Metasys For Validated Environments, Extended Architecture Product

Transcription

Metasys® For Validated Environments, Extended
Architecture Product Bulletin
MS-MVE5U-0, MS-MVE10U-0, MS-MVE25U-0, MS-MVE50U-0
Code No. LIT-12011326
Software Release 7.0
Issued March 2, 2015
Refer to the QuickLIT website for the most up-to-date version of this document.
Metasys® for Validated Environments, extended
architecture is an offering from Johnson Controls for
facilities that require regulatory compliance for their
environmental systems. MVE brings the flexibility and
convenience of a web interface to your regulated facility.
The MVE application is a ordered separately from the
Metasys Extended Application and Data Server (ADX).
Figure 1: MVE Browser Window
MVE is essential to facilities in which regulatory
management is key to successful production. The system
controls environmental conditions and audits user
management for critical environments, such as hospitals,
research facilities, food production centers, and other
production environments where tight control is key to
product success. Whether your focus is meeting
regulatory demands or reducing business risk, MVE is
designed to deliver.
Some of the many important MVE capabilities include
flexible system navigation, powerful user graphics,
comprehensive alarm management, trend analysis, and
advanced reporting.
In addition, complex passwords and message encryption
secure the system from unauthorized access and data
tampering. The system uses Internet protocols and IT
standards and is compatible with enterprise-level
communication networks.
MVE is specifically designed to help customers address
United States Food and Drug Administration (FDA) Title
21, Code of Federal Regulation (CFR) Part 11
compliance. MVE is also compliant with similar agencies
around the world that deal with electronic records and
electronic signature requirements, such as Annex 11 of
the European Union Good Manufacturing Practice (EU
GMP) regulations (European Medicines Agency [EMEA]
1998).
MVE software is installed on an existing Metasys
Extended Application and Data Server (ADX) which
provides the ability to configure supervisory engines as
validated devices. MVE software is purchased and
licensed separately from the ADX.
Features and Benefits
Features
Benefits
Web Browser User Interface with Advanced Provides full access to your Building Automation System (BAS) from any
Reporting
computer with compatible web browser software. Advanced Reporting System
provides pre-configured reports that assist with high-level data analysis.
Buffered Data Collection
Enables supervisory controllers to store data locally if communication to the
database server is lost.
Software Simulation
Provides offline simulation capability to assist with source code reviews and
validation processes.
Secure User Access
Authenticates users and authorizes access privileges to protect system integrity.
Requires a unique user name and complex password for each user.
Metasys For Validated Environments, Extended Architecture Product Bulletin
1
Features
Benefits
Electronic Records and Signatures
Combine the efficiency of electronic record keeping with the security of
authenticated electronic signatures. All system changes can be configured to
require annotations only or both signatures and annotations.
Time-Stamped Audit and Event Trails
Generate traceable alarm and event transactions in chronological order.
Simplified User Interface
Provides a shared set of users and user views between the real-time Metasys
Site Management Portal user interface and the historical Advanced Reporting
System.
Primary Components of Metasys
Simulation
for Validated Environments (MVE) Software
You can simulate control processes, test user navigation
The primary components of MVE are the ADX and one
or more of the following engines:
•
•
•
•
Network Automation Engine (NAE) 55
Network Automation Engine (NAE) 45
Network Control Engine (NCE) 25
Network Integration Engine (NIE) 55
The ADX manages and protects the long-term storage
of event and alarm messages, as well as trend, audit,
and system configuration data. The network engines
supervise the activities of field controllers, such as Field
Equipment Controllers (FECs) and VAV controllers.
Electronic Signature and Required
Annotation
The MVE feature provides traceable electronic records
and signatures. Any action or change initiated by a user,
such as alarm acknowledgement or setpoint adjustment,
can be configured to require user re-authentication
through electronic signature and required annotation,
consistent with Part 11 compliance.
Intuitive Web Browser User Interface
Users access MVE with a desktop or laptop computer
running the Windows® Internet Explorer® web browser
that is connected via a corporate intranet, dedicated BAS
network, Internet, or telephone line from remote sites.
