ABB RTU500 series User Manual

ABB RTU500 series User Manual

Remote terminal unit
Table of Contents

Advertisement

RTU500 series
RTU500 series Remote Terminal Unit
User manual
Web server Release 12

Advertisement

Table of Contents
loading

Summary of Contents for ABB RTU500 series

  • Page 1 RTU500 series RTU500 series Remote Terminal Unit User manual Web server Release 12...
  • Page 2 Revision RTU500 series Remote Terminal Unit Revision Document identity: 1KGT 150 924 V000 1 Revision: Date: Changes: 07/2016 New document for Release 12.0 1KGT 150 924 V000 1 - ABB AG...
  • Page 3: Table Of Contents

    4.4.3 STOP button..................4-7 4.4.4 Control panel for process connection..........4-8 4.4.5 Status indicator................4-14 4.4.6 Log file download link..............4-15 SEV and SSC view - Elements of the user interface......... 4-15 ABB AG - 1KGT 150 924 V000 1 | I...
  • Page 4 RTUtil500 configuration..................7-1 HTTPS Web server access................. 7-3 Certificate handling..................... 7-4 7.3.1 Self-signed certificate.................7-4 7.3.2 External certificate................7-5 PPP Installation......................8-1 Windows 7......................8-1 USB RNDIS Driver Installation..................9-1 Windows 7......................9-1 Glossary........................10-1 II | 1KGT 150 924 V000 1 - ABB AG...
  • Page 5: Introduction

    Chapter 2.7 in figure "Fig. 28: Page for general information and pre-requisitions" . 1.2 Structure of this document This document is divided in two main parts: The first part describes the RTU500 series Web server functionality: The first part describes the RTU500 series Web server functionality: • Management functions: –...
  • Page 6: Access To The Web Server

    Figure 1: HTTPS access to an RTU Web server The access to the RTU500 series Web server is enabled by default, but it is possible to disable the access for each Ethernet interface in the configuration tool RTUtil500 [2]. See chapter "RTUtil500 configuration"...
  • Page 7 Figure 3: Log-off from Web server Additional to the manual log-off, the user will be logged off by the RTU500 series after a configurable time of inactivity. The timeout for automatic logout after user inactivity could be disabled and is configurable between 1 minute and 24 hours.
  • Page 8: Presentation Of The Rtu500 Series Web

    HTTP error messages" shall be disabled in the Internet Explorer. Without this option the detailed error information of the RTU500 series Web server are not shown. The option can be found in the "Advanced" tab of the "Internet Options" (see figure below).
  • Page 9 The 'selection frame' (3 right side) • will be updated cyclically (approximately every 2 seconds) or • must be updated on demand by the user. ABB AG - 1KGT 150 924 V000 1 | 1-5...
  • Page 10 Introduction RTU500 series Remote Terminal Unit Presentation of the RTU500 series Web Pages 1-6 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 11: Management

    – Editing: A configuration file generated by the WebUI configuration is called editing In addition the Integrated HMI project files can be downloaded with this page. The different table columns show the properties of the different configuration files. ABB AG - 1KGT 150 924 V000 1 | 2-1...
  • Page 12: Firmware Management

    2.2 Firmware Management To navigate to the Firmware-File Manager page, click on "Management" and on "Firmware Manage- ment" in the navigation frame. The different table columns show the properties of the different files. 2-2 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 13 RTU. The loading of the different software files is independent. The software is not distributed to other boards while loading. Figure 10: Firmware File Manager ABB AG - 1KGT 150 924 V000 1 | 2-3...
  • Page 14: License Management

    • a license for the 'integrated HMI' (option) It is possible to upgrade the RTU license with an license extension file (ABBRTU500Ext.lic), generated by ABB, by uploading the file via the Web server. The function is available with the license file manager...
  • Page 15: Language Management

    The different table columns show the properties of the different files. For each language 2 language files are required. For example for english langage: – webserver_en-US.stb (CSV format) – RTUi_en-US.rdt (XML format) ABB AG - 1KGT 150 924 V000 1 | 2-5...
  • Page 16: Change Language Of The Web Server

    Change language of the Web server The language of the Web server can be selected in the status frame. For changing the langage a reboot of the RTU is required. 2-6 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 17: User Management

    Figure 14: Change language of the Web server 2.5 User Management All modification of user accounts are done via the RTU500 series Web server. In the Web server menu the link "User Management" is the entry point for the user account management. This link can be found under the menu item "Management"...
  • Page 18: Security Policies

