ArchestrA Protocols User's Guide

© 2019 AVEVA Group plc and its subsidiaries. All rights reserved.

No part of this documentation shall be reproduced, stored in a ret rieval system, or transmitted by any
means, electronic, mechanical, photocopying, rec ording, or otherwise, without the prior written
permission of AVEVA. No liability is assumed with respect to the use of the information contained herein.
Although precaution has been taken in the preparation of this documentation, AVEVA assumes no
responsibility for errors or omissions. The information in this documentation is subject to change without
notice and does not represent a commitment on the part of AVEVA. The soft ware described in this
documentation is furnished under a license agreement. This s oft ware may be used or copied only in
accordance with the terms of such license agreement.
ArchestrA, Aquis, Avantis, Citect, DYNSIM, eDNA, EYESIM, InBatch, InduSoft, InStep, Int elaTrac,
InTouch, OASyS, PIPEPHASE, PRiSM, PRO/II, PROV ISION, ROMeo, SIM4ME, S imCentral, SimSci,
Skelta, SmartGlance, Spiral Software, Termis, WindowMaker, WindowViewer, and Wonderware are
trademarks of AVEVA and/or its subsidiaries. An extensive listing of AVEVA trademarks can be found at:
https://sw.aveva.com/legal. All other brands may be trademarks of their respective owners.
Publication date: Thursday, May 9, 2019
Contact Information
AVEVA Group plc
High Cross
Madingley Road
Cambridge
CB3 0HB. UK
https://sw.aveva.com/
For information on how to cont act sales, customer training, and technical support, see
https://sw.aveva.com/contact.
 ArchestrA Protocols User's Guide

Contents
Chapter 1 Welcome ............................................................................................................... 5
Documentation Conventions ...................................................................................................... 5
Technical Support ..................................................................................................................... 5

Chapter 2 Supported Protocols ........................................................................................... 7

Secure SuiteLink ....................................................................................................................... 7
SuiteLink Features .............................................................................................................. 7
Secured SuiteLink Connection ............................................................................................. 7
Configuring the System Management Server ................................................................... 9
System Requirements for S uiteLink .................................................................................... 12
Time Stamping.................................................................................................................. 13
DDE/FastDDE ........................................................................................................................ 13
DDE ................................................................................................................................. 13
FastDDE ........................................................................................................................... 14
ArchestrA Message Exchange ................................................................................................. 14
OPC....................................................................................................................................... 14
OPC UA ................................................................................................................................. 14
MQTT .................................................................................................................................... 15

3
 ArchestrA Protocols User's Guide

C HAPTER 1
Welcome
This guide provides background information on the primary communication protocols used bet ween
different components.
A protocol is a set of rules and standards for enabling computers to connect and exchange dat a over a
network.
This guide includes information on setting up and using some of these protocols.
You can view this document online or you can print it, in part or whole, by using the Adobe Acrobat
Reader’s print facility.

In This Chapter
Documentation Conventions ............................................................................................................ 5
Technical Support ........................................................................................................................... 5

Documentation Conventions
This documentation uses the following conventions:

Convention Used for

Initial Capitals Paths and file names.

Bold Menus, commands, dialog box names, and

dialog box options.

Monospace Code samples and display text.

Technical Support
Before you contact Technical Support, refer to the relevant section(s) in this documentation for a
possible solution to the problem. If you need to contact technical support for help, have the following
information ready:
 The type and version of the operating system you are using. For example, Microsoft Windows XP,
SP1.
 Details of how to recreate the problem.
 The exact wording of the error messages you saw.
 Any relevant output listing from the Log Viewer or any other diagnostic applications.
 Details of what you did to try to solve the problem(s) and your results.
 If known, the Technical Support case number assigned to your problem, if this is an ongoing
problem.

5
 ArchestrA Protocols User's Guide

C HAPTER 2
Supported Protocols
In This Chapter
Secure SuiteLink ............................................................................................................................ 7
DDE/FastDDE .............................................................................................................................. 13
ArchestrA Message Exchange ....................................................................................................... 14
OPC ............................................................................................................................................ 14
OPC UA ....................................................................................................................................... 14
MQTT .......................................................................................................................................... 15

Secure SuiteLink
Secure SuiteLink uses a TCP/ IP based communic ation protocol. It is designed specifically to meet
industrial needs, such as data integrity, high throughput, and easier diagnostics. This protocol standard
is supported on Microsoft Windows NT 4. 0 or later.
Secure SuiteLink is not a replacement for DDE, FastDDE, or NetDDE. Each connection between a client
and a server depends on your network situation.

