The ArchestrAnaut

In our work we do a lot of interfacing with SQL databases (usually MS SQL Server).  Being able to interface with SQL from IAS is a big weapon in one’s arsenal.  You can retrieve data from a table or view, execute stored procedures and functions, and virtually anything else you can dream of doing with T-SQL.

We’ve wrapped most of the code to do the SQL DB interfacing into a DLL for simplicity and error trapping.  However, this post is intended to give a basic example on executing a simple query from an IAS script using the .NET objects.

Read the rest of this entry »

If you read our first post in the series( http://archestranaut.wordpress.com/2011/02/01/regular-expressions-for-fun-and-profit-part-1-of-2/) you are no doubt excited about the world of possibilities you open up when you combine Archestra with Regular Expressions.   In this post we’ll look at a real world example that we use with our clients to solve real world issues.

Keeping time in System Platform is absolutely critical.  When I work with a client that is having connectivity and deployment issues this is one of the first areas I look at.  We’ve found that using standard NTP works just fine (except on your Historian) as far as an accuracy level but what if something happens and you start drifting?  How do you know you are drifting.  I guess you could do some fancy math in the historian while historizing timestamps on platforms but that gets messy.  Let’s put our new found skills to work.

Read the rest of this entry »

In part 1, I covered a simple example on setting up security in IAS.  We often run across scenarios where System Platform security either doesn’t work quite like we want (second person verification) or can’t do what we want (supervisor verification).  The goal for part 2 is to outline the existing holes and to cover some of the tips & tricks we’ve got for applying security above and beyond the system’s existing capabilities.

Read the rest of this entry »

Before I get into ways to cover some of the gaps in IAS’s security scheme, I wanted to briefly go over how to implement domain-based security in IAS & InTouch.  To be fair, you can get most of this from the help manual, but I’m going to try to explain it with an example.

Read the rest of this entry »

I’ve been working on something today to log custom warning or error messages to the SMC from an IAS script.  I did a little sniffing around with Red Gate’s .Net Reflector and found an existing DLL with the ArchestrA.Diagnostics namespace in it.  It has a class with some static calls to log messages to the SMC.

Read the rest of this entry »

Most of our IAS systems have a lot of vendor provided pieces of equipment (aka skids).  Those skids usually have their own PLC and HMI.  The HMI’s usually have some function to login and they apply security based on the users group or security level.  Most of them have common or shared accounts that everybody knows the password for (even the disgruntled guy you just fired).

The other way that shows up a lot is having individual user account & privileges being role based.  If you have 15 users and 30 skids, that becomes a management nightmare trying to disable users, remember passwords, etc.  You could draw the same corollary to a bunch of Windows PCs’.  Security would be much easier to manage from a single location.  Our IAS system are always built on top of a Windows ActiveDirectory (AD) Domain.  This at least simplifies all of the SCADA security to be managed in one place:  the domain controller (DC).  Wouldn’t it be nice to use that to manage the skids too?

Read the rest of this entry »

IAS is as flexible as or more flexible than any other platform out on the market in terms of the breadth of programming possibilities. The concept of inheritance makes it possible to make changes at a template level and all of its children (templates & instances) will be changed too. Equally as powerful is IAS’s inclusion of .NET in their QuickScript language.

Read the rest of this entry »

Andy & I have always been fairly frustrated with the Wonderware Alarm Logger service.  It almost seems like an afterthought for System Platform (just look at the service name:  New_AlarmLogger).  Perhaps the most frustrating part is trying to integrate it into a system with redundant App Servers.  To the developers:  please integrate this into the System Platform in a future release.

Read the rest of this entry »