Poly Works Talisman Network Security and Setup Guide
Poly Works Talisman Network Security and Setup Guide
Network Security
and Setup
© 2011–2020 InnovMetric Software Inc. All rights reserved. PolyWorks® is a registered
trademark of InnovMetric Software Inc. InnovMetric, PolyWorks|Inspector,
PolyWorks|Modeler, PolyWorks|Talisman, PolyWorks|Reviewer, IMAlign, IMMerge, and "The
Universal 3D Metrology Software Platform" are trademarks of InnovMetric Software Inc.
Apple, App Store, iPod touch, iPad, iPhone, and Bonjour are registered trademarks of Apple
Inc. Android™ and Google Play are trademarks of Google Inc. SmartGD&T is a trademark of
Multi Metrics Inc. All other trademarks are the property of their respective owners.
This manual, as well as the software described in it, is furnished under license and may be
used or copied only in accordance with the terms of such license. The content of this
document is furnished for informational use only, and is subject to change without notice.
InnovMetric Software Inc. assumes no responsibility or liability for any errors or inaccuracies
that may appear in this document.
Except as permitted by such license, reproduction in whole or in part in any way without
written permission from InnovMetric Software is strictly prohibited.
30 5. Troubleshooting
31 5.1 Talisman connection troubleshooting steps
31 5.1.1 Project not visible on the Talisman Projects page
32 5.1.2 Connection to the project not successful
33 5.2 Verifying the network configuration
33 5.2.1 PolyWorks server network configuration
33 5.2.1.1 Verifying the network configuration from PolyWorks
34 5.2.1.2 Verifying the network configuration in Windows
36 5.2.2 Subnet mask values
36 5.3 Choosing a different network connection
38 5.4 Restarting the PolyWorks server for Talisman
39 5.5 Technical support
This guide covers network issues that network administrators must consider when
using PolyWorks|Talisman™. Talisman is a remote control application for mobile devices
that allows, for example, operators to take measurements and obtain project
information without having to navigate back and forth to the computer running the
PolyWorks Metrology Suite.
Note that no proprietary information is saved on the mobile device. The application has
been designed to guarantee total confidentiality under all circumstances. This subject
is presented in Chapter 2 Implementing Network Security Mechanisms and Chapter 3
Setting up a Wi-Fi network.
For information on how to use Talisman, see the Talisman document available from the
Help menu of the Workspace Manager, the PolyWorks|Inspector module, and the
IMAlign module.
The User Datagram Protocol (UDP) is a simple broadcast protocol for pushing
information on a network without establishing a connection with any specific host,
without any guarantee regarding the order in which the information arrives or
whether the information will arrive at all.
The Talisman application uses TCP to connect to a PolyWorks project and exchange
information with it.
Here is a diagram that illustrates the communication between the Talisman client and
the PolyWorks server:
UDP
TCP
Mobile device
Computer
For detailed information concerning the steps involved in Talisman project detection
and connections, see Appendix A Project Detection and Connection Diagram.
This chapter describes best practices with regards to the requirements and security
mechanisms.
2.1 Requirements
Before using Talisman, the following requirements must be met:
If no Wi-Fi network is set up, it is recommended to build one with a Wi-Fi access point
device. It is not recommended to use a notebook computer with Wi-Fi capabilities, as
this can be extremely cumbersome. Chapter 3 Setting up a Wi-Fi network explains
how to set up an access point.
The PolyWorks® Metrology Suite 2020 or later must be installed on your workstation.
See Chapter 4 Installing the Bonjour Networking Technology for the installation
procedure.
The Talisman app must be downloaded. It is available for Apple mobile devices from
the App Store online store, and for Android mobile devices from Google Play.
It is recommended that you configure your Wi-Fi network so that the communications
are encrypted.
You can set up a list of authorized devices for a PolyWorks server. On the PolyWorks
server, proceed as follows:
2. Specify the Device ID of each allowed device, then save the file. More information on
the Device ID is provided later in this section.
