11 nov 2020 · Designing an InTouch Web Client Application Designing InTouch Web Client applications involves the following stages: Configure (Optional)
Working with the Industrial Graphic Editor InTouch Web Client HMI is whether to install the InTouch HMI development and
alone InTouch applications in a web browser using InTouch Web Client Moreover, this will provide HMI builders can continue to design Industrial Symbols
22 nov 2018 · Designing InTouch Web Client applications involves the following stages: Design 1 Create and/or edit a Modern or Managed Application
InTouch Web Client HMI is whether to install the InTouch development and symbols from WindowMaker's ArchestrA Graphic Toolbox into
effective HMI design, better trouble shooting, and ease of application maintenance InTouch InTouch HMI applications, InTouch Web Client provides read-
InTouch Web au-delà du réseau industriel de changer rapidement et simplement le design de vos interfaces homme-machines Avec
WindowViewer is the runtime environment used to display the graphic WindowMaker is the development environment for InTouch The
pouvez migrer une application InTouch développée il y + de 20 ans et En version 2017, il est encore plus facile de standardiser le ''design'' des
Development Studio Pour cela, connectez-vous au site web d'activation de licence InTouch Edge HMI en utilisant le compte Wonderware fourni
No part of this documentation shall be reproduced, stored in a retrieval system, or transmitted by any
means, electronic, mechanical, photocopying, recording, or otherwise, without the prior writtenpermission of AVEVA. No liability is assumed with respect to the use of the information contained herein.
Although precaution has been taken in the preparation of this documentation, AVEVA assumes noresponsibility for errors or omissions. The information in this documentation is subject to change without
notice and does not represent a commitment on the part of AVEVA. The software described in this documentation is furnished under a license agreement. This software may be used or copied only in accordance with the terms of such license agreement. ArchestrA, Aquis, Avantis, Citect, DYNSIM, eDNA, EYESIM, InBatch, InduSoft, InStep, IntelaTrac, InTouch, OASyS, PIPEPHASE, PRiSM, PRO/II, PROVISION, ROMeo, SIM4ME, SimCentral, SimSci, Skelta, SmartGlance, Spiral Software, Termis, WindowMaker, WindowViewer, and Wonderware aretrademarks of AVEVA and/or its subsidiaries. An extensive listing of AVEVA trademarks can be found at:
https://sw.aveva.com/legal. All other brands may be trademarks of their respective owners.Chapter 1 Using the Web Client .......................................................................................... 5
Using the Web Client About the InTouch Web Client ................................................................. 5
Designing an InTouch Web Client Application ............................................................................. 5
Securing Web Client Access ...................................................................................................... 7
Accessing Web Client from Outside the OT Network ............................................................. 8
Registering with the AVEVA Identity Manager ....................................................................... 8
Accessing the Web Client Using Single Sign On ................................................................... 9
Using Local Tags with AIM................................................................................................. 10
Configuring User Access in Web Client .................................................................................... 10
Enabling the Web Client Feature.............................................................................................. 10
Customizing the Web Client..................................................................................................... 11
Configuring Graphics for Viewing in a Web Browser .................................................................. 11
Setting the Web Client Home Symbol ....................................................................................... 12
Understanding the behavior of the Web Client Home Icon ......................................................... 12
Viewing Application Graphics in a Web Browser ....................................................................... 12
Web Client Fast Switch ........................................................................................................... 13
Understanding the Web Client Page......................................................................................... 14
Application Graphics and Browser Resizing .............................................................................. 16
Pan and Zoom Support ........................................................................................................... 17
Hosting InTouch Application Graphics on External Websites...................................................... 18
Generating the iFrame Code Block........................................................................................... 19
Chapter 2 Supported Graphical Elements and Known Limitations.............................. 21Supported Graphical Elements and Known Limitations Known Limitations ................................ 21
Properties Supported by All Graphical Elements ....................................................................... 21
Properties Supported by All Graphic Elements With Some Limitations........................................ 22
Supported Graphic Elements and Additional Properties ............................................................. 23
Supported Animations ............................................................................................................. 28
Chapter 3 Web Client Mobile App ..................................................................................... 31
Operating System Requirements ............................................................................................. 31
Logging in to Mobile App ......................................................................................................... 31
Using the Web Client Mobile App ............................................................................................. 31
Chapter 4 Managing the InTouch Web Client ................................................................. 33
Managing the InTouch Web Client InTouch Web Client Error Handling ..................................... 33
Browser and Mobile Support .................................................................................................... 33
Troubleshooting Viewing Graphics in a Web Browser ................................................................ 33
Invalid Certificate Error ............................................................................................................ 34
Chapter 5 Licensing the Web Client ................................................................................. 35
Licensing the Web Client Licensing for InTouch Application Graphics in a Web Browser ........... 35
Acquiring a License ................................................................................................................. 35
Read-Only and ReadWrite Modes ............................................................................................ 35
Single Session Mode............................................................................................................... 36
Grace Period .......................................................................................................................... 36
Periodic Renewal .................................................................................................................... 36
License Release ..................................................................................................................... 36
Viewing Application Graphics in a Web Browser 5The InTouch Web Client feature allows you to view selected Industrial graphics used within an InTouch
HMI application on any HTML5 supported web browser. A built-in Web Server provides web browsersaccess to application graphics, from any Microsoft Windows client or server operating system without the
use of Remote Desktop Protocol (RDP) or Internet Information Services (IIS) for Microsoft Windows®
Server. You can view application Industrial graphics in a web browser for both Standalone and Managed
applications.After the application is published or deployed, it will be available from any computer on the intranet.
