Wonderware InTouch Access Anywhere User Guide

Transcription

Wonderware InTouch Access Anywhere User Guide12/14/15

All rights reserved. No part of this documentation shall be reproduced, stored in a retrieval system, ortransmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, without theprior written permission of Schneider Electric Software, LLC. No copyright or patent liability is assumedwith respect to the use of the information contained herein. Although every precaution has been taken inthe preparation of this documentation, the publisher and the author assume no responsibility for errors oromissions. Neither is any liability assumed for damages resulting from the use of the informationcontained herein.The information in this documentation is subject to change without notice and does not represent acommitment on the part of Schneider Electric Software, LLC. The software described in thisdocumentation is furnished under a license agreement. This software may be used or copied only inaccordance with such license agreement. 2015 by Schneider Electric Software, LLC. All rights reservedSchneider Electric Software, LLC26561 Rancho Parkway SouthLake Forest, CA 92630 U.S.A.(949) 727-3200http://software.schneider-electric.comFor comments or suggestions about the product documentation, send an e-mail message com.ArchestrA, Avantis, DYNSIM, EYESIM, Foxboro, Foxboro Evo, I/A Series, InBatch, InduSoft, IntelaTrac,InTouch, PIPEPHASE, PRO/II, PROVISION, ROMeo, Schneider Electric, SIM4ME, SimCentral, SimSci,Skelta, SmartGlance, Spiral Software, VISUAL FLARE, WindowMaker, WindowViewer, andWonderware are trademarks of Schneider Electric SE, its subsidiaries, and affiliated companies. Anextensive listing of Schneider Electric Software, LLC trademarks can be found ademarks/. All other brands may be trademarks of theirrespective owners.

3ContentsChapter 1Using InTouch Access Anywhere. 5About InTouch Access Anywhere . 5InTouch Access Anywhere Server . 6InTouch Access Anywhere Secure Gateway Server . 6Supported Web Browsers . 7Supported Versions of InTouch . 8Chapter 2Viewing an Application with InTouch AccessAnywhere . 9Gather the Information You Need to Log On to InTouch AccessAnywhere .Logging on to InTouch Access Anywhere .Logging on Directly to InTouch Access Anywhere .Logging on Through the Secure Gateway .Diagnosing Log on Problems .Advanced Connection Settings .Advanced Connection Settings Page 1 .Advanced Connection Settings Page 2 .Advanced Connection Settings Page 3 .Advanced Connection Settings Page 4 .Viewing an InTouch Access Anywhere Session .Resizing an Application Window .101111131517171920212324InTouch Access Anywhere User Guide

4 ContentsUsing the Access Anywhere Toolbar .Using the Touch Mobile Device Toolbar .Using a Desktop Toolbar .Clipboard Support .Using Finger Gestures .Changing an InTouch Application .Ending an InTouch Access Anywhere Session .Session Auto-logoff .Automatic Reconnect .Chapter 3252627273031323232Using InTouch Access Anywhere on PortableDevices . 33Running InTouch Access Anywhere on Different OperatingSystems .Android Operating System .Google Chrome Operating System .Chromebook Keyboard .iOS Operating System .Windows RT Operating System .Windows 7, Windows 2008 R2, or Windows 2012 OperatingSystems .Operating System, Browser, and Mobile Device Combinations .All Operating Systems and All Browsers .InTouch Access Anywhere User Guide343435363738404044

5Chapter 1Using InTouch AccessAnywhereThis guide describes how to use Wonderware InTouch AccessAnywhere to remotely connect to your InTouch applications bymeans of an HTML5-compatible web browser.About InTouch Access AnywhereInTouch Access Anywhere enables you to remotely access a runningInTouch application from a desktop computer or a mobile deviceincluding tablets, smartphones, or laptops. You view and control theapplication through a secure web browser without requiring aseparate client application.InTouch Access Anywhere provides the following features: Provides secure and remote access to Wonderware InTouchapplications Incorporates image compression, packet shaping, and whole framerendering to improve Internet performance Automatically adjusts the size of your InTouch Access Anywheresession to the web browser window showing the application Supports finger gestures on touch screen devices Works on devices that only support web applications likeChromebooks Provides an expandable session toolbar with icons to access systemkeys, a clipboard, and a keyboard auto-sense featureInTouch Access Anywhere User Guide

