Troubleshooting Process Historian Connection Failures to Redundant OS Servers in PCS 7
When a standalone Siemens Process Historian (PH 2014 / 2020) connects and receives data from only one OS server in a redundant pair (e.g., OSS2 works, but OSS1 fails and master switchover halts archiving), the issue is caused by a corrupted PH-Ready configuration file (ProcessHistorian.cfg) or a blocked Store and Forward (S&F) cache on the failing server. To resolve this: 1) On the failing OS server, navigate to C:\ProgramData\Siemens\SFCache and purge corrupted queue folders (AlgCSDataQueue, TagCSDataQueue); 2) In the WinCC project directory, rename ProcessHistorian.cfg to .old and restart runtime to force clean GUID regeneration; 3) Verify Microsoft Message Queuing (MSMQ) is running; and 4) Confirm that bidirectional DNS/NetBIOS hostname resolution and NTP time synchronization match between PH and both OS servers.
Table of Contents
- Executive Summary
- Architecture and Fundamental Mechanics
- Step-by-Step Implementation Procedure
- Verification
- Limitations and Operational Precautions
- Engineer FAQ
- Technical References
- Related Articles
- Related Tags
Executive Summary
In high-reliability SIMATIC PCS 7 process architectures, the Process Historian (PH) provides long-term centralized archiving for all process values, batch records, and alarm events originating from redundant WinCC OS Servers. A critical failure mode occurs when the Process Historian Management console visualizes only one OS server (e.g., OSS2), while the redundant partner (OSS1) fails to transfer data. If an operational upset causes a master-standby switchover making OSS1 the active master, the Process Historian stops receiving all live plant data. This technical guide outlines the PH-Ready and Store & Forward (S&F) caching mechanics, details diagnostic logs, and provides the verified recovery procedure to establish bidirectional communication with both redundant OS servers.
Architecture and Fundamental Mechanics
Process Historian Client-Server Architecture and Caching Mechanics
+-----------------------+ +-----------------------+
| OS Server 1 (OSS1) | | OS Server 2 (OSS2) |
| WinCC Project Dir: | | WinCC Project Dir: |
| ProcessHistorian.cfg | | ProcessHistorian.cfg |
| [CORRUPTED / BLOCKED!]|<=== WinCC Redundancy ===| [HEALTHY BINDING] |
+-----------|-----------+ +-----------|-----------+
| MSMQ / TCP 4224 | MSMQ / TCP 4224
| [COMMUNICATION HALTED] | [DATA FLOWING OK]
v v
+-------------------------------------------------------------------------+
| Siemens Process Historian Server (PH) |
| |
| - Microsoft SQL Server Enterprise Instance |
| - Process Historian Management Console: |
| * OSS2 Status: CONNECTED (Green) |
| * OSS1 Status: DISCONNECTED / MISSING (Red / Not Detected) |
| |
| FAILURE SYMPTOM: |
| - Redundancy switchover: OSS1 becomes Master |
| - Archiving to PH completely freezes! |
+-------------------------------------------------------------------------+
Primary Root Causes for One-Sided Connections
- Corrupted
ProcessHistorian.cfg: On each OS server,ProcessHistorian.cfgstores the unique pairing token, GUID, and encryption certificates connecting that specific WinCC station to the PH database. If an OS server was duplicated, renamed, or restored from an old backup, this file contains invalid credentials, causing the PH server to reject its data packets. - Store and Forward (S&F) Queue Lockup: When network interruptions occur, the OS Server caches unsent archives in
C:\ProgramData\Siemens\SFCachevia Microsoft Message Queuing (MSMQ). If an MSMQ packet becomes malformed, the S&F queue deadlocks, preventing both live and cached data transmission. - Name Resolution and Time Drift: The PH infrastructure communicates strictly via computer hostnames (NetBIOS / DNS), not IP addresses. Furthermore, if time drift between OSS1 and the PH exceeds 1,000 ms, the PH database engine rejects incoming archive records due to timestamp plausibility violations.
Step-by-Step Implementation Procedure
Step 1: Pre-Flight Network, Service, and User Verification
- From the Process Historian server, open Command Prompt and test hostname pinging to both servers:
ping OSS1andping OSS2. - From both OS servers, ping the historian:
ping PH_SERVER. - In Windows Services (
services.msc) on both OS servers, verify that Message Queuing and CCAPHServer (PH-Ready Service) are in statusRunning. - Verify that the Windows user account configured for PH-Ready has administrative privileges and is a member of
SIMATIC HMI. - Verify that NTP time synchronization is active across all stations, ensuring time drift between OS servers and PH is under 100 ms.
Step 2: Purge S&F Cache and Reset PH-Ready on the Failing Server
- To avoid plant interruption, perform this procedure sequentially without shutting down both servers simultaneously.
