operating system, application patches and updates guide · substation alarm manager operating...

Substation Alarm ManagerOperating System, Application Patches and Updates Guide

www.kalkitech.com

Version 1.0.0, April 2018

https://www.kalkitech.com/

Substation Alarm Manager Operating System, Applications Patches and Updates Guide 2

Copyright Notice

© 2018 Applied Systems Engineering, Inc. All Rights reserved. This user manual is a publication of Applied Systems Engineering, Inc. (ASE) and it is intended for

customer use only. Content of this manual is copyrighted and reproduction in whole or in part, for use other than in support of ASE products, is prohibited without the specific written permission of ASE.

Disclaimer

Information in this manual is subject to change without notice.Information provided in this manual is intended to be accurate and reliable. However,

ASE assumes no responsibility for its use and makes no commitment to update or keep the current information in this manual.

Contact Information

Applied Systems Engineering, Inc.1671 Dell Avenue, Suite 200

Campbell, California, 95008 USA

Telephone: (408) 364-0500Fax: (408) 364-0550

Email: [email protected]

Technical Support Contact Information

Online Technical Information: www.ase-systems.com/support

E-mail Support: [email protected]

https://www.ase-systems.com/support


Table of Contents1. Introduction 4

2. Glossary of terms 5

3. Products and Variants 6

4. Substation Alarm Manager 74.1. Operating System and Application Software Version 7

4.1.1. Current Version 74.2. SAM PC Operating System Patches and Updates 8

4.2.1. Applicable SAM Versions 84.2.2. Precautions Before Starting 84.2.3. Updating the SAM PC Operating System using Windows Auto Update 84.2.4. Manual Update 12

Appendix A: Meltdown and Spectre 14

Appendix B: Microsoft OS Manual Update List 15

Appendix C: Microsoft OS Automatic Update List 16

Appendix D: Standard Warranty and Extended Maintenance Plans 19


1. IntroductionThis document describes the procedures to update and maintain the operating system of the Substation Alarm Manager (SAM) ASE product and is applicable to select variants of SAM shipped with serial numbers 1263 and above.

This document will be updated periodically as ASE continues to monitor reported issues, security updates and patches from the Operating Systems and device vendors. Please refer to https://www.ase-systems.com/sam-annunciator-download/ on the ASE website for the latest version of this document as well as previous archived versions of this document.

This procedure may require you utilize a set of supporting files. You may receive these on USB media from ASE or download them from the provided links.

1


2. Glossary of termsSAM – Substation Alarm Manager SPT – SCADA Protocol Translation

2


3. Products and VariantsSAM provides power utilities a simple way to show current point status, data values, and alarm information within a substation. By utilizing ASE’s vast protocol library, SAM can obtain data from a variety of RTU/IED devices by direct scan, eavesdropping on active communication to an external master, or through an industry standard OPC interface to any compliant OPC server. Data and alarm display and processing information is identical in all cases.

The complete SAM system comes with a substation hardened PC (no moving parts), a touch-screen 19” rack-mount monitor; the data acquisition, annunciation, and data viewer software; and configuration software. Lower cost options are available to customers who provide their own PC and/or monitor.

SAM allows for multiple configurable annunciation pages to be created to show digital states, analog values, and alarm conditions. Alarm calculation, color coding, font/button size, and screen layout are all configurable within the SAM software.

The SAM software integrates seamlessly with ASE’s SCADA Protocol Translation (SPT) software, provided as an integral part of the SAM package. SPT can gather data from downstream devices (RTUs/IEDs) using any of over 40 different protocols. The SPT component adds the capability for SAM to report acquired data values to upstream masters, optionally in different protocols. For a small non-recurring charge, SAM can operate as an integrated protocol translator, data concentrator, and alarm annunciation package.

SAM-900 and SAM-750 include ruggedized/hardened PC’s that run Windows Embedded Standard 7 operating system. This document details the steps to update the Windows operating system and SAM and SPT applications to the current release from ASE.

3


4. Substation Alarm Manager

4.1. Operating System and Application Software Version

4.1.1. Current Version Component Tested VersionOS: Windows Embedded Standard Windows Embedded Standard 7 with Service Pack 1Application: SAM SAM licensed version 1.1.1.16Application: SAMEdit SamEdit version 1.1.1.18Application: SPT Editor SPT Editor Version 5.4.44

Windows Embedded Standard 7 This update process is tested and verified with Windows Embedded Standard 7 with Service Pack 1. This information can be access and verify by opening up: Control Panel > System and Security > System

SAM VersionThis update process supports SAM licensed version 1.1.1.16. The version number can be verified by opening the SAM program. The version number is located top left of the windows, enclosed by a square bracket. If the top left window of the SAM program indicates it is a demo version, please contact us for a licensed version.

