groov Server User's Guide
Contents
1. 3 Find the project file named project grv 4 Ifyou are sure you don t want to keep the project delete the project file Otherwise you should archive the project by moving or renaming the project file 5 Restart groov Server Backing Up and Restoring Your Project You should back up groov frequently because there is no automatic backup During backup your project is saved to a file on your computer IMPORTANT Your groov project files are not encrypted or obfuscated in any way This means that most of the project information except for groov User passwords in them can be read including the following SMTP account info including password User email accounts does not include the groov User passwords which are securely hashed before being stored Device addresses lag address information PAC tag names Modbus addresses OPC node id etc Opto 22 recommends that you secure your backup files using file or disk based encryption provided either by the operating system or other software hardware Also be aware that if you send project files to Opto 22 our personnel will have access to the information listed above To back up your project select File Backup Project to Computer A backup file is saved to your computer groov Server User s Guide BACKING UP AND RESTORING YOUR PROJECT Edit View Configure Security File Save All Changes Save All Changes and Switch to groov View Switch to groov View Op2. CHAPTER 1 GETTING STARTED After you have arranged the Handheld layout the same project viewed on a handheld device might look like this sco Verizon 11 38 AM amp 192 168 0 107 Output groov Server for Windows User s Guide WORKING WITH GROOV groov Server for Windows User s Guide 2 Using an SSL Certificate groov uses an SSL certificate to encrypt communications and prove groov s identity to client browsers An SSL certificate contains the server name the name of the organization that controls the server and digital signatures of organizations that vouch for the authenticity of the certificate The certificate is digitally signed either by a certificate authority CA or it is self signed The default certificate type a self signed certificate and configuration will cause your web browser to issue an untrusted site warning when accessing groov To avoid the warning you can install the self signed certificate in all the browser certificate stores used to access groov However whether or not the certificate is installed in the certificate stores communication is always encrypted Here s a comparison of the certificate types For one or two groovs and a small set of client browsers that remain pretty much the same and users who trust that your certificate is valid Easiest configuration Browser raises untrusted site warning But communication is still encrypted Trusted by those to whom the groov adm
3. Gauge Properties Tag None iy Min Value 0 Max Value 10 7 Inthe Update Tag for Gadget dialog box browse to a tag and select it Update Tag for Gadget 8 Click Update Gadget 9 Configure the gadget s properties groov Server for Windows User s Guide EN WORKING WITH GROOV For example the Round Gauge allows you to add zones with different colors for each zone To add a zone simply click the Add Zone button then choose the Min Value Max Value and Units that make sense for your variable Round Gauge Properties a ns ar groov_Example at Darr w OPT O22 com Min Value Max Value Needle Color Show Value Precision Units Override Tics Zone 1 Start Value End Value Color 10 Select File gt Save All and Switch to groov View You should now see your gadget running in View The round gauge s needle shows the tags current value Note that the live value is shown in blue text Live value Create Layouts 1 Click the gear symbol in the upper right corner of View and select Switch to groov Build 2 Add several more tags and gadgets to your project and arrange them in the Desktop amp Tablet view For help see form 2027 the groov User s Guide groov Server for Windows User s Guide CHAPTER 1 GETTING STARTED Fora Graph gadget use a variable that will change over time and generate a curve such as Tag temperature a Min Value 0 Gauge Pr
4. Store on Client Computers To prevent the untrusted site warning in browsers the self signed certificate must be added to the trust store for each browser used to access groov This step describes how to add the self signed certificate on a computer See the section below for the client computer s operating system Windows on page 18 OS X on page 20 If you want to add a self signed certificate on a mobile device see Step 3 Windows Internet Explorer amp Chrome 1 In Windows file explorer browse to the groov cer file you created previously See Step 1 Create a Self Signed Certificate and Private Key on page 16 This file is available in the directory where groov was installed C Program Files x86 Opto22 groov by default 2 Right click on the certificate file groov cer and choose Install Certificate to open the Certificate Import Wizard groov Server for Windows User s Guide CHAPTER 2 USING AN SSL CERTIFICATE Windows 7 Windows 8 Welcome to the Certificate Import Wizard This wizard helps you copy certificates certificate trust lists and certificate revocation lists from your disk to a te store Welcome to the Certificate Import Wizard A certificate which is issued by a certification authority is a confirmation of your identity and contains information used to protect data or to establish secure network This wizard helps you copy certificates certificate trust lists and certificate revocation con
5. About groov Server go groov Server for Windows Copyright 2012 Opto 22 Server Version R1 0 Server Build Date 7 16 2013 App Version R1 0c App Build Date 1 12 2013 Click Network Info to see hostname MAC addresses and other information helpful for using groov B Network ki Host Name lypically part of the URL when you access groov from another computer or from a peara tablet or smartphone You open a web browser MAC Aldesse and type https plus this hostname 8 89A5171247 D DOB 2C629F PS MAC Address Use one of these to get your LE groov Server License File which is required to use groov See steps on page 2 IP Address lf your network does not use hostnames you may access groov from another computer tablet smartphone by opening a web browser and typing https plus the IP address Exit groov Monitor closes groov Server Monitor and the icon disappears Exiting groov Server Monitor does not affect the groov Server service If the service is running it will continue to run after you exit Monitor To start groov Server Monitor again click groov Monitor in the Windows Start menu OO samer If groov Server is stopped starting the monitor will not start oo groov Monitor i i 1 E the service To start the service again use groov Monitor s PA Programs Start command You can also stop start or restart groov Server in the Windows control panel 1 Open the Windows Control P