    2.5.1 Security Policies In the first tab of the user management the security policies of the RTU500 series are defined. Security policies are general rules, which are valid for all users and for the whole RTU500 system. As shown in the figure below the security policies are divided into the following two sections: •...
  • Page 19 Password policies The password policies define rules that a password must fulfill to get accepted by the RTU500 series. To enable the password policies the check box "Enforce password policies" must be checked (see figure in last chapter). Changes in the password policies are considered for new passwords only.
  • Page 20: User Accounts / Passwords

    In the dialog the affected user name is displayed and 2 text fields to type the new password. The password must be typed two times to eliminate, unintentional typing errors. The new password is accepted only if both text fields contain the same password. 2-10 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 21 Figure 18: Dialog to change the password of a user In delivery status the RTU500 series contains the following predefined user accounts, with their assigned user roles and their defined default user role:...
  • Page 22: User Roles

    "ABCDEFGHIJKLMNOBQRSTUVWXYZ" "0123456789 " The account permissions available in the RTU500 series are fix defined and cannot be changed. Each defined account permission allows several actions within the RTU500 series Web server or Integrated HMI. The table below shows all available permissions and describes the allowed actions for every permission in detail.
  • Page 23 Restart of RTU500 series via RTU500 series Web server. firmware@ABBRTU500 Change firmware files: – Upload and download all RTU500 series firmware files via the Web server. This comprises the RTU basic firmware, the communication controller firmware and the Integrated HMI firmware. –...
  • Page 24: Change Own User Password

    Enabling and use simulation and test mode: – Enable/Disable RTU500 series test mode via the Web server. The test mode al- lows the simulation of inputs/outputs in the test manager of the Web server. – Enable/Disable time administration test mode to allow setting of the RTU system time via the Web server.
  • Page 25: Password File Management

    After confirmation with "Ok" the default password file is active directly. A reset of the RTU500 series is not necessary, but all users are logged out and a re-login is required. After the reset all user accounts and passwords are reset to the default values. That means the re-login must happen with a default user and password.
  • Page 26: Password File Harmonization

    CMU's can became inconsistent. In case the password file is inconsistent between different CMU's the RTU500 series goes into a restricted mode. In this mode a login is possible but the only function available is the harmonization of the password file.
  • Page 27 Be sure to disable the advanced option "Show friendly HTTP error messages" if the Microsoft Internet Explorer is used as Web client. Without this option the detailed error information of the RTU500 series Web server are not shown. The option can be found in the "Advanced" tab of the "Internet Options".
  • Page 28 CMU. A CMU is authenticated by typing a user account with administrator permissions and selecting the button "Authenticate". A correct authenticated CMU is identified by the check box on the right side. Figure 26: Password file harmonization 2-18 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 29: Certificate Management

    A System Help Page is available, showing the pre-requisitions for the Web server of the RTU500 series. Figure 27: System help page: navigation tiles Figure 28: Page for general information and pre-requisitions ABB AG - 1KGT 150 924 V000 1 | 2-19...
  • Page 30 Management RTU500 series Remote Terminal Unit System Help Page with pre-requisitions 2-20 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 31: Diagnostics

    The logged information can be filtered in different areas (see "Fig. 30: System Log: General View"): • All • System • Activies • I/O boards • Connected I/O devices Figure 29: System Log: navigation tiles ABB AG - 1KGT 150 924 V000 1 | 3-1...
  • Page 32: System Event Status

    The state of the system is represented by 'System Events'. To view the status of the system events in the RTU500 series Web server the link "System Event Status" must be selected. This item can be found under the navigation tile "Diagnostics" as shown in the figure below.
  • Page 33: Hardware Tree

    RTU500 series Remote Terminal Unit Diagnostics Hardware Tree Figure 32: Displaying system events 3.3 Hardware Tree 3.3.1 General Overview Figure 33: Hardware tree: navigation tiles ABB AG - 1KGT 150 924 V000 1 | 3-3...
  • Page 34: Board Diagnosis

