Summary of Contents for MSA fieldserver QuickServer FS-QS-2 0 Series
Page 1
Start-up Guide QuickServer FS-QS-2XX0 APPLICABILITY & EFFECTIVITY Effective for all systems manufactured after March 2021. Document Revision: 2.B T18627 QuickServer Start-up Guide MSAsafety.com...
Page 2
MSA Safety 1991 Tarob Court Milpitas, CA 95035 Website: www.MSAsafety.com U.S. Support Information: +1 408 964-4443 +1 800 727-4377 Email: smc-support@msasafety.com EMEA Support Information: +31 33 808 0590 Email: smc-support.emea@msasafety.com QuickServer Start-up Guide...
Table of Contents About the QuickServer ........................6 Certification ..........................6 Supplied Equipment ......................... 6 Equipment Setup ..........................7 Mounting ........................... 7 Installing the QuickServer ....................... 8 DIP Switch Settings ........................8 3.1.1 Bias Resistors .......................... 8 3.1.2 Termination Resistor ........................ 9 Connecting the R1 &...
Page 4
Additional Information ........................40 10.1 SSL/TLS for Secure Connection .................... 40 10.1.1 Configuring FieldServer as a SSL/TLS Server ..............40 10.1.2 Configuring FieldServer as SSL/TLS Client ................43 10.2 Change Web Server Security Settings After Initial Setup ............44 10.2.1 Change Security Mode ......................45 10.2.2 Edit the Certificate Loaded onto the FieldServer ..............
NOTE: For troubleshooting assistance refer to Section 9, or any of the troubleshooting appendices in the related driver supplements. Check the MSA Safety website for technical support resources and documentation that may be of assistance. The QuickServer is cloud ready and connects with MSA Safety’s SMC Cloud. See Section for further information.
Equipment Setup Equipment Setup Mounting The QuickServer can be mounted using the DIN rail mounting bracket on the back of the unit. Din Rail Bracket Figure 1: DIN Rail Bracket NOTE: For dimension details see Section 10.7. Figure 2: DIN Rail Mounted QuickServer Start-up Guide...
Installation Installing the QuickServer DIP Switch Settings 3.1.1 Bias Resistors R1 Bias Resistor DIP Switches (2 and 3) R2 Bias Resistor DIP Switches (2 and 3) Figure 3: Bias Resistor DIP Switches To enable Bias Resistors, move both the BIAS- and BIAS+ dip switches to the right in the orientation shown in Figure The QuickServer bias resistors are used to keep the RS-485 bus to a known state, when there is no...
Installation 3.1.2 Termination Resistor R1 Termination Resistor DIP Switch (1) R2 Termination Resistor DIP Switch (1) Figure 4: Termination Resistor DIP Switch If the QuickServer is the last device on the serial trunk, then the End-Of-Line Termination Switch needs to be enabled.
Installation Connecting the R1 & R2 Ports For the R1 Port only: Switch between RS-485 and RS-232 by moving the number 4 DIP Switch left for RS-485 and right for RS-232 (Figure The R2 Port is RS-485. Connect to the 3-pin connector(s) as shown below. Figure 5: R1 &...
Installation 10/100 Ethernet Connection Port Ethernet Port Figure 6: Ethernet Connection The Ethernet Port is used both for BACnet/IP communications and for configuring the QuickServer via the Web App. To connect the QuickServer, either connect the PC to the Router’s Ethernet port or connect the Router and PC to an Ethernet switch.
Power up Power up the QuickServer Check power requirements in the table below: Power Requirement for QuickServer External Gateway Current Draw Type QuickServer Family 12VDC 24VDC/AC FS-QS-2XX0-XXXX (Typical) 250mA 125mA NOTE: These values are ‘nominal’ and a safety margin should be added to the power supply of the host system.
Connecting to the Gateway Connect the PC to the QuickServer Connecting to the Gateway via Ethernet Connect a Cat-5 Ethernet cable (straight through or cross-over) between the local PC and QuickServer. Ethernet Port Figure 9: Ethernet Port Location 5.1.1 Changing the Subnet of the Connected PC The default IP Address for the QuickServer is 192.168.2.101, Subnet Mask is 255.255.255.0.