Depending on which ADX is chosen, up to 50 users can
simultaneously communicate with the ADX.
trees, user graphics, and programmed sequence logic
offline using the System Configuration Tool (SCT). Once
you validate the configuration, you can download it to the
online system.
Scalable Configuration
MVE is a robust, scalable solution designed to work with
installations ranging from small buildings to large
multi-facility campus environments. MVE is a good choice
for:
•
•
•
•
•
research and development facilities
test and stability facilities
pilot and full-scale production facilities
data centers, storage facilities, distribution centers
any other regulated facility requiring critical control
and secure records
The architecture supports options for 5, 10, 25, or 50
simultaneous users. For the 50 user MVE, the ADX must
be unified and a larger computer platform is required. For
details, see Table 4.
Note: A 100-user MVE software product is not offered
at Release 7.0, but a 100-user ADX system is
available.
Buffered Data Collection
The Network Engines (NxEs) have the built-in capacity
to store data locally if communication to the ADX is lost.
This ensures that data critical to your facility is preserved
and then archived to the database server once
communication is restored.
2
ADX Uses Proven Microsoft
Technologies and Solid IT Standards Validated Devices Example
The MVE feature set is available, but not automatically
activated when the ADX with MVE software is installed.
The ADX runs on the Windows Server® 2008 operating
systems. It supports the Microsoft® SQL Server® 2014
Standard or Enterprise (64-bit), Microsoft SQL Server
2012 Standard or Enterprise with SP2 (64-bit), or
Microsoft SQL Server 2008 R2 Standard or Enterprise
with SP2 (64-bit) database software packages that
provide extensive historical and configuration data storage
and its own web-based user interface for Metasys device
database management. The Metasys ADX can use C2
audit mode and security provided by Microsoft SQL
Server 2008 to trace all authorized access and
unauthorized attempts to the database. Also, the
Advanced Reporting portion of the ADX uses Microsoft
SQL Server Reporting Services (SSRS) as an integral
component.
The ADX communicates to NAE55/NAE45/NCE25/NIE55s
over the IP network. A VPN may be set up over a WAN
for communication to devices in other buildings or on
remote sites (Figure 2). Remote sites may also be
accessed by leased line or dial-up service using remote
access server (RAS) or the Point-to-Point Protocol (PPP),
or via the Internet and an ISP.
Note: MVE is not supported on NIEx9 network engines.
The ADX software supports industry-standard firewall
solutions for securing network communication against
unauthorized access. The ADX can be configured with
multicast time synchronization using the Simple Network
Time Protocol (SNTP). The ADX with MVE can also use
a split ADX system, in which some system operations
are performed on a database server and others on a
web/application server computer. For more information,
see the split ADX example in Figure 3 and refer to the
Application and Data Server (ADS/ADX) Product Bulletin
(LIT-1201525).
3
Figure 2: Metasys Network with ADX and Multiple NxEs
4
Figure 3: Metasys Network with Split ADX and Multiple NxEs
Note: Although not shown in Figure 2 and Figure 3, non-validated devices, such as NAE35s, NIEx9s, and NxE85s,
may also be on the MVE network. Remote buildings can be connected via a dial-up network. However,
validated systems do not support LONWORKS® networks.
5
Secure System Access
One of the primary concerns of critical environment
automation systems is system and user security. The
Metasys system security for MVE authenticates any user
who attempts to connect or make changes to the system
by requiring the entry of a unique user name and complex
password. When a valid user account has been identified,
the connection is authorized or the operational change
is made. System access is granted based on the access
privileges as defined by the Metasys system administrator
in the user account.
Figure 4: Electronic Signature and Annotation Screen
The system administrator also controls other user access
settings, such as password age, password uniqueness,
inactive session timeout period, and account lockout.
Electronic Records and
Signatures
When you configure a validated point on the
NAE55/NAE45/NCE25/NIE55, you have four options
regarding user action, including alarm acknowledgement,
setpoint adjustments, and point modification:
•
•
•
•
no requirements
enter password and specify reason for change
provide an annotation
enter password, specify reason for change, and
provide an annotation
This capability contributes to the electronic signature
requirement that is necessary for Part 11 compliance.