You can point to http://Manager (AIM), to support non-windows based security and single sign on. As an administrator there are
multiple configuration options available for user authentication and security. Security and user management should work together, see Configuring User Access in Web Client on page 10 for more information. Option 1: By default, Web Client can be accessed using the http protocol and windows-based authentication. Option 2: Use the Configurator to connect to a local or remote System Management Server. Here theWeb client will use the https protocol with windows-based security (by default). If you connect to a remote
server, you must provide credentials for a domain user when accessing the Web Client. Option 3: After you configure the System Management Server, you can optionally enable the AVEVA Identity Manager (AIM). AIM is a standalone authentication server that exposes an OpenID Connectendpoint. To use AIM, you must register the client to the identity server. You can configure AIM using the
System Management Server Configurator or InTouch HMI Application Manager. For more information, see Registering with the AVEVA Identity Manager on page 8. In runtime when the Web Client page loads, if there is no valid security token, then: Web Client will re- AIM will check user credential from the Active Directory.If the credentials are valid, then Active Directory will provide a security token and return it to Web
If a security token already exists, then the user will be granted access. AIM will only support users that
can be validated from Active Directory. Option 4: The Reverse Proxy option allows the web client to be accessed by users outside the OTnetwork. Provide the FQDN of the reverse proxy server in the secure gateway field in the Configurator or
the Web Client tab in InTouch HMI Application Manager.Option 5: When AIM is used for user authentication, it will prevent graphics from being displayed in an
iFrame. Selecting the Allow web client to be embedded in any website checkbox will allow users todisplay graphics within an iFrame in runtime. In runtime, use the Share icon and select the code snippet
to insert in the iFrame.A reverse proxy is a server that sits in front of one or more web servers, intercepting requests from
clients. With a reverse proxy, when clients send requests to the origin server of a website, those requests
are intercepted at the network edge by the reverse proxy server. The reverse proxy server will then send
requests to and receive responses from the origin server.A forward proxy sits in front of a client and ensures that no origin server ever communicates directly with
that specific client. On the other hand, a reverse proxy sits in front of an origin server and ensures that no
client ever communicates directly with that origin server. Before devices outside the OT network can access the Web Client, a reverse proxy must be configured on the DMZ server. AVEVA Identity Manager must be enabled for the reverse proxy to function. There are many providers of reverse proxy solutions. Refer to the relevant reverse proxy solutiondocumentation, for instructions on setting up the reverse proxy solution in your infrastructure. For more
information, see the InTouch HMI Application Management and Extension Guide.This is an optional setting, and needs to be set only if the We Client is hosted behind a reverse proxy
server.If the System Management Server option has been enabled in the Configurator, you can use Single Sign
On to access the web client. This will be different from the default Windows based authentication. This
method will use the HTTPS protocol and only support domain users (when using a remote SMS) that canbe validated from Microsoft Active Directory. If the user selects to use the HTTP protocol, then Web
Client will fall back to using Windows Based authentication only. For information to configuring the System Management Server, see the AVEVA System Platform Installation Guide and the InTouch HMI Application Management and Extension Guide.The behavior of Local tags in Web Client is independent of WindowViewer. The behaviour of local tags
will differ if AIM is enabled. If AIM is enabled a unique token is used for every session for every user. A
session is a new instance of the browser on the same node. For more information on Memory Localdisabled. To enable this option, select the Allow Anonymous Access checkbox in the Web Client tab in
InTouch HMI Application Manager. In runtime, the user does not have to provide any user credentialsBy default, on installation the InTouch Web Client feature will be disabled. You must enable the Web
Client feature before you can use it. The Web Client feature will be automatically enabled if you configure
