Industrial HiVision 08.1.04

Readme

November 16, 2021

Security Patches

The security patches listed in the release notes, apply to this version of the Industrial HiVision software. When you download and install the software, the security patches are automatically installed. In each security vulnerability section you can find a description of which security patches the software contains and the risk that the security patch covers.

Software Update

Hirschmann is continually improving and developing our software. You should check regularly whether there is a new version of the software that provides you with additional benefits. You will find the current version of the Industrial HiVision software on the following website:
http://www.beldensolutions.com/ihivision-ihivision-en

Open Source Software

The product contains, among other things, Open Source Software files, as defined below, developed by third parties and licensed under an Open Source Software license. These Open Source Software files are protected by copyright. Your right to use the Open Source Software is governed by the relevant applicable Open Source Software license conditions.

Your compliance with those license conditions will entitle you to use the Open Source Software as foreseen in the relevant license. In the event of conflicts between other Hirschmann Automation and Control GmbH license conditions applicable to the product and the Open Source Software license conditions, the Open Source Software conditions shall prevail.

The Open Source Software is provided royalty-free (e.g. no fees are charged for exercising the licensed rights). Open Source Software contained in this product and the respective Open Source Software licenses are stated here.

If Open Source Software contained in this product is licensed under GNU General Public License (GPL), GNU Lesser General Public License (LGPL), Mozilla Public License (MPL) or any other Open Source Software license, which requires that source code is to be made available and such source code is not already delivered together with the product, you can order the corresponding source code of the Open Source Software from Hirschmann Automation and Control GmbH - against payment of the shipping and handling charges - for a period of at least 3 years from the time of product purchase.

Please send your specific request, within three years of the purchase date of this product, together with the name and ID number of the product found on the product label to the following address:

Hirschmann Automation and Control GmbH
PO Box 1649
72606 Nuertingen
Germany

Java

Due to the recent changes to the Java licenses, Hirschmann has changed the embedded Java software from Oracle to OpenJDK.

System Requirements

To install and operate Industrial HiVision you require:

Hardware
- Processor
  x86 compatible 64 bit CPU with 8 cores
- RAM
  8 GB
- Solid State Drive (SSD)
Note: There is a known performance problem with some CPUs, e.g. the Xeon CPU, when used in Processor groups "k-group". You can find more information about this known problem on the Industrial HiVision FAQ page.
Virtual machines
Running Industrial HiVision on a virtual machine can lead to performance issues. Due to the vast number of configuration variations, it is virtually impossible to test every combination of VM Software, Server Hardware and equipment installation.
Operating system
- Windows 7 (64 Bit)
- Windows 8.1 (64 Bit)
- Windows 10 Version 1803 (64 Bit)
Windows Server 2008 R2
- Note: Do not use as a Windows server:
  Share Point Services, Exchange Server and Active Directory should not be installed
Windows Server 2012 R2
- Note: Do not use as a Windows server:
  Share Point Services, Exchange Server and Active Directory should not be installed
Windows Server 2016
- Note: Do not use as a Windows server:
  Share Point Services, Exchange Server and Active Directory should not be installed
Windows Server 2019
- Note: Do not use as a Windows server:
  Share Point Services, Exchange Server and Active Directory should not be installed
PC Linux:64 Bit: Kernel 3.10, libc 6 (approved for Debian and Red Hat)
- Debian 8
- Debian 9
- Debian 10
- Red Hat 7
- Red Hat 8
Requirements for the availability calculation
- For Windows operating systems:
  Industrial HiVision needs the framework Microsoft .NET 2.0 or higher.
- For Linux operation systems:
  Please install MONO 2.0.
  Note for Debian Linux: Please install the packages libmono2.0-cil and libmono-winforms2.0-cil.
License
- License keys for Industrial HiVision depend on the number of devices you want to monitor. License keys for 16, 32, 64, 128, 256, 512, 1024, 2048 and 4096 devices are available. Licenses are cumulative.
- Upgrade licenses are possible to upgrade version 4.0 full licenses.

