background image

8 / 22

Siemens

Desigo Touch and Web

CM111029en_04

Building Technologies

Commissioning – IT security

2014-08-15

1.2  IT 

security

The Desigo Touch and Web products implement the latest standard communica-
tions technologies. For this reason, compliance with IT security standards of the
related installation environments as well  as generally valid standards of the Desigo
system is a must. See also CM110663.

Note in particular the following issues with regard to Desigo Touch and Web:

·

  Use only strong passwords (password length, use of special characters, etc.).

This applies to user login for plant operation during daily operation as well as
to system operation as part of commissioning or service work.

·

  Do not use standard passwords. The password must always be unique and

specific to the project.

·

  HTTPS must be used as standard communications protocol between the op-

erator clients (Desigo Touchpanels, standard web browser) and the web inter-
face PXG3.W100. HTTPS is entered in the URL to connect to the web inter-
face PXG3.W100:

https://.........

·

  Desigo Touchpanels should not communicate via the Internet with the

PXG3.W100 web interface.

·

  The PXG3.W100 web interface should be accessible only via VPN over Inter-

net.

1.3 Prerequisites

·

  The touch panel is unpacked and possibly already installed in the control panel.

See also:
[4] Desigo PX automation and control system, mounting and installation guide
CA110396

·

  The computer is operational.

·

  The PXG3.W100 is properly set up on the firmware side.

For information on firmware setup, see the related online help of DNT (Firm-

ware

D

ownload and

N

ode Setup

T

ool) integrated in XWP.

·

  The configuration data is loaded properly in the PXG3.W100.

See the XWP online help CM111006en (chm).

Note

: You can browse the pages at any time during commissioning by using

the buttons < Back and Next >.

Summary of Contents for Desigo Touch Series

Page 1: ...s Desigo Desigo Touch and Web Installation and commissioning instructions CM111029en_04 2014 08 15 Building Technologies ...

Page 2: ...ing Technologies 2014 08 15 Siemens Switzerland Ltd Building Technologies Division International Headquarters Gubelstrasse 22 6301 Zug Switzerland Tel 41 41 724 24 24 www siemens com buildingtechnologies 2013 2014 Siemens Switzerland Ltd Subject to change ...

Page 3: ...isites 8 1 4 Touch panel commissioning Step by step 9 1 4 1 About procedures 9 1 4 2 Procedure 9 2 Compatibility limitations 13 2 1 Desigo touch panel and standard clients 13 2 2 Desigo Touch and Web Application examples 13 2 3 Supported browsers 14 2 4 System compatibility 14 2 5 System limits 15 2 5 1 XWP project 15 2 5 2 PXG3 W100 15 2 5 2 1 General 15 2 5 2 2 Customized views CVs 15 2 5 2 3 Gr...

Page 4: ...10396 0 3 Before you start 0 3 1 Trademarks The table below lists the third party trademarks used in this document and their legal owners The use of trademarks is subject to international and domestic provi sions of the law Trademarks Legal owner BACnet American National Standard ANSI ASHRAE 135 1995 Microsoft Microsoft Corporation siehe http www microsoft com trademarks t mark nopermit htm Window...

Page 5: ...thorized and properly trained and have the requisite technical knowledge to use our products as intended Additional information on products and applications is available On the intranet for Siemens employees only at https workspace sbt siemens com content 00001123 default aspx At your next Siemens branch office www siemens com sbt or at your system suppliers From the support team at headquarters f...

Page 6: ...nection via web browser and PC The operating instructions 4 tell you how to work with Siemens touch panels We require that you be familiar with using a web browser as well as network tec nology to be able to install and configure the Siemens PXM40 and PXM5 Structuring This document contains all practical information up front first part The second part provides useful explanations and some theory o...

Page 7: ...control over functionality These actions must be carried out exclusively in Desigo Xworks Plus the related PXG3 W100 To this end consult the Desigo Xworks Plus online help either from within Xworks Plus or via file CM111006en chm Customization of views and or functions These actions must also be carried out exclusively in Desigo Xworks Plus on the related PXG3 W100 Topology Touch Panels together w...

Page 8: ...st be used as standard communications protocol between the op erator clients Desigo Touchpanels standard web browser and the web inter face PXG3 W100 HTTPS is entered in the URL to connect to the web inter face PXG3 W100 https Desigo Touchpanels should not communicate via the Internet with the PXG3 W100 web interface The PXG3 W100 web interface should be accessible only via VPN over Inter net 1 3 ...

Page 9: ...pment 1 4 2 Procedure 1 If not yet done Connect the Desigo touch panel to the corresponding network plug using the network cable RJ45 2 If not yet done Connect to power 3 Wait for the touch panel to start This process may take a few seconds the Language page is displayed 4 Select the language 16 languages are integrated English is the default language 5 Save with Next The page Network Settings IPv...