6. Technical Details View If you understand what s going on Wrong Site you trust the site this error could Don t add an exception unless you Certificate belongs to a different site which could indicate an identity theft identification Unknown Identity Cl ick h ere Add Exception Certificate is not trusted because it hasn t been verified by a recognized authority Permanently store this exception Click here 6 To verify the certificate was installed correctly open Firefox and enter the hostname specified on the certificate If the browser does not generate an untrusted site warning the certificate was installed correctly OS X Safari and Chrome 1 Open Safari and enter https lt server name to open this dialog box Safari can t verify the identity of the website arrarr ar1 The certificate for this website is invalid You might be connecting to a website that is pretending to be arrarr ar1 which could put your confidential information at risk Would you like to connect to the website anyway 9 Show Certificate Cancel Continue groov Server for Windows User s Guide CHAPTER 2 USING AN SSL CERTIFICATE Click Show Certificate to reveal the full details eN Safari can t verify the identity of the website arrarr arl E n The certificate for this website is invalid You might be connecting to a b website that is pretending to be arrarr ar1 which could put your confidential inf
7. the warranty from the original manufacturer applies These products include but are not limited to OptoTerminal G70 OptoTerminal G75 and Sony Ericsson GT 48 see the product data sheet for specific warranty information Refer to Opto 22 form number 1042 for complete warranty information Wired Wireless controllers and brains are licensed under one or more of the following patents U S Patent No s 5282222 RE37802 696361 7 Canadian Patent No 2064975 European Patent No 1142245 French Patent No 1142245 British Patent No 1142245 Japanese Patent No 20025359254 German Patent No 6001 1224 Opto 22 FactoryFloor groov Optomux and Pamux are registered trademarks of Opto 22 Generation 4 groov Server ioControl ioDisplay ioManager ioProject ioUtilities mistic Nvio Nvio net Web Portal OptoConnect OptoControl OptoDataLink OptoDisplay OptoEMU OptoEMU Sensor OptoEMU Server OptoOPCServer OptoScript OptoServer OptoTerminal OptoUtilities PAC Control PAC Display PAC Manager PAC Project SNAP Ethernet I O SNAP I O SNAP OEM I O SNAP PAC System SNAP Simple 1 0 SNAP Ultimate I O and Wired Wireless are trademarks of Opto 22 ActiveX JScript Microsoft MS DOS VBScript Visual Basic Visual C Windows and Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States and other countries Linux is a registered trademark of Linus Torvalds Unicenter is a registered trademark of C
8. Explorer Click Continue to this website not recommended groov Server for Windows User s Guide CHAPTER 1 GETTING STARTED 3 When prompted to add a license file to groov click the word here and follow the onscreen instructions You re almost ready Your copy of groovis unlicensed Without a license file groovs capabilities are limited Add a license to groov 1stall Licen Install License If you don t have the license file click here for instructions you haven t purchased groov you can buy greev now you ve already purchased graov follow the steps below Go to the computer where groov Server is installed Right click on the groov Monitor icon in the system tray select About groov Server and then select Network Info This will present a list of MAC addresses you can use for your license Copy one of them Go to manage groov com and log in In the list find this installation of groov Server and click Enter MAC Address Enter the address and click Go Click Get License File and SAVE the file Return here to install the license Use groovin Trial Mode If you don t want to add a license right now you can run greevin Trial Mode groov Build will be fully functional but groov View will be limited to two hours Start Trial Mode 4 After you have saved the license file on your PC come back to the Licensing dialog box and click Install License 5 Browse to the license file then click Op
9. Form 2078 GROOV SERVER FOR WINDOWS USER S GUIDE groov SERVER FOR WINDOWS USER S GUIDE Form 2078 150512 May 2015 OPTO 22 Automation made simple 43044 Business Park Drive Temecula CA 92590 3614 Phone 800 321 OPTO 6786 or 951 695 3000 Fax 800 832 OPTO 6786 or 951 695 2712 WWW Opto22 com Product Support Services 800 TEK OPTO 835 6786 or 951 695 3080 Fax 951 695 3017 Email support opto22 com Web support opto22 com groov Server for Windows User s Guide Form 2078 150512 May 2015 Copyright O 2013 2015 Opto 22 All rights reserved Printed in the United States of America The information in this manual has been checked carefully and is believed to be accurate however Opto 22 assumes no responsibility for possible inaccuracies or omissions Specifications are subject to change without notice Opto 22 warrants all of its products to be free from defects in material or workmanship for 30 months from the manufacturing date code This warranty is limited to the original cost of the unit only and does not cover installation labor or any other contingent costs Opto 22 I O modules and solid state relays with date codes of 1 96 or newer are guaranteed for life This lifetime warranty excludes reed relay SNAP serial communication modules SNAP PID modules and modules that contain mechanical contacts or switches Opto 22 does not warrant any product components or parts not manufactured by Opto 22 for these items
10. PC where you will install groov Server does not have Internet access you can use another PC to activate and download files However to download the License File you need to know a MAC address on the PC where groov Server will be installed To get it go to the server PC and open a Command Prompt Type ipconfig a11 and look for Physical Address It will be a hex value with 12 digits separated by hyphens into groups of two Write it down go to the PC with Internet access and follow the procedures starting with Step 1 Activate groov on page 3 groov Server for Windows User s Guide CHAPTER 1 GETTING STARTED Multiple groov Server installations If you plan to install groov Server on multiple PCs here are some important things to know Each groov must be individually activated using its Activation Key because each purchase of groov is a separate installation The software download file is the same for all groov Servers for Windows so if you are downloading from one PC and then installing on multiple other PCs you only need to download the software once Each groov requires its own License File which is tied to a MAC address for the PC on which it s installed If you download multiple License Files you can tell them apart by the MAC address in the filename Make sure the correct License File goes on each server PC Step 1 Activate groov NOTE If you already have the groov Server Installation File skip to Step 5 Install Sof
11. Signed Certificate A CA signed certificate contains identification information the public key and a digital signature Identification information includes the server name and the name of the organization that controls the server The certificate is digitally signed by a CA to establish authenticity The Certificate is installed on the computer where groov Server for Windows is installed When you apply for an SSL certificate from a certificate authority you will need to send them a Certificate Signing Request CSR If you have not yet created a CSR file see Step 1 Create a CSR on page 23 groov Server for Windows User s Guide CHAPTER 2 USING AN SSL CERTIFICATE When filling out a form for a certificate authority keep in mind that an SSL certificate can be used with any operating system If you are asked to select an operating system you can select other if that is an option but it s OK to select some other operating system 1 Provide the text to the certificate authority in whatever form they require whether it s a text file or just text pasted into a text field 2 Finish the transaction with the certificate authority and receive your new SSL certificate Step 3 Install the CA Signed Certificate on the Computer 1 Onthe computer where groov Server is installed do one of the following For Windows 7 and Windows Server 2008 choose Start gt All Programs gt Opto 22 gt groov gt groov SSL Certificate For
