FactoryTalk View Site Edition Version 12 (CPR9 SR12) Design Considerations
FactoryTalk View Site Edition Version 12 (CPR9 SR12) Design Considerations
1. For architectures making use of a domain, it is recommended to use more than one domain controller such that a host failure will not interrupt domain services.
2. For architecture making use of Remote Desktop Services, it is recommended to use more than one RDS server to prevent a single point of failure for thin clients.
3. For smaller applications, this can be co-located with the VantagePoint Server host or the AssetCentre Server host.
4. Depending upon MSSQL licensing, this instance of Express could be removed and all SQL data logged to the existing MSSQL Standard instance.
5. For use with VantagePoint. Refer to the Mobility section in 61808 - FAQ: FactoryTalk VantagePoint Frequently Asked Questions
(https://rockwellautomation.custhelp.com/app/answers/detail/a_id/61808
6. As with Remote Desktop Services using multiple servers to eliminate a single point of failure, the ThinManager servers are configured for redundancy.
7. ThinManager server is frequently co-located with Remote Desktop Services server. The components have been split onto different hosts in this example, but can be consolidated
if the number of hosts becomes a concern.
8. Thin Clients can be either ThinManager Ready or ThinManager Capable. ThinManager Ready means the clients have the ThinManager BIOS extension image embedded, allowing for
easy configuration out of the box. ThinManager Capable devices do not have anything related to ThinManager embedded, but can still be connected to the ThinManager server via
a PXE boot.
9. Internet Browsers can be used to connect to FactoryTalk VantagePoint, FactoryTalk ViewPoint, and FactoryTalk AssetCentre servers.
Networking Considerations
A distributed HMI solution requires a reliable network to support communications
between the servers and the clients. Ethernet communications rely on a network that
does not have noise, interrupted connectivity, excessive collisions, or broadcast
storms. The options are endless when designing your network topology, but best
practices are always recommended.
Learn more about Industrial Network Architectures here:
https://www.rockwellautomation.com/en_NA/capabilities/industrial-
networks/overview.page
Ethernet Design Considerations Reference Manual (Publication number ENET-RM002C)
Wireless Networking
FactoryTalk applications require network speeds of >= 100Mbps.
Occasionally wireless or 3rd party networks (T1, DSL, etc.) are implemented in a control
environment. For instance, to communicate with remote sites. Wireless networks are
prone to signal interference, leading to breaks in communications, therefore it
recommended to avoid using wireless with FactoryTalk View SE thick clients or with
direct data server to controller connections.
Time Synchronization
It is strongly recommended to synchronize time clocks on distributed system
components (controllers), computers, and redundant servers.
The Windows Time service (W32tm.exe) uses the Network Time Protocol (NTP) to
synchronize computer clocks on the network. Time synchronization is critical for the
proper operation of many Windows services and to ensure the security of Kerberos
authentication within an Active Directory environment. In a FactoryTalk View SE
distributed system, time synchronization ensures accurate time stamps on alarms and
diagnostic logs.
In workgroup environments, configure Windows Time to synchronize all the SE
computer clocks to an authoritative time server (e.g. the FactoryTalk Directory).
• In either environment, the authoritative time server should then be synched to:
o a reliable time server on the Internet
o a locally-connected hardware time source such as an atomic clock
• Check the Event Viewer System log of each computer to verify that the time is
being updated properly.
Time synchronization source in a domain is provided by the domain controller that
authenticated the client. The domain controller's time is set based on a weighting score
and run through a specific search order of domain controllers.
1. Cumulative weighting calculation (additive)
8 - Domain controller in same site
4 - Domain controller marked as a reliable time source
2 - Domain controller located in the parent domain
1 - Domain controller that is a PDC emulator
2. Specific search order of all domain controllers meeting the following criteria and
assigning them a score
Parent domain controller in-site, reliable or not
Local domain controller in-site, reliable only
Multi-Homed PCs
Multi-homed servers (i.e.: servers with 2 or more NIC’s connected to 2 different
Authentication:
Authentication in a Windows domain environment is centralized and performed by a
domain controller. This authentication utilizes kerberos. A kerberos ticket has a default
Factorytalk View SE HMI Tag Database uses Microsoft SQL Server Express 2014 SP2
As of FactoryTalk View Site Edition version 10, the Microsoft SQL Server 2008 R2
Express edition was replaced with Microsoft SQL Server Express 2014 SP2.