Only the devices included in the whitelist are granted access to Talisman projects. There
are two levels of verification:
Note:
If there is no TalismanDevices.txt file in the PolyWorks Metrology Suite installation
folder (default behavior), or if this file is empty, all devices are authorized.
A visual indicator (icon) is added to the status bar of PolyWorks servers for Talisman
(e.g., PolyWorks|Inspector). By means of this indicator, it is possible to access the
Talisman client device (e.g., iPod touch) information (see the figure that follows). The
Device ID can be copied from there and be used to create the whitelist.
Communication between a client device and the PolyWorks server uses TCP ports. By
default, these ports are not specified, which means that they are determined by the
server.
To specify minimum and maximum port numbers to use to find an available port:
2. In this file, enter the following lines (see the note that follows):
TALISMAN_TCPIP_RESTRICT_PORTS = 1
Note that valid port numbers are 0, and between 1025 and 65535 inclusively. Zero
means that the port number is determined by the server.
To specify... Examples
Note that the number of concurrent PolyWorks servers enabled on the same
computer is limited by the number of allowed ports.
The TCP port setting applies to all PolyWorks users of the same computer. However, it
can be overridden by a user through the Workspace Manager options.
When starting Talisman on the mobile device, a list of available projects is displayed on
the screen. If you cannot connect to a project, you may need to open some TCP ports in
your computer's firewall.
1. In Windows 10, right-click the Start button to access the Control Panel. In Windows
7 and Windows 8, on the Start menu, choose Control Panel, then Windows
Firewall.
3. In the left pane, click Inbound Rules, and make sure that PolyWorks|Inspector or
IMAlign is not blocked by deleting any existing blocking rule related to
PolyWorks|Inspector or IMAlign.
6. Select the TCP port type, and enter the specific local ports that were specified for
Talisman, either through the Workspace Manager options or the global
configuration file.
7. Click Next.
9. Select the type of network to which the rule applies, then click Next.
10. Enter a name and a description for the rule, then click Finish.
The rule should now be listed in the Inbound Rules section. See the following
example.
If the projects are not visible on the Projects page of Talisman, add similar firewall
inbound and outbound rules for UDP port 5353, which is used by the Bonjour
networking technology to broadcast project information. For more information on UDP
port 5353, see the introduction in Chapter 4 Installing the Bonjour Networking
Technology.
If any change has been made, restart the PolyWorks server for Talisman (see Section 5.4
Restarting the PolyWorks server for Talisman).
In Windows 7 or later, create a Wi-Fi hotspot with a notebook computer with Wi-Fi
capabilities (can be used for a quick setup, like a demonstration). See Section 3.2
Using Windows to create a Wi-Fi hotspot with a notebook computer.
To set up the Wi-Fi network, you must first take note of the current network
configuration (Steps 1 to 4 that follow). You must also verify that the Talisman client and
the PolyWorks server have the same network configuration. However, if the computer
used to set up the router, or the access point, is not part of a network, go to Step 5.
1. Using Windows 7 or later, open the Network Connections window. From the
Control Panel, choose Network and Sharing Center, then Change adapter
settings (on the left menu).
3. In the dialog box displayed, select Internet Protocol Version 4 (TCP/IPv4) (for
Windows 7 or later). Then, click the Properties button.
4. Note every configuration setting displayed in the dialog box. You will have to re-
enter this information after the access point configuration.
Note:
If the Obtain an IP address automatically option is selected, you must obtain this
address:
In Windows 10, right-click the Start button to access the Run item. In Windows 7
and Windows 8, from the Start menu, choose Run.
5. Connect the power cable to the TP-Link access point, and connect the access point
to your computer using a network cable.
You are ready to change or add the configuration, as described in the text that follows:
6. Open the IP address dialog box (see Steps 1-3 for instructions on accessing the
dialog box).
9. Launch your Web browser (such as Internet Explorer) and enter 192.168.1.254 in
the address bar.