12. Windows 8 click the groov SSL Certificate utility metro tile For Windows Server 12 navigate to the directory where groov was installed C Program Files x86 Opto22 groov by default The SSL Certificate Utility is in the bin folder Start the utility The groov SSL Certificate utility opens in a DOS window Welcome to the SSL certificate utility for groov iSelect an option 1 Generate and install a new private key self signed certificate and certificate signing request 2 Import a CA signed certificate and private key 2 Enter 2 and press RETURN The following message appears Sometimes the CA signed certificate 1s signed with an intermediate certificate instead of a root certificate In this case all intermediate certificates in the chain of trust between your certificate and the root certificate should be gathered into one chain file and installed on groov Server Install a chain file y n m 3 Ifyou are unsure enter n A prompt says Provide the path and file name of the private key file 4 Enter the path and file name of the groov key file if it s the currently installed key A prompt says Provide the path and file name of the certificate file groov Server for Windows User s Guide USING A CA SIGNED CERTIFICATE 5 Enter the path to the CA signed certificate file For example C Certificates sub classl server ca pem When the operation has finished a message says Installed suc
13. alled on a network that is exposed to the Internet Opto 22 strongly recommends obtaining an SSL certificate from a third party vendor called a certificate authority When installed on groov and the devices that access groov the certificate validates the connection between the user and groov Server and it alerts users if they are re directed to another groov Server on a different network So long as you stay connected directly to groov on a secure connection using https you are protected from a man in the middle attack The cost of a certificate from a certificate authority ranges from free to 300 or more depending on the features and company you buy them from Please work with your IT department if you choose this option Creating a self signed certificate generates in the groov folder a certificate signing request csr file that you can use to get an SSL certificate from a Certificate Authority NOTE You must have administrator privileges to use the SSL Certificate utility Follow these steps to create a certificate signing request CSR and install a CA signed certicate Step 1 Create a CSR see page 23 Step 2 Obtain a CA Signed Certificate see page 24 Step 3 Install the CA Signed Certificate on the Computer see page 25 groov Server for Windows User s Guide CHAPTER 2 USING AN SSL CERTIFICATE Step 1 Create a CSR IMPORTANT This procedure will create and install a new private key on the groov Server You will
14. anel and click Administrative Tools In Windows 7 if the control panel is viewed by category Administrative Tools is in the System and Security group 2 Double click Services 3 Select groov Server groov Server User s Guide CHAPTER 3 MAINTENANCE AND TROUBLESHOOTING 4 Click the command you want to use SES ervices File Action View Help E e gt ABb Hum E np Gk Services Local CHE groov Server Name lt 4 Function Discover P i Stop the service s Google Update Se Click a command Restart the service i Google Update Se SE Group Policy Client Th Description SE Health Key and Ce Pre groov Server A on Extended A Standard Changing and Opening the groov SSL Port By default groov communicates on port 443 If 443 is not available 8443 is used Changing the groov Port If you want to change the SSL port number first consult with your IT manager If you change the port you will need to use the following format when connecting to groov Server https localhost port where port is the new port number For example if the new port number is 888 you enter https localhost 888 To change the SSL port do the following steps 1 In Notepad or a similar program open the jetty conf file installed on the groov Server computer Find the file in the directory where groov was installed C Program Files x86 Opto22 groov jetty by default 3 jetty conf Note
15. ase insensitive digits 0 9 or a hyphen No other characters are allowed The server name must not start with a hyphen Example If the URL you will use to access groov in client browsers is httos process1 acme com enter processi acme com Example If the URL client browsers will use to access this groov Server is https mobilehmi mydomain com enter mobilehmi mydomain com Department Use this field to differentiate between divisions within an organization For example Engineering or Manufacturing If applicable you can enter the DBA doing business as name in this field groov Server for Windows User s Guide USING A CA SIGNED CERTIFICATE Organization The legally registered name of your business The listed organization must be the legal registrant of the domain name in the certificate request If you are enrolling as a small business or sole proprietor please enter the certificate requester s name in this field and the DBA doing business as name in the Organizational Unit field City or Location Name of the city or locality where your organization is located Please spell out the name of the city or locality Do not abbreviate State Name of state province region territory where your organization is located Please enter the full name Do not abbreviate Two Letter Country Code The two letter International Organization for Standardization ISO format country code for the country in which your organiza
16. cessfully groov Server for Windows User s Guide 3 Maintenance and Troubleshooting i N N Starting and Stopping groov Server groov Server must be running on the Windows computer where it s installed in order for anyone on any device to use groov for building or viewing operator interfaces If you need to stop groov Server or start it again you can use the Windows control panel or groov Monitor groov Monitor is a utility that starts with groov Server but runs independently from the service and lets you see information about it NOTE You must have administrator privileges to use groov Monitor To use groov Monitor 1 2 In the Windows notification area of the taskbar find the groov Monitor icon B If you dont see it click the Show Hidden Icons arrow To check whether groov Server is running or stopped look at the icon or hover over it Stopping Starting For other options right click the icon Use the commands as follows i Start qroov Server groov Monitor Stop groov Server commands About groov Server Exit Mi Iti E groov Monitor Notification area also known as the system tray L THAL j Le Li iti Start groov Server starts the groov Server service Stop groov Server stops the groov Server service About groov Server shows groov Server s version number and other information groov Server User s Guide STARTING AND STOPPING GROOV SERVER