All references to SQL Server are referring to the 32-bit application version, which is
installed with FactoryTalk View SE Station, Studio and Server.
FactoryTalk Alarms and Events servers per application 10 non-redundant servers or 10 redundant server pairs
FactoryTalk Linx
FactoryTalk Linx data servers per application 10 non-redundant servers or 10 redundant server pairs
FactoryTalk View SE
Total data logged tags per HMI server (1 second scan 5,000
rate)
Reference information for the superscript numbers noted in the table above:
1. The number of alarm backing tags influences the maximum number of available alarms because they increase the resource
requirements of the alarm server. When using backing tags for status and control, a good rule of thumb is to multiply the total
number of backing tags by the total number of alarms, and ensure the result is less than 20,000. PlantPAx® users should refer to
the PlantPAx Reference Manual PROCES-RM001 for alarm server sizing guidance for a PlantPAx application.
2. This number is the sum of both instruction alarms and Logix tag-based alarms across all the controller shortcuts in each
FactoryTalk Linx server.
3. The total number of alarms per application includes all FactoryTalk Alarms and Events tag-based and device-based alarms in the
application.
4. Refer to Rockwell Automation Answer ID 1070902 for detailed information to determine system scalability for the total device tags
per application.
5. The maximum number of HMI tags that can be created on a single HMI server is 175,000. Extensive use of HMI tags has a significant
performance impact on an HMI server, so Rockwell Automation recommends minimizing their use, and instead using direct-
reference tags as much as possible.
For information about FactoryTalk View SE requirements that might affect the design
of a redundant system, see FactoryTalk View Site Edition Installation Guide. For
information about requirements that apply to redundant data servers such as
FactoryTalk Linx and RSLinx Classic, see the product documentation.
Redundancy Configuration
The typical configuration when using two computers in an HMI system, is to have one
designated as the “Primary” with the responsibility of the Primary HMI Server, Primary
Live Data Server and Primary Alarm and Events Server. The second computer is
designated as “Secondary” with the responsibility of the Secondary HMI Server,
Secondary Live Data Server and Secondary Alarm and Events Server.
Additional Information:
FactoryTalk View SE User's Guide (Publication VIEWSE-UM006)
Alarms and Events System Configuration Guide (Publication FTAE-RM001)
8 Hardware Redundancy
Hardware Redundancy is handled at or below the operating system level of the PC.
Failover occurs when a hardware component fails, such as a motherboard, hard disk,
Ethernet card, or input device. This type of redundancy is not directly related to the
FactoryTalk application software. Typically, these types of solutions require special
drivers or perhaps even virtual environments in which application software would run.
When implementing anything other than standard Windows hardware with a standard
Windows installation, it is important to test and qualify your FactoryTalk enabled
system before placing it into a production environment. Detailed information on this
topic is outside the scope of this document.
AID 731619 - Designing for Mobility: Top 10 Design Tips for a Mobile HMI with FactoryTalk
ViewPoint
A FactoryTalk ViewPoint web application consists of graphic displays selected from an
existing FactoryTalk View application, converted for viewing in a web browser, and then
published to a FactoryTalk ViewPoint Server (web server).
• For Site Edition applications, the FactoryTalk ViewPoint Server runs on a desktop
or server computer.
• For Machine Edition applications, a PanelView™ Plus, PanelView™ Plus 6 or
PanelView™ Plus 7 operator terminal functions as the server.
