C135 PCS 7 (PCS7)
6C
6 Cielo Ciencia y Tecnología
·Publicada en C135 PCS 7 (PCS7)

Configuring Automatic Operator Login with SIMATIC Logon in PCS 7 OS Workstations

Configuring Automatic Operator Login with SIMATIC Logon in PCS 7 OS Workstations

To configure automatic operator login with SIMATIC Logon on a SIMATIC PCS 7 OS client or single station, configure the Windows operating system to automatically log into a dedicated operator Windows account on startup (using Windows Netplwiz or AutoAdminLogon registry keys), and configure the 'SIMATIC Logon Configuration' utility to authenticate the local or domain operator account. In WinCC, ensure that SIMATIC Logon is active in the User Administrator and configure a WinCC startup script using the SIMATIC Logon API or Auto-Logon options so the graphical operator runtime initializes without demanding password entry.

Table of Contents

Executive Summary

In continuous 24/7 industrial process control rooms, control room consoles and operator station (OS) clients must reboot and resume process visualization automatically following power interruptions or scheduled system maintenance, without waiting for a control room engineer to enter Windows and WinCC passwords. However, integrating automated workstation login with the strict audit-trail security of SIMATIC Logon presents specific configuration nuances. This guide provides the complete engineering procedure to configure Windows autologin, SIMATIC Logon default user settings, WinCC User Administrator roles, and operational safety boundaries.

Architecture and Fundamental Mechanics

SIMATIC Logon Architecture and Autologin Mechanics:

  • Role of SIMATIC Logon in PCS 7:
  • SIMATIC Logon replaces traditional standalone WinCC local user databases with centralized Windows Security (Active Directory or local SAM accounts).
  • In WinCC User Administrator, Windows groups (e.g., Plant_Operators, Plant_Engineers) are mapped to specific WinCC authorization levels (e.g., Level 5: Process Control, Level 6: Higher Process Control).
  • Workstation Startup Progression:
    1. Operating System Boot: Windows evaluates registry settings (AutoAdminLogon = 1) and automatically logs into the designated Windows operator account (e.g., Operator).
    2. WinCC Autostart: The Siemens AutoStart.exe utility activates the WinCC OS project.
    3. SIMATIC Logon Authentication: WinCC queries the SIMATIC Logon service. If configured for default or silent authentication, SIMATIC Logon authorizes the active Windows session user, loading operator permissions without displaying the login dialog.

Step-by-Step Implementation Procedure

Step-by-Step Configuration of Autologin with SIMATIC Logon:

  1. Configure Windows OS Automatic Logon:
    - Press Win + R -> type netplwiz (or control userpasswords2) -> press Enter.
    - Select the dedicated operator user account (e.g., Operator).
    - Uncheck 'Users must enter a user name and password to use this computer'.
    - Click Apply; enter and confirm the operator account password in the prompt.
    - Click OK.
  2. Configure SIMATIC Logon Configuration Utility:
    - Open Start Menu -> Siemens Automation -> SIMATIC -> SIMATIC Logon -> 'Configure SIMATIC Logon'.
    - In the 'General' tab, ensure the working environment is set to the local computer or target plant domain.
    - Under the 'Logon' tab, check 'Log on with the currently logged on Windows user' (Silent Login).
  3. Configure WinCC User Administrator:
    - Open WinCC Explorer on the OS project.
    - Open 'User Administrator' -> check 'SIMATIC Logon' active.
    - Under 'Groups', import or map the Windows security group (e.g., Operators) and assign WinCC Authorization Level 5 ('Process controlling').
  4. Configure WinCC Autostart:
    - Open Start Menu -> Siemens Automation -> SIMATIC -> WinCC -> 'Autostart'.
    - Select the target OS project file (.mcp).
    - Check 'Activate project' -> click OK.
  5. Reboot and Validate:
    - Restart the OS PC; verify that Windows boots directly into the operator desktop, WinCC Runtime activates automatically, and operator control buttons are active without credential prompts.

Verification

To verify autologin operation:
1. Reboot the OS workstation.
2. Confirm the machine bypasses the Windows login screen without human intervention.
3. Confirm WinCC Runtime starts up automatically.
4. Verify the active user indicator on the WinCC title bar displays the operator username (e.g., Operator).
5. Open an APL valve or motor faceplate; verify that 'Manual' and 'Auto' command buttons are enabled, confirming valid Level 5 authorization.

Limitations and Operational Precautions

Operational precautions:
- Never configure autologin for accounts with administrative privileges (e.g., Level 6 'Higher Process Controlling' or Windows Administrator); autologin accounts must be restricted strictly to basic operator rights.
- Storing passwords in the Windows registry for AutoAdminLogon introduces a security exposure; ensure the physical console is located in a secured control room.
- For FDA 21 CFR Part 11 compliant environments requiring electronic signatures, autologin must be disabled or paired with re-authentication prompts for individual critical control actions.

Engineer FAQ

Can SIMATIC Logon log in automatically without showing a login prompt?

Yes, by configuring Windows autologin and enabling 'Log on with the currently logged on Windows user' in the SIMATIC Logon Configuration utility.

What authorization level should be assigned to an autologin operator?

Level 5 ('Process controlling') for basic operation; higher levels (Level 6, engineering, or administrator) should require manual login.

Where are the Windows Autologin registry keys located?

Under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon (AutoAdminLogon, DefaultUserName, DefaultPassword).

Does SIMATIC Logon require a separate software license?

Yes, SIMATIC Logon requires a runtime license installed on the host PC or shared via Automation License Manager.

What happens if an engineer logs out of an autologin client?

Upon logging out in WinCC, the system reverts to an unauthorized guest state until a user logs in again or the workstation is rebooted.

Technical References

Related Articles

Related Tags

  • SIMATIC Logon
  • Autologin
  • User Administrator
  • WinCC Security
  • Operator Station
20 respuestas