11. Enter the user name and password for the TP-Link access point. By default, the
values are:
Password = admin
Remember the user name and password; they are required in a following step.
The following window appears. This is the main menu of the access point device.
14. In the QSS (Quick Secure Setup) window, click the Disable QSS button. The QSS
status becomes Disabled.
16. Enter an IP address for the access point in your current network.
Since the starting IP address was 192.168.0.132, the network identifier is 192.168.0.
You must keep the first three digit groups and change only the last one (in our
example, 132). Do not use 1, 50, or 254 as the last digit group since these groups are
often used by devices. In this example, we use 180.
17. Enter the correct default gateway (in our example, 192.168.1.254).
19. Connect the computer and the access point to your local network.
21. Restart your Web browser and use the new access point address to establish the
connection with the access point (in our example, 192.168.0.180).
22. Enter the same user name and password as entered before.
24. In the SSID field of the Wireless Settings window, specify a name for the access
point.
You can change the default name (in this example, TP-LINK_ABF0A4) for another
name. The name specified in the SSID field will be the one displayed on the Wi-Fi
devices (i.e., iPad) at connection time.
Note:
Remember this password since it will be required to configure certain mobile
devices (i.e., iPod touch).
You can change the pool of addresses available on your wireless network. In the
previous example, there are only six IP addresses available for the wireless devices
(from 192.168.0.100 to 192.168.0.105).
35. In the Backup & Restore section, you can save a copy of the configuration on your
main computer.
36. In the Password section, it is strongly recommended that you change the default
password for security reasons.
37. Reboot the TP-Link access point (by unplugging the power cable for a few seconds).
38. Plug the power cable back in and wait about a minute.
39. Test the wireless access point with a wireless-capable device (i.e., iPad).
Requirements:
1. Run the cmd.exe command-line utility with administrator rights and enter the
following command:
This chapter explains how to install the Bonjour service. This installation must be
performed before enabling the PolyWorks server. Otherwise, when clicking PolyWorks
server for Talisman in the Workspace Manager options, you will be prompted to install
the service.
Note that the Bonjour networking protocol sends and receives network packets on
UDP port 5353. The Bonjour installer configures the Windows firewall appropriately
during installation on supported systems. However, if you have a separate “personal
firewall” enabled, you have to make sure that UDP port 5353 is open. Otherwise, no
projects will be displayed on the Projects page of Talisman. See Section 2.2.4 Firewall
configuration for information on how to open TCP ports in your firewall.
2. Open the redist folder, and double-click the Bonjour.msi file (or Bonjour64.msi for
64-bit systems).The following window appears:
4. In the window displayed, choose I accept the terms in the license agreement.
5. Click Next.
7. Click Next.
8. In the Installation Options window, set the appropriate options and choose the
destination folder.
Note that the parameters set in this window do not affect the Talisman
functionalities.
9. Click Install.
Start
Yes
1. Check the PolyWorks server for Talisman option in the Workspace Manager:
1.2 Click the Talisman page in the left part of the dialog box.
1.3 Make sure that the PolyWorks server for Talisman option is selected,
then click Apply.
2.1 In the module, open the menu of the Talisman status bar icon and select
Restart PolyWorks Server.
2.2 On the mobile device, press or tap the Home button to close the Talisman
application.
2.3 For Apple mobile devices, press or tap the Home button twice to remove
the application from the device’s cache. For Android mobile devices, press
or tap the Recent Apps button and swipe the application to the left or
right.
3. Check the network configuration for both the computer and the mobile device.
See Section 5.2 Verifying the network configuration for more information.
See Section 5.3 Choosing a different network connection for more information.
5.3 Deselect the PolyWorks server for Talisman option and click Apply.
5.4 Select the PolyWorks server for Talisman option and click Apply.
Reapplying the option validates the Bonjour installation and the current
running status, prompting the user if a problem is detected.
If any changes are made, you must restart the PolyWorks server (see
Section 5.4 Restarting the PolyWorks server for Talisman).