SamEdit This update process supports SamEdit version 1.1.1.18. The version number can be accessed and verified by opening up the SamEdit program. On the top left area of SamEdit, click on ‘Help’ and then select ‘About’.

SPT Editor This update process supports SPT Editor Version 5.4.44.The version number can be accessed and verified by opening up the SPT Editor program. On the top left area of SPT Editor, click on ‘Help’ and select ‘About’.

Prior VersionsWhile SAM and SPT applications are backward compatible, we verify the latest patches and security updates from Microsoft only with the current release of SAM and SPT. We highly recommend for you to update to the latest SAM and SPT software.

For more information about SAM update subscriptions, please contact our sales team at [email protected]

4


4.2. SAM PC Operating System Patches and Updates

Note: This update procedure contains instructions to update the SAM using two mechanisms, the Window Automatic Update or a Manual method. ASE recommends using the Automatic Update first.

4.2.1. Applicable SAM Versions This Windows update process is tested and verified for the SAM with serial numbers starting at 1263 and upwards.

4.2.2. Precautions Before StartingList of precautions before starting the update process:• Close all applications before starting the updating procedures. The only programs that should

be open are Windows Explorer and Windows Updater.• If the SAM’s monitor begins flickering or becomes slow or unresponsive, please wait a few

minutes for the SAM to respond. If the SAM is still unresponsive, restart the device by toggling the power switch. This issue is caused by the SAM running out of memory (RAM) during the installation process. It is important that no other programs are running in the background during installation.

• Please make sure that the system clock is accurate to your local time. This may cause synchronization issues when enabling the automatic update. If possible, refer to another time keeping device (i.e. watch, cellular phone, another computer). If your machine’s time/date is not consistent with local time/date, change the date on the machine by going to:Control Panel > Clock, Language, and Region> Date and Time

• There will be some updates that will not install through the manual process. To get these updates, please use the Windows automatic updates. Please refer to the Appendix for a full list.

• If you go through the manual update process and need to use the Windows Update in the future, you do not need to enable the automatic updater; it should be enabled during the manual process.

4.2.3. Updating the SAM PC Operating System using Windows Auto UpdatePrerequisites• This updating procedure requires the machine to be connected to the Internet for the duration

of the update.• The installation process takes approximately two hours from start to finish.• Windows6.1-KB3102810-x86.msu (for Correction 1)

– This file can be located in the ‘AutomaticUpdate’ directory (USB:\AutomaticUpdate\) – This file can also be retrieve through the following link:https://www.microsoft.com/en-us/download/details.aspx?id=49542

• Windows6.1-KB947821 -v34 -x86.msu (for Correction 2) – This file can be located in the ‘AutomaticUpdate’ directory (USB:\AutomaticUpdate\) – This file can also be retrieve through the following link:https://www.microsoft.com/en-us/download/details.aspx?id=3132

Standard Installation ProceduresThe SAM comes with a lightweight version of Windows Embedded Standard 7. In order to install the latest security updates from Microsoft, Windows Update feature must be turned on.


Check for updates to make sure that Auto Update is enabled. This can be done in: Control Panel > System and Security > Windows Update > Check for Updates

If there are warnings after the machine checks for updates (Error code 8007000E, C80003F3, 8024402F as shown above), proceed to Correction 1.

If there are no warning after the machine checks for updates, skip Correction 1 and 2 and proceed to the installation process.

Procedures to Enable Auto UpdateCorrection 1:1. Install KB3102810 patch located in the directory ‘USB:\AutomaticUpdate\’2. After the installation of KB3102810 is finished, Press Win+R to enter the Run Window 3. Enter in ‘services.msc’, shown below


4. As shown below, a services windows should pop up. Locate the Windows Update service

5. Right click on ‘Window Update’ and select ‘stop’ 6. Open Explorer and delete C:\Windows\SoftwareDistribution folder. See image below


7. Go back to the Services Windows and start ‘Windows Update’. See image below

8. Check for updates by going to Control Panel > System and Security > Windows Update > Check for Updates

9. Skip Correction 2 if checking for updates does not give any errors. If there are any errors, proceed to Correction 2

Correction 2:1. Locate and execute the standalone file USB:\AutomaticUpdate\Windows6.1-KB947821 -v34

-x86.msu. This step should take 15 minutes. 2. After the installation process finished, restart the machine.

Installation Process: After Enabling the Auto Updates3. Check for updates in Control Panel > System and Security > Windows Update > Check for

Updates4. Only install the updates that are flagged “Important”. There should be around 120 updates.5. Click “install updates”6. Restart the machine when the automatic update process is finish

VerificationAfter the installation process, there should be approximately 120 updates (including Service Pack 1) on the unit after the installation process. Please refer to the Appendix for a full list of updates.