SuiteLink Features
SuiteLink is designed specifically for high speed industrial applications and provides the following
features:
 Value Time Quality (V TQ) places a time stamp and quality indicator on all data values delivered to
VTQ-aware clients.
 Extensive diagnostics, including server loading, computer res ource consumption, and network
transport, are made accessible through the Microsoft Windows NT operating system performance
monitor. This feature is critical for the maintenance of distributed industrial networks.
 Consistent high dat a volumes can be maint ained bet ween applications when applications are on a
single node or distributed over a large node count.
 The network transport protocol is TCP/IP using Microsoft's standard WinSock interface. You do not
have to creat e shares for SuiteLink I/O Servers.

Secured SuiteLink Connection

To ensure a higher level of confidentiality and privacy, SuiteLink communication between a SuiteLink
server and a SuiteLink client can now be enc rypted. For the SuiteLink server and client to use encrypted
communication, the ASB Runtime Components feature must be selected in t he SuiteLink 3. 0 installation.
Configuring a Secure SuiteLink Connection
Follow the steps described below to configure a secure Suit eLink connection.

7
ArchestrA Protocols User's Guide Supported Protocols

Step 1: Set up and Register with the System Management Server

a. Setting up the Management Server: A computer with the application environment is
designated as the System Management Server. The system management server node holds
and distributes the security related information to the other nodes in the environment. The
security information is in the form of server certificates.
b. Registering with the System Management Server: All the nodes which needs to securely
communicate with one another will have to register with the management server node. All the
nodes registered with the management server node is grouped together, and can communicate
securely with one another.
Use the Configurat or to configure the ASB Management Server point to the Management Server on the
GR node. For additional information, refer the section Configuring Machine Trust in the OI Core
Communications Driver Help.
Step 2: Server Initialization
To ensure interoperability, the SuiteLink infrastructure continues to support and allow both encrypted
and non-encrypted communication.
The table below describes the communication bet ween the applications using the encrypted and/or
non-encrypted SuiteLink protocol. Consider the communication between the enc rypted/non -enc rypted
Client (say, InTouch) with the encrypt ed/non-encrypt ed Server (say, OI Server).

SuiteLink (SL) Encrypted Client Non-encrypted Client

Communications

Encrypted Server Secure, encrypted Not secure, not encrypted

Non-encrypted Server Not secure, not encrypted Not secure, not encrypted

If the aut hentication fails between the Client and the Server, or if the Client or Server do not have access
to the Certificate store, the system continues with the non-encrypted connection as a fallback.
Acce ssi ng Server as a Standard User
When accessing the server as a standard user, you cannot establish a secure SuiteLink channel. For a
secure, encrypt ed communication workflow, the standard user should be added to the
'ArchestrAWebHosting' us er group on the server side.
For more information about adding users to user-groups, refer to the Windows-specific documentation.

Step 3: Establishing the secure communication channel

Using the configuration performed with the above steps, the server and client will establish an encrypted
SuiteLink connection. If an error is encountered during any of the above steps, the connection is
terminat ed either by the Client or the Server.
SuiteLink Install/Upgrade Scenarios

Current Install/Upgrade Version upgrading Note s

Version Process to

Prior to WSP < Upgrade using WSP WSP 2017 Update The SuiteLink component is
WSP 2017 2017 Update 3 Install 3 installed silently, and is active.
Update 3
Encrypted Use the Configurator to
Unencrypted manage certificates.

8
Supported Protocols ArchestrA Protocols User's Guide

OI Core 1.x., 2.x a) Upgrade using OI OI Core 3.0 This is a standalone SuiteLink
Core 3.0 install install.
Unencrypted Unencrypted
First, upgrade to OI Core 3.0.
Then, install the Secure
SuiteLink and PCS 4.3
b) SuiteLink 3.0 install OI Core 3.0 + PCS components.
4.3
Use the Configurator to
Encrypted manage certificates.