6 Chapter 1 Using InTouch Access AnywhereInTouch Access Anywhere ServerThe InTouch Access Anywhere server is installed on a RDP host inyour company’s data center. The host computer has InTouchWindowViewer installed and is running InTouch applications. Whenyou log on, you select the InTouch application you want to view.Typically, you will use a VPN that supports websockets to securelyconnect to the InTouch Access Anywhere server.InTouch Access Anywhere Secure Gateway ServerInTouch Access Anywhere Secure Gateway is an optional server thatcan be installed with the InTouch Access Anywhere server. The SecureGateway acts as a conduit between users in remote locations andInTouch applications running on a RDP host in a data center. A SecureGateway is typically installed in a DMZ to route all InTouch networkdata through a SSL-based connection.InTouch Access Anywhere User Guide

Supported Web Browsers 7The InTouch Access Anywhere Secure Gateway provides the followingadditional functions for InTouch Access Anywhere Server: Eliminates the need to purchase, install, configure, and manage aVPN to use InTouch Access Anywhere Server Accesses InTouch applications through a single server installed ina secure perimeter network, while InTouch applications residesecurely on an InTouch Access Anywhere server behind aninternal firewallBy default, the InTouch Access Anywhere server listens on port 8080.The InTouch Secure Gateway listens on port 443. Contact your ITdepartment to verify the ports assigned to your company’s servers. Youmust specify a port number when you log on to InTouch AccessAnywhere if non-default ports have been assigned to the two servers.Supported Web BrowsersHTML5 websockets technology makes it possible to open aninteractive communication session between your browser and anInTouch Access Anywhere server. The following versions of HTML5compatible web browsers have been tested and validated to work withInTouch Access Anywhere: Apple Safari, version 8 Google Chrome, version 44 Microsoft Edge Microsoft Internet Explorer, version 11 Mozilla Firefox, version 40 Opera, version 31Although Wonderware InTouch Access Anywhere supports the listedbrowsers, you should review the Running InTouch Access Anywhereon Different Operating Systems section on page 34 for usage behaviorsand any alternative solutions for each browser.InTouch Access Anywhere User Guide

8 Chapter 1 Using InTouch Access AnywhereOlder versions of the listed browsers below are functionally compatiblewith InTouch Access Anywhere. You may be able to use the followingolder versions of these browsers, but specific behaviors are unknownbecause no formal testing has been done with InTouch AccessAnywhere. Apple Safari, versions 5, 6, and 7 Google Chrome, versions 11 and later Microsoft Internet Explorer, versions 9 and 10Note: Internet Explorer version 9 must be used with a SecureGateway server. Mozilla Firefox, versions 6 and later Opera, versions 11 and laterImportant: You are strongly advised to upgrade to a recent versionof a supported web browser for use with InTouch Access Anywhere.Supported Versions of InTouchInTouch Access Anywhere can view InTouch applications running inWindowViewer from InTouch 2012 R2 or later versions of InTouch.Contact your IT department to verify the InTouch application youwant to view will run in WindowViewer from one of the supportedversions of InTouch.InTouch Access Anywhere User Guide

9Chapter 2Viewing an Application withInTouch Access AnywhereThis chapter describes how to log on to InTouch Access Anywhere fromany device with an HTML5-compatible web browser. It includes theinformation you need to log on, a step-by-step log on procedure,advanced connection settings, and how to securely connect to InTouchAccess Anywhere.InTouch Access Anywhere User Guide