Setup Web Server Security Setup Web Server Security Login to the FieldServer The first time the FieldServer GUI is opened in a browser, the IP Address for the gateway will appear as untrusted. This will cause the following pop-up windows to appear. •...
Setup Web Server Security • Additional text will expand below the warning, click the underlined text to go to the IP Address. In Figure 12 example this text is “Proceed to 10.40.50.94 (unsafe)”. Figure 12: Warning Expanded Text • When the login screen appears, put in the Username (default is “admin”) and the Password (found on the label of the FieldServer).
Setup Web Server Security Select the Security Mode On the first login to the FieldServer, the following screen will appear that allows the user to select which mode the FieldServer should use. Figure 14: Security Mode Selection Screen NOTE: Cookies are used for authentication. NOTE: To change the web server security mode after initial setup, go to Section 10.2.
Setup Web Server Security 6.2.1 HTTPS with Own Trusted TLS Certificate This is the recommended selection and the most secure. Please contact your IT department to find out if you can obtain a TLS certificate from your company before proceeding with the Own Trusted TLS Certificate option.
Figure 16) allows users to connect to the SMC Cloud, MSA Safety’s device cloud solution for IIoT. The SMC Cloud enables secure remote connection to field devices through a FieldServer and its local applications for configuration, management, maintenance. For more information about the SMC Cloud,...
Configuring the Gateway Configure Network Settings 7.1.1 Using FS-GUI to Input Network Settings To navigate from the FS-GUI page to the Network Settings page follow the below instructions: • Find the Navigation tree across the left side of the screen. •...
Configuring the Gateway 7.1.2 Routing Settings The Routing settings make it possible to set up the IP routing rules for the FieldServer’s internet and network connections. • Click the Add Rule button to add a new row and set a new Destination Network, Netmask and Gateway IP Address as needed.
Configuring the Gateway 7.1.3 Ethernet 1 Network Settings To change the IP Settings, follow these instructions: • Enable DHCP to automatically assign IP Settings or modify the IP Settings manually as needed, via these fields: IP Address, Netmask, Default Gateway, and Domain Name Server1/2. NOTE: If the FieldServer is connected to a router, the IP Gateway of the FieldServer should be set to the same IP Address of the router.
Configuring the Gateway Retrieve the Sample Configuration File The configuration of the QuickServer is provided to the QuickServer’s operating system via a comma- delimited file called “CONFIG.CSV”. If a custom configuration was ordered, the QuickServer will be programmed with the relevant device registers in the Config.csv file for the initial start-up.
Configuring the Gateway Load the Updated Configuration File 7.4.1 Using the FS-GUI to Load a Configuration File • In the main menu of the FS-GUI screen, click “Setup”, then “File Transfer” and finally “Update”. • Browse and select the .csv file, open, then click “Submit”. Figure 22: FS-GUI Loading Files •...
Configuring the Gateway 7.4.2 Retrieve the Configuration File for Modification or Backup To get a copy of the configuration file for modifying or backing up a configuration on a local computer, do the following: • In the main menu of the FS-GUI screen, click “Setup”, then “File Transfer”. Figure 23: Retrieve Configuration File •...
NOTE: For troubleshooting assistance refer to Section 9, or any of the troubleshooting appendices in the related driver supplements and configuration manual. MSA Safety also offers a technical support on the MSA Safety website, which contains a significant number of resources and documentation that may be of assistance.
SMC Cloud Setup SMC Cloud Setup The SMC Cloud is MSA Safety’s device cloud solution for IIoT. Integration with the SMC Cloud enables a secure remote connection to field devices through a FieldServer and hosts local applications for device configuration, management, as well as maintenance. For more information...