17. ed groov Server runs as a service on the server computer This means that it starts when Windows does and it continues to run in the background as long as Windows is running In order to build or use groov interfaces on any device this PC must be on and groov Server must be running For more information on building and using interfaces see form 2027 the groov User s Guide Try Before You Buy A fully functional version of the software based groov Server for Windows is available to download and try so you can see your own system s data on a smartphone tablet or other mobile device It includes groov s built in Data Simulator so while you re evaluating groov it doesn t have to be connected to a live machine or system Just download and install groov Server for Windows groov com Simple instructions walk you through software setup connecting to one or more systems and building simple interfaces so you can quickly see realtime system data on a mobile device groov Server operates for two hours without a license key NOTE You must log on as an administrator to install groov Server for Windows If you need an OPC UA server to connect to a third party controller Keoware Technologies KEPServerEX 5 communication platform is also available for download and trial www kepware com It also operates for two hours without a license key groov Server for Windows User s Guide FOR HELP For Help If you have questions about using groov Se
18. ehmi mydomain com The server name may contain letters a z case insensitive digits 0 9 or a hyphen No other characters are allowed The server name must not start with a hyphen Example If the URL you will use to access groov in client browsers is https process1 acme com enter processl acme com Example If the URL client browsers will use to access this groov Server is https mobilehmi mydomain com enter mobilehmi mydomain com Department Use this field to differentiate between divisions within an organization For example Engineering or Manufacturing If applicable you can enter the DBA doing business as name in this field Organization The legally registered name of your business The listed organization must be the legal registrant of the domain name in the certificate request If you are enrolling as a small business or sole proprietor please enter the certificate requester s name in this field and the DBA doing business as name in the Organizational Unit field City or Location Name of the city or locality where your organization is located Please spell out the name of the city or locality Do not abbreviate State Name of state province region territory where your organization is located Please enter the full name Do not abbreviate Two Letter Country Code The two letter International Organization for Standardization ISO format country code for the country in which your organization is legal
19. en If you have any trouble opening groov check the groov Monitor icon Bl in the system tray lower right corner of the screen to make sure groov Server is running If you don t see it click the Show Hidden Icons arrow For more about groov Monitor see Chapter 3 Maintenance and Troubleshooting If groov Server does not start see Chapter 3 Maintenance and Troubleshooting If groov Server is running but groov Build does not open see Troubleshooting in form 2027 the groov User s Guide 6 Continue with Create a New Username and Password on page 5 Working with groov Create a New Username and Password Follow the on screen instructions to create an administrator username and password for groov Build If the security warning appears again accept the warning again Write down your Username and Password and keep it in a safe place You will need this information each time you log in groov Server for Windows User s Guide WORKING WITH GROOV CAUTION If you lose your login information you will not be able open your project There is no password recovery option To log in to groov again you ll need to erase your project and start over See Erasing Your groov Project on page 31 After you have completed the instructions in Welcome to groov groov Build opens in your web browser Lonngure Y pm SH zu SaaS Desktop amp Tablet Gadget Properties No page selected Create a new page on the Pages panel Gadget Pale
20. en groov View in New Tab Backup Project to Computer Restore Project from Computer N To restore your project from a backup file CAUTION Only restore your project ifyou have to You will lose all work done since the last backup and all users will be logged out 1 Select File gt Restore Project from Computer Save All Changes Save All Changes and Switch to groov View Switch to groov View Open groov View in New Tab Backup Project to Computer Restore Project from compi 2 Inthe Restore Project dialog box browse to the Windows Download directory to locate the tar gz backup file Restore Project Project Backup tar qz EE Please provide the username and password of the admin account associated with this project Username Password Restore Cancel 3 Enter the username and password for the Admin account 4 Click Restore The following warning appears Restore project Your current project will be lost and all users will be logged out Any accounts not present in the backup will be deleted Are you sure you want to proceed groov Server User s Guide CHAPTER 3 MAINTENANCE AND TROUBLESHOOTING 5 If you are sure you want to proceed click OK When the restoration process is complete the restored project opens in groov View Troubleshooting groov Server doesn t start groov Server normally starts as soon as it is installed even though no window opens Check to see if t
21. ening the groov SSL Port cece cc cece cee cence mee 29 Charigio the groovy POTE raske it cetasnencoieSotereeeteaeshebdgueenrardsousetanes 29 groov Server for Windows User s Guide EN Manually Opening PONG etes du ioa rer do keeeeenanneda dens eres bd prie 30 Getting groov Updates 0 ccc ccc cece nen meme her ehe e raa e raa ee 30 hes OU OD ONCE ito avenge ex E a aped atop edd EET TE TEE TE rx RP Pec nad 3 Backing Up and Restoring Your Project a ua adusta d cud bu Qeteetriot o Eu babe tenet tra d 31 Dre oleo e RR RTT UTImMM 33 groovy Server does tSstart rener seeder p EID bp ted dade s Pau aided 39 Cannot read or write to a Modbus TCP device OR the data doesn t make sense 33 Problems with groov Build or groov View 2 0 ccc ccc een cnet e nen e nee e 23 i dal mE 33 groov Server for Windows User s Guide 1 Getting Started Welcome groov Server for Windows p n GROOV SVR WIN runs on a PC instead of a groov Box appliance groov Server for Windows includes groov Build for building operator interfaces and groov View for using them Although this software is stored and served on a Windows PC any computer with a modern web browser can be used to build interfaces These operator interfaces can then be viewed on almost any computer or mobile device regardless of its manufacturer or operating system including PCs tablets smartphones and even smart high definition televisions Once install