10 Chapter 2 Viewing an Application with InTouch Access AnywhereGather the Information You Need to Log On toInTouch Access AnywhereBefore you attempt to log on and begin viewing InTouch applicationswith InTouch Access Anywhere, contact your IT department to gatherthe following information: Has your IT department added you as a member of the RemoteDesktop Users group on the InTouch Access Anywhere server? Youmust be a member to access the InTouch Access Anywhere serverwith a Remote Desktop Connection client. What is the domain name or IP address of your InTouch AccessAnywhere server? Does your InTouch Access Anywhere server use default port 8080?If not, you need to specify the non-default port number when youlog on to the InTouch Access Anywhere server. What is the name of the Windows domain specified with your username to log on to the InTouch Access Anywhere server. Verify that your IT department has listed the InTouch applicationsyou want to view on the InTouch Access Anywhere logon page.Information Needed for an External Connection to Access Anywhere Does your company require a VPN to connect to the InTouchAccess Anywhere server from a remote location? InTouch AccessAnywhere is compatible with most VPNs that support websockets. Will your data center use an InTouch Secure Gateway withInTouch Access Anywhere? If so, what is the domain name or IPaddress of your Secure Gateway? If your data center uses an InTouch Secure Gateway, does it listenon default port 443? If not, you need to specify the non-default portnumber when you log on to the Secure Gateway. Is a trusted certificate installed on the Secure Gateway? Bydefault, a self-signed certificate is installed on the Secure Gateway.Some web browsers show a security warning or prohibitconnections to servers using self-signed certificates.InTouch Access Anywhere User Guide

Logging on to InTouch Access Anywhere 11Logging on to InTouch Access AnywhereYou can log on to the InTouch Access Anywhere server by two methodsbased on whether your company uses a Secure Gateway or not.Note: If you have any trouble remotely connecting to InTouch AccessAnywhere, see "Diagnosing Log on Problems" on page 15 for help.Logging on Directly to InTouch Access AnywhereUse the following procedure to log on directly to the InTouch AccessAnywhere server. You should be using a VPN for a secure connectionfrom an external network.To log on directly to the InTouch Access Anywhere server1Using your web browser, go tohttp://ITAA Server Node Name:8080/orhttp://ITAA Server IP Address:8080/Note: You may need to enter a different port number if your companychanged the default port number assigned to the Access Anywhereserver.A logon page appears with fields to enter your user name,password, and select the InTouch application you want to view.Connection DetailsDescriptionInTouch AccessAnywhere ServerA read-only field that displays the hostname or IP address of the InTouchAccess Anywhere server.InTouch Access Anywhere User Guide

12 Chapter 2 Viewing an Application with InTouch Access AnywhereConnection DetailsDescriptionUser NameYour user name to log on to the RemoteDesktop Service (RDS) host. It canoptionally contain a domainspecification, for example,domain\user.If a domain name is not specified, youwill be prompted for it by the RDS host.You can specify a domain as anAdvanced Connection setting. For moreinformation, see "Advanced ConnectionSettings Page 1" on page 17.2PasswordYour password to log on to the RDS host.When not specified, you will beprompted for a password by the RDShost.Application nameA pull down list shows InTouchapplications accessible from the InTouchAccess Anywhere server that can beselected for viewing.Enter your user name and password.Enter the domain name of your RDS host account in front of youruser name.domain name\user nameNote: You can enter your domain as an Advanced Setting value toavoid entering your domain each time you log on to InTouch AccessAnywhere. See "Advanced Connection Settings Page 1" on page 17 formore information.3Select the InTouch application you want to view from thedrop-down list of the Application Name field.4Tap or click Connect to initiate an InTouch Access Anywherebrowser session.Your initial view will show the InTouch application within theboundaries of your web browser window, which is the Fit tobrowser Advanced Settings option. For more information about setting your InTouch applicationview, see "Advanced Connection Settings Page 4" on page 21. For more information about changing the size of an InTouchapplication window using the Fit to browser setting, see"Resizing an Application Window" on page 24.InTouch Access Anywhere User Guide

Logging on to InTouch Access Anywhere 13Logging on Through the Secure GatewayBy default, the Secure Gateway includes a self-signed certificate. Somebrowsers, such as Google Chrome, allow self-signed certificates forSSL-encrypted websocket connections. Other web browsers likeInternet Explorer show a warning message that the server certificateis not signed and prompt you to continue only at a significant risk.Chrome OS and Safari web browsers prohibit connections using aself-signed certificate. In order to provide connectivity for thesebrowsers, your IT department must import a trusted certificate intothe InTouch Access Anywhere server or into the Secure Gateway.If you encounter certificate problems trying to log on to the SecureGateway, consider changing web browsers or ask your IT departmentto install a trusted certificate.Use the following procedure to log on to the Access Anywhere serverthrough a Secure Gateway.To log on through a Secure Gateway1Using your web browser, go tohttps://Secure Gateway Node Name:443/orhttps://Secure Gateway IP Address:443/Note: You may need to enter a different port number if your companychanged the default port number assigned to the Secure Gateway.The Secure Gateway start page appears with a field to enter thedomain name or IP address of the Access Anywhere server.InTouch Access Anywhere User Guide

