About factorytalk security permissions, What happens when the primary hmi server fails, Failing over to the standby secondary server – Rockwell Automation FactoryTalk View Site Edition Users Guide User Manual
Page 365: About factorytalk security permissions – 21, Failing over to the standby secondary server – 21
14
•
S
ETTING
UP
F
ACTORY
T
ALK
SYSTEM
AVAILABILITY
14–21
•
•
•
• •
14
•
Pla
ceho
lde
r
The Server Status display should reflect the switch, for both servers.
About FactoryTalk Security permissions
To switch the Active and Standby servers manually, users must have permission to
perform the switch operation, under User Rights Assignments for the system.
To set up the User Rights Assignment for switching servers
1. In FactoryTalk View Studio, in the Explorer window, open the System folder.
2. In the System Policies folder, double-click User Rights Assignments.
3. Under Manage Servers, click Manual server switchover, and then click the Browse
button in that row, beside Configure Security.
4. Select the Allow check box, beside users you want to give permission to switch
servers.
For information about FactoryTalk Security, see Chapter 5, Setting up security.
What happens when the primary HMI server fails
Following are some conditions that might cause the primary, Active HMI server in a
redundant pair to fail:
The HMI server is shut down with its host computer, from the Start menu.
The HMI server is shut down using the FactoryTalk View SE Service Manager. For
information about this tool, see the FactoryTalk View Site Edition Installation Guide.
The HMI server is disconnected from the network. For information about how the
system monitors network connections, see page 14-31.
The HMI server is found to be unhealthy, because an essential service has stopped
functioning.
The HMI server’s host computer has a power failure.
Within five seconds, Diagnostic messages are logged at connected client computers,
notifying operators of the server failure.
Failing over to the Standby secondary server
When the primary HMI server in a redundant pair fails, the system automatically fails
over to the secondary server.
If the server currently on standby is not ready to become active, then the manual switchover will
not occur. For information about when an HMI server is ready, see page 14-18.