Installation

Before you install the software compare the sha256 hash on the web page with the sha256 hash calculated from the zip file. For windows users, the Windows utility "certutil" can be used to calculate the sha256 hash. In the cmd window navigate to the file location, then enter the following command:
CertUtil -hashfile path\file_name.ext SHA256 (Example: CertUtil -hashfile C:\Industrial_HiVision.zip SHA256)

For Linux users, verify that you have administrator rights then enter the following command:
sha256sum path/industrial_hivision.zip (Example: sha256sum /industrial_hivision.zip)

Industrial HiVision consists of a number of components. A background service performs most of the work.

This service has a close connection to a database containing all the relevant data for the settings of Industrial HiVision and the devices to be monitored. When you reboot Industrial HiVision, it gets the configuration data from the database which was current when you last quit the program.

The program Industrial HiVision, which you call up directly on the screen, maintains a connection with the background service, from which it gets the required data.

Note: To help protect your Industrial HiVision management system, limit the number of users and restrict user permissions. To further deny unauthorized user access, restrict access to the Industrial HiVision "config", "scripts", and "report_files" folders. The Industrial HiVision "config" folder contains the security related files "usermanagement.xml" and "service.xml". The "script" folder may contain files with unencrypted passwords. The "report_files" folder displays results of any scripts that have been run and may contain files with unencrypted passwords.

You can find the "config" folder in: "C:\Program Files\Hirschmann\Industrial HiVision 8.1"
You can find the "scripts", and "report_files" folders in: "C:\Program Files\Hirschmann\Industrial HiVision 8.1\var"

Installation under Windows

Login with administration rights.
Download the Industrial HiVision software from the web page.
To install Industrial HiVision, you start the executable setup file.
Select "Installation" and follow the instructions of the installation assistant.

If you get the error message Error installing ikernel.exe it means, that the user does not have administration rights.

The installation assistant installs

the “Hirschmann Industrial HiVision 8.1 Service” service with integrated database and
the Industrial HiVision program.

During the installation, you can select whether the

“Hirschmann Industrial HiVision 8.1 Service” is started manually when the program starts, or whether
the “Hirschmann Industrial HiVision 8.1 Service” is started automatically each time the computer is rebooted.

Note: During the installation you are requested to install WinPcap if it is not already installed. WinPcap is required for a 'HiDiscovery Scan'.

Note: You can get the status of the service in Windows 2000 under Start:Control Panel:Administration:Services. Here you can also terminate the service and restart it.
Note that when the service is switched off, there is no network monitoring, which means that no events are recorded.
This service requires considerable computer resources. If you are running other resource-intensive programs on the computer, then close the Industrial HiVision program and the “Hirschmann Industrial HiVision 8.1 Service”. When it starts, the Industrial HiVision program asks you whether you want to start the service.

Installation under Linux

Logon with the su command so that you have root access rights.
Download the Industrial HiVision software from the web page.
Unzip the .zip files to a directory of your choice.
Unpack the .tar files.
Start the installation script with the command sh install.sh
Answer the questions of the installation script and follow the instructions of the installation script. If you do not answer a question of the installation script, then the installation script selects the default answer.

The following example for starting the Industrial HiVision service requires that you have installed Industrial HiVision in the directory /opt/ihivision8.1.
If you have selected a different installation path, then you should change the path name accordingly

Start the Industrial HiVision service with the command
/etc/init.d/ihivision8.1 start
Industrial HiVision requires that you logged on using su.
You can quit the service with the command
/etc/init.d/ihivision8.1 stop
You can restart the service with the command
/etc/init.d/ihivision8.1 restart

To start the service when you start the operating system, you include the service start in the init sequence of your system. The different Linux distributions provide you with a whole range of options for this. For some start sequences compatible with Sys V, the installation copies the start script ihivision8.1 into the init.d directory of the system.

Depending on your requirements, you can

integrate this script into the different run levels or
start it manually with the above command.

This init script was developed and tested on Red Hat and Mandriva Linux. Other distributions (e.g. Gentoo) use a different script structure which, unfortunately, makes it impossible to use this script.