SMC Cloud Setup • Either go through the SMC Cloud setup to integrate SMC Cloud functionality to the FieldServer or optout of SMC Cloud setup. For SMC Cloud setup, continue with instructions in the following sections To opt out of SMC Cloud, click on a tab other than the SMC Cloud™ tab then click the checkbox next to “Opt out of SMC Cloud Registration”...
SMC Cloud Setup User Setup Before the gateway can be connected to SMC Cloud a user account must be created. Request an invitation to SMC Cloud from the manufacturer’s support team and follow the instructions below to set up login details: •...
SMC Cloud Setup • Click the “Complete Registration” button and fill in user details accordingly. Figure 28: Setting User Details • Fill in the name, phone number, password fields and click the checkbox to agree to the privacy policy and terms of service. NOTE: If access to data logs using RESTful API is needed, do not include “#”...
SMC Cloud Setup Registration Process Once SMC Cloud user credentials have been generated, the QuickServer can be registered onto the SMC Cloud server. • When first logging onto the QuickServer, the Web App will open on the SMC Cloud™ page. NOTE: If a warning message appears instead, go to Section 10.9 to resolve the connection issue.
SMC Cloud Setup • To register, fill in the user details, site details, gateway details and SMC Cloud account credentials. Enter user details and click Next Figure 30: SMC Cloud Registration – Installer Details Enter the site details by entering the physical address fields or the latitude and longitude then click Next Figure 31: SMC Cloud Registration –...
SMC Cloud Setup Enter Name and Description (required) then click Next Figure 32: SMC Cloud Registration – Gateway Details Click the “Create an SMC Cloud account” button and enter a valid email to send a “Welcome to SMC Cloud” invite to the email address entered Figure 33: SMC Cloud Registration –...
SMC Cloud Setup • Once the device has successfully been registered, a confirmation window will appear. Click the Close button and the following screen will appear listing the device details and additional information auto-populated by the QuickServer. Figure 34: Device Registered for SMC Cloud NOTE: Update these details at any time by going to the SMC Cloud™...
SMC Cloud Setup Login to SMC Cloud After the QuickServer is registered, go to www.smccloud.net and type in the appropriate login information as per registration credentials. Figure 35: SMC Cloud Login Page NOTE: If the login password is lost, see the SMC Cloud Start-up Guide for recovery instructions.
Troubleshooting Troubleshooting Communicating with the QuickServer Over the Network • Confirm that the network cabling is correct. • Confirm that the computer network card is operational and correctly configured. • Confirm that there is an Ethernet adapter installed in the PC’s Device Manager List, and that it is configured to run the TCP/IP protocol.
Troubleshooting Taking a FieldServer Diagnostic Capture When there is a problem on-site that cannot easily be resolved, perform a Diagnostic Capture before contacting support. Once the Diagnostic Capture is complete, email it to technical support. The Diagnostic Capture will accelerate diagnosis of the problem. •...
Troubleshooting LED Functions FS-EZX-MOD-BAC Diagnostic LEDs Description The SS LED will flash once a second to indicate that the bridge is in operation. The SYS ERR LED will go on solid indicating there is a system error. If this occurs, immediately report the related “system error”...
Troubleshooting Factory Reset Instructions For instructions on how to reset a FieldServer back to its factory released state, see ENOTE - FieldServer Next Gen Recovery. Internet Browser Software Support The following web browsers are supported: • Chrome Rev. 57 and higher •...
Additional Information 10 Additional Information 10.1 SSL/TLS for Secure Connection SSL/TLS (Secure Sockets Layer/Transport Layer Security) is a security technology for establishing an encrypted connection between a server and a client. This allows the secure transfer of data across untrusted networks. 10.1.1 Configuring FieldServer as a SSL/TLS Server The following example sets the FieldServer to accept a secure Modbus/TCP connection on port 1502.
Page 41
Additional Information Limiting Client Access In addition to TLS_Port parameter also add Validate_Client_Cert in the connections section of the configuration file and set it to “Yes”. Connections Adapter , Protocol , TLS_Port , Validate_Client_Cert , Modbus/TCP , 1502 , Yes The configuration above sets the FieldServer to request and verify a client’s certificate against its internal authority file before accepting connection.
