background image

30

Reference Manual

00809-0200-4410, Rev BA

Section 4: Software Setup

February 2014

Software setup

4.4

Security setup utility

The Security Setup Utility enables secure communications between the Gateway and host 
system, asset management software, data historians, or other applications. This is done by 
encrypting the standard data protocols (AMS Wireless Configurator, Modbus TCP, and OPC) 
used by the Gateway and making them available through various proxies within the Security 
Setup Utility. These proxies can function as a data server for other applications on the control 
network. The Security Setup Utility can support multiple Gateways at once and each proxy can 
support multiple client application connects. 

Figure 4-1

 shows a typical system architecture 

using the Security Setup Utility.

Figure 4-1. Typical Host System Architecture Using Security Setup

Note 

OPC communications requires the use of the Security Setup Utility regardless of whether 
encryption is required.

Summary of Contents for Smart Wireless Gateway 1410

Page 1: ...Reference Manual 00809 0200 4410 Rev BA February 2014 Emerson Smart Wireless Gateway 1410 ...

Page 2: ......

Page 3: ... two toll free assistance numbers Global Service Center Software and Integration Support 1 800 833 8314 United States 63 2 702 1111 International Customer Central Technical support quoting and order related questions 1 800 999 9307 7 00 am to 7 00 pm CST North American Response Center Equipment service needs 1 800 654 7768 24 hours includes Canada Outside of the United States contact your local Em...

Page 4: ......

Page 5: ...equirements 6 2 3 Initial connection and configuration 6 2 3 1 Prepare PC Laptop 6 2 3 2 Connections and power 7 2 3 3 Configure the gateway 9 2 3 4 System backup 14 2 3 5 Web page usage 14 2 3 6 Resetting to factory defaults 15 3Section 3 Mounting and connection 3 1 Overview 17 3 1 1 General considerations 17 3 1 2 Physical description 18 3 2 Mounting 18 3 3 Remote antenna 20 3 4 Connections 22 3...

Page 6: ... integration 5 1 Overview 35 5 2 Network architecture 35 5 3 Internal firewall 36 5 4 Modbus 37 5 4 1 Communication settings 37 5 4 2 Register mapping 39 5 5 EtherNet IP 44 6Section 6 Troubleshooting 7Section 7 Glossary AAppendix A Product specifications A 1 Ordering information 55 A 2 Functional specifications 57 A 3 Physical specifications 58 A 4 Communication specifications 58 A 5 Self organizi...

Page 7: ...e of Contents BAppendix B Product Certifications B 1 Approved Manufacturing Locations 63 B 2 Telecommunications Compliance 63 B 3 FCC and IC 63 B 4 European Directive Information 63 B 5 Ordinary Location Certification from FM Approvals 63 B 6 Hazardous Locations Certifications 64 ...

Page 8: ......

Page 9: ...mbol Failure to follow these installation guidelines could result in death or serious injury Make sure only qualified personnel perform the installation Explosions could result in death or serious injury Verify that the operating atmosphere of the device is consistent with the appropriate hazardous locations certifications Electrical shock could cause death or serious injury Use extreme caution wh...

Page 10: ... items essential to the complete installation and operation of the Gateway Smart Wireless Gateway Quick Installation Guide Software pack 2 disk set Informational side label for IP address Basic antenna if no remote antenna is required Terminal block black If an optional remote antenna has been ordered it will be in a separate box containing Remote mount antenna Mounting hardware Lightning arrestor...

Page 11: ...field device network It covers network architectures security and data mapping Section 6 Troubleshooting This section provides troubleshooting tips as well as information to contact technical support over the phone or through email Section 7 Glossary The glossary defines terms used throughout this manual or that appear in the web interface of the Smart Wireless Gateway Appendix A Product specifica...

Page 12: ...rs and will provide a Return Material Authorization RMA number The center will also ask for the process material to which the product was last exposed 1 6 Product recycling disposal Recycling of equipment and packaging should be taken into consideration and disposed of in accordance with local and national legislation regulations Individuals who handle products exposed to a hazardous substance can...

Page 13: ...C Laptop Ethernet Cable 24 VDC nominal power supply Failure to follow these installation guidelines could result in death or serious injury Only qualified personnel should perform the installation Explosions could result in death or serious injury Verify that the operating atmosphere of the gateway is consistent with the appropriate hazardous locations certifications Do not make or break connectio...