4.2.4. Manual UpdatePrerequisites• The installation process will take approximately 2-3 hours.

Required Files: • All the standalone installers inside the directory USB:\ManualUpdate\. There should be 111

files in total. The required files have .msu extension.• These files can also be access with the following link:

http://www.catalog.update.microsoft.com/home.aspx

Standard Installation ProceduresProcedures:• Go in folder with a list .msu files.

– Sort .msu files by name in ascending order. The file with the lowest KB number should be at the top and the file with the highest KB number should be toward the bottom of the list.

• Start with the first file. It should be KB2479943 .msu file. See image above. After double-clicking on the standalone installer, there should be a message prompting to install the update. See image below.


• Install each .msu file sequentially, See below for list of warnings that may be prompted. – As shown in the image below, there will be some warnings during the installation process. These warnings are common and can be ignored.

– Click ‘Close’ or ‘Postpone’ if prompted to restart the machine. You do not need to restart the machine every time an update finishes installing.

– If there are warnings regarding low memory issues, you can ignore it. – If there is a ‘not applicable’ error (shown below) rerun the installation file that failed. If the installation file still fails, continue on to the next file.

• After the installation is finished, restart the machine to ensure all the patches are applied correctly. During initialization, Windows Update will indicate that the updates are being applied. Please do not power off the machine during this time. All the installed updates will be reverted if the machine is powered off during this process.

VerificationAfter the update process, there should be around 113 updates (including Service Pack 1 updates) installed on your machine. Please refer to the Appendix for the full list.


Appendix A: Meltdown and SpectreWith the available information to date from various public announcements and published vendor information, we have assessed the SAM and determined that it is not vulnerable to Meltdown and Spectre. We are actively monitoring updates from vendors and as additional information or changes become available that changes the information below, we will publish an update to the Security Advisory which can be found on the website at: https://www.ase-systems.com/wp-content/uploads/2018/01/SecurityAdvisory-Meltdown-and-spectre.pdf.

A


Appendix B: Microsoft OS Manual Update ListManual Update List:KB2479943 KB2813430 KB3003743 KB3092601KB2506212 KB2834140 KB3004361 KB3097989KB2509553 KB2840631 KB3010788 KB3101722KB2532531 KB2861698 KB3011780 KB3108371KB2552343 KB2862152 KB3019978 KB3108381KB2560656 KB2862330 KB3021674 KB3108664KB2564958 KB2862335 KB3022777 KB3109103KB2585542 KB2864202 KB3023215 KB3109560KB2620704 KB2868038 KB3030377 KB3110329KB2621440 KB2871997 KB3035126 KB3122648KB2631813 KB2882822 KB3035132 KB3126587KB2653956 KB2892074 KB3037574 KB3127220KB2654428 KB2893294 KB3042058 KB3138612KB2667402 KB2900986 KB3045685 KB3138910KB2685939 KB2911501 KB3046017 KB3139398KB2690533 KB2931356 KB3046269 KB3139914KB2698365 KB2937610 KB3055642 KB3156016KB2705219 KB2943357 KB3059317 KB3156019KB2716513 KB2968294 KB3060716 KB3159398KB2719033 KB2972100 KB3061518 KB3161949KB2729452 KB2972211 KB3067903 KB3161958KB2736422 KB2973112 KB3071756 KB3177467KB2742599 KB2973201 KB3072305 KB4019990KB2758857 KB2973351 KB3074543 KB4040980KB2770660 KB2977292 KB3075220 KB4056897KB2807986 KB2978120 KB3076895 KB4074587KB2808679 KB2984972 KB3078601 KB976902

KB2992611 KB3084135 KB976932KB3086255

B


Appendix C: Microsoft OS Automatic Update ListAutomatic Updates ListKB2670838 KB2834140 KB3035126 KB3156016KB2479943 KB2840631 KB3035132 KB3156019KB2506212 KB2861698 KB3037574 KB3159398KB2509553 KB2862152 KB3042058 KB3161949KB2532531 KB2862330 KB3045685 KB3161958KB2533623 KB2862335 KB3046017 KB3177467KB2552343 KB2864202 KB3046269 KB4019990KB2560656 KB2868038 KB3055642 KB4040980KB2564958 KB2871997 KB3059317 KB4056897KB2585542 KB2882822 KB3060716 KB4074587KB2620704 KB2888049 KB3061518 KB976902KB2621440 KB2892074 KB3067903 KB976932KB2631813 KB2893294 KB3071756 KB4054518KB2639308 KB2900986 KB3072305KB2653956 KB2911501 KB3074543KB2654428 KB2912390 KB3075220KB2667402 KB2931356 KB3076895KB2685939 KB2937610 KB3078601KB2690533 KB2943357 KB3084135KB2698365 KB2968294 KB3086255KB2705219 KB2972100 KB3092601KB2716513 KB2972211 KB3097989KB2719033 KB2973112 KB3101722KB2729094 KB2973201 KB3102810KB2729452 KB2973351 KB3108371KB2731771 KB2977292 KB3108381KB2736422 KB2978120 KB3108664KB2742599 KB2984972 KB3109103KB2758857 KB2992611 KB3109560KB2770660 KB3003743 KB3110329KB2786081 KB3004361 KB3122648KB2807986 KB3010788 KB3126587KB2808679 KB3011780 KB3127220KB2813430 KB3019978 KB3138612

