform Tasks Dave Workflow Permissions Execute Workflows, Execute Schedules, Perform Tasks Tim Workflow Permissions Execute Workflows, Execute Schedules, Perform Tasks George Workflow Permissions Execute Workflows, Execute Schedules, Perform Tasks Since each line operator requires access to the same permissions, it is possible to create a group called Line Operators that provides these privileges. After you create the group, you can assign it to each line operator, as the following figure shows. 46

Proficy Workflow Security Users Proficy Workflow identifies each user with a login name, a password, and an optional e-mail address. Users can belong to one or more groups. When a user belongs to a group, he or she inherits all the key sets assigned to the group. The user can have separate key sets in addition to the group key sets. When you are designing your security plan, always include the full name, login name, and password for each user. If you plan to use Windows security, you should also include the domain name if you want to store the user information on a domain controller. Groups You can simplify security configuration significantly if you take the time to assess your users needs. If the security requirements at your site do not warrant such an effort, use the default groups provided. These groups provide you with a simpler approach to 47

Proficy Workflow implementing security. For example, the default groups define functional roles in a manufacturing facility. The default groups are: Administrators Guests Windows Users Key sets are assigned to groups only; you cannot assign key sets to individual users. This assigns common key sets needed by two or more users performing similar tasks. Configuring your groups in this way provides a modular approach that is easy to maintain. For example, in the following figure, the group Supervisors defines access to the equipment model to create and edit equipment resources. These permissions define the common security rights shared by all users in the group. Create Groups and Users You can create groups and users by selecting the Groups and People resource types from the Personnel model and then adding them to your resource list. You then configure either the Group or User properties found in the Security Editor and S95 Model Editor. If you are creating a user, you must also configure the user s security credentials. For a user, you can modify the assigned groups, and set the password for this user. For detailed information on creating and configuring your group and user accounts, see the Personnel Model topic in the online help. 48