Page 42
Additional Information Certificate Validation Options If connections must be limited to only a particular domain (vendor devices), include Check_Remote_Host to specify the domain/host name. Connections Adapter , Protocol , TLS_Port , Validate_Client_Cert , Cert_Authority_File , Check_Remote_Host , Modbus/TCP , 1502 , Yes , my_authorized_clients.pem , SMC The configuration above tells the FieldServer to only accept connections that have the correct certification...
Additional Information 10.1.2 Configuring FieldServer as SSL/TLS Client The following Node configurations set the FieldServer to open a secure Modbus/TCP connection to Server at IP Address 10.11.12.13 on port 1502. Simple Secure Client Configuration Add Remote_Node_TLS_Port parameter in the nodes section of the configuration file and set to a port number between 1 –...
Additional Information 10.2 Change Web Server Security Settings After Initial Setup NOTE: Any changes will require a FieldServer reboot to take effect. • Navigate from the QuickServer landing page to the FS-GUI by clicking the blue “Diagnostics” text on the bottom of the screen. Figure 39: QuickServer Landing Page •...
Additional Information 10.2.1 Change Security Mode • Click Security in the Navigation panel. Figure 41: FS-GUI Security Setup • Click the Mode desired. If HTTPS with own trusted TLS certificate is selected, follow instructions in Section 6.2.1 • Click the Save button. QuickServer Start-up Guide...
Additional Information 10.2.2 Edit the Certificate Loaded onto the FieldServer NOTE: A loaded certificate will only be available if the security mode was previously setup as HTTPS with own trusted TLS certificate. • Click Security in the Navigation panel. Figure 42: FS-GUI Security Setup – Certificate Loaded •...
Additional Information 10.3 Change User Management Settings • From the FS-GUI page, click Setup in the Navigation panel. • Click User Management in the navigation panel. NOTE: If the passwords are lost, the unit can be reset to factory settings to reinstate the default unique password on the label.
Additional Information 10.3.1 Create Users • Click the Create User button. Figure 44: Create User Window • Enter the new User fields: Name, Security Group and Password. User details are hashed and salted NOTE: The password must meet the minimum complexity requirements. An algorithm automatically checks the password entered and notes the level of strength on the top right of the Password text field.
Additional Information 10.3.2 Edit Users • Click the pencil icon next to the desired user to open the User Edit window. Figure 45: Setup Users • Once the User Edit window opens, change the User Security Group and Password as needed. Figure 46: Edit User Window •...
Additional Information 10.3.3 Delete Users • Click the trash can icon next to the desired user to delete the entry. Figure 47: Setup Users • When the warning message appears, click Confirm. Figure 48: User Delete Warning QuickServer Start-up Guide...
Additional Information 10.3.4 Change FieldServer Password • Click the Password tab. Figure 49: FieldServer Password Update via FS-GUI • Change the general login password for the FieldServer as needed. NOTE: The password must meet the minimum complexity requirements. An algorithm automatically checks the password entered and notes the level of strength on the top right of the Password text field.
Additional Information 10.6 Compliance with UL Regulations For UL compliance, the following instructions must be met when operating QuickServer. • The units shall be powered by listed LPS or Class 2 power supply suited to the expected operating temperature range. •...
Additional Information 10.9 SMC Cloud Connection Warning Message • If a warning message appears instead of the page as shown in Figure 29, follow the suggestion that appears on screen. If the ProtoAir cannot reach the SMC Cloud server, the following message will appear Figure 52: SMC Cloud Connection Problems Message •...
MSA Safety warrants its products to be free from defects in workmanship or material under normal use and service for two years after date of shipment. MSA Safety will repair or replace any equipment found to be defective during the warranty period. Final determination of the nature and responsibility for defective or damaged equipment will be made by MSA Safety personnel.
Need help?
Do you have a question about the fieldserver QuickServer FS-QS-2 0 Series and is the answer not in the manual?
Questions and answers