In regards to security in version 08.2.00

In Industrial HiVision, the TLSv1 and TLSv1.1 protocols are enabled by default.
For more information see the Deskpro FAQ article under the following URL:
https://hirschmann-support.belden.com/kb/articles/1285

Additions to the manual in version 08.2.00

Integration of PDF files in the GUI

• You can open custom PDF files from the "Help" menu. To use this function it is necessary to manually create a new directory with the name "additional_help", inside the <install dir>/var folder and copy the PDF files to it. If the folder "additional_help" contains PDF documents, then Industrial HiVision creates and displays dedicated menu items with the name of the PDF files under the "Help" menu. You can add the following types of files, which Industrial HiVision displays under the "Help" menu:
  • Files that contain a language abbreviation in their name, for example "de_hello.pdf". If the language set in Industrial HiVision match the start of the file name, then Industrial HiVision displays this type of file.
  • Files that do not contain a language in their name, for example "hello.pdf". Industrial HiVision always displays this type of files in the under the "Help" menu.

OPC UA unencrypted communications

Since Industrial HiVision release 08.1.04, OPC UA communications are encrypted by default. To use unencrypted communications between the OPC UA client and server, perform the following steps:

• Open the server.properties file.
  You can find the server.properties file in the <Install dir>\lib\opcua\config directory.
• Enter the following line to the bottom of the file:
  OpcUaServer.AllowUnencrypted=true
• Save and close the file.
• Restart the HiVisionMasterService8.2 service.

New features in version 08.2.00

• New features:
  • Export data to InfluxDB® to be displayed in Grafana®
    InfluxDB® is an open source database optimized for fast, high-performance storage, and retrieval of data. From this database Grafana® retrieves the data exported from Industrial HiVision. Grafana® is a multi-platform open source web application used for analytics and interactive visualization of data. When connected to supported data sources, Grafana® provides charts, graphs, and alerts.
  • Polling Ramp up
    This parameter allows you to specify the rate of polling operations started per second. This rate represents the number of new operations that are added to the polling engine per second, until all requested variables are being polled.
  • Save project when Edit mode changes
    This function lets you save the Industrial HiVision project file and select the moment Industrial HiVision automatically saves the project file.
  • Redundant LDAP Servers
    Industrial HiVision lets you specify more than one "LDAP Server".
  • Configure polling of device properties
    This function lets you easily modify the default settings for polling and status configuration for a set of device properties.
  • Integration of PDF files in the GUI
    This function lets you open PDF files directly from the "Help" menu.
  • Disable Event Actions on loading a project file
    The Event Actions are by default enabled when starting a new project. The Event Actions are by default disabled when you open an existing project or you load the backup of an existing project. You also have the option to manually enable or disable the Event Actions. When enabled, Industrial HiVision completes the actions defined in the "Actions" table.
  • Property "Power State" added to port of HiOS devices
    This property displays the power state for a physical interface (port) of a HiOS device.
• New devices:
  • Eagle 40
  • Hi-SCOM IP66
  • Octopus 8TX managed
  • HiOS BRS Highport
  • Hirschmann IT family
• MultiConfig™ dialogs added:
  • Basic Settings - Syslog (HiSCOM device)
  • Basic Settings - Restart (HiSCOM device)
  • Basic Settings - Software (HiSCOM device)
  • Time - Daylight Saving Time (HiSCOM device)
  • Time - NTP (HiSCOM device)
  • Device Security - User (HiSCOM device)
  • Device Security - SSH (HiSCOM device)
  • Device Security - HTTPS (HiSCOM device)
  • Device Security - SNMP (HiSCOM device)
  • Device Security - TACACS+ - Global (HiSCOM device)
  • Device Security - TACACS+ - Table(HiSCOM device)
  • Switching - IGMP Snooping (HiSCOM device)
  • Switching - MLD Snooping (HiSCOM device)
  • Redundancy - Rapid Spanning Tree (HiSCOM device)
  • Diagnostics - Loop Protection (HiSCOM device)
  • Basic Settings - Out-of-Band over USB (HiOS)
  • Time - 802.1AS (HiOS)
  • Redundancy - Sub Ring - Global (HiOS)
  • Redundancy - Sub Ring - Table (HiOS)
  • Advanced - Industrial-Protocols - OPC UA Server (HiOS)
• MultiConfig™ dialogs modified:
  • Redundancy - MRP-Ring (HiOS, Classic Software)
  • Redundancy - Device Level Ring (HiOS)
  • Redundancy - HIPER-Ring (Classic Software)

Issues fixed in version 08.2.00

• You can find the problems, workarounds and fixes related to this release in the issue list.

JAVA version

You can find the JAVA version used in this release (OpenJDK 8u302b08) in the following dialogs:
The JAVA used in the GUI is found in Help> About> Program Info> Systeminfo
The JAVA used in the kernal is found in Help> Kernel Info> System

Device Specific Information

• Dragon PTN:
  
  • The Dragon PTN sends SNMP V3 Traps. They are not encrypted.
  • The Windows Trap Service cannot handle SNMP V3 Traps. The Windows Trap Service has to be deactivated so that Industrial HiVision receives the traps.
• RSP, MSP, Eagle30:
  MultiConfig™: Security - User Management - Users:
  After changes to the access parameters of the device it might be necessary to change the SNMP configuration within the program:
  MultiConfig™: Program Settings - SNMP Configuration
• BAT 54 Rail:
  • Supported firmware versions:
    • 7.xx (before 7.52): autotopology per WLAN (not per LLDP)
    • 7.52, 7.60, 8.0:  autotopology per WLAN and LLDP
  • Before you scan a network which is located behind a BAT you should
    • optimize the SNMP Guess List by removing unnecessary entries  (Preferences - SNMP Configuration) or
    • set the SNMP Configuration manually
  • Signal to Noise Ratio: the value 63 means 63dB or more
    
  • The SNTP/NTP status will be displayed as "Warning" regardless of the actual server configuration
    
• BAT devices:
  • The BAT family of devices supports IP address configuration through HiDiscovery only. Please make sure that your management station is in the same subnet as the device before opening the "IP Configuration" dialog.
  • SNMP guessing: Write access to BAT devices will be locked after five incorrect guesses.
  • BAT devices configure the Management Access settings different from those defined in "Restricted management Access". Therefore, "Restricted Management Access" of BAT devices now display the "Unsecurable" value.
• BAT C (Firmware version 2.3.3):
  • The name cannot be set on the device
  • After setting the IP parameters the device has to be rebooted
  • Port Speed is always displayed as 0
• MIKE:
  It is possible that Industrial HiVision fails to guess the SNMP passwords of the MIKE. In that case these devices are displayed as ping devices. To correct this:
  • Delete these devices completely.
  • Add the SNMP-Configuration for these devices manually.
  • Restart the detection of these devices.
• MACH 3000:
  Topology discovery with link aggregation:
  If you use link aggregation with the MACH 3000, then only one connection between the two devices will be discovered because of missing LLDP information in the MACH 3000.
  Workaround: Insert the second connection manually.
• MACH 4000, OpenRail, PowerMICE, Octopus:
  Polling of Out Load and Interface counters:
  The polling interval should not be set to less than 30 seconds because that is the frequency at which the Agents update these values.
• EAGLEmGuard/RR-EPL/EAGLE20:
  • If you
    - use Industrial HiVision in a layer 3 network and
    - the layer 3 network is decoupled with an EAGLEmGuard/RR-EPL/EAGLE20 which is configured as default gateway,
      then increase the "Maximum number of incoming 'ping' frames (ICMP Echo Request) per second" in the Firewall dialog: Extended Settings of the EAGLEmGuard/RR-EPL/EAGLE20.
  • Industrial HiVision discovers devices in the network with ping requests. With the default value of 3 pings per second the EAGLEmGuard/RR-EPL/EAGLE20 blocks all ping requests exceeding the configured value. As a result Industrial HiVision does not get an answer from some devices and cannot discover them.
  • If the network is not discovered completely by the Auto-Topology the value of the "Maximum number of incoming 'ping' frames (ICMP Echo Request) per second" should be increased or the feature should be disabled.
    
• PowerLION-24TP:
  In a stacked configuration, only the data of the master will be present in Industrial HiVision.
  If a switch is removed from a stack and operated as a single device, it will remember its stack id and the IP address of the master. This may lead to network problems and unexpected results in Industrial HiVision. Therefore, it is recommended to configure a new IP address and to reset its id in the web interface under Home/System/Renumbering.
• Eagle20:
  MultiConfig™ Load/Save and Save Support Info requires firmware 4.4.00 or higher
• MACH, MS, RS, Octopus, RSR:
  Autotopology: the topology cannot be detected correctly, if there are devices with identical system names.
  Remedy: update to a newer firmware version or specify unique system names on the devices.
  Fixed with firmware 4.2.10 (or newer) and 5.0.07 (or newer).
  
