After 800xA upgrade from 6.03 to 6.1 I have lost external OPC connections
All 4 external OPC connections into the OPCSurrogate Server on Primary AspectDomain have all failed since upgrade completed and I'm unable to find out why.2 OPC connections use DCOM , 2use Matrikon tunneller , all failed.
Local Matrikon OPC browser on ASDC connects to OPC Surrogate and browses tags ok . Remote OPC browser shows connected to OPC server on ASDC but with bad status and bad comms on tags status.
RNRP showing no errors , Re-applied System Software User Sertings in both Aspect servers and connectivity servers from config wizard same issue.
800xA system running ok , but as it's a Freelance system I believe it uses the Freelance OPC servers.
Also tried disabling firewall on AS and CS 's - same.
I have noted the attached AfwCSLib error appearing every minute on both connectivity servers complaining the ASDC had made too many unauthenticated ( failed ) connection attempts - I thought re-applying the System Software User Settings would resolve issue but it did not.
What could have changed on 6.1 upgrade to block these OPC's?
Likely, you've lost customized DCOM settings on the afwdsopcsurrogate.exe
For security reasons remote credentials are not accepted. For remote launching you need to set Launch Identity to This User = xxx instead of Launching User with the dcomcnfg.exe tool.
Also local access will fail unless from a known user of the system (inserted in the User Structure).
Create a specific user for this purpose having minimum permission. Do not use the 800xA Service Account. Don't forget to add membership to the IndustrialITUser user group and add the user to the system using the classic Configuration Wizard, make them at least member of the Everyone group. Only one user can be specified per surrogate/computer. For multiple different users, use additional nodes. Even clients can host surrogate processes.
Don't forget to add the OPC Connectivity feature in SCC>Configure System (to open the Windows Firewall) and buy a license. In next revision the license will be enforced they've told me...
You can also adjust some registry keys to force a unique surrogate process per connecting client (instead of multiple clients sharing one surrogate) and bypass audit and object locking requirements, if needed. The keys have been discussed previously on this community. Please search.