Page 10: ... fields Finish with Next The server connection page opens Enter IP address or URL of the PXG3 W100 This ought to be defined in XWP prior to this action Complete with Finish The process may take a few seconds The page with the location defin opens Enter both Location and Password This is not the user password and it must also not match the user password OK to finish This concludes Binding The main ...

Page 11: ...word Tap OK The touch panel checks the entry After successful login The main functions and information as per the user rights are di played The user name is displayed in the status bar Users immediately receive the following feedback for incorrect or improperly entered login information 11 22 CM111029en_04 2014 08 15 The touch panel checks the entry After successful login The main functions and in...

Page 12: ...is logs out the current user 2 Log in the new user as per Login see above The login page is displayed automatically every time the touch panel is started See also the following paragraph on This completes the technical part of commissioning Different settings are availa ble however for user friendly operation of the touch panel They can be edited after login To do this see a detailed description i...

Page 13: ...ut the entire life cycle Special functions for permanent connection and plant monitoring 7 24 Watchdog Standard operator units tablets PCs notebooks smart phones etc supplement local operation and allow for remote access and operation using personal devices Standard operator units are designed for temporary plant access and are subject to other innovation and lifecycles 2 2 Desigo Touch and Web Ap...

Page 14: ...ailable and can be executed as documented Minor deviations in terms of display and operation to recommended browsers are possible fonts etc Grade C This category includes all HTML 5 0 capable browsers Examples Chrome 10 0 Safari 5 Partially compatible standard web browsers Minimally tested browsers Not supported by Siemens BT Access to the PXG3 W100 web interface is possible in princi ple Location...

Page 15: ...he available memory for the sum of all configura tion data Configurationdata tar BACnet objects total 2000 Max number of BACnet objects engineered on the PXG3 W100 BACnet objects perma nently displayed 300 Total number of permanently displayed BACnet objects the PXG3 W100 must update Customized views 25 Max number of customized views PXG3 W100 memory limit 2 5 2 2 Customized views CVs Item Limits ...

Page 16: ...d view at 3 graphics pages at 10 BACnet objects each If 10 web clients are connected to it the system limit 300 per manently displayed BACnet objects is reached All system limits must be adhered to simultaneously Limit Technical limit tested Limit Recommended limit tested Limit Recommended limit not tested 20 customized views 5 graphics pages per customized view 20 BACnet objects per graphics page...

Page 17: ...xels Format Description png Recommended for plant diagram graphics 1 jpg For photos 1 e g of the own building as home screen gif For graphics without animation svg Rendered by browsers thus resulting in possible differences Inkscape is recommended as the tool to create graphics SVG exported from Microsoft Visio is not supported 1 The best results are achieved at the above resolution 2144 x 1112 Sp...

Page 18: ...6 Command Control 21 PWR_CTL 216 Power Control 22 AI_RED 0 Analog input reduced function 23 AO_RED 1 Analog output reduced function 24 BI_RED 3 Binary input reduced function 25 BO_RED 4 Binary output reduced function 26 MI_RED 13 Multistate input red function 27 MO_RED 14 Multistate output red function 31 CI_ACC 23 Counter input accumulated 35 SCHED 17 Schedule 50 USRPRF 207 User profile 58 Block ...

Page 19: ...oltage is allowed Local laws must be adhered to To prevent earth loops sy tems with connected to ground system at one point only normally the transformer u less indicated differently Grounding as per SELV Safety transformer AC 230 V AC 24 V as per EN 61 558 Terminal block to star like distribution of AC 24 V and PXG3 W100 PXM40 50 Extra low voltage fuse for max power consumption at AC 24 V dependi...

Page 20: ... possible via DNT Discovery and Node Setup Tool due to technical issues In devices with FW version 1 15 30 497 updating the firmware via FWDT is mandatory to be able to update the device using DNT in the future Procedure 1 Disconnect the device from power 2 Press hold the Reset button reconnect the device to power 3 Wait until the orange LED flashes ca 10 seconds then 4 release the Reset button 5 ...

Page 21: ...FWDT has returned to normal mode 2 7 3 Factory reset web interface PXG3 100 Given certain circumstances it may be desirable or necessary to factory reset the device If so please exactly follow the procedure given below Attention The device will lose any password and other settings Only the IP network settings remain the same as before Procedure 1 Power off device 2 Power on device 3 Wait for all L...

Page 22: ...ing Technologies 2014 08 15 Siemens Switzerland Ltd Building Technologies Division International Headquarters Gubelstrasse 22 6301 Zug Switzerland Tel 41 41 724 24 24 www siemens com buildingtechnologies 2013 2014 Siemens Switzerland Ltd Subject to change ...

Reviews: