Summary of Contents for MSA QuickServer FS-QS-3X10-F
Page 1
Start-up Guide QuickServer FS-QS-3X10-F APPLICABILITY & EFFECTIVITY Effective for all systems manufactured after April 2021. Document Revision: 1.A T18627 QuickServer Start-up Guide MSAsafety.com...
Page 2
MSA Safety 1991 Tarob Court Milpitas, CA 95035 Website: www.MSAsafety.com U.S. Support Information: +1 408 964-4443 +1 800 727-4377 Email: smc-support@msasafety.com EMEA Support Information: +31 33 808 0590 Email: smc-support.emea@msasafety.com QuickServer Start-up Guide...
Page 4
Additional Information ........................34 SSL/TLS for Secure Connection .................... 34 9.1.1 Configuring FieldServer as a SSL/TLS Server ..............34 9.1.2 Configuring FieldServer as SSL/TLS Client ................37 Change Web Server Security Settings After Initial Setup ............38 9.2.1 Change Security Mode ......................39 9.2.2 Edit the Certificate Loaded onto the FieldServer ..............
NOTE: For troubleshooting assistance refer to Section 8, or any of the troubleshooting appendices in the related driver supplements. Check the MSA Safety website for technical support resources and documentation that may be of assistance. The QuickServer is cloud ready and connects with MSA Safety’s SMC Cloud. See Section 7.5.1 for further information.
Equipment Setup Equipment Setup Mounting The QuickServer can be mounted using the DIN rail mounting bracket on the back of the unit. Din Rail Bracket Figure 1: DIN Rail Bracket QuickServer Start-up Guide...
Installation Installing the QuickServer DIP Switch Settings 3.1.1 Bias Resistors R1 Bias Resistor DIP Switches (2 and 3) R2 Bias Resistor DIP Switches (2 and 3) Figure 3: Bias Resistor DIP Switches To enable Bias Resistors, move both the BIAS- and BIAS+ dip switches to the right in the orientation shown in Figure The QuickServer bias resistors are used to keep the RS-485 bus to a known state, when there is no...
Installation 3.1.2 Termination Resistor R1 Termination Resistor DIP Switch (1) R2 Termination Resistor DIP Switch (1) Figure 4: Termination Resistor DIP Switch If the QuickServer is the last device on the serial trunk, then the End-Of-Line Termination Switch needs to be enabled.
Installation Connecting the R1 & R2 Ports For the R1 Port only: Switch between RS-485 and RS-232 by moving the number 4 DIP Switch left for RS-485 and right for RS-232 (Figure The R2 Port is RS-485. Connect to the 3-pin connector(s) as shown below. Figure 5: R1 &...
Installation 10/100 Ethernet Connection Port Ethernet Port ETH1 Ethernet Port ETH2 Figure 6: Ethernet Connection The Ethernet Ports are used both for BACnet/IP communications and for configuring the QuickServer via the Web App. To connect the QuickServer, either connect the PC to the Router’s Ethernet port or connect the Router and PC to an Ethernet switch.
Power up Power up the QuickServer Check power requirements in the table below: Power Requirement for QuickServer External Gateway Current Draw Type QuickServer Family 12VDC 24VDC/AC FS-QS-3X10-XXXX (Typical) 250mA 125mA NOTE: These values are ‘nominal’ and a safety margin should be added to the power supply of the host system.
Setup Web Server Security Connect the PC to the QuickServer Connecting to the Gateway via Ethernet Connect a Cat-5 Ethernet cable (straight through or cross-over) between the local PC and QuickServer ETH1 (LAN Port). Ethernet Port Figure 9: Ethernet Port Location 5.1.1 Changing the Subnet of the Connected PC The default IP Address for the QuickServer is 192.168.1.24, Subnet Mask is 255.255.255.0.
Setup Web Server Security Setup Web Server Security Navigate to the IP Address of the QuickServer on the local PC by opening a web browser and entering the IP Address of the QuickServer; the default Ethernet address is 192.168.1.24. NOTE: If the IP Address of the QuickServer has been changed, the IP Address can be discovered using the FS Toolbox utility.
Setup Web Server Security • Additional text will expand below the warning, click the underlined text to go to the IP Address. In Figure 12 example this text is “Proceed to 10.40.50.94 (unsafe)”. Figure 12: Warning Expanded Text • When the login screen appears, put in the Username (default is “admin”) and the Password (found on the label of the FieldServer).