KB3021674 KB3138910KB3022777 KB3139398KB3023215 KB3139914KB3030377

C


List of updates that cannot be installed manually. If using the Manual update method, please enable Auto Updates for these updates.

The information in the table below is based on information from Microsoft. For more information regarding specific updates, refer to the following Microsoft website:https://www.catalog.update.microsoft.com/home.aspxorhttp://support.microsoft.com/kb/<insert KB number>

For example: http://support.microsoft.com/kb/2729094

KB Number

Year Title Brief Description MSRC Severity

ASE Advisory

KB4054518 2017-12 Security Monthly Quality Rollup for Windows 7

This security update includes improvements and fixes that address the following issues:• Issue where users

of SQL Server Reporting Services may not be able to use the scrollbar in a drop-down list.

• Additional issues with updated time zone information.

• Security updates to the Microsoft Scripting Engine and Windows Server.

Critical The SAM product does not use this feature. This update will not affect the SAM in any ways.

KB2912390 2014 - 02 Security Update for Windows 7

MS14-007: Vulnerability in Direct2D could allow remote code execution: February 11, 2014

Critical The SAM does not use Direct2D for any of its application. The SAM will not be affected by this vulnerability.

KB2888049 2013 - 10 Update for Windows 7

Update is available that improves the network performance of Internet Explorer 11 in Windows

Unspecified The SAM does not use Internet Explorer for any of its native application.


Internet Explorer 10 does not save credentials for a website after you log off or restart a computer that is running Windows 7 SP1 or Windows Server 2008 R2 SP1

Unspecified The SAM does not use Internet Explorer for any of its native application.



An update that provides new APIs for conversion between local time and UTC in Windows 7 or in Windows Server 2008 R2 is available

Unspecified The SAM does not use this features in its native application


An update for the Segoe UI symbol font in Windows 7 and in Windows Server 2008 R2 is available

Unspecified The SAM does not use this feature in its native application


Security Update for Windows 7

Unspecified The SAM does not use this feature in its native application


Microsoft Security Advisory: Insecure library loading could allow remote code execution

Unspecified SAM does not use this feature

If your organization feels that some of these updates are mandatory, please use the automatic Windows Update to obtain them. If the automatic Windows Update is not a viable option, please send your CompactFlash card back to us and we will install the updates for you. These CompactFlash card slot is located in the front of the SAM (facing the power switch). The card slot is labeled “Cfast”. Release the locking mechanism and push on the button next to the card slot to safely remove the card.


Appendix D: Standard Warranty and Extended Maintenance PlansThe company offers customers extended hardware and software packages that assist in maintaining the products and assure access to software upgrades which may include new functionality as well as minor updates and security patches. One and three-year extended warranty, support and maintenance plans are available.

Standard Product WarrantyThe standard hardware warranty for new purchases is one year from the product ship date. The warranty guarantees repair or replacement of hardware that fails under general use.

The standard software warranty for new purchases is one year from the product ship date. The warranty provides phone/email access to customer support and rights to software update releases made during the warranty period.

For additional standard product warranty information, please refer to the website: https://www.ase-systems.com/warranty/

Extended Hardware and Software Maintenance PlansMaintenance plan options for products to extend product life and uptime by providing customers with access to new software features and technical support experts.

Extended Hardware MaintenanceAvailable for one or three years, it extends the standard hardware warranty beyond the initial year by one or three years. It provides repair or replacement of hardware that fails under general use.

Extended Software MaintenanceAvailable for one or three years, it extends the standard software warranty beyond the initial year by one or three years. The warranty provides access to new software releases which may include new features, OS updates, and security patches. It also includes priority notice of critical issues that may affect the product, along with actions being taken by the company and recommendations on customer actions. Up to two hours of phone or email support is included to provide additional guidance on product/features and address any questions.

Combined Extended Hardware and Software MaintenanceThis plan is available for one or three years and is customers that desire the highest level of reliability. It includes all the features of the Extended Hardware Maintenance and Extended Software Maintenance offerings.

To learn more about any of these extended maintenance offerings, please contact your company sales representative.

D

operating system, application patches and updates guide · substation alarm manager operating...

Documents