Page 14: ...configured to form a private network before communicating to the Gateway The network settings can be found in the control panel of the PC Laptop running a Microsoft platform based operating system To configure these settings 1 Find and open the Control Panel It is generally found from the Start Menu 2 Open Network Connections 3 Select Local Area Connection 4 Right click the mouse and select Proper...

Page 15: ...p is now set up to form a private network and to communicate with the Gateway Note Connecting to the Gateway s secondary Ethernet port will require different network settings Please see Table 2 1 for additional network settings Table 2 1 Default IP Addresses 2 3 2 Connections and power Physically connect the PC Laptop to the Gateway with an Ethernet cable by connecting one end to the Ethernet port...

Page 16: ...et light will turn red The reset switch should not be enabled during normal operation D Ethernet port 2 This secondary port must be enabled when ordering to access the device When this port is activated the factory IP address is 192 168 2 10 See Table 2 1 E Ethernet port 1 Use for standard communication to the webserver or other protocols enabled on the gateway The factory IP address is 192 168 1 ...

Page 17: ...View status of communications client server parameters and more Monitor Screens created by the user to view data from field devices Explorer Basic view of values from field devices Setup Configure the Gateway for operations security and host system integration Security passwords There are four role based user accounts for the Gateway with varying levels of access Table 2 2 below describes this acc...

Page 18: ...e installed on any machine connected to the Gateway Emerson bundles the latest software patches into our standard Gateway firmware updates These software patches are not anti malware or antivirus tools in any sense of the word but do provide the latest in security protection Password complexity The browser front end of the Gateway supports many customizable password rules Setup Security User Optio...

Page 19: ...vigating to Setup Time as shown in Figure 2 2 on page 12 Gateway time settings and time stamps are stored internally as UTC time The appropriate web browser being used displays the time as per the local browser settings There are three ways to set the Gateway time 1 Network Time Protocol recommended This option uses a Network Time Protocol NTP server to slowly adjust the Gateway s time in order to...

Page 20: ...be configured with an IP address as well as other TCP IP network settings This specific page can be found in System backup on page 14 Figure 2 3 Ethernet Settings Use caution when making changes to the TCP IP network settings If they are lost or entered incorrectly the Gateway will require a factory reset see Resetting to factory defaults on page 15 Contact the network administrator for informatio...

Page 21: ...ess To change the TCP IP Network Settings 1 Navigate to Setup Ethernet protocol 2 Select Specify an IP address recommended 3 Enter the following Hostname Domain Name IP Address Netmask Gateway 4 Choose Submit 5 When prompted choose Restart Apps 6 Chose Yes to confirm restart 7 Close the web browser Note Once the IP Address of the Gateway has been changed communications to the web interface will be...

Page 22: ...teway collects the configuration date and when the file download pop up appears choose Save 4 Enter a save location and file name 5 Choose Save 6 Choose Return to form Note System backup contains user passwords and keys used for encrypting communication Store downloaded system backups in a secure location 2 3 5 Web page usage It is not recommended that users stay logged on to a single page or a la...

Page 23: ...and un mount the device from the DIN rail 2 Locate the Reset switch label on the back of the Gateway 3 Break the label in the center and slide the switch up 4 Mount and reconnect the Gateway turn power ON on to the gateway 5 Let the Gateway completely boot up approximately 2 minutes During this time the red Reset light on the front of the unit will be ON 6 Turn off power to the Gateway remove conn...

Page 24: ......

Page 25: ...sult in death or serious injury Verify that the operating atmosphere of the device is consistent with the appropriate hazardous locations certifications Electrostatic discharge can damage electronics Use proper personal grounding before handling electronics or making contact with leads and terminals Electrical shock could cause death or serious injury If the device is installed in a high voltage e...

Page 26: ...thernet and serial communications The unit is designed to be mounted on a DIN rail inside an electronic enclosure 3 2 Mounting The unit can be snapped onto a DIN TS35 7 5 or TS35 15 rail system To clip the unit onto the DIN rail see Figure 3 1 1 Tilt the unit at a slight angle allowing the lower lip of the chassis to catch the bottom of the DIN rail 2 Apply pressure forward to snap the back of the...

