Field Information Manager Connectivity to PROFINET

Are you looking for support or purchase information?

Field Information Manager supports connectivity to Profinet devices and the Field Communication Interface CI845 with S800 I/O and Select I/O.

Please note:
With the introduction of Field Information Manager 2.2.1, connectivities have been harmonized in their naming. Therefore, the FIM Profinet Connect has been renamed to FIM Bridge PROFINET from FIM 2.2.1 onwards.

The instructions on this page cover both versions for compatibility reasons. Depending on the used PROFINET connectivity version, please follow the correct instructions described below.

FIM Bridge PROFINET

General Information

FIM Bridge PROFINET is an FDI Communication server and allows FIM access to PROFINET devices.
01 Connecting to PROFINET - One Domain Network - FIM Bridge PROFINET
The FIM Bridge PROFINET is a windows service. A failing start of the FIM Bridge PROFINET service will leave a message in the application event log of the operating system.

Configuration Change of the Connect Service
 If the configuration of the Connect Service has changed, a restart of the computer or server node running the Connect Service is required. Only by doing so, it can be ensured that the recent changes are taken over.
This is explicitly required if e.g. the IP configuration of the network adapter (that is assigned to the FIM Bridge PROFINET service) has changed.

Multiple PROFINET Network Interfaces

FIM Bridge PROFINET supports multiple PROFINET network interfaces which allows the connection to multiple PROFINET networks at the same time.

The additional interfaces are configured in the configuration file of FIM Bridge PROFINET: 
"C:\Program Files (x86)\ABB\ABB FIM Bridge Profinet\ABB.DM.FimBridgeProfinet.exe.config".
The configuration file can be opened with any text editor, but administrator rights are required for saving changes. 

Relatively at the beginning of the configuration file, there is a section called "applicationSettings" which contains a list of strings with MAC addresses of configured network interface adapters. An already configured network interface adapter can be used as an example to duplicate. For information about configuration of the first network interface adapter, please refer the setup instructions below.

PROFINET_MultipleNetworkAdapters

After changing the configuration file, the service of FIM Bridge PROFINET has to be restarted in Windows Services.

Configured PROFINET network interfaces are displayed as individual channel nodes below the FIM Bridge PROFINET in the Topology View. Connected devices are displayed below the corresponding channel node and each PROFINET network can be scanned individually.

Multiple Communication Paths to a PROFINET Network

Field Information Manager supports topologies with several alternatives to access a single PROFINET Network. For example, a topology can contain a FIM Bridge 800xA with multiple AC800M controllers, each connected to the same PROFINET network via the CI871 communication interface. Furthermore, the topology can contain a FIM Bridge PROFINET with access to the same PROFINET network.

In this case, the devices found in the PROFINET network can appear multiple times in the topology tree. The Address & Details dialog for the devices in the network and all child devices will show all alternative communication paths.

The path with the smallest number of nodes is used automatically for communication.

Security Options

Simple Security Setup
To simplify the security configuration for projects with lower security requirements, a quick but less secure setup option is provided. This setup uses self-signed security certificates. Self-signed certificates are not issued by a certificate authority that is considered trust-worthy. To decide if this is acceptable for you, consider at least the following impacts of self-signed certificates:

  • Self-signed certificates must be set up on the client machine to establish the trust relationship on the side that needs to accept the certificates.
  • It is the responsibility of the administrator to make sure that the self-signed certificate is not modified or replaced by someone before it is installed on the client machine.
  • It is the responsibility of the administrator to make sure that no one outside the trust relationship gets access to the self-signed certificate.

Security setup of the ABB FIM Bridge PROFINET
The ABB FIM Bridge PROFINET setup installs a windows service named "ABB FIM Bridge PROFINET". You can find the service in the MMC snap in for services ("services.msc"). The following figure shows the properties of the service. Set the startup type of the service to "Automatic (Delayed Start)" or depending on your needs. The service does not require startup parameters.

