Download Print this page

Advertisement

Quick Links

FB Series Active Directory Quick Start Guide
D301963X012
April 2025
Allowing Microsoft
Active Directory to
®
Manage DeltaV FBxConnect and FB Series
Login Credentials

Advertisement

loading
Need help?

Need help?

Do you have a question about the DELTAV FB Series and is the answer not in the manual?

Questions and answers

Summary of Contents for Emerson DELTAV FB Series

  • Page 1 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Allowing Microsoft Active Directory to ® Manage DeltaV FBxConnect and FB Series Login Credentials...
  • Page 2 Emerson office. You can also receive the same quality training via our live, interactive Emerson Virtual Classroom and save on travel costs.
  • Page 3 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Contents Introduction What is Active Directory? ..................... 2 DNP3 SAv5 Keys Shared Between Device and Workstation ..........2 Before You Begin ........................4 Setting Up the Active Directory Server Install Microsoft® Active Directory on a Server and Configure It ........4 Configure Groups for Roles and Sites ................
  • Page 4 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Contents...
  • Page 5 D301963X012 April 2025 Introduction This document describes how to use Active Directory with Emerson’s FB Series flow computers as well as the DeltaV FB3000 RTU. The configuration steps are divided among three categories: Configuration at the Active Directory Server (See Section 2) ...
  • Page 6 FB Series Active Directory Quick Start Guide D301963X012 April 2025 What is Active Directory? Active Directory (often abbreviated “AD”) is a Microsoft server-based product which ® provides centralized management of user login credentials and roles on a network domain. Active Directory ensures that changes related to a given user’s privileges are immediately recognized throughout the network domain, eliminating the need to manually change user privileges at each individual workstation or device.
  • Page 7 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Important When you save security details in Device Security Management, the software prompts you to supply a password for the file. Be sure to retain that password in a safe place because you will need it later.
  • Page 8 FB Series Active Directory Quick Start Guide D301963X012 April 2025 File Extension Purpose is required to install its particular STF file. Zipped Connection File – This file includes the contents of the Connections List tree visible in DeltaV FBxConnect Launchpad including sites, addresses of each device, and other connection parameters.
  • Page 9 The default for this is EMRFT but, if desired, you can optionally change the EMRFT prefix to something different. To do so, go to the folder: \Users\Public\Public Documents\Emerson\FieldTools\Application Data\ In the UserSettings.Config file, change the GroupPrefix entry. refers to a site or sub-site in the Connections List tree within DeltaV site FBxConnect Launchpad.
  • Page 10 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Operator, Auditor, and Admin. Optionally, you can create your own custom groups with roles that you define. For example, you could have a “guest” role for users visiting a site. The actual permissions associated with a given role are specified in Device Security Management.
  • Page 11 FB Series Active Directory Quick Start Guide D301963X012 April 2025 the Active Directory server. Permissions for the groups, however, are specified in the Device Security Management tool in DeltaV FBxConnect Launchpad. Setting Up DeltaV FBxConnect Launchpad to Work with Active Directory Once you’ve completed setting up the Active Directory server, you can configure the DeltaV FBxConnect Launchpad workstation:...
  • Page 12 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Figure 2. Connections List tree shows connections and sites The “All Connections and Sites” site (which cannot be deleted) is the parent to all connections and sites in the entire tree. In this picture, it includes two RTUs (MYFB3000 and USB) along with three sites (EAST FIELD, NORTHEAST FIELD, SOUTHWEST FIELD) and one sub-site to SOUTHWEST FIELD called MAINLINE.
  • Page 13 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Enable Active Directory Mode in DeltaV FBxConnect Launchpad For each Launchpad workstation on the network domain, you must enable Active Directory Mode: 1. Click Settings in the menu bar to open the Settings dialog box. WARNING Never enable Active Directory Mode in DeltaV FBxConnect Launchpad unless your information technology (IT) department has already configured Active...
  • Page 14 FB Series Active Directory Quick Start Guide D301963X012 April 2025 2. Select Enable Active Directory to enable Active Directory Mode when running DeltaV FBxConnect Launchpad on this computer. Launchpad prompts you to confirm; only choose Yes if Active Directory has already been fully configured for each of your users with login credentials and roles.
  • Page 15 FB Series Active Directory Quick Start Guide D301963X012 April 2025 3.2.1 Login Differences in Active Directory Mode When you log into Active Directory Mode, usernames show the format: domain name\user_ID where domain name is the network domain managed by Active Directory is the individual user’s ID user_ID Figure 5.
  • Page 16 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Configure Permissions for Roles and Groups At the top of the Connections List tree in Launchpad, it shows All Connections and Sites (the ALL site). There are five groups associated with the “ALL” site (ALL_Auditor, ALL_Engineer, ALL_Measurement Tech, ALL_Operator, and ALL_Admin).
  • Page 17 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Note If you do not see Roles buttons, check to see that Launchpad is running in Active Directory Mode. Roles buttons are only available in Active Directory Mode. Notes If you do not define permissions for roles at a particular site, the permissions for the roles at that site are inherited from the parent site above, or if no parent then from All Connections and Sites level (the ALL_ groups).
  • Page 18 FB Series Active Directory Quick Start Guide D301963X012 April 2025 By default, the screen hides the Key entry, but you can click on it to view the actual key in plain text. Figure 9. Viewing the Key You can optionally enter descriptive text in the Notes field such as an asset tag number. Do not copy the key text into this field.
  • Page 19 FB Series Active Directory Quick Start Guide D301963X012 April 2025 For more details, refer to Section 3.11.1 of the DeltaV FBxConnect Launchpad Quick Start Guide (D301703X412). Import the ZCF File at other workstations Note If importing a ZCF file on a workstation that already has connections; the new connections from the ZCF file are merged into the existing Connections List tree, with the exception of connections sharing the same name;...
  • Page 20 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Once you finish configuring the DeltaV FBxConnect Launchpad workstation, you need to transfer the security details (SAv5 keys, roles and permissions) from the Launchpad workstation to each device. Choose either of two methods for transferring security details to your devices: Method 1: Create a security target file (STF) for each device and transfer it to each device through a local USB connection.
  • Page 21 FB Series Active Directory Quick Start Guide D301963X012 April 2025 it in both the Target File Password and Verify file password fields and click OK. Important Be sure to save the STF file password in a safe place; you will need it later. 6.
  • Page 22 FB Series Active Directory Quick Start Guide D301963X012 April 2025  We chose a name of “USB” for the Connection name.  Set the Connection type to Serial.  Set the Baud rate and Link timeout as shown in the figure below. ...
  • Page 23 FB Series Active Directory Quick Start Guide D301963X012 April 2025 DeltaV FBxConnect. 5. In FBxConnect, click: Services > Apply Security File 6. In the Apply Security File dialog box, click Browse to locate the STF file for the device. 7. Enter the Target File Password for your STF file and click OK. 8.
  • Page 24 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Method 2: Transferring Security Details over IP to Selected Devices on the Network 1. In Device Security Management, click Transfer > Transfer Users/Keys/Roles to Devices 2. Select the devices to which you want to transfer the information by selecting them. Figure 13.
  • Page 25 FB Series Active Directory Quick Start Guide D301963X012 April 2025 2. Define the SAv5 key (see page 13) in Device Security Management. 3. Save the key to the database (see page 14). 4. Transfer security details either over IP or through a local connection to the device to load an STF file (see Section 4.0).
  • Page 26 FB Series Active Directory Quick Start Guide D301963X012 April 2025 Adding a New Site 1. Add groups for the site at the Active Directory server and assign appropriate users to those groups. See the Microsoft® Active Directory documentation for details. 2.
  • Page 27 FB Series Active Directory Quick Start Guide D301963X012 April 2025 3. Click Enable Remote SAv5 Key Updates to enable remote SAv5 key updates -or- Click Disable Remote SAv5 Updates to disable remote key updates. 4. In either case, confirm your choice when prompted.
  • Page 28 Emerson logo are trademarks and service marks of Emerson Electric Co. The Singapore 128461 DeltaV logo is a mark of one of the Emerson family of companies. All other marks T +65 6777 8211| F +65 6777 0947 are the property of their respective owners.