Some benefits of FactoryTalk® ViewPoint include:
• Automatic display scaling
• Multiple display browsing made easy
• Simple access for remote clients
Some features supported by FactoryTalk View SE are not supported in ViewPoint
architecture. Refer to the following Rockwell Automation Knowledgebase content:
AID 57596 - FactoryTalk ViewPoint: FactoryTalk View Object and Feature Support
References:
AID 62112 - FactoryTalk ViewPoint Compatibility Matrix
AID 57990 - FactoryTalk ViewPoint Tips and Best Practices TOC
Controller Memory
Be sure to size the controller appropriately for HMI communications. When there are
multiple Data servers talking to a single ControlLogix Controller, separate memory is
consumed by each Data server instance.
If a controller must send its data to an HMI or to a database, there must be enough
memory in the controller to handle both application code (which has priority) as well as
communications. Remember that the communications task in the controller has the
lowest priority.
In order for displays with data collection to function properly, they must be able to
gather data from controllers in an efficient and reliable manner.
Keep in mind that both RSLinx Classic and FactoryTalk Linx use up memory in a
ControlLogix Controller when they are requesting data.
• FactoryTalk Linx is the data server for Rockwell Automation control hardware.
• FactoryTalk Linx Gateway is for third-party OPC DA and UA software access.
Periodic Tasks
• After execution, task suspends and waits for trigger. While task is suspended,
communications are serviced.
o Beware of task overlap! Task overlap occurs when the controller cannot
execute all tasks in the configured interval. If task overlap occurs, the
overlapping task simply does not execute and waits for the next trigger. While
this state may appear to provide more idle time to service communications, it
comes at the expense of lost execution of periodic tasks.
CIP Sync™ (CIP Network + IEEE-1588 Standard) is a time synchronization method. It can
provide synchronizing of all devices over Ethernet with a UCT time value with up to 100
nanoseconds accuracy. AID 55019 - CIP Sync (IEEE 1588)
Controller Redundancy
When ControlLogix Redundancy is being used, it is important to configure more
communications time in the controller. Communications time is used by the processors
to synchronize. Since the synchronization occurs during the Communications Time it is
necessary to allow more time so that the HMI system is also able to obtain the requested
data.
ControlLogix Redundancy – Ethernet/IP: When ControlLogix Redundancy is being used
with FactoryTalk Linx data servers, IP address swapping must be used.
12 PlantPAX Architectures
The recommended PlantPAx specifications help reduce variability by defining a set of
system architectures and associated products and documenting best practices.
PlantPAx specifications are geared towards process systems and are sized so system
performance is not affected by normal variations in hardware and software
configurations.
All PlantPAx class architectures achieve targeted system performance by following
defined specifications.
For information on PlantPAx systems, see Rockwell Automation Literature Library:
• PlantPAx Distributed Control System Reference Manual
13 FactoryTalkView SE Installation
Unattended installation
FactoryTalk View Site Edition supports the unattended mode to install the software.
You can typically use this mode during large-scale roll outs when it might be too slow
and costly to have administrators or technicians interactively install the software on
individual computers.
14 FactoryTalk Activation
The FactoryTalk Activation Manager is an application used to acquire and manage
Rockwell Automation Software Activations.
FactoryTalk Activation Manager provides a choice of configuration options:
• node-locked (includes local and mobile)
• concurrent (includes floating and borrowed)
In systems using HMI clients that may not be dedicated, it might be desirable to use a
single, centralized FactoryTalk Activation server to serve client licenses.
For more details, also see Rockwell Automation Knowledgebase Answer ID:
AID 507425 - Data Server Decision Guide
18 Datalogging
Data logging is a FactoryTalk View SE component that collects and stores tag values.
When using a Datalog Model, a user can define which tags to collect for a specific
configuration and where to store the collected values.
When planning data collection, design the system so only essential data is collected.
Limiting data collection is important because collection activities require substantial
processing power and generate significant traffic on the communication channel or
network.
Keep data collection requirements in mind when designing the layout of the
programmable controller data tables and the tag database. Ideally, tag addresses
should reference contiguous blocks of programmable controller data tables to reduce
network traffic and optimize system response.