22. eres es 3 5t6p 2 Downlo3d SOMWATC maersk eres AEE acaneumat recede ado ibt 3 Step o metal ONW E a ats ates rue tea IRE hp TPvEPAPRTIAVEePS E EPI RPM REIR 4 Step 4 Start groov and Install the License File eese 4 ires Hare LO D M 5 Create a New Username and Password 0 0 c cece cece ete e B Add a Tag Database MRRE 6 Build an Operator Interface oo ccc Heras 8 TEAC OUNS meMMC c O 10 Chapter 2 Using an SSL Certificate cece ccc cece cece ehh nn 15 Using a Self Signed Certificate 0 ccc cece ccc nce Hn 16 Step 1 Create a Self Signed Certificate and Private Key seere kreere en eee eter 16 Step 2 Add the Self Signed Certificate to the Browser Trust Store on Client Computers 18 umso ETE EEE diesen etos seps coset sagids ooo ETE EE EET 18 i0 20 Step 3 Install a SSL Certificate on Mobile Devices 2 0 00 ccc cece eee 21 iu EET ER E E E E 21 ARTO DENO MEME 22 USING a CASigned Certificate cusan dee rab tU ub cage hbro Urbs A sobre canadien d 22 PDE RE ES METTI 23 Step 2 Obtain a CA Signed Certificate isses 24 Step 3 Install the CA Signed Certificate on the Computer 00 c cee eee eee 25 Chapter 3 Maintenance and Troubleshooting eee 27 Starting and Stopping groov SEIVel s oae dnce tti euro eod tado debeo ted FoU ThE ER Eur seis 27 Changing and Op
23. ey use groov you must install the self signed certificate in the browser certificate store for every browser that will access groov This type of certificate is a good solution for a small set of groovs and a small set of client browsers that you can configure Follow these steps to create and install a self signed certicate Step 1 Create a Self Signed Certificate and Private Key on page 16 Step 2 Add the Self Signed Certificate to the Browser Trust Store on Client Computers on page 18 Step 3 Install a SSL Certificate on Mobile Devices on page 21 Step 1 Create a Self Signed Certificate and Private Key Follow the steps below to generate the following components required to configure self signed certificate SSL communication Private Key This must be kept secret and never shared Keep a copy of it in a safe and secure place Signed Certificate Contains identification information the public key and a digital signature Identification information includes the server name and the name of the organization that controls the server The self signed certificate is digitally signed by the Private Key to establish authenticity The certificate is automatically installed on the groov Server Creating a self signed certificate also generates in the groov folder a certificate signing request csr file that you can use to get an SSL certificate from a Certificate Authority See Using a CA Signed Certificate on page 22 NOTE You m
24. g SoftPAC as in this example JAlvarez w7 ACME com Click Browse to locate the idb txt file you want to use NOTE When PAC Control compiles a strategy it automatically generates an idb txt file and places it in the same directory as the strategy If you are setting up groov on a computer other than the one used to develop the PAC Control strategy copy the idb txt file into a directory that is accessible to the computer you are using to set up groov Click Import Build imports the idb txt file The tag database is now available in groov groov Server for Windows User s Guide WORKING WITH GROOV Build an Operator Interface 1 Click Add Page on the left side under Pages File Edit View Configure Add Page Add Category 2 Type anew name for the page then click OK 3 Under Page Properties click the box next to Background and select a background color JAB NE NENMININ Page Properties BEER ER EERE BEER E EEE Name Background Hidden Edit Page Permissions 4 Select the Gadget tab in the Gadget Palette rrr ami m d st A il Gadget Properties Gadget Palette KEE Tags s Gadget tab C Group Header Abc Line Header Divider Page Page Navigator Video 5 Select a gadget such as a Round Gauge and drag it into the work area 6 Click None Selected in Gadget Properties in the upper right corner 8 groov Server for Windows User s Guide CHAPTER 1 GETTING STARTED
25. he groov Monitor icon B is in the system tray If you dont see it click the Show Hidden Icons arrow Hover over the icon with your mouse to see groov Server status If status shows Stopped right click the icon and choose Start groov Server from the popup menu If the status shows Running try stopping groov and then starting it again If you can t find the icon from the Start menu choose groov Monitor See Starting and Stopping groov Server on page 27 for more information If groov Server fails to start there might be a conflict with another service running on your computer In this case you might need to change the SSL port groov Server uses to run To change the port number first consult with your IT manager and then follow steps in Changing the groov Port on page 29 The following command can be run at a command prompt to see what application if any is listening on port 443 netstat a n p tcp b Cannot read or write to a Modbus TCP device OR the data doesn t make sense Modbus TCP devices though based on a standard protocol may be set up differently from one another Some use zero based addressing and some use one based addressing Some devices don t support all Modbus functions Modbus TCP devices also vary in the way they present float data And device documentation sometimes doesn t specify how the device is set up If you re having trouble reading or writing to your device or if the data is clearly wrong you
26. ing a security exception Firefox will present several warnings about creating a security exception for a self signed certificate but because you created and control the private key and certificate and installed the private key on the server you can trust the certificate identifies your server 1 ex Open Firefox and enter https server name gt A warning appears that says This Connection is Untrusted Expand Understand the Risks Click Add Exception to open the Add Security Exception dialog box Select Permanently store this exception groov Server for Windows User s Guide USING A SELF SIGNED CERTIFICATE 5 Click Confirm Security Exception This Connection is Untrusted You have asked Firefox to connect securely to 10 158 0 158 8443 but we can t confirm that your connection is secure Normally when you try to connect securely sites will present trusted identification to prove that you are going to the right place However this site s identity can t be verified What Should I Do If you usually connect to this site You are about to override how Firefox identifies this site impersonate the site and you sho A Legitimate banks stores and other public sites will not ask you to do this Get me out of here Server Location E ERUREERIRE EC E Get Certificate Certificate Status EX pa nd th IS I Understand the Risks This site attempts to identify itself with invalid information y
