1. FactoryTalk® View Machine Edition v8.0 CPR9 SR7
High Level Review
November 2014

3. FactoryTalk View Machine Edition 8.0 August 2014 Release
Configuration and Application Building
Simplified project management
Resizable alarm editor
Application Manager workflow
Improved Run-Time Experience
User Management controls
Improved Domain Authentication
Security Code changes
Improved audit trail
User Group Security functions
Application loading Error-proofing
Unsolicited Messages
Expanded Operating System Support
Windows 8
Windows 8.1 Update
Windows 2012 Server R2
Last release supporting older Microsoft Operating Systems & FactoryTalk View Machine Edition versions
Streamlined Installation
Unattended Install
Uninstall FactoryTalk View Tool
Support for PanelView Plus 7 Terminals

4. Summary of Release Products and Services Released:
FactoryTalk View Site Edition 8.0
FactoryTalk View Machine Edition 8.0
FactoryTalk ViewPoint 8.0
FactoryTalk Services Platform 2.70
FactoryTalk Alarms and Events 2.70
RSLinx Enterprise 5.70
RSLinx Classic 3.70
FactoryTalk Activation

5. Feature Cheat Sheet Support New PanelView™ Plus 7
Simplified project maintenance
Added domain authentication options
Enhanced Login button provides domain field
Manage security configuration within a running application
Improved audit trail
New error-proofing features
Terminals accept Unsolicited Messages
Changes to Security Codes
Installation enhancements
Compatibility with additional OS

6. PanelView™ Plus 7
High-level Introduction

7. Better hardware, easy migration!
PanelView Plus 7
Introduction
Optimized value with two distinct platforms
New Displays
Increased Screen resolution
Wide Screens
More Sizes – Up To 19”
More Certifications
ATEX
INMETRO
Marine
Better hardware, easy migration!

8. PanelView Plus 7 Standard vs. Performance
PvP7 - Standard
PvP7 - Performance
Avail Sizes (in):
4.3W, 5.7, 6.5, 9.0W, 10.4
Avail Sizes (in):
6.5, 9.0W, 10.4,
12.1W, 15.0, 19.0
AFC: Jan, 2015
AFC: Q3, 2015
Housing & Bezel Material
Plastic
Aluminum
Communication
Single Ethernet
Dual port Ethernet, embedded DLR
Op. System / Software
Windows CE 6.0 w/standard features set
FTView ME 7.0
Application limits: 1 Controller, 25 Screens, 200 Alarms
Windows CE 6.0 w/extended features set
FTView ME 8.10
Application limits: None
Processor / Memory
ARM / 512 MB flash and RAM
X86 / 1 GB flash, 512 MB RAM
Power Options
DC only
AC and DC
User Interface
Resistive, touch screen only
Resistive, touch or touch/keypad combo
Certs
UL, CE
UL, CE, Marine,
(future: ATEX, INMETRO, Conformal Coating)

9. Configuration and Application Building
FactoryTalk View Machine Edition 8.0 Feature Information

10. How Security Works Before v8.0
VME
How Security Works Before v8.0
Public Local FactoryTalk Directory
Users & Groups
Project A
Project B
RSLinx Config.
Project C

11. Private Local FactoryTalk Directory
VME
How Security Works In v8.0
Project A
Private Local FactoryTalk Directory
Users & Groups
RSLinx Config
Project B
Project C

12. Simplified Project Maintenance
VME
Simplified Project Maintenance
Overview
Improved handling of multiple FactoryTalk View Machine Edition applications on same PC
Each project has its own private security configuration
Users, Groups, and policy
Benefits
Allows user to restore a project (MER/APA) without overwriting any other project’s security configuration
No need to be ‘careful’ when restoring MER or APA
Each ME application’s security configuration is unique
No need to be ‘careful’ when restoring MER or APA
No more prompt to restore FTDir, or not, when restoring an APA/MER
Must manage security (user, groups, policy) from ME Project Explorer tree
FTAdmin does not work with or recognize the private local FTDir associated with each ME application
Must use a ‘template’ project to have a common set of users & groups
Use App Mgr to copy ‘template’ to new project before starting
Cannot move, copy, or backup/restore users & groups between projects
When creating a new pre-8.0 MER, the system converts from the private local FTDir to the necessary format; no restrictions
V8.0 ME Station, on a PC, continues to use the public local FTDir
Slight delay working with applications (new, open, rename, copy, etc.)
Delays optimized for New Application and Open Application operation
Typical delays are < 135% of current 7.0 performance
Ex a 7.0 operation that took 30s, it might now take ~40s
Application Manager Copy, Rename, and Delete can only operate on applications that have been opened with FTView Studio v8.0

13. Resizable Alarm Editor
VME
Resizable Alarm Editor
Overview
Alarm Editor allows resizing of the various tables in the dialog
Benefits
Easier to manage and configure Alarms

14. Application Manager Workflow
VME
Application Manager Workflow
Overview
Application Manager returns to starting step when an operation completes
Application Manager allows user to overwrite existing
backup (APA) files when creating a backup file
project when restoring a backup (APA) or runtime (MER) file
Benefits
Allows user to immediately initiate next operation saving time