FIM Bridge PROFINET Service

Setup Instruction - One Domain Network

Bridges are installed on different computers. However, using only one computer for FIM and FIM Bridge PROFINET is supported as well. The computer on which Field Information Manager Server/Client is installed will be referred to as the Field Information Manager Server/Client; the computer with the FIM Bridge PROFINET setup will be called PROFINET Communication Server.

Field Information Manager 3.0 or later:

Please ensure that the following preconditions are fulfilled:

  • The PROFINET Communication Server has an Ethernet port configured for PROFINET.
  • The used Ethernet port has a static IP address (i.e. no DHCP).
  • The used Ethernet port has only one assigned IP address.
  1. Run the "ABB FIM Bridge Profinet.msi" setup on the PROFINET Communication Server.
  2. Run command prompt as administrator and go to Program Files (x86)\ABB\ABB FIM Bridge PROFINET via command line
    cd \Program Files (x86)\ABB\ABB FIM Bridge PROFINET
  3. Use the command line below to list the available network adapters:
    ABB.DM.FimBridgeProfinet.Config.exe ListNetworkAdapters
  4. Use MAC address of the PROFINET adapter from the command above as a parameter for the following command line:
    ABB.DM.FimBridgeProfinet.Config.exe SelectNetworkAdapter <<MAC Address>>
    Since the FIM Bridge PROFINET Service is not running yet, you should see the feedback: Service is Stopped
  5. Communication between Field Information Manager Server and FIM Bridge PROFINET requires the exchange of certificates on both ends. Use an exchange storage accessible on both ends for this purpose. This can be a shared folder or a USB drive. Make sure that you restrict access to the storage. If you use a USB drive, make sure it is password protected. The following steps assume that D:\ is the path to that storage.
  6. The following command will generate the certificate on the exchange storage which is required as a trusted certificate in the Field Information Manager.
    ABB.DM.FimBridgeProfinet.Config.exe InstallSelfSignedServerCertificate D:\
  7. Confirm your intent by typing YES
    On completion of the command, a folder named ClientInstall exists on your exchange storage.
  8. Start the Field Information Manager Client, navigate to Tools Menu - OPTIONS - CLIENT/SERVER SETTINGS - TRUSTED CERTIFICATES. Click the "Add certificate" button, specify a name (e.g. of the PROFINET Communication Server) and browse for the file location of the previously generated certificate on the exchange storage. Click the ADD button and the PROFINET Communication Server certificate is listed as trusted.
  9. Navigate to OWN CERTIFICATE within the open options menu of Field Information Manager Client. Select the own tool certificate, click the "Export selected certificate" button and specify the file location on the exchange storage. This certificate is required on the PROFINET Communication Server.
  10. Use the open command prompt in the "ABB FIM Bridge PROFINET" folder on the PROFINET Communication Server and trust the previously exported certificate via command line:
    ABB.DM.FimBridgeProfinet.Config.exe TrustClientCertificate <<Own Certificate of
    Field Information Manager>>
  11. Ensure that the local firewall on PROFINET Communication Server allows to use communication port 32796 for FIM Bridge PROFINET application.
  12. Open the Windows Services console on the PROFINET Communication Server via Windows Search or command line "Services.msc". Browse for "ABB FIM Bridge PROFINET" service and start it.
  13. Add Communication Server in a Field Information Manager Client:
    • In Topology view use Add Server button from top bar.
    • Select FIM Bridge PROFINET from the list of available connectivities.
    • If required, adjust the name with which it will appear in topology.
    • Enter the IP of the PROFINET Communication Server.
    • If the port of the PROFINET service has been changed, adjust the port in the dialog.
    • Accept the dialog via ADD.
  14. Access the new PROFINET communication server object in FIM Topology and start a Hardware Scan via Context Menu of the tile.
  15. Delete the generated and exported certificates on the exchange storage to avoid misuse by others.