27. inistrator has demonstrated the validity of the certificate e g by pro viding the certificate thumbprints Same as default plus it avoids seeing the untrusted site warning from the browser Must install in the browser certificate store for every browser that accesses the server No untrusted site warning from browser Trusted by those who trust the groov administrator enough to install or let him or her install the certificate in their browser certificate store Use with a system with many groovs or the set of browsers that will access groovs is unknown or changes fre quently or users who will not trust your self signed certificate Public CA signed certificates cost anywhere from 9 to 100 or more per year More complex initial configuration because a certificate authority signa ture must be obtained No untrusted site warning from browser Trusted by all major brows ers Trusted by everyone If you are using a self signed certificate see Using a Self Signed Certificate on page 16 If you are using a CA signed certificate see Using a CA Signed Certificate on page 22 groov Server for Windows User s Guide USING A SELF SIGNED CERTIFICATE Using a Self Signed Certificate A self signed certificate encrypts communications but does not include a digital signature from a commercial CA It is free and easy to configure but if you want to avoid having your users see an untrusted site warning every time th
28. l account accessible from iOS This file is available in the directory where groov was installed C Program Files x86 Opto22 groov by default On the iOS device open the email message containing groov cer Tap on groov cer A message appears The authenticity of server name cannot be verified Click Install Click Install Now Click Done groov Server for Windows User s Guide USING A CA SIGNED CERTIFICATE 8 To verify the certificate was installed correctly open a browser and enter the hostname specified on the certificate If the browser does not generate an untrusted site warning the certificate was installed correctly Android Devices 1 Email thegroov cer file you created previously see Step 1 Create a Self Signed Certificate and Private Key on page 16 to an email account accessible from Android This file is available in the directory where groov was installed C Program Files x86 Opto22 groov by default 2 Onthe Android device open the email and click the groov cer file to install the certificate 3 When prompted for a certificate name type in a name Make sure Credential use is set to VPN and apps 4 Click OK 5 To verify the certificate was installed correctly open a browser and enter the hostname specified on the certificate If the browser does not generate an untrusted site warning the certificate was installed correctly Using a CA Signed Certificate If groov is inst
29. ly registered See http www digicert com ssl certificate country codes htm for a list of codes For example the code for the United States is US Days until expiration Enter the number of days before the certificate is expired and has to be replaced We recommend 3560 10 years groov Server for Windows User s Guide USING A SELF SIGNED CERTIFICATE The utility will stop groov Server install the new private key and certificate and then restart groov Server When successful the following message appears om Start Installed succesfully The following files were generated in the groov Server install directory groou keu contains the private key This file should be kept secret You will need this file to install a CA signed certificate 4 Qraou cer contains the self signed certificate You will need this file to install in client browser trust stores to eliminate the untrusted site warning M Qraou csr contains the certificate signing request You will need this file to obtain a CA signed certificate associated with the private key Press any key to exit Press any key to continue The following files are created and placed in the directory where groov was installed C Program Files x86 Opto22 groov by default groov key private key groov cer self signed certificate groov csr certificate signing request 4 Press any key to exit Step 2 Add the Self Signed Certificate to the Browser Trust
30. nections A certificate store is the system area where lists from your disk to a certificate store certificates are kept To continue dick Next A certificate which is issued by a certification authority is a confirmation of your identity and contains information used to protect data or to establish secure network connections A certificate store is the system area where certificates are kept Store Location Current User Local Machine To continue dick Next Cancel 3 Windows 8 only If you are administrator of local machine choose the Local Machine certificate store so this certificate will be trusted by all user accounts Otherwise it will only be trusted by the current user account 4 Click Next 5 Select Place all certificates in the following store 6 Click Browse to open the Select Certificate Store dialog box 7 Select Trusted Root Certification Authorities then click OK 8 Click Next 9 Click Finish 10 A security warning alerts you that certificate installation is a risk if you don t trust the certificate 11 Click Yes to affirm that you trust the self signed certificate 12 To verify the certificate was installed correctly open Internet Explorer or Chrome and enter the hostname specified on the certificate If the browser does not generate an untrusted site warning the certificate was installed correctly Firefox The self signed certificate is added to the certificate store by add
31. omputer Associates International Inc ARCNET is a registered trademark of Datapoint Corporation Modbus is a registered trademark of Schneider Electric licensed to the Modbus Organization Inc Wiegand is a registered trademark of Sensor Engineering Corporation Nokia Nokia M2M Platform Nokia M2M Gateway Software and Nokia 31 GSM Connectivity Terminal are trademarks or registered trademarks of Nokia Corporation Sony is a trademark of Sony Corporation Ericsson is a trademark of Telefonaktiebolaget LM Ericsson CompactLogix MicroLogix SLC and RSLogix are trademarks of Rockwell Automation Allen Bradley and ControlLogix are a registered trademarks of Rockwell Automation CIP and EtherNet IP are trademarks of ODVA groov includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit http www openssl org All other brand or product names are trademarks or registered trademarks of their respective companies or organizations Opto 22 Automation Made Simple java groov Server for Windows User s Guide Table of Contents i N N Chapter Gem Startel auseesduedqusaer BOX r tk dirir CUM d Erw d oe dora odore 1 lio E TAB cS UN aueed 1 jdn 2 luce E To E 2 PCA WOO OW Erst reaps ew an nee ee bee nee se cane ane ethane ened 2 esed anc t
32. one updates are valid for a specific groov installation only To install an update download the update file and then run the installation If updates are available an updates icon appears next to the groov logo in the upper right corner of groov Build Click the updates icon or select Help Check for Updates Click the updates icon The Check for Updates dialog box tells you what kind of updates are available Follow the onscreen instructions to download an update file or view a list of updates on the latest groov readme groov Server User s Guide CHAPTER 3 MAINTENANCE AND TROUBLESHOOTING Another way to check for updates is to go directly to manage groov com If there is an update available for your groov download the file To install an update for groov Server for Windows double click the downloaded update file and run the installation Before updating the application make sure to save any changes in your project so that they will still be there after the update takes effect Erasing Your groov Project If you ve forgotten your password and cant login or if you just want to start your project over again from scratch you can delete the project as follows Also see the next section Backing Up and Restoring Your Project 1 Stop groov Server for Windows For help see Starting and Stopping groov Server on page 27 2 Navigate to the groov installation directory Usually this is C Program Files x86 NOpto22Ngroov
