There are two main usage categories for FactoryTalk Security in a FactoryTalk View Studio application; Runtime and Development. This section focuses on how to maintain the security settings for both categories.
Runtime security relates to who can be authenticated to view a running application and what actions/displays they are authorized for. An example action would be starting a FactoryTalk View application into runtime or which displays an operator has access to.
Development security relates to who can be authenticated to edit an application and what actions they are authorized to do. An example action would be archiving or restoring a FactoryTalk View application.
When multiple applications are being configured on the same computer, great care must be taken when working with FactoryTalk Security. The runtime security user list and settings are contained within each application itself. However, the runtime user list actually references the users and groups within the FactoryTalk directory. There can only be one active FactoryTalk directory on a computer (development or runtime).
Back up the development application
A FactoryTalk View application does not actually contain users or groups. It simply contains a list of references to the FactoryTalk directory users/groups. The FactoryTalk View application also holds the runtime security rights for the referenced users/groups.
When an application backup is performed the FactoryTalk View application files, the user accounts runtime access rights and the FactoryTalk directory are compiled into the APA backup file.
On the development computer, back up the application. Follow the steps below:
a. From the Windows Start menu, select All Programs > Rockwell Software >
FactoryTalk View > Tools > Application Manager.
b. From the Application Manager, select Machine Edition and then click Next.
c. Select Backup application and then click Next.
d. Select the application to back up and then click Next.
e. Enter the required information for the application and then click Finish.
Each application backup file (.apa) contains a copy of the FactoryTalk directory that was active at the time of backup. It is very common for different applications to have a different set of users and groups based on the FactoryTalk directory the application was created with. This results in a different FactoryTalk directory for each .apa backup file.
Back up the runtime application and FactoryTalk Local Directory To do this, follow the steps below:
1. On the development computer, back up the runtime application. The steps are same with steps to back up the development application. For details see page 152.
2. (optional) On the development computer, back up the FactoryTalk Local Directory . Follow the steps below:
a. Open FactoryTalk View Studio or FactoryTalk Administration Console.
b. In the Explorer window, right-click the FactoryTalk Directory System folder and then select Backup from the context menu.
c. On the Backup dialog box, enter the required information for the backup file and then click OK.
d. Use Windows Explorer to save a copy of the .bak file to another location off the local computer (to a CD, network PC, or USB memory stick, for example).
This step is critical, especially if you are developing applications for multiple clients.
Backing up any existing applications allows you to not only restore your client’s FactoryTalk View applications to their original state, but it also allows you to restore that client’s FactoryTalk Local directory should that get overwritten.
While this step is optional when you back up an application from the Application Manager, it is very good idea. There can be one FactoryTalk Local Directory to many FactoryTalk View Applications, so you should back up the FactoryTalk Local Directory if you have multiple applications referencing the Directory.
If there is one FactoryTalk Directory to one FactoryTalk View ME application, then the back up created with the Application Manager (.apa) will contain the FactoryTalk Local Directory.
It is highly recommended that you use a new file name each time to create versions of your FactoryTalk View ME application backups. This allows you to revert to older versions if needed.
Restore the application to the runtime computer
1. Copy the backed up application from the development computer to the runtime computer.
2. Restore the application:
a. From the Windows Start menu, select All Programs > Rockwell Software >
FactoryTalk View > Tools > Application Manager.
b. From the Application Manager, select Machine Edition and then click Next.
c. Select Restore application and click Next.
Always back up your FactoryTalk View SE (local) and Machine Edition applications and your Local FactoryTalk Directory before you restore any applications and/or the FactoryTalk Directory!
When you perform an application restore, the Application Manager provides you with the option to restore the FactoryTalk directory from the .apa file.
If you choose to restore the FactoryTalk directory, the currently loaded directory on the local computer will be overwritten.
d. Select the application to restore, select Restore the FactoryTalk View Machine Edition application and then click Next.
e. If the backup file was encrypted, enter the passphrase that was used during the backup operation and click OK.
f. Enter a new name for the application being restored and then click Finish.