___________________________________________________________________________

Field Information Manager 2.5 or older:

Bridges are installed on different computers. However, using only one computer for FIM and FIM Bridge PROFINET is supported as well. The computer on which FIM is installed will be referred to as the FIM computer; the computer with the FIM Bridge PROFINET setup will be called PROFINET Communication Server.

Please ensure:

  • that the PROFINET Communication Server has an Ethernet port configured for PROFINET.
  • that FIM has been started once. This ensures that an FIM application certificate has been generated, which is required for some of the steps below.

  1. Run the "ABB FIM Bridge Profinet.msi" setup on the PROFINET Communication Server.
  2. Run command prompt as administrator and go to Program Files (x86)\ABB\ABB FIM Bridge PROFINET via command line
    cd \Program Files (x86)\ABB\ABB FIM Bridge PROFINET
  3. Use the command line below to list the available network adapters:
    ABB.DM.FimBridgeProfinet.Config.exe ListNetworkAdapters
  4. Use MAC address of the PROFINET adapter from the command above as a parameter for the following command line:
    ABB.DM.FimBridgeProfinet.Config.exe SelectNetworkAdapter <<MAC Address>>
    Since the FIM Bridge PROFINET Service is not running yet, you should see the feedback: Service is Stopped
  5. Communication between FIM and FIM Bridge PROFINET requires the exchange of certificates on both ends. Use an exchange storage accessible on both ends for this purpose. This can be a shared folder or a USB drive. Make sure that you restrict access to the storage. If you use a USB drive, make sure it is password protected. The following steps assume that D:\ is the path to that storage.
  6. The following command will create the folder ClientInstall on the exchange storage. The folder contains a certificate and a script for the FIM client computer setup.
    ABB.DM.FimBridgeProfinet.Config.exe InstallSelfSignedServerCertificate D:\
  7. Confirm your intent by typing YES
    On completion of the command, a folder named ClientInstall exists on your exchange storage.
  8. Please connect the USB flash drive to the FIM client computer, open the ClientInstall folder and run the TrustServerCertificate.bat script.
  9. The previous step has installed the certificate on the FIM client computer, but also created the folder ClientInstall\ServerInstall on the exchange storage. This folder contains the FIM client certificate, which must be installed on the Profinet Communication Server.
  10. On the PROFINET Communication Server, use the exchange storage as follows: Open the folder ClientInstall\ServerInstall and run the TrustClientCertificate.bat script.
  11. Ensure that the local firewall on PROFINET Communication Server allows to use communication port 32796 for FIM Bridge PROFINET application.
  12. Open the Windows Services console on the PROFINET Communication Server via Windows Search or command line "Services.msc". Browse for "ABB FIM Bridge PROFINET" service and start it.
  13. Start FIM.
    • In Topology view use Add Server button from top bar.
    • Select FIM Bridge PROFINET from the list of available connectivities.
    • If required, adjust the name with which it will appear in topology.
    • Enter the IP of the PROFINET Communication Server.
    • If the port of the PROFINET service has been changed, adjust the port in the dialog.
    • Accept the dialog via ADD.
  14. Access the new PROFINET communication server object in FIM Topology and start a Hardware Scan via Context Menu of the tile.
  15. Delete the ClientInstall folder on the USB flash drive to avoid miss-usage by others.

Setup Instruction - Different Domain Network

Instruction how to setup a connection where the Field Information Manager (Server) is not in the same domain as the ABB FIM Bridge PROFINET.
02 Connecting to PROFINET - Different Domain Network - FIM Bridge PROFINET

  1. Ensure that Field Information Manager (Server) and PROFINET Communication Server are using the same time zone.
  2. Firewall: Extend the configuration with a mapping from Field Information Manager (Server) IP with port 32796 to FIM Bridge PROFINET IP with port 32796.
  3. Ensure that the FIM Client network card has a Gateway assigned if required by your network configuration.
  4. On FIM Client open hosts file in path c:\windows\system32\drivers\etc\ and add an entry for the FIM Bridge PROFINET IP, i.e. "Prof_Com_Server 10.1.182.56"
  5. Test: Open a Command Prompt on FIM Client and ping the PROFINET Communication Server name, i.e. "ping Prof_Com_Server", which should succeed.
  6. Finally, run all steps of Setup Instruction - One Domain Network.