Electronic signatures with required annotation are unique
to one individual and cannot be reused or reassigned to
other users. See Figure 4.
Time-Stamped Audit and Event
Trails
Every action and event that occurs in the system is
conveniently displayed in the Audit and Event Viewers.
User and system activities are recorded in the Audit
Viewer. It displays the item name, date and time of the
occurrence, user name, old and new values, annotation
(if any), and action taken. You can filter the contents of
this viewer so that only those transaction messages of
particular interest are displayed.
The Audit Viewer (Figure 5) also provides extensive
sorting capabilities. If an electronic signature is associated
with an action, a signed book icon appears in the first
column. Click the icon to display the Annotation for this
action.
The Event Viewer (Figure 5) displays all system events
in chronological order. This view allows you to identify
the most recent conditions in the building, determine
possible relationships between events, and locate the
source of error conditions. You can sort information
presented in the viewer by date and time, point name,
value, and other criteria. The Event Viewer also allows
you to acknowledge and annotate any of the displayed
event messages.
6
Figure 5: Event Viewer and Audit Viewer with Electronic Signature Indicator
7
Web-Based Advanced Reporting
The Metasys Advanced Reporting System, shown in
Figure 6, is the primary reporting tool for MVE users. The
Advanced Reporting System can be launched from the
ADX user interface or independently from the browser.
It displays the same navigation tree and user views as
the Metasys Site Management Portal user interface, so
no extra setup or configuration is required.
Advanced Reporting offers these pre-configured reports:
•
•
•
•
•
Alarm Definition
Trend Log Definition
Event Summary/Event Details
Controller Offline Summary/Controller Offline Details
Event and Audit Details
To generate a report, you select a report type, select
which items or User View upon which to base the report,
then select the filtering criteria, such as a date range.
You may even want to create special User Views intended
specifically for reporting purposes. The flexibility of the
reporting system ensures that you can find the data you
need.
For example, the Event and Audit Details Report (Figure
7) is of special interest to the operator. This report
displays a list of system events interlaced with user
actions, enabling an auditor to determine the sequence
of actions that might have led to a specific event. The list
includes annotations and signatures associated with each
operator action or system event, where required. This
and the other reports are suitable for inspection, review,
and copying by the FDA or other regulatory body.
Figure 6: Metasys Advanced Reporting User Interface
8
Figure 7: Event and Audit Details Report
Conclusion
The MVE feature helps you meet often complex regulatory
requirements. The electronic records and signatures
component contributes to Part 11 compliance.
Advanced Reporting provides auditors and staff with
comprehensive data to support compliance. For more
details, contact the nearest Johnson Controls®
representative.
ADX with MVE Licensing
If you license an ADX, and later want to add MVE, you
must remove the existing ADX license by using the
License Activator. You then need to use the License
Activator to obtain a new site code. Request a new site
key for the ADX with an MVE.
ADX and MVE software are sold separately. Therefore,
if you want a 10-user MVE system, you must order a
10-user ADX and a 10-user MVE. You must license both
the ADX software and the MVE software. If you fail to
license both, all components do not function. For example,
if you register the ADX but not the MVE, the MVE features
are disabled. Once you have an ADX installed, you can
then install an MVE. Both the ADX and the MVE must be
at the same Metasys release level, or the MVE does not
load.
Whether you license a 5-user or 10-user MVE, you should
be using a 10-user ADX. This configuration is normal and
occurs because 5-user ADXs are not available.
When you install and license a 25-user MVE, you must
install and license a 25-user ADX. Likewise, when you
install and license a 50-user MVE, you must install and
license a 50-user ADX.
9
Ordering Information
Use the following table to order MVE products. For additional ordering information, refer to the Metasys System
Software Purchase Options Product Bulletin (LIT-12011703).
Table 1: Ordering Information
Code Numbers
Description
MS-MVE5U-0
MVE new project software; 5 users
MS-MVE10U-0
MS-MVE25U-0
MS-MVE50U-0
Note: For special MVE 50 user hardware requirements, see Table 4.
