A  Simatic Logon server  is  working with others plants and i need to get it also  with my  tp 1200  (simatic logon client license is ok);  for security issue company IT member   asks  which protocol tp1200 use to  get user administration  (LDAP?  does anybody know it  ?

Thanks

On TP1200  i get error 260028 "server not available"but:

license ok on the server

server is working with another TP (same User Administration configuration, just another IP address)

ping to server from HMI is ok

ping from server to HMI is ok

Any ideas?

Thanks

Hi

In the Comfort project under Simatic Logon, did you select Windows domain or Windows computer?

What did you enter in computer and domain?

Did you activate Encrypted? If so, Simatic Logon needs to be setup with a certificate. If Simatic Logon is not setup with certificate then disable encrypted.

Hope this helps

Michael

Hi

In the Comfort project under Simatic Logon, did you select Windows domain or Windows computer?

What did you enter in computer and domain?

Did you activate Encrypted? If so, Simatic Logon needs to be setup with a certificate. If Simatic Logon is not setup with certificate then disable encrypted.

Hope this helps

Michael

Hi

These are configuration on Wincc (TIA)--> Runtime settings-->Users Administration :

Enabled Simatic Logon

Windows Domain

Server name:server ip address 

Port number:16389

Window domain: xxx.dom

Encrypted transfer

The same configuration is working on another TP  (with the same Server)

What about certificate? where do i get it ? and where It should be saved? (i don t know how it works)

Hi,

Is the Simatic Logon server set up to use a certificate? (Look in the "Certificate" tab in "Configure Simatic Logon").

If not, do not set checkmark in the Encryptet transfer option.

The error message means that the panel is not able to connect to Simatic Logon.

Is there a firewall that prevents communication on port 16389 to the Simatic Logon server?

Regards

I will check for firewall;

this server is working with another TP with "Encrypted transfer" selected  (in User administration configuration ), I don't know if for another TP I need to produce another certificate and if it has to be saved on server or HMI or both.

I find a procedure to produce a certificate but it use an old version of OpenSSL    

Hi,

You do not need to create a certificate. The certificate is only located on the Simatic Logon server, so if is an existing system then it is already created.

The only thing is that the first time your panel connects to the Simatic Logon server, the panel will receive the certificate from the Simatic Logon server and store it in the "rejected" folder as described in the FAQ you were pointed to.

Then you manually have to move it to the "certs" folder as described in the FAQ.

Since the other panels already works, i'm sure the firewall has been set up correctly on the Simatic Logon server unless your panel comes from a different subnet perhaps and the firewall prevents communication from a different subnets for example.

Regards

Hi,

Then make sure that your subnet is routed correctly to the Simatic Logon subnet and the port 16389 is not blocked.

The error "server not available" means that the panel litteraly cannot connect to the Simatic Logon server.

Best regards

Michael

The problem was  the port 16389 not opened by IT

Thanks

Handy command in Powershell to test ports

Test-NetConnection -ComputerName 10.22.22.33 -Port 16389

should return  a True