Configuring WinCC as an OPC DA Server for Third-Party Systems in Redundant PCS 7 Environments
In SIMATIC PCS 7 (V6.1 through V9.x), WinCC acts natively as an OPC DA Server (OPCServer.WinCC), allowing third-party OPC clients (such as Matrikon OPC) to read and write process variables. In redundant OS Server environments, third-party clients must either support OPC Server Redundancy (via redundancy brokers like Matrikon ORB) or connect via the Siemens OpenPCS 7 station, which provides an automated single-point failover interface.
Table of Contents
- WinCC OPC Architecture: Server vs. Client Roles
- Handling Server Redundancy for External OPC Clients
- Step-by-Step Configuration and DCOM Security Setup
- External OPC Integration Topologies Matrix
- Verification
- Limitations and Operational Precautions
- Engineer FAQ
- Technical References
- Related Articles
- Related Tags
WinCC OPC Architecture: Server vs. Client Roles
In process control integration, external manufacturing execution systems (MES), enterprise historians, or laboratory information management systems (LIMS) frequently need to stream real-time process data from SIMATIC PCS 7.
Commissioning engineers often experience confusion regarding the roles of WinCC and testing tools:
* WinCC Runtime as OPC DA Server: Whenever WinCC Runtime activates, it automatically launches its native OPC DA Server component: OPCServer.WinCC (or OPCServer.WinCC.1). It exposes all internal and external process tags, alarms, and historical archives to external applications.
* OPC Scout: A diagnostic OPC test client provided by Siemens to browse and read local or remote OPC servers. It cannot serve tags to external third parties; it merely verifies that OPCServer.WinCC is operational locally.
* The Integration Goal: To transfer tags to a third-party application (such as Matrikon OPC Data Manager or Wonderware/Kepware), the third-party application must connect as an OPC Client directly to OPCServer.WinCC over the network.
Handling Server Redundancy for External OPC Clients
In redundant SIMATIC PCS 7 OS architectures (Server 1 and Server 2 running WinCC Redundancy), establishing external OPC connections introduces a high-availability challenge:
-
Independent Server Instances:
* Server 1 hostsOPCServer.WinCCpointing to its local project database.
* Server 2 hosts an identicalOPCServer.WinCCpointing to its redundant database.
* Neither instance automatically redirects external client connections if its host PC fails or reboots. -
The Single-Client Connection Failure:
* If a third-party OPC client connects solely to Server 1's IP address and Server 1 is rebooted for maintenance, the third-party connection drops completely, even though Server 2 is actively operating the plant. -
High-Availability Integration Solutions:
* Solution A: Deploy SIMATIC OpenPCS 7 (Siemens Recommended):- OpenPCS 7 is an official PCS 7 add-on station that connects to both OS Server 1 and Server 2.
- It provides a unified, redundant OPC DA, OPC HDA (historical data), and OPC A&E (alarms) server interface. If the active server fails, OpenPCS 7 executes bumpless automatic switchover to the partner server without disconnecting the external client.
- Solution B: Deploy Third-Party Redundancy Middleware (Matrikon ORB):
- Install Matrikon OPC Redundancy Broker (ORB) on the client PC. ORB maintains active connections to both Server 1 and Server 2, monitoring server heartbeat and switching data streams automatically.
Step-by-Step Configuration and DCOM Security Setup
1. Verify Local OPC Server Operation with OPC Scout
- On WinCC OS Server 1, activate WinCC Runtime.
- Launch SIMATIC NET OPC Scout (
Start > Siemens Automation > SIMATIC NET > OPC Scout). - Expand Local COM Server > OPC.WinCC.
- Double-click the server to connect; browse Tag Management and add a test process tag.
- Confirm OPC Scout displays the tag value updating with quality code
good (0xC0).
2. Configure Windows Security and DCOM on WinCC Server
- Ensure both the WinCC Server and the third-party client PC reside in the same Windows Domain or share an identical local user account with identical passwords.