Setup Web Server Security Select the Security Mode On the first login to the FieldServer, the following screen will appear that allows the user to select which mode the FieldServer should use. Figure 14: Security Mode Selection Screen NOTE: Cookies are used for authentication. NOTE: To change the web server security mode after initial setup, go to Section 9.2.
Setup Web Server Security 6.2.1 HTTPS with Own Trusted TLS Certificate This is the recommended selection and the most secure. Please contact your IT department to find out if you can obtain a TLS certificate from your company before proceeding with the Own Trusted TLS Certificate option.
Figure 16) allows users to connect to the SMC Cloud, MSA Safety’s device cloud solution for IIoT. The SMC Cloud enables secure remote connection to field devices through a FieldServer and its local applications for configuration, management, maintenance. For more information about the SMC Cloud,...
Configuring the Gateway Configure Network Settings 7.1.1 Using FS-GUI to Input Network Settings To navigate from the FS-GUI page to the Network Settings page follow the below instructions: • Find the Navigation tree across the left side of the screen. •...
Configuring the Gateway 7.1.2 Routing Settings The Routing settings make it possible to set up the IP routing rules for the FieldServer’s internet and network connections. NOTE: The default connection is ETH1. • Select the default connection in the first row as either ETH 1 or ETH 2. •...
Configuring the Gateway 7.1.3 Ethernet 1 and Ethernet 2 Network Settings • Enable DHCP to automatically assign IP Settings or modify the IP Settings manually as needed, via these fields: IP Address, Netmask, Gateway, and Domain Name Server1/2. NOTE: If connected to a router, set the Gateway to the same IP Address as the router. •...
Configuring the Gateway 7.1.4 WAN Mode Settings for ETH2 • Click the blue WAN box to change the ETH 2 port to WAN mode. This prevents all but allowed incoming traffic on the ETH 2 port it does allow a connection to the internet via port 80 &...
Configuring the Gateway Retrieve the Sample Configuration File The configuration of the QuickServer is provided to the QuickServer’s operating system via a comma- delimited file called “CONFIG.CSV”. If a custom configuration was ordered, the QuickServer will be programmed with the relevant device registers in the Config.csv file for the initial start-up.
Configuring the Gateway Load the Updated Configuration File 7.4.1 Using the FS-GUI to Load a Configuration File • In the main menu of the FS-GUI screen, click “Setup”, then “File Transfer” and finally “Update”. • Browse and select the .csv file, open, then click “Submit”. Figure 22: FS-GUI Loading Files •...
Configuring the Gateway 7.4.2 Retrieve the Configuration File for Modification or Backup To get a copy of the configuration file for modifying or backing up a configuration on a local computer, do the following: • In the main menu of the FS-GUI screen, click “Setup”, then “File Transfer”. Figure 23: Retrieve Configuration File •...
NOTE: For troubleshooting assistance refer to Section 8, or any of the troubleshooting appendices in the related driver supplements and configuration manual. MSA Safety also offers a technical support on the MSA Safety website, which contains a significant number of resources and documentation that may be of assistance.
Troubleshooting Lost or Incorrect IP Address • Ensure that FieldServer Toolbox is loaded onto the local PC. Otherwise, download the FieldServer-Toolbox.zip via the MSA Safety website. • Extract the executable file and complete the installation. Ethernet Port Figure 25: Ethernet Port Location •...
Troubleshooting Viewing Diagnostic Information • Type the IP Address of the QuickServer into the web browser or use the FieldServer Toolbox to connect to the QuickServer. • Click on Diagnostics and Debugging Button, then click on view, and then on connections. •...
Troubleshooting Checking Wiring and Settings No COMS on the Serial side. If the Tx/Rx LEDs are not flashing rapidly then there is a COM issue. To fix this problem, check the following: • Visual observations of LEDs on the QuickServer. (Section 8.5) •...
Troubleshooting Taking a FieldServer Diagnostic Capture When there is a problem on-site that cannot easily be resolved, perform a Diagnostic Capture before contacting support. Once the Diagnostic Capture is complete, email it to technical support. The Diagnostic Capture will accelerate diagnosis of the problem. If the FieldServer bios is updated/released on November 2017 or later then the Diagnostic Capture is performed via the gateway’s on-board system.
Troubleshooting LED Functions Diagnostic LEDs Description The SS LED will flash once a second to indicate that the bridge is in operation. The SYS ERR LED will go on solid indicating there is a system error. If this occurs, immediately report the related “system error”...
Troubleshooting Factory Reset Instructions For instructions on how to reset a FieldServer back to its factory released state, see ENOTE - FieldServer Next Gen Recovery. Internet Browser Software Support The following web browsers are supported: • Chrome Rev. 57 and higher •...
Additional Information Additional Information SSL/TLS for Secure Connection SSL/TLS (Secure Sockets Layer/Transport Layer Security) is a security technology for establishing an encrypted connection between a server and a client. This allows the secure transfer of data across untrusted networks. 9.1.1 Configuring FieldServer as a SSL/TLS Server The following example sets the FieldServer to accept a secure Modbus/TCP connection on port 1502.
Page 35
Additional Information Limiting Client Access In addition to TLS_Port parameter also add Validate_Client_Cert in the connections section of the configuration file and set it to “Yes”. Connections Adapter , Protocol , TLS_Port , Validate_Client_Cert , Modbus/TCP , 1502 , Yes The configuration above sets the FieldServer to request and verify a client’s certificate against its internal authority file before accepting connection.
Page 36
Additional Information Certificate Validation Options If connections must be limited to only a particular domain (vendor devices), include Check_Remote_Host to specify the domain/host name. Connections Adapter , Protocol , TLS_Port , Validate_Client_Cert , Cert_Authority_File , Check_Remote_Host , Modbus/TCP , 1502 , Yes , my_authorized_clients.pem , SMC The configuration above tells the FieldServer to only accept connections that have the correct certification...
Additional Information 9.1.2 Configuring FieldServer as SSL/TLS Client The following Node configurations set the FieldServer to open a secure Modbus/TCP connection to Server at IP Address 10.11.12.13 on port 1502. Simple Secure Client Configuration Add Remote_Node_TLS_Port parameter in the nodes section of the configuration file and set to a port number between 1 –...
Additional Information Change Web Server Security Settings After Initial Setup NOTE: Any changes will require a FieldServer reboot to take effect. • The FieldServer landing page is the FS-GUI. • Click Setup in the Navigation panel. Figure 28: FS-GUI Page QuickServer Start-up Guide...
Additional Information 9.2.1 Change Security Mode • Click Security in the Navigation panel. Figure 29: FS-GUI Security Setup • Click the Mode desired. If HTTPS with own trusted TLS certificate is selected, follow instructions in Section 6.2.1 • Click the Save button. QuickServer Start-up Guide...
Additional Information 9.2.2 Edit the Certificate Loaded onto the FieldServer NOTE: A loaded certificate will only be available if the security mode was previously setup as HTTPS with own trusted TLS certificate. • Click Security in the Navigation panel. Figure 30: FS-GUI Security Setup – Certificate Loaded •...
Additional Information Change User Management Settings • From the FS-GUI page, click Setup in the Navigation panel. • Click User Management in the navigation panel. NOTE: If the passwords are lost, the unit can be reset to factory settings to reinstate the default unique password on the label.
Additional Information 9.3.1 Create Users • Click the Create User button. Figure 32: Create User Window • Enter the new User fields: Name, Security Group and Password. User details are hashed and salted NOTE: The password must meet the minimum complexity requirements. An algorithm automatically checks the password entered and notes the level of strength on the top right of the Password text field.
Additional Information 9.3.2 Edit Users • Click the pencil icon next to the desired user to open the User Edit window. Figure 33: Setup Users • Once the User Edit window opens, change the User Security Group and Password as needed. Figure 34: Edit User Window •...
Additional Information 9.3.3 Delete Users • Click the trash can icon next to the desired user to delete the entry. Figure 35: Setup Users • When the warning message appears, click Confirm. Figure 36: User Delete Warning QuickServer Start-up Guide...
Additional Information 9.3.4 Change FieldServer Password • Click the Password tab. Figure 37: FieldServer Password Update via FS-GUI • Change the general login password for the FieldServer as needed. NOTE: The password must meet the minimum complexity requirements. An algorithm automatically checks the password entered and notes the level of strength on the top right of the Password text field.
Additional Information Compliance with UL Regulations For UL compliance, the following instructions must be met when operating the QuickServer. • The units shall be powered by listed LPS or Class 2 power supply suited to the expected operating temperature range. •...
MSA Safety warrants its products to be free from defects in workmanship or material under normal use and service for two years after date of shipment. MSA Safety will repair or replace any equipment found to be defective during the warranty period. Final determination of the nature and responsibility for defective or damaged equipment will be made by MSA Safety personnel.
Need help?
Do you have a question about the QuickServer FS-QS-3X10-F and is the answer not in the manual?
Questions and answers