    • The user must have the privileges to perform commands (see chapter Chapter 2.5.3) • The debugging option must be temporary enabled (see chapter Chapter ) 3.3.2 Board Diagnosis Select a communication unit in the hardware tree to get information about it's state. 3-4 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 35 Figure 35: State of a communication unit Select a serial communication line, connected to a communication unit, to get static and dynamic information about this line. Figure 36: State of a serial communication line ABB AG - 1KGT 150 924 V000 1 | 3-5...
  • Page 36 Diagnostics RTU500 series Remote Terminal Unit Hardware Tree 3-6 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 37: Test & Simulation

    RTU, and must be 'enabled' again. – RIO protocol logging: If this feature is enabled RIO protocol logging function together with the Comprotware CPTT tool can be used. ABB AG - 1KGT 150 924 V000 1 | 4-1...
  • Page 38: Time Administration

    Figure 38: System Signaling, Time Administration This feature is available: – the user is connected to a CMU in the state 'Time Administration Master' – the debugging option is generally enabled (see Chapter 2.5.1) 4-2 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 39: General Overview: Test Mode

    The central element of the user interface is a grid or table containing the signals which are configured in the RTU500 series. The grid has eight columns and as many rows (each row representing a signal) as it is selected by the user.
  • Page 40 At the top of the next to last column, there is a button called "Clear filter". By clicking on it, the user clears all filters set in the three first columns of the grids. 4-4 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 41 POS (positive confirmation) and NEG (negative confirmation). The column pos- sesses another gray drop list at the bottom, whose function is the same described for the pre- vious column. ABB AG - 1KGT 150 924 V000 1 | 4-5...
  • Page 42 RTU and transmitted to the host systems (Fig. 46). In fact, each time that a spontaneous change happens in a signal, the green flash appears in the row and the value and cause of transmission fields are updated. 4-6 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 43: Multiple Simulation Interval

    The user has the possibility to stop a running simulation sequence by clicking on the STOP button. This action will also disable the Test Mode and set the RTU500 back in normal operation. ABB AG - 1KGT 150 924 V000 1 | 4-7...
  • Page 44: Control Panel For Process Connection

    Updates in the SPI's real value are blocked and not sent to the host systems. Instead, the user can simulate the signal by means of the Test Mode user interface. 4-8 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 45 Output commands sent by a host system to the SCO are blocked by the RTU500 and not sent to the target-subdevice. Test Mode generates automatically a ABB AG - 1KGT 150 924 V000 1 | 4-9...
  • Page 46 When at least one of the process command signals shown in the signals grid is disconnected from process in controlling direction, an additional element appears in the control panel for process con- nection (upper right corner of the user interface): 4-10 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 47 (Fig. 60). Finally, the button "Apply" must be clicked. Figure 60: Automatic simulation - command reaction ABB AG - 1KGT 150 924 V000 1 | 4-11...
  • Page 48 The behav- ior is the same described in Chapter , "Disconnecting signals in monitoring direction" and Chapter , "Disconnecting signals in controlling direction". 4-12 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 49 Chapter , "Disconnecting signals in controlling direction". Reconnecting signals To reconnect signals means to stop blocking inputs or outputs which had been previously discon- nected from process. Figure 66: Process reconnection ABB AG - 1KGT 150 924 V000 1 | 4-13...
  • Page 50: Status Indicator

    If the number of simulated signals is zero, the indicator is black (Fig. 69). Figure 69: No signals simulated 4-14 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 51: Log File Download Link

    Identifier" column from the Inputs and Outputs view. Their purpose is to help the user to filter the signals properly. The rest of the columns and their functionality remains the same as explained in Chapter 4.4.1 4.5.2 Input for multiple simulation interval See Chapter 4.4.2. ABB AG - 1KGT 150 924 V000 1 | 4-15...
  • Page 52: Stop Button

    As the security events have no value or cause of transmission, this grid has not such columns. 4.6.2 Input for multiple simulation interval See chapter Chapter 4.4.2. 4.6.3 STOP button See chapter Chapter 4.4.3. 4-16 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 53: Log File Download Link

    RTU500 series Remote Terminal Unit Test & Simulation Security Events view - elements of the user interface 4.6.4 Log file download link See chapter Chapter 4.4.6. ABB AG - 1KGT 150 924 V000 1 | 4-17...
  • Page 54 Test & Simulation RTU500 series Remote Terminal Unit Security Events view - elements of the user interface 4-18 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 55: Operation

    – the user has the privileges to use the integrated HMI (see chapter Chapter 2.5.3) 5.2 General Overview: Archives Archives are stored on the memory card of a communication unit. RTU500 series supports follow- ing archives: – Process Archives (see Chapter 5.3, "Process Archives") –...
  • Page 56: Process Archives