Page 27: ...e to sensitive RF components do not remove protective cap from the Gateway SMA connector until ready to install the antenna NOTICE When mounting the unit in an electrical enclosure or other location comply with the appropriate local and governmental installation codes Check to verify that the installer associated hardware and installation equipment used have the proper certifications for the speci...

Page 28: ...washer and nut on top of the lightning arrestor 4 Connect the antenna to the lightning arrestor using the supplied coaxial cable ensuring the drip loop is not closer than 1 foot 0 3 m from the lightning arrestor 5 Use the coaxial sealant to seal each connection between the Gateway lightning arrestor cable and antenna 6 Ensure that the mounting mast lightning arrestor and Gateway are grounded accor...

Page 29: ...d Gateway The coaxial sealant must be applied to guarantee performance of the wireless field network Please see Figure 3 4 for details on how to apply weather proofing Figure 3 4 Applying coaxial sealant to cable connections Table 3 1 Remote Antenna Kit Options Kit option Antenna Cable 1 Lightning arrestor WL2 1 2 Wavelength Dipole Omni Directional 6 dB Gain 50 ft 15 2 m LMR 400 Head mount jack to...

Page 30: ...of the Gateway 3 4 2 Ethernet The Gateway is equipped with two 10 100 base TX Ethernet communications ports see Figure 3 5 on page 23 These connections can be used to access the Gateway s web interface and to communicate Modbus TCP OPC and EtherNet IP protocols The primary Ethernet port Ethernet 1 is used to connect to the host system or other application systems The secondary Ethernet port Ethern...

Page 31: ...us terminals are labeled A and B on the wiring diagram This connection is used to communicate Modbus RTU on an RS 485 data bus Use 18 AWG single twisted shielded pair wiring to connect the Gateway to the RS 485 data bus The total bus length should not exceed 4000 ft 1220 m Connect the Tx negative receive wire to terminal A and the Rx positive transmit wire to terminal B The wiring shield should be...

Page 32: ...connected to pull up and pull down resistors Switch 1 is for the Tx A line and Switch 3 is for the Rx B line These 470 Ohm resistors are used to prevent noise from being interpreted as valid communications during periods when no actual communications are occurring Only one set of pull up and pull down resistors should be active on the RS 485 data bus at time Switch 2 is connected to a 120 Ohm term...

Page 33: ...current The positive and negative connections are depicted on the diagram shown in Figure 3 6 on page 24 The wiring should include an external power shut off switch or circuit breaker that is located near the Gateway Note Using an uninterruptible power supply UPS is recommended to ensure availability should there be a loss of power Up to 4000 ft 1220 m Device 1 Device 2 A B Terminators required on...

Page 34: ......

Page 35: ...egration as well as wireless field device configuration The following table describes what items are installed and on which disk they can be found Table 4 1 Software Applications Additional system components may be installed depending on the current configuration of the system Name Description Location Security Setup Utility This utility allows the setup of SSL enabled communications between the G...

Page 36: ...for AMS Wireless Configurator Minimum requirements Recommended requirements Intel Core 2 Duo 2 0 GHz Intel Core 2 Quad 2 0 GHz or greater 1 GB Memory 3 GB Memory or Greater 1 5 GB free hard disk space 2 GB or more of free hard disk space Operating system Version Windows XP Professional Service Pack 3 Windows Server 2003 Standard Service Pack 2 Windows Server 2003 R2 Standard Service Pack 2 Windows...

Page 37: ... 1 into the CD DVD drive of the PC 3 Follow the prompts AMS Wireless Configurator is located on Disk 2 To install the software 1 Exit close all Windows programs including any running in the background such as virus scan software 2 Insert Disk 2 into the CD DVD drive of the PC 3 Click Install from the menu when the AMS Wireless Configurator setup begins 4 Follow the prompts 5 Allow AMS Wireless Con...

Page 38: ...used by the Gateway and making them available through various proxies within the Security Setup Utility These proxies can function as a data server for other applications on the control network The Security Setup Utility can support multiple Gateways at once and each proxy can support multiple client application connects Figure 4 1 shows a typical system architecture using the Security Setup Utili...

