SCADA system

Modern archiving,
enhanced Security
SIMATIC WinCC Open Architecture
V3.17

siemens.com/wincc-open-architecture
 Technical product description
SIMATIC WinCC Open Architecture V3.17

SIMATIC WinCC Open Architecture forms part of the New in SIMATIC WinCC Open Architecture V3.17
SIMATIC product family and is designed for use in
applications requiring a high degree of client-specific Next Generation Archiver
adaptability, large and/or complex applications and The NGA opens up a new way of archiving through
projects that require specific system functions. As a support of InfluxDB, a database optimized for time-series
SIMATIC SCADA system it is well-prepared to connect data. It has a smaller footprint and better performance in
to SIEMENS PLCs and to handle huge amounts of data both reading and writing compared to previous archiving
even on smaller hardware solutions. technology. No separate Oracle license is necessary. The
same data can be archived into a local as well as a centra-
Highlights SIMATIC WinCC Open Architecture: lized database. This gives a distinct advantage over the
• Object orientation facilitates efficiency in engineering classic RDB by introducing a new level of flexibility. Com-
and flexible system expansions pared to the RDB, the NGA consumes 87% less storage and
• Possibility to create single server solutions allows archiving of events and alarms without RAIMA.
• Scales up to 2,048 servers within distributed systems
• Scalable up to networked redundant high-end systems
with more than 10 million tags
• View and control all servers via a central control
center
• Platform-independent and available for Windows,
Linux, iOS and Android
• Hot Standby Redundancy and Disaster Recovery
System guarantee highest reliability and availability
even for geographically distributed systems
• Platform for customized solutions
• Comprehensive range of drivers and connectivity:
SIMATIC S7, PROFISAFE/PROFINET, MQTT, OPC UA,
XML, Modbus, IEC 60870-5-101/104, DNP3,
IEC 61850, IEC 61400, Ethernet/IP, S-Bus, MindSphere Next Generation Archiver
Connector, ...
New license technology
WinCC OA V3.17 comes with completely new software
Supported operating systems licensing. With Wibu CodeMeter, customers can manage
• Microsoft their licenses autonomously without requiring any interac-
–– Windows 10 (CB&LTSB) tion with the product vendor. It allows more flexibility in
–– Windows Server 2016 changing licensed software configurations.
–– Windows Server 2019
• Linux “CodeMeter WebDepot” is the web-based central license
–– RedHat Enterprise Linux 8.x management for customers. There they can e.g. activate
–– CentOS 8.x licenses for their target devices. It offers the ability to
–– SUSE Linux Enterprise Server (SLES) 15 assign licenses either to a software container or a hard-
–– SIEMENS Industrial OS 2.0 ware dongle. Access is granted via a ticket the customer
• VMware receives after purchasing the licenses.
–– ESXi 6.5
• Supported operating systems for mobile devices Locally, a new integrated service (CodeMeter Control
–– iOS 12.3 or higher Center) provides the user with an overview of all licenses
–– Android 6 or higher currently assigned to the device.

2
 Modern archiving,
enhanced security

Node-RED integration MindSphere Connector

Node-Red is a Node.js based workflow engine which MindSphere Connector is a north-bound interface for
lets the user create workflows in a visual editor. It pro- transferring data natively to the MindSphere cloud. A wi-
vides many useful pre-programmed nodes, e.g. for data zard helps you to easily onboard WinCC OA assets. You can
exchange. WinCC OA provides a Node-RED contribution freely select the data point elements you want to transfer
including a unique function node package for data access and fully control the transmission process with a CTRL++
and transfer. The graphical editor reduces engineering interface. The connector’s compatibility with MindApps
effort and lets you extend your SCADA application even means you can use WinCC OA data with such applications
without programming knowledge. Never seen before new as “Performance Insight”. This efficient out-of-the-box
possibilities, such as e.g. importing data from ERP systems solution for MindSphere connectivity enables hybrid solu-
or connecting WinCC OA to internet services like weather tions running on premise and in cloud operations.
information can be easily implemented.
Easy adaption of know-how protected projects after
commissioning
Encrypted panels and CTRL scripts can be decrypted after
commissioning, therefore enabling their changeability on
customer side without losing know-how protection.