Configuring the System Management Server

System Platform 2017 Update 3 incorporat es new security measures, including support for the TLS 1. 2
protocol for secure encrypted communications bet ween nodes, single sign on (SSO), and certificate
management. These features are enabled through a component of the ASB Runtime called the System
Management Server. To enable security, every System Platform node must communicate with the
System Management Server, and there should only be a single System Management Server in your
System Platform topology. The System Management Server stores shared security certificates and
establishes a trust relationship between machines.
If some nodes have not been upgraded to System Platform 2017 Update 3, communication with those
older nodes will continue to utilize unsecured communication. However, communication between
System Platform 2017 Update 3 nodes will be enc rypted, as long as the nodes are configured to
communication with the System Management Server.
To configure the System Management Server
1. In the Configurat or, select System Management Server under Common Platform in the left pane.

9
ArchestrA Protocols User's Guide Supported Protocols

Note: If you are prompted for user credentials for the System Management Server, use the following
format to enter the user name: DomainName\UserName. The prompt for user credentials may be
displayed if you have domain admin privileges but are not an admin on the local machine. You must
be a member of the Admini strators or aaAdministrators OS group to configure the System
Management Server. For more information, see Add System Management Server Configuration
Privileges to an OS Group.

Note: The Configurator is automatically invok ed when installation completes. You can also start the
Configurator at any time after from the Windows Start menu on any System Platform node.

2. You are presented with three choices:

 Connect to an existing System Management Server: This is the default option. The System
Platform discovery service looks for any existing System Management Servers on its network. If
any are found, they will be displayed in a drop down list. Select the ser ver you want to use, or
enter the machine name of the server. All computers in your System Platform topology should
connect to the same server.
 This machine is the System Management Server: Select this option if this computer will be
the System Management Server. All other comput ers in your System Platform topology should
the be configured to connect to this server by using the Connect to an existing System
Management Server option.
 No System Management Server configured. (NOT RECOMMENDED): Select this option to
set up your computer without encryption and secure communications. You can still configure
other computers in the topology to use a System Management Server.

10
Supported Protocols ArchestrA Protocols User's Guide

3. Advanced settings: This opens the Advanced Configuration dialog window.

 Certificate Source: Select either Automatically Generated (default), or Provided by IT. If

your IT department is providing the certificate, press the Import button and navigate to the
certificate file. For more information, see Import a Certificate.
Certificate: The certificate name is displayed. If you imported a certificate, you view it by
pressing the Details button. The certific ate is periodically renewed through an automatic update
process, both on the server node and on remote nodes.
 System Management Server: If you are connecting to an existing System Management Server,
the name and port number of the server you selected is shown.
 Common Platform Ports: The ports for t he common platform are used for communications with
certain AVEVA software, such as the Sentinel System Monitor. Generally, you can use the
default settings. Remote nodes must be configured with the same port numbers as configured
here. Click the Advanced button, then edit the port numbers as needed.
Default HTTP port: 80
Default HTTPS port: 443

11
ArchestrA Protocols User's Guide Supported Protocols

4. Press the Configure button. A Security Warning window is displayed:

By establishing trust between machines, communications can pass freely. This will be a security
concern if you are not sure of the identity of the remote computer. If you have any doubt about the
computer you are connecting to, verify the security code and certificate details by selecting the
Details... button in the Advanced Configuration dialog to open the certific ate.

5. Select the next item in the left pane that requires configuration. When all required items have been
configured, press the Close button to complete installation. See System Restart after Configuration.

System Requirements for SuiteLink

This section describes the hardware, software, and installation requirements for SuiteLink.
Hardware Requirements
The following is a list of the hardware required to run the SuiteLink component.
 Computer with 2 gigahertz (GHz) or higher processor clock speed.

12
Supported Protocols ArchestrA Protocols User's Guide

 1 gigabyte (GB) of RAM or higher (512 MB minimum support ed; may limit performanc e and some
features).
 8 gigabytes (GB) of available hard disk space.
Software Requirements
The following is the list of the software required to run the SuiteLink.
 Windows XP SP3 Professional edition (32-bit).
 Windows 2003 SP2 Standard and Enterprise editions (32 -bit).
 Windows Vista SP2 Business and Ultimate editions (32 -bit and 64-bit ).
 Windows 2008 SP2 Standard and Enterprise editions (32 -bit and 64-bit).
 Windows 2008 R2 SP1 Standard and Enterprise editions (64 -bit).
 Windows 7 SP1 Professional and Ultimate editions (32-bit and 64-bit ).
Microsoft Internet Explorer 6.0 or later is recommended on the computer where the product is installed.
Installation Requirements
The following installation requirements are prerequisites for the S uiteLink to work properly:
 Local administrator privileges are required to install the update.
 Microsoft WoW64 emulation component must be available on any 64 -bit plat form.