14 Chapter 2 Viewing an Application with InTouch Access Anywhere2Enter the IP address or the domain name of the RDP hostcomputer where the InTouch Access Anywhere server is installed.3Click or tap Next.The InTouch Access Anywhere server logon page appears withfields to enter your user name, password, and select the InTouchapplication you want to view4Enter your user name and password.Enter the domain name of your RDS host account in front of youruser name if not specified as an Advanced Setting.5Select the InTouch application you want to view from thedrop-down list of the Application Name field.6Tap or click Connect to initiate an InTouch Access Anywherebrowser session.InTouch Access Anywhere User Guide

Logging on to InTouch Access Anywhere 15Diagnosing Log on ProblemsIf you have trouble remotely connecting to your InTouch AccessAnywhere server, verify network connectivity and your web browserversion by going to the InTouch Access Anywhere demonstration site:http://intouchaccessanywhere.comUnable to reach the InTouch demonstration siteIf you cannot access the InTouch demonstration site, verify yournetwork connectivity: From a desktop computer, use the Ping command to verify theconnection to the Secure Gateway or Access Anywhere servers.Third party tools exist for some mobile devices to provideequivalent functionality. From a Windows computer, try logging on to the InTouch AccessAnywhere server directly using a standard Remote DesktopConnection client. You must be able to log on using standardRemote Desktop Connection client before you can log on to anInTouch Access Anywhere server.Unable to view the InTouch demonstration application correctlyIf you can access the demonstration site but not view the InTouchapplication correctly, verify your web browser. Are you using a supported InTouch Access Anywhere web browser?For a list of supported browsers, see "Supported Web Browsers" onpage 7. Browser extensions or add-ons may inject JavaScript code into webpages. If the InTouch application is inaccessible or not workingproperly, disable or uninstall any active browser extensions oradd-ons. Then, restart your web browser to ensure the extensionsor add-ons are no longer active.Able to view the InTouch demonstration applicationIf the demonstration site appears and you can successfully launch theInTouch demonstration application, you have network connectivityand your browser is compatible with InTouch Access Anywhere. If you cannot reach the InTouch Secure Gateway by its domainname, try using its IP address. If you cannot reach your InTouch Access Anywhere server by itsdomain name, try using its IP address.InTouch Access Anywhere User Guide

16 Chapter 2 Viewing an Application with InTouch Access AnywhereAssistance from your IT departmentIf your are still experiencing logon problems, contact your ITdepartment to get more information about the following: Ask your IT department if the port numbers you entered to log onto the Secure Gateway and Access Anywhere servers are correct.The default ports are 443 for the Secure Gateway and 8080 for theAccess Anywhere server. Ask your IT department to verify the InTouch Access Anywhereservice is running. Ask your IT department if you are a member of the RemoteDesktop Users group on the InTouch Access Anywhere server? Youmust be a member to access the InTouch Access Anywhere serverwith a Remote Desktop Connection client. Ask your IT department if a trusted certificate is required for theInTouch Access Anywhere Secure Gateway or the InTouch AccessAnywhere Server.InTouch Access Anywhere User Guide

Logging on to InTouch Access Anywhere 17Advanced Connection SettingsClick the Settings icon on the logon page to set additional options foryour InTouch Access Anywhere connection. The advanced connectionsettings are shown on four separate web pages selected by clicking thenumbered Settings buttons.Important: You may need information from your IT administrator tospecify values for some Advanced Connection settings.Advanced Connection Settings Page 1The Advanced Connections settings on page 1 provide options tospecify the RDS host for an InTouch Access Anywhere server. and aSecure Gateway.SettingsDescriptionRDP HostThe address of the RDS host. Leave thisfield blank if the Access Server isinstalled on the RDS host itself.DomainThe Windows domain name if notspecified with your user name.Enable SSL encryptionfor remote sessionWhen selected, your web browser usesSSL encrypted websocket communicationto the InTouch Access Anywhere Server.Use InTouch SecureGatewayWhen selected, a Secure Gatewayconnects to the RDP host.InTouch Access Anywhere User Guide