- On the failing server (e.g.,
OSS1), deactivate WinCC Runtime (if it is currently the standby server; if it is master, trigger a controlled switchover toOSS2first). - In Windows Explorer, navigate to the WinCC project directory on
OSS1. - Locate
ProcessHistorian.cfgand rename it toProcessHistorian.cfg.old. - Open Windows Services (
services.msc) and stop the service Message Queuing (MSMQ). - Navigate to the Store and Forward cache directory:
C:\ProgramData\Siemens\SFCache. - Backup and delete all files and subfolders ending in
Queue(e.g.,AlgCSDataQueue,TagCSDataQueue). - Restart the Message Queuing service.
- Rename
ProcessHistorian.cfg.oldback toProcessHistorian.cfg(or leave it removed if you want WinCC to regenerate a clean configuration on connection).
Step 3: Run SIMATIC Security Control
- On
OSS1, launch Start > Siemens Automation > Security Control. - Click the button Repeat Settings to re-establish DCOM permissions and Windows firewall exceptions.
- Restart the
OSS1PC station to ensure all services initialize cleanly.
Step 4: Re-Establish Connection and Synchronize
- After reboot, launch WinCC Explorer on
OSS1and activate WinCC Runtime. - Wait for WinCC Redundancy synchronization to complete (green status in Redundancy Control).
- On the Process Historian server, open Process Historian Management Console.
- Navigate to Detailed Plant Structure Information and click the Update button on the far right.
- Confirm that
OSS1now appears in the plant tree alongsideOSS2with active green connection status.
Verification
- Management Console Audit: In the Process Historian Management Console, verify that both redundant partners (
OSS1andOSS2) display green status indicators under Plant Structure. - S&F Recovery Check: On
OSS1, inspectC:\ProgramData\Siemens\SFCache. Confirm that queue folders remain empty or drain steadily, indicating that buffered data is successfully transferring to the PH database. - Failover Archiving Test: In a test window, toggle mastership so
OSS1becomes the active master. In WinCC Information Server or WinCC Trend Control, verify that trend curves continue updating dynamically without gaps.
Limitations and Operational Precautions
- Historical Data Loss Risk: Deleting files in
SFCachepermanently deletes any unsent archive values buffered on that server during the disconnected period. If historical records are vital, copy the cache folder to a safe backup drive before purging. - Software Version Parity: The Process Historian and all OS Servers must run identical update packages (e.g., PH 2014 SP3 Upd6 on the PH requires PH-Ready 2014 SP3 Upd6 on both OS servers).
Engineer FAQ
Why did Process Historian connect to only one OS server?
The failing server had a desynchronized ProcessHistorian.cfg binding token, a locked Store and Forward (S&F) MSMQ cache, or a hostname resolution failure.
Where is the Store and Forward cache stored?
In C:\ProgramData\Siemens\SFCache on the local OS Server.
What happens if the master OS switches while PH is disconnected from that server?
Process Historian stops receiving all new archive tags and alarm messages until the connection is restored or the master switches back.
What service manages the connection on the OS server?
The CCAPHServer service (Siemens Process Historian Ready Component).
Can I fix this without stopping the operating plant?
Yes, by performing the cache reset sequentially on one server at a time while the redundant partner maintains plant supervision.
Why is NTP time synchronization critical for Process Historian?
The PH database enforces strict time validation; timestamps drifting by more than 1 second from the server clock are rejected as implausible.
What does the 'Update' button in PH Management do?
It forces the Process Historian database to query active network nodes and refresh its plant structure tree.
Does deleting SFCache delete the historical database on the PH?
No. It purges only the temporary local buffer on the OS server; the central PH database is unaffected.
What network protocol does PH use for data transfer?
Microsoft Message Queuing (MSMQ) over TCP port 1801, RPC port 135, and dedicated SQL/PH ports.
Where are Process Historian error logs located?
On the OS Server inside C:\Program Files (x86)\Siemens\WinCC\Diagnostics\ and in the Windows Event Viewer under Application Logs.
Technical References
- SIMATIC Process Historian 2014 SP3 / 2020 System Manual
- Siemens Industry Online Support (SIOS) Entry ID 109780528: Process Historian Update and Installation Guidelines
- Siemens Industry Online Support (SIOS) Entry ID 109780813: Troubleshooting PH to OS Redundancy Connections
- SIMATIC WinCC V7.5 WinCC Information Server and Process Historian Administration Guide
Related Articles
- Restoring Corrupted WinCC Tag Logging Archives and Fast Trends Following OS Server Power Failures
- Resolving OS Server Delta Download Aborts and Path Validation Failures in PCS 7 V9.0 SP2
- Implementing GPS and NTP Master Time Synchronization in PCS 7 Following SICLOCK Discontinuation
Related Tags
- Process Historian
- WinCC Redundancy
- PH-Ready
- Store and Forward
- SFCache
- MSMQ
- OS Server