Check if there is a network security software or device that is blocking the port. See
Section 2.2.4 Firewall configuration for information on how to modify the Windows
firewall.
1. Check the network configuration for both the computer and the mobile device:
See Section 5.2 Verifying the network configuration for more information.
Check if there is a network security software or device that blocks the TCP ports used
for the static and dynamic ports. See Section 2.2.4 Firewall configuration for
information on how to modify the Windows firewall.
See Section 5.3 Choosing a different network connection for more information.
1. Click the Talisman icon on the module’s status bar, or select PolyWorks Server
Status from the icon's menu.
The PolyWorks Server Status for Talisman window displays. It contains the
PolyWorks server’s Name, IP address, Static port number (the TCP port used for the
PolyWorks server), and Dynamic port number (the TCP port used for the project).
1. In Windows 10, right-click the Start button to access the Control Panel. In Windows
7 and Windows 8, choose Start > Control Panel > Network and Sharing Center.
2. In the list of active networks, click the name of the network adapter next to the
Connections label.
3. In the window displayed, click the Details button. The details concerning the
current network configuration, including the IPv4 address and IPv4 subnet mask,
are displayed in the Network Connection Details window.
Note that the same information can be obtained using the ipconfig command in
the Command Prompt.
Also, the ipconfig /release command followed by the ipconfig /renew command
can be used to force a computer that does not use a static IP address to release its
address and reacquire it. This might be useful if you have to change some network
settings of the computer, or its router or access point.
To avoid problems, the subnet masks for both the mobile device and the server should
have the same values. As a result, the IP addresses will be very similar, the only
differences being the numbers for which the corresponding subnet mask value is 0. See
the following table:
If the subnet mask values are not the same on both the mobile device and the server,
you have to change either the Wi-Fi router's or access point's settings (to change the
mobile device's subnet mask), or the computer’s network adapter settings (to change
the server's subnet mask).
If any change is made, you must restart the PolyWorks server for Talisman (see Section
5.4 Restarting the PolyWorks server for Talisman).
1. Access the PolyWorks server for Talisman option in the Workspace Manager:
1.2 In the left part of the dialog box, click the Talisman page.
1.3 Make sure that the PolyWorks server for Talisman option is selected.
2.1 From the Network connection list box, choose a connection through
which both the server and the client will be able to communicate.
For more information on choosing a network connection, see the “Talisman options”
section of the PolyWorks Reference Guide.
1. Open the menu of the Talisman status bar icon in PolyWorks|Inspector or IMAlign.
1. Click the Talisman status bar icon in the module and copy and paste the information
found in the PolyWorks Server Status for Talisman window to a text file.
2. Generate a server log file by adding the following line to the [user configuration
folder]/.innovmetric.[version]/innovmetric.config2 file:
3. Generate a support assistant file using the Workspace Manager's Help > Support
Assistant menu item.
4. In another text file, write down as much information as possible regarding the
mobile device, including the Talisman version number (found at the bottom of the
Projects page), the device type (i.e., iPad) and the device OS information.
5. Send a detailed description of the problem along with the above files to the
InnovMetric Software technical support team at [email protected].
PolyWorks server
(e.g., Inspector)
1 10 11
8 7 Operating
Firewall
system
13 14
1. Port acquisition and project 6. Project selection and client identification information
information packaging for Bonjoura. packaging for TCP/IP.
2. Outgoing UDP broadcast 7. Outgoing TCP/IP call.
authorization for Bonjour. 8. Incoming TCP/IP call authorization.
3. Project coordinates (IP address and 9. TCP/IP call reception.
TCP port) broadcast. 10. Client identification information analysis.
4. Incoming UDP broadcast 11. Client initialization information packaging for TCP/IP.
authorization for Bonjour. 12. Outgoing TCP/IP call authorization.
5. Project list display using the 13. Outgoing TCP/IP call.
information received from Bonjour.
14. Incoming TCP/IP call authorization.
15. Client initialization and connection confirmation.