15. Improved Run-Time Experience
FactoryTalk View Machine Edition 8.0 Feature Information

16. Run-time User Management
VME
Run-time User Management
Overview
New objects to manage native FactoryTalk and Windows-linked users
Add, Delete, Change Group, Enable, Disable, Unlock, Change Account Properties, Change Password
Add, remove, and modify user accounts while an MER is running
Security configuration changes persisted in the MER
Benefits
No longer need to rebuild MER to change security configuration
Support for 21 CFR Part 11 compliance

17. Administrative Change Password
VME
Administrative Change Password
Overview
Change Password button modified to add an Administrative mode, that allows user’s with access to change ANY user password
Security configuration changes persisted in the MER
Benefits
Prevents users being ‘locked’ out of system by a malicious actor
More administrative control of user account passwords

18. Windows 2008 and 2012 Server Active Directory Authentication Support
VME
Windows 2008 and 2012 Server Active Directory Authentication Support
Overview
Added LDAP and LDAP over SSL to the PanelView Plus terminals
Existing application will work in Windows 2008/2012 domains, unchanged
LDAP configuration applies to the terminal, not the application
Operation transparent to Operator/User
Benefits
Windows-linked user and groups support centralized account management
Support for 21 CFR Part 11 compliance
Supports Windows Server 2008 & 2012 Domain authentication
Existing application will work in Windows 2008/2012 domains, unchanged
LDAP configuration applies to the terminal, not the application
Domain authentication is handled by FTSP on the terminal
Application asks FTSP to authenticate the user with the provided credentials; FTSP determines which calls Windows or LDAP calls to make
When authenticating the system will ALWAYS attempts Windows authentication API calls before LDAP
System switches to LDAP if Windows Authentication API fail
When using LDAP over SSL a certificate must be manually moved to the terminal using a USB stick or SD card

19. Login Button Improvements Support Domain Integration
VME
Login Button Improvements Support Domain Integration
Overview
Enhanced login button supports
Control of domain field visibility
Allow/ Disallow domain field editing
Domain field content can be fixed, user entered, or bound to a tag
Obscure user name entry with ‘#’
Benefits
Saves operator time
Requires less Operator knowledge

20. Changes to A-P Security Codes
VME
Changes to A-P Security Codes
Assume a user is a member of more than one group. The groups have the following configured security codes At run-time the user’s effective security codes have changed in v8.0 and later, compared to earlier versions
Overview
All of a user’s A-P configurations are ANDed together in v8.0, and later
If a user is a member of more than one A-P configuration, at run-time the user’s effective A-P Security Code permissions will be the most restricted set
previous versions granted the most lenient effective Security Code A-P permissions
Benefits
Support for 21 CFR Part 11 compliance
Runtime Security Configuration A B C D
Group1 X
Group2
How can a user be a member of more than one A-P Security Code configuration
FactoryTalk or Windows-linked User explicitly configured in Runtime Security more than once
FactoryTalk or Windows-linked User is a member of more than one configured FactoryTalk Groups in Runtime Security
FactoryTalk or Windows-linked User is a member of one or more FactoryTalk Group(s) configured in Runtime Security and the user is also explicitly configured in Runtime Security
Windows-link User is a member of a Windows-linked group, the Windows-linked group is a member of more than one FactoryTalk Groups configured in Runtime Security
Windows-linked User is a member of a Windows-linked group, the Windows-linked group is a member of one or more FactoryTalk Group(s) and the Windows-linked user is also explicitly configured in Runtime Security
Effective A-P Security Codes A B C D
FactoryTalk View v8.0 X
FactoryTalk View v7.0, and earlier

21. Capture Value Before Change
VME
VSE
Capture Value Before Change
Overview
When you change the numeric or string input value, the previous value is logged and shown in the FactoryTalk AssetCentre Audit Log
Benefits
Provides improved tracking of operator actions
Improves support for 21 CFR Part 11 compliance
Streamlines troubleshooting process
FactoryTalk AssetCentre Audit Log View
Audit Message Detail

22. New User Group Security Function
VME
New User Group Security Function
VSE
Overview
CurrentUserHasGroup() – Returns True/False whether the current user is assigned to the specified FactoryTalk user group
Example usage CurrentUserHasGroup(“Engineers”)
Benefits
Enables evaluation of a user’s membership in a security group from a display screen
CurrentUserHasGroup() security function

23. Improved System Error-proofing
VME
Improved System Error-proofing
Overview
When building MER system warns if a shortcut uses an unsupported network, Ex. RIO
When loading MER on PanelView Plus terminal will warn if
MER project resolution (size or aspect ratio) does not match physical terminal
MER shortcut(s) references a network the terminal cannot support, Ex. PanelView Plus 7 and DH+
Benefits
Saves wasted time

24. RSLinx Enterprise Accepts Unsolicited Messages
VME
VSE
RSLinx Enterprise Accepts Unsolicited Messages
Overview
Controllers send Direct Tag information to HMI application under programmatic control
Control program determines when information is transmitted to HMI
Benefits
Unsolicited messages can be used to reduce network traffic for ‘exception’ events (Ex. Alarms)
Normal tag data is polled, or solicited, from the controller