JavaScript WebView EWO for ULC UX

The enhanced WebView widget for JavaScript allows
bidirectional data transfer between WinCC OA and custom
JavaScript implementations. It greatly enhances WinCC OA
User Interface abilities with a widespread range of exis-
ting libraries or customer-implemented JavaScript objects,
which can be easily integrated – can also run locally on
Node-Red Screenshot the client.

QT Web Engine Support New drivers, enhancements and updates

The WinCC OA WebView EWO’s underlying browser engine • MQTT driver
was switched from Qt WebKit to Qt WebEngine. This yields • PROFINET/PROFISAFE driver
a performance and enhanced feature range comparable to • OPC UA enhancements
Chrome 68. • Modbus enhancements
• Stricter and more precise CTRL++ function
ULC UX for mobile browser implementation
Additional to the Mobile UI App, you can now use ULC UX • Secured online user switch
on your mobile device without having to install anything. • QT version upgrade to V5.12
With new multitouch support, more efficient full screen
mode and window handling, it is now better aligned with
native UI functionality than before.

PDF View EWO

A new EWO allows displaying PDF files directly within
WinCC OA, e.g. manuals and allows viewing additional
information without leaving the WinCC OA context.

3
 Technical product description
SIMATIC WinCC Open Architecture V3.17

Object orientation Parallel archiving

• Referencing of symbols and objects The parallel HDB and RDB archiving enables the storage
• Inheritance of structured data point types of data into the local historical database and into the
• Object hierarchy central Oracle database. The Next Generation Archiver can
• Direct mapping of data point types to objects archive locally and centrally by itself. Both archiving meth-
• Flexible plant model - different views on the data ods are compatible with the Disaster Recovery System,
model realizable historical queries and archive compressions.

Redundancy
• Hot Standby
• Disaster Recovery System (2x2 Redundancy)
The aim of this feature is to extend the WinCC OA
redundancy concept through a second Hot Standby
System. The operability of the system nevertheless
remains maintained on another system even in the
event of a complete failure on the first Hot Standby
System. Thus, the data loss and the idle time are kept
as low as possible. Next Generation Archiver schematic
• Automatic client switch-over
• Automatic recovery Security
• Automatic process image and history synchronization • IEC 62443-4-2 certification started – stay tuned
• Automatic synchronization of project data • Blocking via IP-Blacklist
• Redundant networks (LAN) • System stability due to intrinsic safety
• Redundant peripheral component support • Autonomic systems
(SIMATIC S7) • Communication (Standard: SSL encryption,
• Split mode operation for updates and testing Option: Secure)
• New standard project with highest security setting
Primary Server System (PSS) Secondary Server System (SSS) • Encryption of panels, scripts and libraries

Maps Widget
Database in Database in Full integration of state-of-the-art cartographic informa-
Oracle Cluster Oracle Cluster
tion into WinCC OA, including OpenStreetMap. Possible
WinCC OA WinCC OA integration of Web Map Service (WMS) and Google Maps
Hot Standby Hot Standby
WinCC OA
active
System WinCC OA
passive
WinCC OA
active
System WinCC OA
passive
(requires separate license from Google).
Server (A) Server (B) Server (C) Server (D)

Field device or other

connected systems like
User Interfaces
for example OPC UA

Disaster Recovery System

4
 Special functions

Video Central distribution of software and updates works right

Offers the easy possibility to integrate IP-cams, IP-compo- out of the plant infrastructure, including fully automatic
nents which fulfill the ONVIF 2.0 standard and complete and time-controlled deployment.
video management systems into WinCC OA. Due to the
integration of SCADA and video management into one IOT Suite Highlights include:
system, the interfaces can be reduced. The costs for • Preprocessing data in real time
training, maintenance and operation are also reduced to • Streamlining communication
a minimum. To design a new video solution, you can use • Receiving updates automatically through connection
our basic package that already includes several useful fea- to central repository (IOT-OPA)
tures. Finalize the planning by simply adding the number • Extensions can be created easily by SIMATIC WinCC OA
of needed cameras to your project. Partners
The video feature is available for Linux, as well as for mo- • All required configurations can be implemented lo-
bile apps; required platforms are minimum iOS 12.3 cally directly at the IOT-Box or remotely via WinCC OA
or Android 6.* Desktop UI or Web UI