    • Download the complete list in predefined CSV format to the PC. 5.3 Process Archives Process archives are available for: • Events and Indications • Measurements • Pulse Counter Values 5-2 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 57: File Archive

    5.4 File Archive Within RTU500 series Webserver there is an own page for the file archive. This page shows the files in a variable structure, configurable by the user. This page is also used for the file transfer of the files to the workplace PC.
  • Page 58: Security Event Archive

    RTU500 series. For more information about security features see [1]. To view the security event archive in the RTU500 series Web server the link "Security Archive" must be selected. This link can be found under the menu item "Operation" as shown in the figure below.
  • Page 59 To scroll one page backward in the event list (towards older entries). • Go to beginning of the security event list to show the oldest entries. • Download complete security event list in predefined CSV format. ABB AG - 1KGT 150 924 V000 1 | 5-5...
  • Page 60 • For each security event an event text is shown. The text depends on the specific event id and is in the language selected for the whole RTU500 series Web server. To change the event text, the text must be modified in the language file of the Web server (like the other texts in the Web server as well).
  • Page 61: Engineering

    – if a base configuration file generated by RTUtil500 with pre-configuration is loaded to the RTU (see Chapter 2.1) – the online parameter change is generally enabled (see Chapter 2.5.1) – the user has the privileges to do online parameter changes (see Chapter 2.5.3) ABB AG - 1KGT 150 924 V000 1 | 6-1...
  • Page 62: Use Case 2: Rtu520 Online Configuration

    Parameter name Default Parameter location Station preconfigurable disabled RTU - Parameters only pre-configuration is done via RTUtil500. Final parameter setting with RTU Web server Figure 83: RTUtil560 configuration parameter: Station preconfigurable 6-2 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 63 RTU500 series Remote Terminal Unit Engineering Use case 2: RTU520 online configuration Figure 84: RTUtil500 window for preconfiguration ABB AG - 1KGT 150 924 V000 1 | 6-3...
  • Page 64 Engineering RTU500 series Remote Terminal Unit Use case 2: RTU520 online configuration 6-4 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 65: Secure Web Server Access

    Detailed information about HTTPS could be found in RFC2818 “HTTP Over TLS”. For the identification the RTU500 series Web server uses as default self-signed public key certificates not issued by a certification authority (CA). The default self-signed certificates are created at startup depending on the configuration.
  • Page 66 As shown in the next figure, the configuration parameters related to the secure Web server are located in the "General" tap at a CMU module (Hardware tree only). To secure the RTU500 series Web server with a self-signed certificate follows these steps: 1 Select the checkbox "Secure HTTPS Web server".
  • Page 67: Https Web Server Access

    7.2 HTTPS Web server access To access the RTU500 series Web server via HTTPS the URL given in the Web client must begin with “https://” followed by the IP address of the RTU. The following figure shows an example.
  • Page 68: Certificate Handling

    RTU500 series. If the Web server is configured for HTTPS a standard access is not possible anymore. In case of a standard access the Web server redirects the access to the secure pages of the RTU500 series Web server.
  • Page 69: External Certificate

    • For uploading the generated certificate must be stored in PKCS#12 format with the file ending ".p12". The upload of an external generated certificate is done via the RTU500 series Web server. In the Web server menu the link "Certificate Management" is the entry point for the certificate upload. This link can be found under the menu item "Management"...
  • Page 70 The shown link starts the user interface for the certificate upload. In the user interface are two areas. The upper area contains the certificates actually uploaded to the RTU500 series and the lower area controls the upload. The following figure shows this user interface. As there is no trusted, external certificate is uploaded in the example figure, a certificate error is shown as explained in chapter above.
  • Page 71 Figure 91: Start certificate upload When the upload is finished the RTU500 series has to be restarted to activate the certificate. It may be necessary to restart the Web client as well, to recognize the new certificate in the client. After a successful upload and restart the certificate management looks like shown in the next figure.
  • Page 72 Secure Web server access RTU500 series Remote Terminal Unit Certificate handling Figure 92: Certificate upload successfully finished For certificate generation SDM600 is recommended (System Data Manager SDM600 - User Manual). 7-8 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 73: Ppp Installation

