operating wincc mode

Operating WinCC

Unified in the Kiosk

Mode

WinCC Unified PC

https://support.industry.siemens.com/cs/ww/en/view/109771719

Siemens

Industry

Online

Support

https://support.industry.siemens.com/cs/ww/en/view/109771719

WinCC Unified PC Kioskmodus Edge Entry ID: 109771719, V1.1, 12/2019 2

© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

This entry originates from Siemens Industry Online Support. The conditions of use specified there apply (www.siemens.com/nutzungsbedingungen).

Security Informa-

tion

Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.

In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial security concept. Siemens’ products and solutions only form one element of such a concept.

Customers are responsible to prevent unauthorized access to their plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.

Additionally, Siemens’ guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit http://www.siemens.com/industrialsecurity.

Siemens’ products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase the customer’s exposure to cyber threats.

To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under http://www.siemens.com/industrialsecurity.

Contents 1 Introduction ........................................................................................................ 3

1.1 Overview............................................................................................... 3 1.2 Function ................................................................................................ 3 1.3 Requirements ....................................................................................... 3 1.4 Components Used ................................................................................ 4

2 Engineering ........................................................................................................ 5

2.1 Setting Up the Kiosk Mode ................................................................... 5 2.2 Login with Kiosk User ......................................................................... 10 2.3 Alternatives for Other Browsers ......................................................... 12

http://www.siemens.com/nutzungsbedingungen

http://www.siemens.com/industrialsecurity

http://www.siemens.com/industrialsecurity

1 Introduction


© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

1 Introduction

1.1 Overview

At some workstations the users should have access to only one program. Using the Kiosk mode you can prevent the settings being changed by Windows or the system. In professional corporate networks you can set up and manage such a configuration centrally via user rights and guidelines.

Windows 10 provides a simple and charge-free option for the Kiosk mode. In this way the user has access to one single program after logon.

1.2 Function

With the Windows function update 1809 you can use the Microsoft Edge Browser in the Kiosk mode.

With assigned access you create a defined browsing function to block a Windows 10 system and permit only access to WinCC Unified.

Note Further information about the Microsoft Edge browser in Kiosk mode is available in the following Microsoft document: https://docs.microsoft.com/en-us/microsoft-edge/deploy/microsoft-edge-kiosk-mode-deploy

1.3 Requirements

The following requirements must be met to be able to execute the subsequent configuration steps:

• A WinCC Unified project is configured and started in Runtime.

• Microsoft Edge is installed in Windows 10, version 1809 (Professional, Enterprise and Education) or higher.

Note The steps shown in section 2.1 are only supported by the Microsoft Edge browser. Other browsers like Google Chrome, for instance, are not supported in this procedure.

https://docs.microsoft.com/en-us/microsoft-edge/deploy/microsoft-edge-kiosk-mode-deploy

https://docs.microsoft.com/en-us/microsoft-edge/deploy/microsoft-edge-kiosk-mode-deploy

1 Introduction


© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

1.4 Components Used

The application example was created with the following hardware and software:

Table 1-1

Component Quantity Article number

SIMATIC WinCC Unified (Runtime) 1 6AV2154-....1-6

Windows 10 Enterprise version 1903 1

Microsoft Edge browser 1

SIMATIC PC station (general)

1

6AV7241-5KC04-0FA0

Alternatively, you can use any other PC that meets the hardware and software requirements.

2 Engineering


© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

2 Engineering

2.1 Setting Up the Kiosk Mode

You set up Microsoft Edge for Kiosk mode as follows.

Open the Windows Settings

1. Open the "Windows Settings" on the kiosk device.

2. Click in the search field and search for "Kiosk". Then you select "Set up a kiosk (assigned access)".

Figure 2-1

3. On the "Set up a kiosk" page you click "Get started".

Figure 2-2

2 Engineering


© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

Create a new kiosk account

1. Enter a name to create a new kiosk account or select an existing account in the list and then click "Next".

Figure 2-3

2 Engineering


© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

Select the kiosk app

1. On the "Choose a kiosk app" page you select the application "Microsoft Edge" and then click "Next".

Figure 2-4

2 Engineering


© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

Define the use

1. Select how Microsoft Edge is to be displayed when used in Kiosk mode.

Figure 2-5

• "As a digital sign or interactive display" Displays a specific website in full-screen mode and Microsoft Edge InPrivate protection for user data is implemented.

• "As a public browser" Executes a limited multi-tab version of Microsoft Edge to protect user data.

Note

If you want to use the Script Debugger in the browser, you select the "As a public browser" option. This gives you the possibility of opening the Script Debugger via another tab.

The Script Debugger is only supported in the Microsoft Edge browser as of version V44.5.1.

2 Engineering


© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

Select the URL

1. Enter the URL that is to be loaded when the kiosk starts. Use the URL of your WinCC Unified server.

Figure 2-6

2. Click "Next".

Completion

1. Close the "Settings" window to save and apply your selection.

Figure 2-7

2 Engineering


© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

2.2 Login with Kiosk User

In this section we show you how to log in with the kiosk user account on the kiosk computer and use WinCC Unified.

Login

1. You log in on the kiosk computer using the "WinCCUnified" account created in section 2.1.

Figure 2-8

User login

After successful login, the home page of the WinCC Unified server is loaded in full-screen mode in the Microsoft Edge browser.

1. Click "WinCC Unified RT".

Figure 2-9

2 Engineering


© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

2. Log in with your WinCC Unified user login.

Figure 2-10

Result

The configured home page of your WinCC Unified project is loaded in full-screen mode. The Framework browser and the URL bar are not visible because of the setting "As a digital sign or interactive display" made in section 2.1 (shows one specific website in full-screen mode).

You cannot close the browser either.

Figure 2-11

Hinweis To exit the assigned access app (the Kiosk app), press CTRL+ALT+DEL, and then log in with another user account.

2 Engineering


© S

iem

en

s A

G 2

01

9 A

ll ri

gh

ts r

ese

rve

d

2.3 Alternatives for Other Browsers

This section shows how you can use other browsers in Kiosk mode. Google Chrome is taken as an example.

Procedure

1. Open the Autostart folder. For this you press the key combination "Windows key + R" and enter "shell:startup" in the "Open:" line.

2. Create a link in the Autostart folder.

3. Copy the following expression into the input field for the link and then click "Next".

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -

kiosk https://winccunified/

Note The path "C:\Program Files..." is the default path of Google Chrome. You might have to change the path.

Note Change the computer name in "https://winccunified/" to the name of your WinCC Unified server.

4. Assign another name for your link and the click "Finish".

Result

The Google Chrome browser is now started after login and the WinCC Unified home page is loaded in full-screen mode.

Restrictions

The procedure described entails the following restrictions for the Google Chrome browser in Kiosk mode:

• Kiosk mode (full-screen mode) can be closed with the key combination ALT + F4.

• The operating system can be used briefly until the browser is started in Kiosk mode via Autostart.

• No complete protection is given.

operating wincc mode

Documents