Page 39: ...ity 1 Open the Security Setup Utility 2 Click EDIT NEW then select the type of new proxy to be added 3 Right click on the new proxy entry and select Properties 4 Enter the target Gateway s Hostname and IP Address 5 Click OK 6 Click FILE SAVE 7 When prompted for authentication enter the admin password for the target Gateway 8 Click OK 9 Repeat steps 2 8 to added additional proxies 10 Click FILE EXI...

Page 40: ...Configurator To display the release notes select START PROGRAMS AMS WIRELESS CONFIG URATOR HELP 4 5 1 Setup AMS Wireless Configurator supports connectivity to a Wireless Network and a HART Modem Both of these interfaces must be configured through the Network Configuration application To run this application select START PROGRAMS AMS DEVICE MANAGER NETWORK CONFIGURATION Note Do not have the Securit...

Page 41: ...own in Figure 4 3 3 Select HART modem and click Install 4 Click Next 5 Enter a name for the HART modem and click Next 6 Select the HART master type default is that AMS Wireless Configurator will be the Primary HART master and click Next 7 Select the COM port for the HART modem and click Next 8 Check the box to Check to support Multi Drop devices 9 Check the box to Include WirelessHART Adapter 10 C...

Page 42: ...tup 4 6 Licensing and credits The latest licensing agreements are included on each disk of the software pack This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit http www openssl org This product includes software written by Eric Young eay cryptsoft com ...

Page 43: ...connection types are important when determining the network architecture and what protocols can be used for integration Ethernet is the primary physical connection type and RS485 is available an optional connection type The following network architecture diagrams will help when integrating data from the Gateway into the host system Ethernet An Ethernet connection supports Modbus TCP OPC AMS Wirele...

Page 44: ...odbus I O card see Figure 5 2 Up to 31 Gateways can be connected to a single I O card in this manner Figure 5 2 RS485 Architecture 5 3 Internal firewall The Gateway supports an internal firewall that inspects both incoming and outgoing data packets TCP ports for communication protocols are user configurable including user specified port numbers and the ability to disable ports The Gateway s intern...

Page 45: ...hernet It functions as a sub device on the Modbus network and must be polled by a Modbus master or client host system 5 4 1 Communication settings It is import that the Modbus communication settings in the Gateway match the settings in the Modbus master or client Please refer to host system documentation for more information on how to configure these settings The Modbus communication settings can ...

Page 46: ...quired for Modbus RTU Stop Bits This setting determines the number 1 or 2 of stop bits to use when ending a message This setting is only required for Modbus RTU Response delay time ms This setting determines how long ms the Gateway waits before responding to a Modbus request This setting is only required for Modbus RTU Unmapped register read response This is the value returned by the Gateway if th...

Page 47: ...ed and native integer This setting determines what value is reported if the wireless field device reports a failure or stops communicating to the Gateway This setting is used for rounded or scaled integers The choice is a user specified value between 32768 and 65535 Scaled floating point maximum integer value This determines the maximum integer value for the purpose scaling integers 999 65534 Use ...

Page 48: ...es is selected on the Modbus Communications page Register This is the Modbus register number used for this data value Modbus registers hold two bytes 16 bits of information therefore 32 bit floats and integers require two Modbus registers Each data point needs a unique Modbus register number unless they are assigned different addresses Register numbers 0 19999 are reserved for Boolean bit coil bin...

Page 49: ...ther True or False a state value of True will report a 1 for True and 0 for False A state of False will report a 0 for True and a 1 for False State is only required for register numbers 0 19999 Boolean bit coil binary etc Invert This check box will invert the Modbus output from a 1 to a 0 or a 0 to a 1 Invert is only used for Boolean values using register numbers 0 19999 Gain This value is multipl...

Page 50: ...n February 2014 Host Integration Predefined Modbus registers In addition to user configurable parameters the Gateway also supports a list of predefined Modbus registers with diagnostics and test parameters The following table is a list of the predefined Modbus registers ...

Page 51: ...TATUS_0 49015 8 bit unsigned int SYSTEM_DIAG ADDITIONAL_STATUS_1 49016 8 bit unsigned int SYSTEM_DIAG ADDITIONAL_STATUS_2 49017 8 bit unsigned int SYSTEM_DIAG ADDITIONAL_STATUS_3 49018 8 bit unsigned int SYSTEM_DIAG ADDITIONAL_STATUS_4 49019 8 bit unsigned int SYSTEM_DIAG ADDITIONAL_STATUS_5 49020 8 bit unsigned int SYSTEM_DIAG ADDITIONAL_STATUS_6 49021 8 bit unsigned int SYSTEM_DIAG ADDITIONAL_ST...