Troubleshooting

Troubleshooting for Windows Service:
After installation and certificate exchange, the FIM Bridge PROFINET service might not be started automatically.
In such case, please start the service manually or restart the computer node.

Troubleshooting for Windows Firewall:
After update to a newer version of FIM Bridge PROFINET, the PROFINET communication might be disturbed by an incorrect firewall rule for Profinet UDP.

The following instructions apply to the standard Windows Firewall.
If you use a firewall product other than that, define the port configuration using the tools provided by your firewall product.

Please open Advanced Firewall Settings of Windows and navigate to the firewall rule for Profinet UDP:
FIM Bridge PROFINET Firewall Rule

Open the firewall rule for Profinet UDP and ensure that the "Programs" option is set to "All programs that meet the specified conditions":
FIM Bridge PROFINET Firewall Rule Correct

After saving the changes, please restart the machine to ensure that the performed firewall changes are applied completely.

FIM Profinet Connect

General Information

FIM Profinet Connect is an FDI Communication server and allows FIM access to Profinet devices.
01 Connecting to PROFINET - One Domain Network_B
The FIM Profinet Connect is a windows service. A failing start of the FIM Profinet Connect service will leave a message in the application event log of the operating system.

Configuration Change of the Connect Service
 If the configuration of the Connect Service has changed, a restart of the computer or server node running the Connect Service is required. Only by doing so, it can be ensured that the recent changes are taken over.
This is explicitly required if e.g. the IP configuration of the network adapter (that is assigned to the FIM Profinet Connect Service) has changed.

Security Options

Simple Security Setup
To simplify the security configuration for projects with lower security requirements, a quick but less secure setup option is provided. This setup uses self-signed security certificates. Self-signed certificates are not issued by a certificate authority that is considered trust-worthy. To decide if this is acceptable for you, consider at least the following impacts of self-signed certificates:

  • Self-signed certificates must be set up on the client machine to establish the trust relationship on the side that needs to accept the certificates.
  • It is the responsibility of the administrator to make sure that the self-signed certificate is not modified or replaced by someone before it is installed on the client machine.
  • It is the responsibility of the administrator to make sure that no one outside the trust relationship gets access to the self-signed certificate.

Security setup of the ABB FIMProfinetConnect service
The ABB FIM Profinet Connect setup installs a windows service named "ABB FIMProfinetConnect". You can find the service in the MMC snap in for services ("services.msc"). The following figure shows the properties of the service. Set the startup type of the service to "Automatic (Delayed Start)" or depending on your needs. The service does not require startup parameters.

Service FIM Profinet Properties

Setup Instruction - One Domain Network

Connects are installed on different computers. However, using only one computer for FIM and Profinet Communication Server is supported as well. The computer on which FIM is installed will be referred to as the FIM computer; the computer with the FIM Profinet Connect setup will be called Profinet Communication Server.

Please ensure:

  • that the Profinet Communication Server has an Ethernet port configured for Profinet.
  • that FIM has been started once. This ensures that an FIM application certificate has been generated, which is required for some of the steps below.
  • that WinPcap 4.1.3 or later is installed on the Profinet Communication Server before installing FIM Profinet Connect.
    • Warning:
      Please be aware that the WinPcap installer is open to vulnerabilities.
      For further details, please refer to https://www.winpcap.org/install/default.htm.
    • Workaround:
      Please bundle the WinPCap installation files (e.g. as a ZIP file) and transfer them to the Profinet Communication Server. Before installation, unpack them into a freshly created temporary directory. This ensures that no invalid files are part of the installation.       