Trending 2.0
Trend widgets for integration into customized screens and
a trend application (Var-Trend) as a ready-to-use trend
application.
Supports:
• Online and historical values
• Value trend over time or value
• Time comparison trends
• Bar trends 2D and 3D
• Color and filling pattern for trend curves
• Display of invalid values, alarm range and/or value
range
• Multiple or shared scales, ruler, automatic legend
• Time resolution in ms, switch during runtime between IOT Box Software
local and UTC-time
• Zoom / Unzoom of trend areas Reporting
• Web-based Reporting Interface (SOAP)
IOT Suite –– Eclipse BIRT
The SIMATIC WinCC Open Architecture IOT Suite is a –– Crystal Reports
brand-new Edge Computing System based on WinCC OA –– SIMATIC Information Server
technology. Developed for brownfield applications, it –– Microsoft Excel
provides the technology to retroactively digitalize existing –– Several templates for ECLIPSE BIRT and examples
plants with the aid of sensors and actuators. It combines for SIMATIC Information Server
reliable, industrial-grade hardware with proven software • Online values, history
based on WinCC OA and intuitive apps for establishing • Compressed data, SQL, alarms
connections, setting controllers, and displaying informa- • Diagnostics tools
tion. • Audit trail

The solution is scalable for simple as well as complex

automation applications and takes less than an hour to
commission.

* Will be available later in a patch 5

 Technical product description
SIMATIC WinCC Open Architecture V3.17

Architecture • O PC: DA, AE, HDA (Client & Server)

• Client-server-system • Tele control / RTU: SSI, IEC 60870-5-101, -104,
• Functional separation into several processes DNP3, SINAUT, IEC 61850/61400
(managers) • Over 25 drivers natively supported
• Load distribution on several computers • Additional drivers on request or with a C++ API
• Redundancy (Hot Standby)
• Disaster Recovery System Data model
• Multi-server - distributed systems up to 2048 systems • Object oriented data model with freely definable and
• Heterogeneous operating systems and versions easy configurable structure
• Multi-monitor operation • Many standard objects included
• Multi-login on one workstation • Modeling of technological objects in any hierarchy
• Multi-user system • User definable tree structure
• Event orientated process • Several different properties definable on elements
• Internal message compression • Type-in-type (referencing)
• Safety functions to increase reliability (overload • Inheritance
detection and regulation, query restrictions) • Groups
• VMware (+Cluster) support • Generate different views on the data model

Alarm system Engineering environment

• VDI 3699 / DIN 19235 • Graphical editor
• Freely definable alarm classes with 255 different • Project hierarchy editor (panel topology)
priorities and definition of alarm colors (blinking) • Project editor
• Standard, discrete and multiinstance alarms • Database editor
• Up to 255 analog alarm ranges • Control programming editor, Script Wizards
• Summary alarms • Mass data engineering and ASCII in / out manager
• Automatic filtering of alarms (handling of alarm • Integration of external version management tools
floods) (CVS, SVN, …)
• Panel hierarchy summary alarms • Simple symbols, EWOs, style sheets, color schemes
• Combined alarm- and event screen, alarm row (incl. Day/Night-Switch)
with definable column set and colors and advanced • Framework for engineering & application user inter-
sorting and filtering faces
• Storable configurations
• Direct access to the associated process window Graphical user interface
• Comments and attended values on alarms • Drag & Drop
• Split on warning areas and alarm areas • JavaScript
• Online change of alarm classes • Platform neutral application
• Showing Alarms in the trends • Zooming / Panning
• Cluttering / Decluttering
Process interfaces / drivers • Root-, child- and embedded panel
• Event-driven or cyclic polling • Multi-monitor operation
• Several different drivers at the same time on one • True color / synchronous blinking
server • Up to 8 picture layers
• Periphery time stamps • Online tool tips (multilingual)
• TCP/IP: SIMATIC S7, SIMATIC S7 Plus, MQTT, PROFINET/ • Configurable panel topology
PROFISAFE, TLS Gateway, Modbus, Ethernet/IP, SNMP • GUI navigation objects
Manager & Agent, BACnet • Online switchable multi language support
• OPC UA: DA, AC, HA (Client & Server)
6
 Technical data