Note: To receive SNMP traps in RedHat Linux you have to change the configuration of iptables.

Note: For the Audit Trail functionality you have to configure the syslog server configuration in RedHat and Debian Linux:

In /etc/rsyslog.conf you have to edit/uncomment these two lines:
```
$ModLoad imudp
$UDPServerRun 514
```
Then the syslog server has to be restarted.

Update

After an update of a previous version or during loading of a project of a previous version the database has to be updated and devices have to be reloaded. This can take some time depending on the size of the project. During this procedure the user can not interact with the program.

Unreachable devices are marked in the database. During the next start of the services they are reloaded. This state is displayed in the column 'needs reload' in the list 'all devices'.

Devices which always have the blue reload arrows can be handled like this:

Set the device to Unmanaged
Restart the service
Delete the device
Discover the device again

Update under Windows

The Industrial HiVisionbackup is version dependant. Make a backup file after every software update.

To update a version of Industrial HiVision already installed, you install the new version as described on Installation under Windows.

During the installation, you can choose whether the installation routine transfers the data from a previous installation into the new installation.

If you want to transfer the data from an earlier version, you should only deinstall the earlier version after the update. Industrial HiVision permits the installation of different versions on a PC.

Note: In order to correctly transfer the data from the previous version, the installation routine terminates the previous version, with your permission, if it is still active. Therefore, there is no network monitoring during the update procedure.

Update under Linux

The Industrial HiVisionbackup is version dependant. Make a backup file after every software update.

To update a version of Industrial HiVision already installed, you install the new version as described in Installation under Linux.

During the installation, you can choose whether the installation routine transfers the data from a previous installation into the new installation.

If you want to transfer the data from an earlier version, you should only deinstall the earlier version after the update. Industrial HiVision permits the installation of different versions on a PC.

Note: In order to correctly transfer the data from the previous version, the previous version must be shut down. Therefore, there is no network monitoring during the update procedure.

Note: During an update, Industrial HiVision can transfer the data from the previous version if the previous version is in the specified installation directory. Otherwise, you can use the interface functions Export and Import to transfer the data.

Starting under Windows

During the installation, the program installation routine installs a program icon for the link to the program Industrial HiVision

on the desktop
in Start:Program Files:Hirschmann:Industrial HiVision 8.1.

Start Industrial HiVision by double-clicking on the program symbol on your desktop, or by selecting the program icon in your start directory.

Starting under Linux

To be able to start Industrial HiVision from the graphical interface, you put an icon on the desktop you are using (KDE, Gnome, etc.). You will find a suitable image (ihivision_op32x32.png) in /opt/ihivision8.1/lib.

Every user can start Industrial HiVision by double-clicking on the icon, or with the command /opt/ihivision8.1/bin/HiVision.

On starting the GUI a splash screen is shown. If the workspace is changed during the splash screen is visible it is possible that it will not disappear.

Uninstallation under Windows

Quit the program Industrial HiVision before you start the uninstallation.
To uninstall Industrial HiVision, select Start:Control Panel:Software.
Select the program "Hirschmann Industrial HiVision 8.1"
Click on Change/Remove and follow the instructions of the deinstallation routine.

Uninstallation under Linux

Quit the Industrial HiVision program before you begin with uninstallation.
Logon with the su command so that you have root access rights.
Quit the Industrial HiVision service with the command /etc/init.d/ihivision8.1 stop
Delete the /opt/ihivision8.1 directory with the command rm -rf /opt/ihivision8.1. This will delete the program, the current database and all the licenses.
Remove the ihivision8.1 start script from the run levels of your init sequence (see "Installation under Linux" on page 19).

Third Party Licenses

This software includes a number of Open Source components that were published under different licenses. You can find a list of all components and licenses here.

OPC UA/DA deactivation

When you deactivate the "OPC Server" function in the Preferences> Advanced> Services Access, restart the Industrial HiVision kernel.

FAQs

You can find FAQs regarding Industrial HiVision here.