Time Stamping
SuiteLink allows for the passing of time stamping information wit h process data. The SuiteLink time
stamp is a 64-bit dat a structure representing the number of 100-nanosecond intervals since January 1,
1901 in Greenwich Mean Time. This matches the Microsoft FILE TIME specification. Conversion to and
from local time is the responsibility of the application layer. All time stamps carried in the SuiteLink
protocol are in GMT.

DDE/FastDDE
The DDE/FastDDE communication protocols allow communication between a client and a server.
Dynamic Data Exchange (DDE ) protocol is developed by Micros oft whereas FastDDE protocol is
proprietary to Wonderware. For DDE/FastDDE communications the OI Server must be activated in
Desktop mode (must start from command line).

DDE
DDE is a communic ations protocol that allow applications in the Windo ws environment to send/receive
data and instructions to/from each other. It implements a Client -Server relationship between two
concurrently running applications.
The server application provides data and accepts requests from any other application interest ed in its
data. Requesting applications are called clients. Some applications such as InTouch and Microsoft Excel
can simultaneously be both a client and a server.

Note: On Windows Vista and later operating systems, Local DDE is supported only when the OI Server
is activated from its executable file or launched from InTouch. Local DDE is not supported when the OI
Server is activated from the SMC.

13
ArchestrA Protocols User's Guide Supported Protocols

FastDDE
FastDDE provides a means of packing multiple DDE messages into a single message. This packing
improves efficiency and performance by reducing the total number of DDE transactions required
between a client and a server.
Although FastDDE has extended the usefulness of DDE for our industry, this extension is being pushed
to its performance constraints in distributed environments.

ArchestrA Message Exchange

Message Exchange is a proprietary communication protocol used by the ArchestrA infrastructure. It
provides data communication across ArchestrA’s object-based system.

OPC
OPC (originally OLE for Process Cont rol, now Open Plat form Communications) is a non -propriet ary set
of standard interfaces based on Microsoft’s OLE/COM technology. This standard makes possible
interoperability bet ween aut omation/control applications, field systems/devices, and business/office
applications.
A voiding the traditional requirement of soft ware/application developers to write custom drivers to
exchange dat a with field devices, OPC defines a common, high-performance interface that permits this
work to be done onc e, and then easily reused by HMI, SCA DA, control, and custom applications.
Over a network, OPC uses DCOM (Distribut ed COM) for remote communications.

OPC UA
OPC Unified Architecture (OPC UA ) is an industrial machine-to-machine communication protocol for
interoperability. It provides process control with enhanced security, advanced communication, security,
and information models, and cross-plat form connectivity.
OPC UA is implemented as a client in OI Gateway.
OPC UA differs significantly from OPC. The following provides the key differences between classic OPC
and OP C UA.

Classi c OPC OPC UA

Uses the COM/ DCOM technology of Uses a services architecture to export data,
Microsoft to communicate. It does not have which improves the ease of communication an d
configurable time-outs. It depends on the connectivity.
DCOM time-out, which is configured in the
system.
Is dependent on Windows operating Is platform independent and can connect to a
systems. wide variety of devic es and platforms.
Has limited security. Has built-in security.
No built-in capabilities to handle problems, Has built-in capabilities to handle problems,
such as lost messages. such as lost messages.

14
Supported Protocols ArchestrA Protocols User's Guide

MQTT
MQTT, formerly called Message Queuing Telemetry Transport, is a publish/subscribe messaging
protocol for use over TCP/IP. MQTT is designed to ensure that devices can communicate wit h each
other while minimizing power and bandwidth requirements. It is a simple messaging protocol that is
well-s uited for us e with devices that rely on slow or unreliable networks.
The MQTT prot ocol is an applic ation layer specification, and has been published as standard ISO/IE C
PRF 20922. MQTT uses a Publish -Subscribe mechanism which requires a mediating broker. The
publishers send data to the broker, and subscribing clients receive data published to the broker. Only
clients that have subscribed to a particular topic receive messages about that topic. The protocol
supports bidirectional communication such that a device that is a publisher can also receive updat es.

15