• S upports the widely used graphical objects and Object libraries

widgets also with comprehensive animation capabili- • WinCC OA standard object library
ties • BACnet object library
• Support of external widgets • Library of Basic Processes
• Layout management “Responsive design“ • Build up your own libraries and reuse them
• Multitouch support: zooming, panning, decluttering,
safe two-hand operation and custom gestures Application programming / Scripting
• Navigation through panel hierarchy • Interpreter with C-syntax (“Control” language)
• Animations: panel transition, object animations, and multithreading support
animation groups • Object oriented aspects like classes
• Libraries and DLLs for customized extensions of
User access the scripting language
• Full user access security optional with integration into • Debugger / diagnostic tools
Windows Active Directory (Single Sign On) • Supports a lot of external interfaces, such as:
• Various permission levels database access, ADO, COM and XML, XML Parser,
• Command protocol (Audit trail) XML-RPC-Interface, UART- and TCP-access, WebSockets
• FDA 21 CFR Part 11 compliant • Complete access to attributes of graphical objects
• Plugin mechanism for external authentication systems • Know-how protection (Panel- / script encryption)
like LDAP • Additional Businesslogic via C++ or C# API
• IEC 62443-4-2 compliant • TIA Importer supporting TIA projects in Versions
V13 SP1, V14, V15
UTF-8 for multi language support
All Unicode characters can be represented in four bytes. Internet/Intranet
• Desktop UI
Time zone handling • Mobile UI for iOS and Android
WinCC OA uses UTC time zone and allows to spread dis- • Ultralight Client ULX UX (HTML5)
tributed systems to different time zones. • mobile App WinCC OA Operator (iOS)
For successful connection to the system the time has to be • Webserver, web alarm screen, diagnostics and
synchronized between the servers. reporting
• Supports main security functions (HTTPS, SSL,
Archiving Kerberos encryption, etc.)
Comprehensive archiving options
• Next Generation Archiver Certified standards
• Value archives as flat-file structure (HDB) • IEC 61508 (SIL3)
• ORACLE archiving • IEC 61850/61400 Client (KEMA/DNV GL)
• Parallel archiving (Oracle, HDB) • OPC UA
• Data compression • PROFINET/PROFISAFE (Client)
• Correction values • BACnet (B-OWS)
• Laboratory values
• Web-based reporting interface (SOAP)
• Reporting templates based on Eclipse BIRT and
SIMATIC Information Server

7
ETM professional control GmbH
A Siemens Company
Marktstrasse 3
7000 Eisenstadt
Austria
Phone: +43-2682-741-0
www.etm.at
[email protected]

Subject to changes 12/19

Order No.: 6ZB5370-1EG02-0BA0-V4
Dispo 26100
BR 1219 0.5 EIS 8 En
Printed in Austria
© ETM professional control GmbH

Security information
Siemens provides products and solutions with industrial security func-
tions that support the secure operation of plants, systems, machines
and networks.

In order to protect plants, systems, machines and networks against

cyber threats, it is necessary to implement – and continuously main-
tain – a holistic, state-of-the-art industrial security concept. Siemens’
products and solutions only form one element of such a concept.

Customer is responsible to prevent unauthorized access to its plants,

systems, machines and networks. Systems, machines and compo-
nents should only be connected to the enterprise network or the
internet if and to the extent necessary and with appropriate security
measures (e.g. use of firewalls and network segmentation) in place.

Additionally, Siemens’ guidance on appropriate security measures

should be taken into account. For more information about industrial
security, please visit http://www.siemens.com/industrialsecurity.

Siemens’ products and solutions undergo continuous development to

make them more secure. Siemens strongly recommends to apply
product updates as soon as available and to always use the latest
product versions. Use of product versions that are no longer sup-
ported, and failure to apply latest updates may increase customer’s
exposure to cyber threats.

To stay informed about product updates, subscribe to the Siemens

Industrial Security RSS Feed under
http://www.siemens.com/industrialsecurity.