  1. Run the FIMProfinetConnect.Setup.msi on the Profinet Communication Server.
  2. Run command prompt as administrator and go to Program Files (x86)\ABB\ABB FIMProfinetConnect via command line
    cd \Program Files (x86)\ABB\ABB FIMProfinetConnect
  3. Use the command line below to list the available network adapters:
    ABB.DM.Connect.Profinet.CommServer.Config.exe ListNetworkAdapters
  4. Use MAC address of the Profinet adapter from the command above as a parameter for the following command line:
    ABB.DM.Connect.Profinet.CommServer.Config.exe SelectNetworkAdapter <<MAC Address>>
    Since the Profinet Service is not running yet, you should see the feedback: Service is Stopped
  5. Communication between FIM and FIM Profinet Connect requires the exchange of certificates on both ends. Use an exchange storage accessible on both ends for this purpose. This can be a shared folder or a USB drive. Make sure that you restrict access to the storage. If you use a USB drive, make sure it is password protected. The following steps assume that D:\ is the path to that storage.
  6. The following command will create the folder ClientInstall on the exchange storage. The folder contains a certificate and a script for the FIM client computer setup.
    ABB.DM.Connect.Profinet.CommServer.Config.exe InstallSelfSignedServerCertificate D:\
  7. Confirm your intent by typing YES
    On completion of the command, a folder named ClientInstall exists on your exchange storage.
  8. Please connect the USB flash drive to the FIM client computer, open the ClientInstall folder and run the TrustServerCertificate.bat script.
  9. On the FIM computer, open the ClientInstall folder and run the TrustServerCertificate.bat script.
  10. The previous step has installed the certificate on the FIM client computer, but also created the folder ClientInstall\ServerInstall on the exchange storage. This folder contains the FIM client certificate, which must be installed on the Profinet Communication Server.
  11. On the Profinet Communication Server, use the exchange storage as follows: Open the folder ClientInstall\ServerInstall and run the TrustClientCertificate.bat script.
  12. Ensure that the local firewall on Profinet Communication Server allows to use communication port 32796 for FIMProfinetConnect application.
  13. Open the Windows Services console on the Profinet Communication Server via Windows Search or command line "Services.msc". Browse for "ABB FIMProfinetConnect" service and start it.
  14. Start FIM.
    • In Topology view use Add Server button from top bar.
    • As Endpoint use the IP of the Profinet Communication Server with ending ":32796", i.e. "10.1.182.78:32796"
    • As Name please specify a name for the communication server, like "Profinet System1". This name will appear in the Topology
    • Accept the dialog via ADD.
  15. Access the new Profinet communication server object in FIM Topology and start a Hardware Scan via Context Menu of the tile.
  16. Delete the ClientInstall folder on the USB flash drive to avoid miss-usage by others.
  17. Reboot the computer, if FIM and Profinet Communication Server are installed on the same machine.

Setup Instruction - Different Domain Networks

Instruction how to setup a connection where the FIM client is not in the same domain as the ABB Profinet Communication Server.
Connecting to PROFINET - Different Domain Network

  1. Ensure that FIM client and ABB Profinet Communication server are using the same time zone.
  2. Firewall: Extend the configuration with a mapping from FIM Client IP with port 32796 to Profinet Communication Server IP with port 32796.
  3. Ensure that the FIM Client network card has a Gateway assigned if required by your network configuration.
  4. On FIM Client open hosts file in path c:\windows\system32\drivers\etc\ and add an entry for the Profinet Communication Server IP, i.e. "Prof_Com_Server 10.1.182.56"
  5. Test: Open a Command Prompt on FIM Client and ping the Profinet Communication Server name, i.e. "ping Prof_Com_Server", which should succeed.
  6. Finally, run all steps of Setup Instruction - One Domain Network.

Connectivities

Navigation

Select region / language