33. operties None Selected Fora Text Box gadget use a variable that can be changed with text input Max Value 10 Needle Color B Text Box Properties Show Value Tag None Selected Precision 2 Box Size Medium Limits 0 to 6 Label Label Units Prompt pre Override Tics _ Prompt post Font Label Alignment Style Fora Slider use a variable that can be changed within a given range Slider Properties Tag None Selected Vertical Min Value Max Value 10 Label Label Value Show Value Units Precision 2 Limits 0 to 6 Continual Confirm Color Ld 3 Clickthe Handheld tab at the top of the work area File Edit View Configure Security Help Desktop amp Tablet NEN handheld tab You ll notice that the gadgets are arranged differently in the Handheld view but both views contain exactly the same gadgets tags and properties groov Server for Windows User s Guide WORKING WITH GROOV 4 Drag each gadget into position and resize it as necessary for the Handheld view Drag into position 5 4 i 5 Switch to the Desktop amp Tablet layout You ll notice that arranging the gadgets in the Handheld layout does not affect the Desktop amp Tablet layout 6 Select File gt Save All Changes and Switch to groov View Your completed operator interface might look something like this Output groov Server for Windows User s Guide
34. ormation at risk Would you like to connect to the website anyway f Always trust arrarr AR1 when connecting to arrarr ar1 Leo arrarr AR1 arrarr ART 7 Root certificate authority Expires Monday October 10 2044 at 2 26 50 PM Pacific Daylight Time f This root certificate is not trusted b Trust b Details Hide Certificate Cancel Continue If the certificate looks good to you check the Always trust server name when connecting to server name gt and click Continue You will be asked to provide your password to authorize the addition of this certificate to your keychain after which the browser and the Hosted Projects window will accept the SSL certificate as valid To verify the certificate was installed correctly open a browser and enter the hostname specified on the certificate If the browser does not generate an untrusted site warning the certificate was installed correctly Step 3 Install a SSL Certificate on Mobile Devices When you open the operator interface in a browser on a smart phone or tablet a security warning will appear unless you have installed a self signed or third party SSL certificate See the section below for the devices operating system iOS Devices on page 21 Android Devices on page 22 iOS Devices 1 oO P M s Email the groov cer file you created previously see Step 1 Create a Self Signed Certificate and Private Key on page 16 to an emai
35. pad File Edit Format View Help 2 Change only the port number 3 Save and close the file 4 Restart groov Server a Openthe Windows Control Panel and click Administrative Services b Select groov Server C Click Restart groov Server User s Guide GETTING GROOV UPDATES hi e IE as Hss mun TE Services Local ae groov Server Name i 55 Function Discover Stop the service S Google Update Se Click Restart Restart the service S Google Update Se SE Group Policy CF Description 4 Health Key and Ce Pre _ groov Server ar mem Extended A Standard Manually Opening Ports When you install groov Server you re given the option to have the groov SSL port 443 opened automatically If you didn t choose this option you ll need to open the port manually Steps may vary depending on your version of Windows 1 On the computer where groov Server is installed choose Start gt Control Panel gt Windows Firewall 2 Click Advanced Settings 3 Create an Inbound Rule for the Program groov By default groov is installed in C Program Files x86 Opto22 groov 4 Restart groov Server see Starting and Stopping groov Server on page 27 Getting groov Updates Because you have activated groov you are eligible to receive updates Updates add new capabilities and fix issues that may arise Each groov installation is treated independently so you must activate each
36. probably need to change settings for your Modbus device In groov Build choose Configure Devices and Tags and locate your device in the list Follow instructions in the groov Build and View User s Guide to understand and change settings You may need to try different combinations of settings to see what works Problems with groov Build or groov View See the Troubleshooting chapter in the groov Build and View User s Guide To open the user s guide in groov Build choose it from the Help menu For Help Product support for groov Server is free See For Help on page 2 for contact information groov Server User s Guide TROUBLESHOOTING groov Server User s Guide
37. rver and you cannot find the answer you need in this document or in the groov User s Guide please contact Opto 22 Product Support Phone 800 TEK OPTO 835 6786 951 695 3080 Monday through Friday 7 a m to 5 p m Pacific Time Fax 951 695 5017 E mail support opto22 com Website www opto22 com What You Will Need To install and run groov Server for Windows you ll need e APCon the same network as your control device with one of the following Microsoft operating systems This can be the same computer where the tag server is installed or a separate computer Windows 7 Professional 32 bit and 64 bit Windows 8 Professional 32 bit and 64 bit Windows Server 2008 R2 Windows Server 2012 NOTE NET Framework 3 5 or greater is required for all operating systems Use the Add roles and features option for Windows Server 2012 e Aminimum of 250 MB available disk space to install groov Server for Windows Additional disk space is required to create projects Projects may be created on this PC or on another computer Setting Up groov Server Setting up groov Server for Windows is a four step process activate groov download software install software and download and apply your License File A steps except installing software require Internet access If the PC where you plan to install groov Server has Internet access do all steps on that PC Start with Step 1 Activate groov on page 3 If the
38. send the CSR to the Certificate Authority CA of your choice The CA verifies the identification information and signs the CSR which then becomes a CA signed Certificate To create a certificate signing request CSR you ll use the SSL certificate utility to generate a self signed certificate This will also generate the CSR 1 On the computer where groov Server is installed do one of the following For Windows 7 and Windows Server 2008 choose Start gt All Programs gt Opto 22 gt groov gt groov SSL Certificate For Windows 8 click the groov SSL Certificate utility metro tile For Windows Server 12 navigate to the directory where groov was installed C Program Files x86 Opto22 groov by default The SSL Certificate Utility is in the bin folder Start the utility The utility opens in a DOS window AF TOUT ain FHES AGO WDLOZZ OTOO AIS r Welcome to the SSL certificate utility for groov Select an option 1 Generate and install a new private key self signed certificate and certificate signing request 2 Import a CA signed certificate and private key gt Enter 1 and press RETURN Enter the information requested by the onscreen instructions including the following Server Name Enter the fully qualified hostname of this groov Server that client browsers will use to access groov i e the hostname and domain name such as mobilehmi mydomain com The server name may contain letters a z c
