1. Enable a Secure Connection between the Machines

Perform the following steps for secure connection between CimView and Operations Hub.

Components Required for Widget Setup

Install the following applications:
  • Proficy Webspace 6.0 with the latest SIM (Minimum SIM 3a)
  • CIMPLICITY 11.1
  • Operations Hub 2.0 SIM 4
Note: Proficy Webspace and CIMPLICITY must be installed on the same machine and requires a Webspace Strong Encryption license. Contact your local sales representative for details.

Enable Strong Encryption for Webspace Servers

Certificate for Webspace Relay/Single Server

Perform the following steps on the Relay/Single server

  1. Select Install Certificates on Webspace Install screen. The Webspace Certificate Configuration Tool appears.
  2. Ensure the port your binding to is not already in use (Ex: If Operations Hub was installed on the same machine and is already using port 443, you cannot bind the certificate to port 443).
  3. Select Create and Bind.
  4. Select Restart IIS Site.
  5. In the Webspace Admin Console, Select Host Options.
  6. Select the Security tab. Select Encrypted in Transport drop-down list.
  7. Select the encryption Ex: 256-bit DES.

  8. Select the certificate you created in step 2. Click OK.
  9. Restart Application Publishing Service.
Certificate for Webspace Dependent Server

Perform the following steps on the Dependent Server

  1. Copy the root certificate created on the relay server in the above procedure to the dependent server machine.
  2. Open the root certificate.
  3. Select the Store Location as Local Machine. Save the certificate in the Trusted Root Certification Authorities folder.
  4. Select Next, and then select Finish.
  5. Copy the CIMPLICITY root certificate CimScadaConfigRootCA.crt located at <installation_path>\Proficy\Proficy CIMPLICITY\ScadaConfigPki from the relay server machine to the same location on dependent server machine.
Warning: Do not copy the .pfx or .key file. Exposure of private key may compromise the security of the system. You must copy only the root certificate.

Certificates for Operations Hub Browser

  1. Install browser root certificate on Operation Hub machine:
    1. Click on Operations Hub icon.
    2. Log into Operations Hubs using the credentials provided during the installation.
    3. The browser displays a Not secure icon.
    4. Right-click the Not Secure icon, a Certificate dialog box appears.
    5. Select Certificate.
    6. Select the Certification Path tab.
    7. Select the root certificate.
    8. Select View Certificate.
    9. Select the Details tab, and then select Copy to File.
    10. Select Next, and then select the preferred export file format.
    11. Enter the location where you want to save the certificate.
    12. Select Next, and then select Finish. The file is exported to the location.
    13. Right click the certificate file and select Install Certificate.
    14. Select the Store Location as Local Machine.
    15. Select Place all certificates in the following store. Select Browse and select Trusted Root Certification Authorities folder.
    16. Select Ok and then select Next. Select Finish. The certificate is imported.
  2. Copy the Webspace root certificate from Webspace server to Operations Hub browser machine. Repeat step n to step p for the copied certificate.
  3. Copy the CIMPLICITY root certificate CimScadaConfigRootCA.crt located at <installation_path>\Proficy\Proficy CIMPLICITY\ScadaConfigPki from the CIMPLICITY server to Operations Hub browser machine. Repeat step 14 to 17 for the copied certificate.

Add Operations Hub User to CIMPLICITY

Perform the following steps for all the projects whose CimView screens you want to view in Operations Hub.

  1. On the machine that has CIMPLICITY installed, open CIMPLICITY Workbench.
  2. Select Security.
  3. Right click on Users, and then select New.
  4. Create a user. The username should match with Operations Hub username.
  5. Enter a password, and then confirm the password.
  6. Select Apply. Select OK.

Configure CIMPLICITY Project Properties

Perform the following steps for all the projects whose CimView screens you want to view in Operations Hub.

  1. Open CIMPLICITY Workbench.
  2. Select Properties from the Project drop-down list.
  3. Select the Operations Hub tab.
  4. In Operations Hub Configuration section, enter the following:
    • Server name: The Operations Hub Server name.

    • Port: The port on which Operations Hub is running.

    • User name: The user name that is used to log in to Operations Hub

  5. For SSL Security:
    • Copy the root certificate from <Project_Location>\data\WebHMIpki\server_certs folder to <Project_Location>\data\WebHMIpki\trusted_Issuers folder.

    • Select the Require trusted connection checkbox. The connection is trusted and a success message appears.

  6. If you are using an external UAA with OpsHub, enter the Server URL in UAA/OAth2Configuration section.
  7. Click OK.