25. Streamlined Installation
FactoryTalk View Machine Edition 8.0 Feature Information

26. Unattended installation
VME
VSE
Unattended installation
Overview
Use scripting in a command line or batch file to automate installation of all FactoryTalk View components
Benefits
Use during large-scale rollouts when it is too costly to have resources interactively install the software on individual PCs
During installation, instead of prompting you for information interactively, the process follows the specified parameters
Use a batch file (.bat) to automate installation

27. Uninstall FactoryTalk View Tool
VME
Uninstall FactoryTalk View Tool
VSE
Overview
Use the tool to uninstall FactoryTalk View components that are already installed on your computer
Benefits
A more direct method to uninstalling FactoryTalk View and related dependencies

28. Error-proofing Installation
VME
Error-proofing Installation
VSE
Overview
Prevents FactoryTalk View products from installing on to any PC running an unsupported Microsoft Operating System Examples (not a comprehensive list)
Windows XP SP1
Windows 98
Windows 2000 Server
Windows NT
Benefits
Saves wasted time and resources
Reduce frustration

29. Expanded Operating System Support
FactoryTalk View Machine Edition 8.0 Feature Information

30. Expanded Operating System Support
VME
VSE
Expanded Operating System Support
Windows 8, Windows 8.1 Update and Windows 2012 Server R2
join the list of supported operating systems in this release.

31. Additional PanelView Plus Platform Support
VME
Additional PanelView Plus Platform Support
PanelView Plus Platforms
PanelView Plus 6 Compact 1000
PanelView Plus 7 Standard
PanelView Plus 7 Performance

32. Removing Operating System Support
VME
Removing Operating System Support
VSE
FactoryTalk View v8.0 is the LAST release to support
Windows XP [any edition or SP]
Windows Vista [any edition or SP]
Windows 2003 Server [any edition or SP]

33. Removing PanelView Plus Platform Support
VME
Removing PanelView Plus Platform Support
FactoryTalk View 8.0 is the LAST release to support v 3.2 and v4.0 MER
Using release after v8.0, it is not possible to create v3.2 or v4.0 MER
Using release after v8.0, it is not possible to execute v3.2 or v4.0 MER
Using release after v8.0, it IS possible to open and convert legacy applications the newer project format

34. Thank You

35. Background and Additional Slides

36. Design-time Security Changes What Do They Mean To Me?
VME
Design-time Security Changes What Do They Mean To Me?
Each ME application’s security configuration is unique
No need to be ‘careful’ when restoring MER or APA
No more prompt to restore FTDir, or not, when restoring an APA/MER
Must manage security (user, groups, policy) from ME Project Explorer tree
FTAdmin does not work with or recognize the private local FTDir associated with each ME application
Must use a ‘template’ project to have a common set of users & groups
Use App Mgr to copy ‘template’ to new project before starting
Cannot move, copy, or backup/restore users & groups between projects

37. Design-time Security Changes What Do They Mean To Me?
VME
Design-time Security Changes What Do They Mean To Me?
When creating a new pre-8.0 MER, the system converts from the private local FTDir to the necessary format; no restrictions
V8.0 ME Station, on a PC, continues to use the public local FTDir
Slight delay working with applications (new, open, rename, copy, etc.)
Delays optimized for New Application and Open Application operation
Typical delays are < 135% of current 7.0 performance
Ex a 7.0 operation that took 30s, it might now take ~40s
Application Manager Copy, Rename, and Delete can only operate on applications that have been opened with FactoryTalk View Studio v8.0

38. Domain Authentication Changes What Do They Mean To Me?
Supports Windows Server 2008 & 2012 Domain authentication
Existing application will work in Windows 2008/2012 domains, unchanged
LDAP configuration applies to the terminal, not the application
Domain authentication is handled by FTSP on the terminal
Application asks FTSP to authenticate the user with the provided credentials; FTSP determines which calls Windows or LDAP calls to make
When authenticating the system will ALWAYS attempts Windows authentication API calls before LDAP
System switches to LDAP if Windows Authentication API fail
When using LDAP over SSL a certificate must be manually moved to the terminal using a USB stick or SD card

39. Runtime Security Enhancements to Security Codes (A-P)
How can a user be a member of more than one A-P Security Code configuration
FactoryTalk or Windows-linked User explicitly configured in Runtime Security more than once
FactoryTalk or Windows-linked User is a member of more than one configured FactoryTalk Groups in Runtime Security
FactoryTalk or Windows-linked User is a member of one or more FactoryTalk Group(s) configured in Runtime Security and the user is also explicitly configured in Runtime Security
Windows-link User is a member of a Windows-linked group, the Windows- linked group is a member of more than one FactoryTalk Groups configured in Runtime Security
Windows-linked User is a member of a Windows-linked group, the Windows- linked group is a member of one or more FactoryTalk Group(s) and the Windows-linked user is also explicitly configured in Runtime Security