We Value Your Feedback!
Could you please spare a few minutes to share your thoughts on Cloud Connected vs On-Premise Services. Your feedback can help us shape the future of services.
Learn more about the survey or Click here to Launch the survey
Schneider Electric Services Innovation Team!
Geo SCADA Knowledge Base
Access vast amounts of technical know-how and pro tips from our community of Geo SCADA experts.
Link copied. Please paste this link to share this article on your social media post.
Originally published on Geo SCADA Knowledge Base by Anonymous user | June 09, 2021 05:41 PM
When changing your own user's password or changing another user's password within ClearSCADA an 'unknown error' is returned to your client and the user's password is not changed. This may be seen on all current ViewX clients or only certain subset of ViewX clients.
ClearSCADA, to ensure the credentials are protected, will encrypt the credentials when passing the new password from the client to the server. To do this when the server is started it generates a certificate for each IP address that the server has.
When a user's password is changed the relevant certificate is used to encrypt the credentials based on the IP address through which the client is connected to the ClearSCADA server, so if the IP address changes (due to a manual configuration change or DHCP) then there will be no matching certificate and the password change will fail with the unknown error message.
The same error will appear if using Windows Logon to authenticate against the ClearSCADA server from ViewX or another client as that also uses a secure session for the user's credentials.
Note that all password changes are covered by secure sessions in recent ClearSCADA versions.
Certificates are only generated at startup and so the long-term options are:
1. Restart ClearSCADA. If running in a hot-standby or triple-standby arrangement perform changeovers to ensure the system remains online at all times if required.
2. Modify the server to have a static IP address either in the server's operating system or the DHCP server to be an IP address that a certificate was generated for. Be aware that if you are using name resolution to access the ClearSCADA servers this needs any suitable modifications to ensure clients continue to be able to access the servers
If a restart or IP address change is not possible at the moment, a temporary work around for changing passwords may be to change the password from the desktop of the server. To do this modify your client connections to connect to the local server using 127.0.0.1 (localhost) as this will always have a certificate generated. Using this connection to 127.0.0.1 you should be able to change the passwords without an issue.
Restarting ViewX will not fix this problem.
It is not recommended to change your ClearSCADA server's IP address whilst ClearSCADA is running.
Go: Home Back
Link copied. Please paste this link to share this article on your social media post.
Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.
With achievable small steps, users progress and continually feel satisfaction in task accomplishment.
Usetiful Onboarding Checklist remembers the progress of every user, allowing them to take bite-sized journeys and continue where they left.
of