Page 52: ...ion settings can be found by navigating to Setup EtherNet IP Communications Note EtherNet IP can be integrated with any approved EtherNet IP ODVA member Other protocols such as HARTIP are still functional within the Gateway Please consult the Product Data Sheet Doc number 00813 0200 4420 for ordering options Figure 5 6 EtherNet IP Communications Page SYSTEM_DIAG TEST_UNSIGNED_BYTE 49033 8 bit unsi...

Page 53: ...the value s associated status indicates a critical failure Inf Positive infinity is reported if the value s associated status indicates a critical failure Inf Negative infinity is reported if the value s associated status indicates a critical failure Other User defined value is reported if the value s associated status indicates a critical failure Value reported for error native integer User defin...

Page 54: ...onsumed Point Name Assigned data point in the format HARTtag parameter New entry Creates a new entry in this table First Navigates to the first page of this table Previous Navigates to the previous page of this table Search Finds the next occurrence of the characters entered into this field Next Navigates to the next page of this table Last Navigates to the last page of this table Delete Selected ...

Page 55: ...gister map 1 Click New entry 2 Complete all of the table entries for the new data point note that the entry columns may vary based on the EtherNet IP communications settings 3 Repeat for each new data point 4 Click Submit 5 When changes have been accepted click Return to form See Table 5 1 on page 5 41 for options of parameters that can be mapped ...

Page 56: ......

Page 57: ...rimary port is 10 5 255 254 default secondary port is 10 9 255 254 5 Verify the IP address of the PC Laptop is in the same subnet range as the Gateway i e If the Gateway IP is 155 177 0 xxx then the PC Lap IP address should be 155 177 0 yyy 6 Disable internet browser proxy settings Can not find Gateway after changing IP address 1 Verify the IP address of the PC Laptop is in the same subnet range a...

Page 58: ...rebuild hierarchy Wireless device appears with red HART symbol 1 Install latest device support files from AMS Wireless Configurator Go to www emersonprocess com BRANDS AMS SUITE AMS DEVICE MANAGER DEVICE DESCRIPTION DDs Device configuration items are grayed out 1 Verify whether current or historical information is being displayed This setting is displayed at the bottom of each device configuration...

Page 59: ...re unsecure Modbus protocol settings in the Gateway Log on to the Gateway and navigate to SETUP SECURITY PROTOCOLS 4 Verify the Modbus TCP communications settings in the Gateway Log on to the Gateway and navigate to SETUP MODBUS COMMUNICATIONS 5 Verify Modbus register mapping in the Gateway Log on to the Gateway and navigate to SETUP MODBUS MAPPING OPC communications OPC application can not find a...

Page 60: ......

Page 61: ...ymbols separated by dots such as this domain com Gateway Refers to the Smart Wireless Gateway HART Tag The device s electronic tag that the Gateway uses for all host integration mapping Refers to the HART long tag 32 characters used for HART 6 or 7 devices or the HART message 32 characters only used for HART 5 wired devices connected via a WirelessHART adapter Host Name A unique designator in a do...

Page 62: ... of expected messages Takes into account all paths RSSI Received signal strength indication dBm for the wireless field device Secondary Interface Ethernet 2 port that is used for backup connection or a maintenance port for local access Security Setup Utility A software application that enables secure communications between the Gateway and host system asset management software data historians or ot...

Page 63: ... Ordering information Table A 1 Smart Wireless Gateway Ordering Information The Standard offering represents the most common options The starred options should be selected for best delivery __The Expanded offering is subject to additional delivery lead time Model Product description 1410 Smart Wireless Gateway 2 4 GHz DSSS WirelessHART Webserver AMS Ready HART IP Wireless configuration Standard St...

Page 64: ...rd H6 Allen Bradley H9 Other Oil and gas options Standard Standard G Oil and Gas Monitor Page Typical model number 1410 A 2 D5 WX2 NA 1 Single active 10 100 baseT Ethernet port with RJ45 connector 2 Additional ports disabled 3 Dual active 10 100 baseT Ethernet ports with RJ45 connectors 4 Multiple active ports have separate IP addresses firewall isolation and no packet forwarding 5 Convertible to ...