- On the WinCC Server, press Win + R, type
dcomcnfg, and press Enter. - Navigate to Component Services > Computers > My Computer.
- Right-click My Computer > Properties > COM Security:
* In Access Permissions > Edit Limits...: Grant Remote Access toANONYMOUS LOGON,Everyone, andInteractive.
* In Launch and Activation Permissions > Edit Limits...: Grant Remote Launch and Remote Activation toEveryoneandInteractive. - Under DCOM Config, locate OPCServer.WinCC:
* Right-click Properties > Identity: Select The Interactive User (or specify the dedicated shared service account).
3. Configure the Third-Party OPC Client
- On the third-party computer, open your OPC client software (e.g. Matrikon OPC Explorer).
- Specify the remote node: enter the IP address or NetBIOS name of WinCC Server 1.
- Select server identifier:
OPCServer.WinCC. - Connect to the server; browse the WinCC Tag Management hierarchy.
- Select the required process tags and establish cyclic subscription (e.g. 1000 ms update rate).
External OPC Integration Topologies Matrix
SIMATIC PCS 7 OpenPCS 7 licenseopc.tcp://)Verification
- In the third-party OPC client, verify the connection status to
OPCServer.WinCCreports Connected. - Subscribe to 10 analog process tags (e.g. pressure and temperature transmitters).
- Confirm values update cyclically with Quality Code
16#C0/Good. - Invert a digital bit in CFC on the AS; verify the state change reflects on the third-party client within 1 second.
- If using OpenPCS 7 or redundancy middleware, disconnect the primary server network cable; confirm communication fails over to the partner server without losing data.
Limitations and Operational Precautions
- Avoid High-Frequency Polling via DCOM: Polling thousands of tags at sub-100 ms intervals over DCOM saturates WinCC CPU resources. Use exception-based reporting (Unsolicited / On-Change) or aggregate subscriptions to 1000 ms.
- Firewall Port Openings: DCOM requires TCP Port 135 and dynamic ephemeral ports (49152 to 65535) open between the third-party PC and the WinCC Server.
- OpenPCS 7 Licensing Notice: When deploying OpenPCS 7 for redundant supervisory integration, verify order numbers (e.g. MLFB
6ES7658-0XX18-0YB0) and client access limits against the Siemens ST PCS 7 catalog with an authorized distributor.
Engineer FAQ
Can I use OPC Scout to send tags to another PC?
No. OPC Scout is purely a client for viewing and diagnosing local or remote OPC servers; it has no server functionality to forward tags.
Does WinCC V6.0 support OPC Unified Architecture (OPC UA)?
No. Native OPC UA Server functionality was introduced in SIMATIC WinCC V7.0 SP3 / V7.2 and PCS 7 V8.0. WinCC V6.0 supports only OPC DA Classic (over DCOM).
Why does the remote OPC client fail with 'Access Denied 0x80070005'?
This is a classic DCOM permissions error. The user account logged into the client PC does not exist on the WinCC Server, or the DCOM Access Limits in dcomcnfg lack remote permissions for that user.
Technical References
- SIMATIC WinCC V6.0 Communication Manual: OPC Channel and OPC Server
- SIMATIC Process Control System PCS 7 OpenPCS 7 System Manual
- OPC Foundation: Data Access (OPC DA) 2.05a and 3.0 Specifications
- Siemens Industry Online Support: Connecting Third-Party Clients to WinCC via OPC (SIOS Entry ID 109780813)
Related Articles
- Troubleshooting Unconnected OPC DA Tags ('???') Between Kepware and WinCC
- Configuring Windows Firewall, Dynamic RPC Ports, and Encrypted Communication on PCS 7 OS Servers
- Industrial Security Topologies for PCS 7 Plant Bus and Terminal Bus
Related Tags
- OPC DA
- WinCC OPC Server
- OpenPCS 7
- Matrikon
- DCOM
- PCS 7 V6.1