    To create and establish a PPP connection to an RTU, select Start > Control Panel > Network and Sharing Center. Figure 93: Network and Sharing Center Select Set up a new connection or network. ABB AG - 1KGT 150 924 V000 1 | 8-1...
  • Page 74 RTU500 series Remote Terminal Unit Windows 7 Figure 94: Connection options Choose the connection option Set up a dial-up connection. Figure 95: Device selection Select the device e.g. Communications cable between two computers #2. 8-2 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 75 Figure 97: Create a Dial-up Connection (2) Select Set up the connection anyway. To configure the PPP connection, select Start > Control Panel > Network and Sharing Center > Change adapter settings. ABB AG - 1KGT 150 924 V000 1 | 8-3...
  • Page 76 Right-click on the connection created from the previous steps and click Properties. Figure 99: Dial-up Connection Properties (2) Remove the Phone number and verify below Connect using Communication cable between two computers with correct COM port is activated. Click Configure…. 8-4 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 77 Figure 100: Modem Configuration For the Maximum speed (bps), select 38400 from the drop-down list. Select the Options tab. Figure 101: Options Deactivate Prompt for phone number and click PPP Settings…. ABB AG - 1KGT 150 924 V000 1 | 8-5...
  • Page 78 RTU500 series Remote Terminal Unit Windows 7 Figure 102: PPP Settings Uncheck all three settings. Select the Security tab. Figure 103: Security Enable the settings from the figure above. Select the Networking tab. 8-6 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 79 Enable the settings from the figure above and click Advanced…. Select the IP Settings tab. Figure 105: Advanced TCP/IP Settings Use the settings from the figure above. The new connection is available now. ABB AG - 1KGT 150 924 V000 1 | 8-7...
  • Page 80 If the connection to the RTU is established, start the Internet Explorer without using a proxy server or bypass the proxy server for configured RTU IP address from Tools > Internet Options > Con- nections > LAN settings. 8-8 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 81: Usb Rndis Driver Installation

    The Windows 7 machine detects the new USB RNDIS Target Device and prompts you to install it. The following dialog box "Driver Software Installation" appears. Select the “Close” button. Figure 108: Driver Software Installation ABB AG - 1KGT 150 924 V000 1 | 9-1...
  • Page 82 Right click on USB RNDIS Target Device and choose “Update Driver” from context menu. You will be prompted with the driver selection wizard. Answer the question "How do you want to search for driver software?". Select the option "Browse my computer for driver software". 9-2 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 83 You will be prompted with the driver selection dialog. In this dialog click the ”Browse…” button and select the folder that contains the USB RNDIS driver information file for RTU hardware (wrs_us- b_rndis.inf): C:\Program Files (x86)\ABB\RTUtil500_11_0_1_0\usb and click “Next >”. ABB AG - 1KGT 150 924 V000 1 | 9-3...
  • Page 84 "Install this driver software anyway". Figure 112: Update Driver Software (Step 3) The installation wizard will finish the installation and notify you upon complete. Click the “Close” button to exit the installation wizard. 9-4 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 85 The USB RNDIS device is now installed on the Windows 7 machine. RNDIS emulates a network connection. A new network adapter is displayed in the Device Manager management console. Figure 114: Device Manager Launch the "Network Connections" control panel (Start / Run / ncpa.cpl) ABB AG - 1KGT 150 924 V000 1 | 9-5...
  • Page 86 Select context menu for the new Local Area Connection / Properties / Internet Protocol Version 4 (TCP/IPv4) / Properties Select the option "Use the following IP address" and enter: IP address: 169.254.0.1 Subnet mask: 255.255.0.0 9-6 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 87 When the USB RNDIS device is up and running you will be able to use it as you do with devices with a “regular” Ethernet connection to the RTU. ABB AG - 1KGT 150 924 V000 1 | 9-7...
  • Page 88 USB RNDIS Driver Installation RTU500 series Remote Terminal Unit Windows 7 9-8 | 1KGT 150 924 V000 1 - ABB AG...
  • Page 89: Glossary

    Regulation step Command Output Remote Terminal Unit Single Command Output System Event Single Point Input or Single point information System Single Command Step position Input Universal Serial Bus Virtual Private Network ABB AG - 1KGT 150 924 V000 1 | 10-1...
  • Page 90 ABB AG is not liable for any damages and/or losses related to such security breaches, any unauthorized access, interference, intrusion, leakage and/or theft of data or information.

Table of Contents