18 Chapter 2 Viewing an Application with InTouch Access AnywhereSettingsDescriptionGateway addressComputer name or IP address of theserver hosting the InTouch SecureGateway.Use InTouch SecureGatewaySelect to use the Secure Gateway toconnect to the RDP host running InTouchAccess Anywhere.Gateway addressEnter the address and port for the SecureGateway in this field. If no port value isspecified, 443 is used by default.To specify a custom port, add a colon ( : )and the port number to the address. Forexample, gateway.com:4343.Multiple Secure Gateways can bespecified as failover servers. Separateeach server address with a comma (,) orsemicolon (;).An asterisk (*) means the servers can bespecified in any order after the asterisk.For example, if the following is specified:aaa;*;bbb:4433;ccc:4343The Secure Gateway aaa on port 443 isused to initially connect. If aaa isunavailable, then bbb:4433 is usedfollowed by ccc:4343 OR ccc:4343 followedby bbb:4433.Compression andaccelerationInTouch Access Anywhere User GuideWhen selected, this option enables lossyimage compression to improve networkperformance.

Logging on to InTouch Access Anywhere 19Advanced Connection Settings Page 2The Advanced Connections settings on page 2 provide options to setdisplay quality, the source of audio playback, and the locale of tyControls the degree of acceleration that isenabled in the session. Fasteracceleration results in lower qualityimages.Remote audioplaybackSelect an option as the source of thesession's audio: local computer, remotecomputer, or do not play audio.Keyboard localeSelect the keyboard region to be used inan InTouch Access Anywhere session.Keyboard scan-codesEnables keyboard scan codes sent by akeyboard to indicate a key has beenselected and the alphanumeric characteror function associated with the key.Certain applications use scan codes andrequire this setting to be enabled.InTouch Access Anywhere User Guide

20 Chapter 2 Viewing an Application with InTouch Access AnywhereAdvanced Connection Settings Page 3The Advanced Connections settings on page 3 provide a set ofmiscellaneous options and other settings to specify the folder path tothe selected InTouch application and its working folder.SettingsDescriptionUse client time zoneWhen selected, this setting enables localtime zone redirection. The remotesession running on the InTouch AccessAnywhere server uses the time of yourlocal computer or mobile device.Open browser links onclient (URL redirection)When selected, your web browser sessionis redirected to the URL link launchedfrom the RDS session.Start program onconnectionThis setting cannot be modified. It showsWindowViewer as the program that isautomatically launched to run theInTouch application you selected.InTouch Access Anywhere User Guide

Logging on to InTouch Access Anywhere 21Advanced Connection Settings Page 4The Advanced Connections settings on page 4 provide options to setthe size of WindowViewer window containing a running InTouchapplication in the web browser of your computer or mobile device.SettingsDescriptionDisplay OptionsThis setting provides options to place theWindowViewer application windowwithin your computer or mobile devicescreen. Fit to browser window (default)Fits the WindowViewer windowwithin the initial size of your webbrowser’s window.Note: The application’s resolution doesnot change from its initial size if youchange the size of your web browserwhile viewing an InTouch application. Fit to screen (Full Screen)Places the WindowViewer windowwithin the full size of your computeror mobile device screen withoutshowing your web browser’s menubars. Application ResolutionShows the selected InTouchapplication in its native resolution.InTouch Access Anywhere User Guide

22 Chapter 2 Viewing an Application with InTouch Access AnywhereScreen resolutionThis option is disabled when DisplayOption is set to either Fit to browserwindow or Fit to Screen.When the Display Option is set toApplication Resolution, then ScreenResolution shows the matchingresolution if available and the field isdisabled.If Screen resolution does not contain aresolution that matches the selectedapplication’s native resolution, the fieldshows the default resolution assigned asa configuration value of InTouch AccessAnywhere.If you do not see the native resolution ofthe InTouch application you want toview, ask your IT department to add theapplication’s resolution to the Screenresolution list.InTouch Access Anywhere User Guide