In a redundant SE system it is suggested to log to a third computer as opposed to locally,
in doing this there is only one location to manage the data and there is no need to merge
multiple files or databases together after a failover or switchover.
19 Global Objects
A Global Object Library can be used to improve efficiency and provide better
organization of large projects.
A Global Object is an object that is created once and can then be referenced multiple
times on multiple displays in an application. When changes are made to the original
(base) object, the copies (reference objects) are changed as well.
A Global Object display (.ggx file) contains the base objects. It is possible to define
multiple base objects within a single Global Object display. A base object can also be
made up from other base objects.
20 Security
Security threats to a Process Control System generally fall into 4 categories: external,
internal, intentional and accidental.
Detailed security recommendations against external threats are beyond the scope of
this document. However, there are some basic measures that should be taken to
protect against the most common threat – the day-to-day users of the HMI system.
Recommendations in this area include:
• Password protect the computer’s BIOS. To prevent booting from anything other
than the local hard drive, configure the computer to boot only from the hard drive,
and then configure a BIOS password so that mischievous users cannot change the
boot device.
FactoryTalk Security
FactoryTalk Security authenticates user identities and authorizes user requests to
access a FactoryTalk-enabled system. These security services are fully integrated into
the FactoryTalk Directory and are included as part of the FactoryTalk Services Platform.
FactoryTalk Security includes user authentication that determines who can open,
create, modify, and delete application components, and on which computers the
actions are allowed. Use FactoryTalk Security to add user and group security accounts
as well as Windows-linked accounts, and set up security for common operator actions.
FactoryTalk Security can be configured to:
• Prevent writes to specified tags from the FactoryTalk View SE Client.
• Prevent access to specified displays from the FactoryTalk View SE Client.
• Prevent access to specified commands from the FactoryTalk View SE Client.
• Prevent changes to the application from FactoryTalk View SE Studio or the
FactoryTalk View SE Administration Console.
To open the FactoryTalk View SE User Accounts editor or the Secured Commands
editor, the user requires access to the Common/Create Children action, in addition to
the Common actions, Configure Security, List Children, Read, and Write, on the area or
application.
For more details, also see Rockwell Automation Knowledgebase Answer ID:
AID 30980 - FactoryTalk Security - Tips and Best Practices
21 Trending
When planning trends, consider how they will be used. For example, will the trend be
used to:
• Analyze process information.
• Monitor production efficiency.
• Review archived process variables to ensure compliance with government
New data connector for OSI PI in ViewPoint Trends - Version 12 and later
Configure OSI PI Server as a native data source in FactoryTalk View SE TrendPro.
Systems with an existing Enterprise OSI PI configuration can now display data from
OSI PI on a ViewPoint Trend. No additional license required.
22 Language Switching
Language switching allows operators to view user-defined text strings in an
application, in up to 40 different languages. At run time, in a distributed application,
multiple FactoryTalk View SE clients can switch between any of the languages the
application supports.
Generally, it is best practice to develop all the screens in one language first, then import
the translations at the very end. Once translated, all screen text edits and additions
must be updated in both languages.
23 Graphic Displays
Develop Hierarchies for Efficiency and Clarity
Develop a hierarchy of displays with each display giving more granular detail of an
object, area or function. This prevents displays from being cluttered by attempting to
display a large amount of information at one time. This also reduces the demands on
the Live Data Server from having to poll and display a large amount of unnecessary data.
Create Templates
Create templates to ensure consistency of appearance. Use global objects and
parameter passing for efficient re-use of screen content.
Use Wallpaper
When importing a large graphic object (*.jpg, *.bmp) to use as a background, converting
the object to wallpaper will allow smoother mouse control over the object and provide
a better environment for developing the graphic. It also saves memory for faster display
Image formats
Image file types supported are BMP, JPG and PNG. For version 12 and later SVG (Scalar
Vector Graphics) are supported. SVG images are easier to resize to the desired width and
height. Leverage the new updated image library - Symbol Factory 3.0 Enhanced Objects.