one of the following options in the Configurator: Common Platform > System Management Server Application Manager > Web Client For more information on the Configurator, refer to System Platform Installation Guide. To enable ordisable the Web Client feature manually, you must have administrative privileges. You can enable the
Web Client feature from Application Manager or InTouch WindowMaker. Enabling the Web Client Feature from Application ManagerTo enable the Web Client feature, launch Application Manager and select one of the following options:
Under the Web Client Tab, click the Enable Web Client toolbar icon. Under the Web Client Tab, from the Tools menu, click Enable Web Client.If you try to launch the Web Client when it is disabled, you will receive the following error message: HTTP
If a non-administrative user attempts to enable the Web Client feature from WindowMaker, they will be
directed to enable the feature from Application Manager.Using the Graphic Toolbox, you can configure the folder containing the application graphics that will be
displayed on the web browser. Only graphics stored within the folder set as the Web Client Root folder
are displayed on the web browser. Note: The operating system user groups aaInTouchUsers and aaInTouchRWUsers will be created on the InTouch runtime node during installation. Only users in the aaInTouchUsers or aaInTouchRWUsersuser groups will have access to view graphics from an application in the web browser. Add relevant users
to the group before configuring the application. By default, the installation user will be added to the
groups.You can set the default symbol displayed on the Web Client page when it is launched by setting the Web
page will display a blank page when launched. While viewing the Web Client in a browser, click the Home
icon on the Title bar to navigate to the home symbol. Understanding the behavior of the Web Client Home Icon Standalone applications can be viewed on the web client. Standalone application windows must beconverted to Industrial Graphics before they can be viewed on the Web Client. Only Frame windows and
Industrial Graphics can be viewed on the web client. For InTouch applications, in WindowMaker you can use the Home Windows tab to set up windows that will appear by default in WindowViewer, see Setting Windows to Appear at RunTime in the InTouch HMIVisualization guide. Similarly, you can set a graphic to be the default symbol that appears on the web
client when it is launched, see Setting the Web Client Home Symbol on page 12. If you have used the InTouch ShowHome script function, when the windows is converted to a graphic,the script is converted to the ShowHome() function and will display the corresponding graphic as a Home
symbol in WindowViewer. These settings will impact, which window or graphic appear on the web client by default when it is launched. For an InTouch HMI application; there are two possibilities:After you configure the Web Client application you can view the graphics in the web browser. For a list of
tested and supported browsers, refer to the Browser and Mobile Support section of this guide.You can also specify the Alarm Refresh Rate from the Configurator. By default the polling rate will
Note: To enable the Web Client to run in Fast Switch mode while editing a Managed InTouch application
from a remote IDE, first configure the InTouch Web Windows service to run as a user account that is a
member of the aaConfigTools user group, in both the GR and Remote IDE machines. For more information, refer to the Application Server User Guide. For a given InTouch application, the Web Client fast switch button in WindowMaker is disabled by default. The button is automatically enabled when the application is run in WindowViewer. Viewing Application Graphics in a Web Browser Using the Web Client 14 Note: The web client fast switch feature is available - only during development, - only on the computer with InTouch WindowMaker and InTouch WindowViewer installed,- only on a web browser accessing the Web Client pointing to http://localhost/InTouchWeb in the URL.
The InTouch Web Client page provides various options to inform and organize the user experience using
icons on the page. The following table describes these options.The Title bar displays the InTouch Application name, symbol name, home icon, notifications icon, full screen icon and profile icon.
graphics resize to fit the new browser viewport dimensions. The graphic will also resize when the mobile
device is rotated between portrait and landscape orientation.For very small screens, the icons on the right collapse into a vertical bar. The icons will be hidden to save
screen space. You can view Industrial Graphics on any mobile device, and use the pan and zoom gestures to view larger graphics. Using the Web Client Viewing Application Graphics in a Web Browser 17a graphic in the web browser is zoomed in from a non-mobile device, the zoom percentage is displayed
in the lower left corner of the horizontal scrollbar. The zoom percentage is limited up to 500%.