39. tion is legally registered See http www digicert com ssl certificate country codes htm for a list of codes For example the code for the United States is US Days until expiration Enter the number of days before the certificate is expired and has to be replaced We recommend 3560 10 years The utility will stop groov Server install the new private key and certificate and then restart groov Server When successful the following message appears ux s jram Files 22 groov bin CertificateUtility exe ye ee uo i gt t Pa pr z me ett r i x Start gr E installed succesful ly The following files were generated in the groov Server install directory grov key contains the private key This file should be kept secret You will need this file to install a CA signed certificate 4 Qraou cer contains the self signed certificate You will need this file to install in client browser trust stores to eliminate the untrusted site warning 4 Qraou csr contains the certificate signing request You will need this file to obtain a CA signed certificate associated with the private key BPress any key to exit Press any key Lo continue The following files are created and placed in the directory where groov was installed C Program Files x86 Opto22 groov by default groov key private key groov cer self signed certificate groov csr certificate signing request 4 Press any key to exit Step 2 Obtain a CA
40. tte vos FEES Configure Devices amp Tags u Add Page Page Properties Add a Tag Database You can import a tag database from an Opto 22 an OPC UA compatible tag server or a Modbus TCP slave device This section describes briefly how to import tags from an Opto 22 controller For more information about this or about how to use tags from another manufacturer s system see form 2027 the groov Users Guide Follow these steps to add an Opto 22 controller that the operator interface will communicate with When you add a controller and the idb txt file associated with the strategy that runs on the controller the strategy s tags become available in groov for you to use Repeat the steps to add additional Opto 22 controllers and tags 1 Under Gadget Palette on the right side click Configure Devices amp Tags or select Configure Devices and Tags Gadget Palette Tags EI E groov Server for Windows User s Guide CHAPTER 1 GETTING STARTED 2 Click Add New Device and then select Opto 22 Controller 3 Configure Devices and Tags Type Address Add New Device V No strategies loaded Opto 22 Controller ly OPC UA Server Modbus Device Data Simulator Close Enter the hostname or IP address of the controller running the strategy you want to use Add Opto 22 Controller For a SoftPAC controller use the full name of the computer runnin
41. tware on page 4 1 2 Open a web browser Firefox or Chrome recommended Go to activate groov com 800 321 OPTO 6786 Activate groov OP Qu F Miweet Fuse 0 Activate your groovto get free updates and be notified when updates are available You need a free My Opto22 account to activate ei d wr wu S Enter your email address mJ ie Log in using your email address and your My Opto22 password You may have set up your free My Opto22 account when you purchased groov Server If you don t have a My Opto22 account enter your email address and other information and the account will be created e Activate groov 60 Q 0 e 19 Enter your groov activation key Your Activation Key is in the certificate you received by mail or email when you purchased groov Enter the Activation Key you received via mail or email when you purchased groov Server Click Go Your groov is activated Step 2 Download Software Click Download groov Software and save the file to your computer Or click Show next to your groov in the list and download the groov Server Installation File Optional If you already know the MAC address of the PC where youre installing groov Server you can also get your License File now To do so enter it in the MAC address field click Go click Get License File and save the file to your PC groov Server for Windows User s Guide SETTING UP GROOV SERVER Step 3 Install Software NOTE Yo
42. u must log on as an administrator to install groov Server for Windows 1 Onthe PC where you want to install groov Server double click the groov Server installation file and follow the onscreen instructions 2 When asked whether to open port 443 needed to access groov check the box to open it unless you need to use a different port or want to open it manually See page 29 for instructions groov Server begins running as soon as it is installed You can tell it s running by the groov Monitor icon B in the system tray The little green arrow means it s running Step 4 Start groov and Install the License File 1 If you havent already started groov App in your web browser type https 1ocalhost Make sure you include the s in https as thes indicates a secure connection If you re not on the PC that s running groov Server for Windows type https plus the hostname or IP address of the groov Server computer 2 When your browser connects to groov for the first time accept the security warning This is normal behavior for groov Your groov data is protected by the Secure Socket Layer 256 bit encryption so you can safely accept the warning For Chrome Click Proceed anyway For Firefox Expand Understand the Risks Click Add Exception to open the Add Security Exception dialog box Select Permanently store this exception Click Confirm Security Exception ano For Safari Click Continue fo e For Internet
43. ust have administrator privileges to use the SSL Certificate utility To generate a private key and self signed certificate 1 On the computer where groov Server is installed do one of the following For Windows 7 and Windows Server 2008 choose Start gt All Programs gt Opto 22 gt groov gt groov SSL Certificate For Windows 8 click the groov SSL Certificate utility metro tile For Windows Server 12 navigate to the directory where groov was installed C Program Files x86 Opto22 groov by default The SSL Certificate Utility is in the bin folder Start the utility groov Server for Windows User s Guide CHAPTER 2 USING AN SSL CERTIFICATE The utility opens in a DOS window T i an ant wee deum B 2 28 ENS WU F RER IU NES ALirrxrr nn d sc wv i IMTA J JV rYresnxvyrsx min on me w iProgram Files X00 Optoz 2 aroov pinNnyceruticatl me M wt TA HEN se WENN ENSURE SS 2 WAR VAST D Ne Ne Ll SOSA Welcome to the SSL certificate utility for groov Select an option 1 Generate and install a new private key self signed certificate and certificate signing request Import a CA signed certificate and private key Enter 1 and press RETURN Enter the information requested by the onscreen instructions including the following Server Name Enter the fully qualified hostname of this groov Server that client browsers will use to access groov i e the hostname and domain name such as mobil
Download Pdf Manuals
Related Search