• MACH, MS, RS, Octopus, RSR:
  In some cases, the out load of a port is determined as 100% (sometimes over a longer time period). This can be fixed with firmware 5.0.07 or newer.
• Meinberg:
  Configuring values with SNMP results in the device savin the config file. It takes quite a while until the SNMP request is answered completely.
  
  • Therefore the SNMP write password cannot be guessed. Please configure it under Preferences - SNMP Configuration.
  • Industrial HiVision times out while setting values, but in most cases the configuration completes successfully. You can avoid the timeout if you configure the timeout value as 10s.
• Unknown SNMP devices:
  For devices that support the ifXTable: port numbers started with 1. This has changed: the value of the variable ifName is now the instance of the port. Therefore, their connections cannot be found. To correct this, please restart the auto topology.
  
• New enable/disable FLM via MultiConfig™ function, added for Eagle One and Eagle 20.
  Use MultiConfig™ on a device selected in Folder Frame or in the 'Devices' tab, in Detail Display, to access the FLM enabling/disabling function.
  
• 6k & 10k, MAX, Multilin The device MIB has changed for agent actions, e.g. firmware updates. Due to this change Industrial HiVision returns an error for devices with a firmware version earlier than 15.01.
  

Miscellaneous

• Under unfavorable conditions (e.g. high net and/or system load) the GUI cannot connect to the service. Remedy: Restart the GUI.
• Importing files from prerelease versions is not possible.
• Restoring the default font size may require a manual restart of the GUI.
• If the program does not react any more: end the GUI with the task manager (HiVision.exe) and restart it. If the problem persists, restart the Industrial HiVision service.
• If you have problems connecting to the Industrial HiVision Web server: delete the browser cache.
• Redundant Network Management System:
  You can find information on how to install Industrial HiVision on a redundant system at www.hivision.de.
  Please consider the system requirements for this installation.
• If you turn back the system clock the GUI may freeze. If this happens, then restart the GUI.
• Connection with Subdomains:
  Version 5.0 under 'Previous version' means 05.0.01 or later. It is not possible to connect with version 05.0.00
• If you want to use the GUI in a Browser, then deactivate the Java Cache:
  System Panel -> Java: General -> Settings: unmark the 'Keep temporary files' checkbox.
• OPC UA/DA installation:
  Later installation of another OPC server variant is not possible with a self extracting bundle. There is no maintenance dialog to install or de-install separate components for a self extracting bundle.
• Project import from 5.X releases or older:
  In rare cases, redundant connections may be displayed as forwarding (solid lines instead of dashed lines) after the project import.
  Remedy: Restart the service.
  
• Scanning IP ranges of the network has been improved and simplified. The description in the manual (References/8.4 Basics) does not yet cover the new options.
  
• The OPC UA server of Industrial HiVision was tested with UaExpert by Unified Automation and the OPC UA Client by Prosys.
• To update the display language of the Event History Timeline, restart the application after you change the display language of the GUI.
• When you select objects for example, devices, ports, or connections, to configure with MultiConfig™, it is recommended that you only select objects with the following matching characteristics, Device Class, Product, Chassis, Firmware version. The reason for matching the characteristics is that MultiConfig™ only displays the common supported dialogs. Displaying only common dialogs leads to a smaller number of dialogs. A smaller number of dialogs leads to fewer number of functions available for the selected objects.
  Note: With different software versions on the devices, MultiConfig™ can display dialogs which are available for the selected objects. In this case, you can configure the functions in the dialogs. However, when you configure functions on devices with different software, this can result in warning and error messages depending on the object you are configuring.
• Enabling both "Determine" and "Forward Status Up" in the dialog "MultiConfig™ -> Program settings -> Container Properties" can display a warning. In this case, click the "Write" button again to complete the configuration.
• In some cases, the dialog "MultiConfig™ -> Switching -> Advanced" can display a value different from the actual value on the device for the field "Frame Size". Specifing the value works as expected.
• Devices which were discovered as members of the device class "Switch" are not officially supported by Industrial HiVision. Industrial HiVision has no information about the actual structure and configuration of these devices. For these devices Industrial HiVision probes a set of standard MIBs and interprets the data to the best of its ability. There is no guarantee that these devices will work correctly in Industrial HiVision.