Viewing an InTouch Access Anywhere Session 23Viewing an InTouch Access Anywhere SessionAfter a successfully logging on, a Remote Desktop Connection (RDC)session is launched and InTouch WindowViewer starts and connectsyou to the selected InTouch application. The application appearswithin your browser’s window.While connected, InTouch Access Anywhere intercepts mouse andkeyboard events and transmits them to the RDS host. As a result,various keyboard keys and mouse buttons that are usually handled bythe browser may behave differently. For example, clicking the F5button normally causes the browser to reload the current page, butwhen using InTouch Access Anywhere F5 does not reload the page.Instead, the current page will be transmitted to and handled by theremote InTouch WindowViewer application.Note: In most browsers, clicking the Back, Forward, or Reloadbrowser buttons will cause InTouch Access Anywhere Server to displaya message asking if you wish to leave the current page. If you decide toproceed, the remote session will be disconnected. (Some browsers maynot ask for confirmation).When accessed by InTouch Access Anywhere, an InTouchWindowViewer application cannot be minimized. If the remoteInTouch application is shut down, your InTouch Access Anywheresession is automatically terminated in a configurable period set as aparameter of the InTouch Access Anywhere server.Closing the web browser on your device leaves the RDC sessionrunning on the server with WindowViewer still running the InTouchapplication.InTouch Access Anywhere User Guide

24 Chapter 2 Viewing an Application with InTouch Access AnywhereResizing an Application WindowYou can change the size of an InTouch application window to fit withinyour current web browser if you select the Fit to browser DisplayOptions setting. The size of the WindowViewer window is set to theinitial size of your web browser’s window when you log on to anInTouch Access Anywhere session.If you change the size of your web browser window during an InTouchAccess Anywhere session, the size of the InTouch application windowremains the same as its initial size.To change the size of an InTouch application window, change the sizeof your web browser window, close WindowViewer, and disconnectfrom you InTouch Access Anywhere session. Then, log back on torestart WindowViewer to show your application at its new size.InTouch Access Anywhere User Guide

Viewing an InTouch Access Anywhere Session 25Using the Access Anywhere ToolbarInTouch Access Anywhere provides a toolbar to access a set of featuresand system keys while an InTouch application is running. The toolbarappears in the browser window and can be moved by dragging anddropping it to another window location.Tap or click the toolbar icon once to show a blue arrow to expand theblue bar. The blue bar includes icons that represent system keys andadditional functions.The gestures help icon appears only when running InTouchAccess Anywhere on a touch screen device. Click or tap thehelp icon to see figures and short explanations of supportedfinger gestures.Click or tap the ESC icon to cancel a value entered in a dataentry field.Click or tap the TAB icon to shift the window focus to the nextdata entry field of an application or the next cell of a table.Click or tap the Disconnect icon to end the InTouchapplication browser session and return to the logon page.Click or tap the About icon to see information about thespecific version of the InTouch Access Anywhere serverinstalled on the RDS host computer.Tap or click once on the tool box icon to expand the orange bar to showicons that represent keyboard or clipboard functions. The functionsshown in the orange bar vary based on whether you are using acomputer with a keyboard and mouse or a touch screen device.InTouch Access Anywhere User Guide

26 Chapter 2 Viewing an Application with InTouch Access AnywhereUsing the Touch Mobile Device ToolbarThe following example of the toolbox includes the functions needed fora touch screen device. The orange bar shows icons to enable or disablethe keyboard auto-sense function and toggle the TouchPad Mousefunction.Keyboard Auto-SenseInTouch Access Anywhere detects if a device is touch capable and canautomatically show a software keyboard for text input. KeyboardAuto-Sense is not available for a standard desk

HTML5 websockets technology makes it possible to open an interactive communication session between your browser and an InTouch Access Anywhere server. The following versions of HTML5 compatible web browsers have been tested and validated to work with InTouch Access Anywhere: