Configure a Deployment Server

To configure a deployment server, you use the Configurator. This tool allows you to:

• Adjust the deployment server's port setting
• Set the deployment database password
• Create a required set of Windows user groups
• Generate the authentication file required to verify the connection to the deployment clients.

Note: Before you can configure a deployment server on a computer, you need to install the deployment server components. This is an option on the Deployment Components installation profile when you run the Citect SCADA installer.

The Configurator can be launched at the completion of the installation procedure, or from the Schneider Electric "Common" programs group on the Windows™ Start menu.

To configure the deployment server (on a local computer):

1. In the panel on the left side of the Configurator, select Deployment Server. The [START] page will display.
2. You can choose one of the following options:
• Configure the Deployment Server

This option is available when no deployment server has been configured.

• Update the configuration of the current Deployment Server

This option is available once a deployment server has been configured. If selected you can update the database password and transfer speed for a deployment server; however you are unable to update the port number.

• Import configuration file from previous version of the Deployment Server

If you have a deployment server configured for Citect SCADA 2016, you can import the settings. In the field provided browse for the following Configurator file: "SE.Asb.Deployment.Server.WindowsService.exe.config".

Note: The default location is : “C:\ProgramData\Schneider Electric\Citect SCADA 2016\Config”

Once imported you will be able to continue using the deployment database and file repository created in v2016 in Citect SCADA 2018 .

3. Click the [Next] button. The PORT page will display.
4. Enter a Port Number to specify which port the deployment server will use for https communication with the deployment clients. By default, 443 is entered.

If the Port Number is not in your Windows firewall exception list, you need to select Add the port to the Windows firewall exception list. If this option is not selected, you may not be able to register deployment clients. (This option also needs to be selected when configuring the deployment clients.)

5. Click the Next button. The TRUST page will display.

This page determines how the certificates required to verify communications will be managed.

6. You can choose one of the following options:
• Create unique security certificates for me — the deployment server will be configured using locally created certificates. The Configurator will generate the required authentication file for you.
• I have my own installed certificates — the Binding and Signing certificate fields will be displayed. From the drop down menu, select the appropriate certificates. (System generated certificates are not available from these menus.)

Note: If you select Create unique security certificates for me, you will only be able to use the generated authentication file to verify the connection to each deployment client.

7. Click the Next button. The ROLES page will display.

This page lists the Windows user groups the deployment server creates to control access to some of its functionality. These groups include:

• [local]\Asb.Deployment.AdminRole - users can add and remove computers and groups
• [local]\Asb.Deployment.UploadRole - users can add and remove project versions
• [local]\Asb.Deployment.DeployRole - users can deploy projects to runtime computers
• [local]\Asb.Deployment.ReadRole - users can browse project versions and computers.

When the configuration process is complete, the current user account will be added to these groups. If required, you can manually add additional users to these groups in the Windows configuration environment.

8. Click the Next button. The SETTINGS page will display.

This page allows you to set the password used by the deployment database. It also allows you to set the transfer rate to limit the network bandwidth used when deploying a project.

9. Enter the Password for the database. Confirm the password.

Note: To change an existing database password you need to reconfigure the deployment server.

10. In the Transfer Speed (KB/s) field, enter a value between 0 and 2147483647 (0 being unrestricted). The default is 10000 (KB/s). By limiting the transfer speed, you allow other processes to use the remaining network bandwidth. This value may affect the overall duration of a deployment operation. For example, if your project is 20MB with a limit set to 1000 KB/s, the project will take approximately 20 seconds to transfer.

Note: Settings may vary according to your network infrastructure.

11. Click the Next button. The FINISH page will display.

This page informs you that the Configurator is ready to apply the settings to the server and generate an authentication certificate. Specify a location for the authentication file in the File Path field.

If required, you can use the Previous button to make any changes to your settings before you complete the configuration process.

12. Click the Configure button. The Configuration Messages panel will indicate if the deployment server configuration was successful.

Note: If you need to regenerate the authentication file, you can open the Configurator on the deployment server and click the Configure button. When you run the Configurator again, you can only change the Password and Transfer Speed fields on the Settings page.

See Also

Published June 2018