Page 65: ...ower output from antenna Maximum of 10 mW 10 dBm EIRP for WL or WX antenna types Maximum of 40 mW 16 dBm EIRP for WN2 high gain option Environmental Operating Temperature Range 40 to 167 F 40 to 75 C Operating Humidity Range 0 100 relative humidity EMC performance Complies with EN61326 1 2006 Antenna options Optional remote mount omnidirectional antenna Antenna 2 dBi rubber dipole with SMA connect...

Page 66: ... Wiring Single twisted shielded pair 18 AWG Wiring distance is approximately 4000 ft 1 524 m Ethernet 10 100base TX Ethernet communication port Protocols Modbus TCP OPC EtherNet IP HART IP https for Web Interface Wiring Cat5e shielded cable Wiring distance 328 ft 100 m Modbus Supports Modbus RTU and Modbus TCP with 32 bit floating point values integers and scaled integers Modbus Registers are user...

Page 67: ...ice Network size latency 25 Devices less than 5 sec Data reliability Greater than 99 A 6 System security specifications Ethernet Secure Sockets Layer SSL enabled default TCP IP communications Smart Wireless Gateway access Role based Access Control RBAC including Administrator Maintenance Operator and Executive Administrator has complete control of the Gateway and connections to host systems and th...

Page 68: ...2014 Product specifications Third party certification Wurldtech Achilles Level 1 certified for network resiliency National Institute of Standards and Technology NIST Advanced Encryption Standard AES Algorithm conforming to Federal Information Processing Standard Publication 197 FIPS 197 ...

Page 69: ... specifications A 7 Dimensional drawings Figure A 1 Smart Wireless Gateway Dimensions are in inches millimeters RF connector on 1410 is an SMA female Matching RF cable to antenna should be a SMA male NOTE Allow extra space in front of unit for wiring antenna connector and antenna cable service loop ...

Page 70: ...imensions Dimensions are in millimeters Figure A 3 Remote Omni antenna Kit The remote omni antenna kit includes sealant tape for remote antenna connection SMA to N type adapter cable mounting brackets for the antenna and lightning arrester Antenna 50 ft 15 2 m cable Lightning Arrestor WL2 WL2 Antenna 25 ft 7 6 m cable Lightning Arrestor WN2 WN2 ...

Page 71: ...S Wireless SNAP ON 5 10 Upgrade Licenses 01420 1644 0004 Serial Port HART Modem and Cables only 03095 5105 0001 USB Port HART Modem and Cables only 03095 5105 0002 Table A 3 Spare Parts Item description 1 1 Does not include SMA to N type adapter Part number Spare Kit WL2 Replacement 2 Remote Antenna 50 ft 15 2 m Cable and Lightning Arrestor 2 Can not upgrade from integral to remote antenna Replace...

Page 72: ......

Page 73: ...d to supply fully compliant products and remove the risk of violating country directives or laws governing wireless device usage B 3 FCC and IC This device complies with Part 15 of the FCC Rules Operation is subject to the following conditions This device may not cause harmful interference This device must accept any interference received including interference that may cause undesired operation T...

Page 74: ...uipment the 1410 shall be mounted within a tool secured enclosure which meets the requirements of ANSI ISA 61010 1 and be capable of accepting the applicable wiring methods per the NEC N6 CSA Class I Division 2 Certificate 2646342 Standards Used CSA Std C22 2 No 0 10 CSA Std C22 2 No 213 M1987 CSA Std C22 2 No 61010 1 12 ANSI ISA 12 12 01 2012 ANSI ISA 61010 1 2012 Markings SUITABLE FOR CL I DIV 2...

Page 75: ......

Page 76: ...tion Foundation Foundation fieldbus is a registered trademark of the Fieldbus Foundation All other marks are the property of their respective owners February 2014 Rosemount Inc All rights reserved Emerson Process Management GmbH Co Argelsrieder Feld 3 82234 Wessling Germany Tel 49 8153 9390 Fax 49 8153 939172 Emerson Process Management Asia Pacific Private Limited 1 Pandan Crescent Singapore 12846...

Reviews: