Resolving Simatic Information Server 2014 SP3 Web Interface Rendering and IIS Handler Failures

In SIMATIC Information Server (IS) 2014 SP3, blank web pages, broken navigation controls, or script errors following installation are caused by incorrect Microsoft Internet Information Services (IIS) handler configurations, missing ASP.NET components, or overly restrictive browser security zones. To resolve, verify in Windows Server Server Manager that IIS includes ASP.NET 4.5, Windows Authentication, and Static Content features. In Internet Explorer or Microsoft Edge (IE Mode), add 'http://' and 'about:blank' to the Trusted Sites zone, disable Protected Mode for trusted sites, enable 'Prompt for user name and password', and uncheck 'Check for publisher's certificate revocation'. Finally, ensure the Information Server Application Pool runs under an account belonging to the 'SIMATIC Report Administrators' group.

Executive Summary

SIMATIC Information Server 2014 SP3 serves as the web-based reporting platform for PCS 7 and WinCC historical process data, extracting records from Process Historian or WinCC archives. After completing installation, system administrators frequently find that opening the web portal (http://localhost/InformationServer) results in an unnavigable, partially rendered, or completely blank interface. Reinstalling Information Server or IIS rarely resolves the symptom because the underlying fault stems from missing IIS handler mappings, unconfigured ASP.NET features, or default Windows Internet Security restrictions. This guide details the mandatory IIS prerequisites, browser security policies, and administrative account permissions necessary to restore full web portal functionality.

Architecture and Fundamental Mechanics

The web architecture of SIMATIC Information Server 2014 SP3 depends on several synchronized operating system components:
1. Microsoft IIS Web Server and ASP.NET Core:
- Information Server hosts its reporting engine inside IIS under dedicated virtual directories (/InformationServer, /ReportServer).
- It requires ASP.NET 4.5, ISAPI Filters, Dynamic Content Compression, and Windows Authentication. If ASP.NET handler mappings are corrupt or uninstalled, IIS serves HTML scaffolds but fails to execute the server-side rendering scripts.
2. Application Pool Identity and Database Rights:
- The InformationServerAppPool executes under a designated Windows service identity.
- This service account must be a member of the local Windows groups SIMATIC Report Administrators, SIMATIC HMI, and SQLServerReportServerUser to access SQL Server Reporting Services (SSRS) and Process Historian databases.
3. Browser Security Zones and Client-Side Scripting:
- The Information Server portal relies heavily on dynamic JavaScript, AJAX controls, and Silverlight/HTML5 components.
- Enhanced Security Configuration (IE ESC) on Windows Server blocks client-side active scripting and XMLHttpRequest calls to the local web server by default.
- Certificate revocation checks against untrusted or offline industrial networks introduce communication timeouts that abort page rendering.

Step-by-Step Implementation Procedure

Verify and Install Missing IIS Roles and Features:
a. Open Server Manager on the Information Server host PC.
b. Select Manage -> Add Roles and Features.
c. Under 'Web Server (IIS) -> Web Server':
- Common HTTP Features: Ensure 'Default Document', 'Directory Browsing', and 'Static Content' are checked.
- Security: Ensure 'Windows Authentication' and 'Request Filtering' are checked.
- Application Development: Ensure ASP.NET 4.5, '.NET Extensibility 4.5', 'ISAPI Extensions', and 'ISAPI Filters' are installed.
  d. Complete the wizard and restart the IIS service (iisreset via administrative Command Prompt).
Configure IIS Application Pool Identity:
a. Open Internet Information Services (IIS) Manager (inetmgr).
b. Expand the server node and click on Application Pools.
c. Locate InformationServerAppPool (and ReportServerAppPool).
d. Right-click, select Advanced Settings, and inspect 'Identity'.
e. Ensure the identity is set to NetworkService or a dedicated domain/local service user that belongs to SIMATIC Report Administrators.
Configure Internet Explorer / Edge IE Mode Security Settings:
a. Open Windows Internet Options (via Control Panel or browser settings).
b. Navigate to the Security tab and select Trusted Sites.
c. Click Sites and add: http://localhost, http://<computername>, and about:blank. (Uncheck 'Require server verification (https:)' if not using SSL).
d. With Trusted Sites selected, uncheck Enable Protected Mode.
e. Click Custom level...: under 'User Authentication -> Logon', select Prompt for user name and password (or 'Automatic logon with current user name and password').
Adjust Advanced Browser Security Options:
a. In Internet Options, switch to the Advanced tab.
b. Under 'Multimedia', verify that Play animations in webpages is checked.
c. Under 'Security', uncheck Check for publisher's certificate revocation and uncheck Check for server certificate revocation (prevents offline certificate timeouts).
d. Click 'Apply' and 'OK'.
Re-register ASP.NET Handlers if Script Errors Persist:
a. Open Command Prompt as Administrator.
b. Execute: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regiis.exe -i
c. Restart IIS by running iisreset.
d. Open browser and navigate to http://localhost/InformationServer.

Verification

Open the browser and browse to http://localhost/InformationServer.
Confirm that the Information Server navigation banner, dashboard tiles, and report project templates render completely without missing graphic assets.
Navigate to Administration -> Diagnostic: confirm that communication status to Process Historian / WinCC shows 'Connected' with green status indicators.

Limitations and Operational Precautions

Information Server 2014 SP3 is designed for Internet Explorer 11 or Microsoft Edge in IE compatibility mode. Modern browsers (Chrome, standard Edge) require Information Server 2020 or HTML5 updates for native rendering.

Engineer FAQ

Why does Information Server display a blank page after installation?

It is typically caused by missing ASP.NET 4.5 features in IIS, corrupt handler mappings, or browser Enhanced Security Configuration blocking local scripts.

What user groups are required for the Information Server service account?

The account must belong to 'SIMATIC Report Administrators', 'SIMATIC HMI', and local administrative groups.

Why should certificate revocation checks be disabled on industrial PCs?

Industrial control networks typically lack internet access; enabled revocation checks cause browsers to wait for external CRL server timeouts, freezing page load.