Faceplates
Consider using faceplates. Faceplates are standard screens that can be used (and re-
used) within an application. Faceplates can correspond to a Logix5000 instruction, a
tag structure within Logix5000 AOI, or any group of tags that is repeated throughout an
application. Process faceplates can be included in any application by right-clicking on
the HMI server in FactoryTalk View Studio and selecting “Add Process Faceplates…”. A
faceplate is a graphic screen like any other and counts toward the licensed display
count of an application.
In addition you can obtain PlantPAx Process Objects Library. They are a collection of
sophisticated AOIs and coordinating faceplates that provide functionally typical for
process customers.
Rockwell Automation Knowledgebase Answer ID:
AID 62682 - Rockwell Automation Library of Process Objects (Process Library) for the
PlantPAx System
Other Faceplates can also be found through the Sample Code Library. Download of
these faceplates is free and does not require a support contract. However, take note
that users may submit code as well and some code may be unverified. Be sure to test
any downloaded code thoroughly before placing it into production. Searching for
VBA Forms or modal VBA Use displays instead of VBA forms since they do not block object
popups events or have the chance of getting caught “behind” the
operator’s HMI screens.
Use VBA to check for high/low FactoryTalk View SE Numeric Input objects contain numeric entry
limits when operator enters a high and low limit settings, as well as an option to set tooltip text
set point. for the operator.
Use VBA to read in tags to set Embedded variables allow you to dynamically insert tags into the
text displays for the operator, captions on graphical objects, tooltip text, local messages and
popup window titles, or display title bars.
tooltips.
26 Multi-Monitor Support
Multi-monitor deployment – FactoryTalk View SE version 10 (CPR9 SR10) and later
Supports the automatic and dynamic management of HMI application displays. This
provides operators more screens to view more information about process operations
from a single workstation.
• The monitor configuration is defined per client and can be unique per operator
station.
• An HMI Client configuration can support individual configuration of up to six
monitors.
• Applications can span multiple monitors. You can easily drag the displays between
monitors.
• HMI displays can be displayed on the specific pre-configured monitors or
dynamically based on the relative location of originating request.
• The ‘/M’ parameter provides the ability for the display command to specify which
specific monitor the display should be opened on.
For additional details, see the FactoryTalk View Site Edition User's Guide
Publication VIEWSE-UM006
Log customized audit message for numeric input object – Version 12 and later
Log customized audit message for numeric input object when setting a tag value.
Support for insert of a tag or parameter (#) into the remark command. Support for
using new placeholder’s /N and /C to capture the new value and current value of the
associated tag.
DeskLock
A utility that locks users in the FactoryTalk View SE Client program and prevents them
from having access to the Windows desktop and using Windows system keys.
Compatibility
AID 35330 - Rockwell Software Products and Antivirus Software
Data Communications
FactoryTalk Linx Getting Results Guide (Publication LNXENT-GR00)
AID 58963 - RSLinx Classic, RSLinx Enterprise, FactoryTalk Linx Driver Compatibility
Matrix
AID 52353 - OPC and DCOM Information, Tutorials and Troubleshooting
AID 65406 - Using FactoryTalk Applications with Third Party Devices
AID 29402 - TCP/UDP Ports used by Rockwell Automation products
AID 26464 - RSLinx Internals: OPC/DCOM timeouts when a remote client is
disconnected
AID 68789 - RSLinx Enterprise LogixDP Data Provider Information
ControlLogix
ControlLogix Selection Guide (Publication 1756-SG00)
RSLogix5000 Controllers Design Considerations (Publication 1756-RM094)
ControlLogix Redundancy System User Manual (Publication 1756-UM523)
ControlLogix Enhanced Redundancy System User Manual (Publication 1756-UM535)
AID 47065 - ControlLogix Controller Common Specifications
AID 40314 - How Many ControlLogix Processors Are Supported in a Single Chassis
AID 45926 - Logix 5000 Tag Import Utility for RSView32, FactoryTalk View Studio and
FactoryTalk Transaction Manager