MS-MVE5U-6
MVE upgrade software; 5 users
MS-MVE10U-6
MS-MVE25U-6
MS-MVE50U-6
MS-MVE510U-8
MVE migration software from 5 to 10 users
MS-MVE525U-8
MVE migration software from 5 to 25 Users
MS-MVE1025U-8
MS-MVE2550U-8
Note: A 100-user MVE software product is not offered at Release 7.0, but a 100-user ADX system is available.
Technical Specifications
Table 2: MVE, Extended Architecture System Requirements (5-, 10-, 25-User Unified ADX Systems)
Recommended
1
Server Platform
2.20 GHz E5 Series Intel Xeon® Quad Core single processor or better
2
3
2 x 600 GB hard disk (RAID 1) with 40 GB free space after installation of all prerequisite software and
before installation of ADS software. Configure RAID 1 (mirroring) with disk write-caching turned on.
DVD drive
Note: ADX prerequisite software includes the Windows operating system, SQL Server software, Windows
.NET Framework version 3.5, and any other software or SPs required by your ADX configuration.
Recommended
4
Memory
8 GB RAM (5 user ADX)
16 GB RAM (10 or 25 user ADX)
6,7
Supported
Windows Server® 2012 R2 Standard and Enterprise Editions (64-bit)
Operating Systems
Supports Microsoft SQL Server® 2014 Standard or Enterprise (64-bit), Microsoft SQL Server 2012 Standard
and Database
5
or Enterprise with SP2 (64-bit), or Microsoft SQL Server 2008 R2 Standard or Enterprise with SP2 (64-bit)
Software
6,7
Windows Server® 2012 Standard and Enterprise Editions (64-bit)
Supports Microsoft SQL Server 2014 Standard or Enterprise (64-bit), Microsoft SQL Server 2012 Standard
6,7
Windows Server 2008 R2 Standard and Enterprise Editions with SP1 (64-bit)
6
Windows Server 2008 Standard and Enterprise Editions with SP2 (32-bit)
Microsoft SQL Server 2008 R2 Standard or Enterprise with SP2 (32-bit)
SQL Server 2008 Standard or Enterprise with SP3 (32-bit)
10
Table 2: MVE, Extended Architecture System Requirements (5-, 10-, 25-User Unified ADX Systems)
Supported Virtual
Environments
Microsoft Hyper-V™, VMware®
Required Web
Browser for
Metasys Client
Computers
Windows Internet Explorer® version 8, 9, 10, or 11
(Other browsers, such as Google® Chrome™ and Mozilla® Firefox®, may also be used but are not fully
supported.)
Note: In Internet Explorer 11, select the Use Microsoft compatibility lists option, found under Tools >
Compatibility View Settings, to ensure that websites appear and function correctly.
Note: You use the web browser to download the Launcher application. After you install the Launcher
application, you use the Launcher, not the web browser, to log on to the Metasys UI.
Network
Communication
Ethernet network interface card (100 or 1000 Mbps)
Supported User
Interfaces
Site Management Portal
Note: The ADX supports only one network interface card.
Ready Access Portal
Additional
CCT
Software Included
Export Utility
on the ADX
Product Disks
Metasys Database Manager
Microsoft .NET Framework Version 3.5 SP1
Microsoft SQL Server 2012 Express with SP1
Microsoft SQL Server 2012 with SP2
SCT
Launcher
Note: Windows Server 2012 R2, Windows Server 2012, and Windows Server 2008 R2 include Microsoft
.NET Framework Version 3.5/3.5.1. No separate software installation is necessary.
Note: The Metasys Advanced Reporting System requires an ADX. The SCT must be online and accessible
to the ADX at all times and must be using Microsoft SQL Server 2012 Express, SQL Server 2008 Express,
SQL Server 2008 Express R2, SQL Server 2012, SQL Server 2008 R2, or SQL Server 2008 software.
Optional Hardware Any network or local printer supported by the qualified Windows operating system.
Optional Software Energy Essentials
Graphic Generation Tool
1
2
3
4
5
6
7
Our computer platform and memory recommendations are not meant to imply that older or slower machines are not usable.
Refer to the Network and IT Guidance for the BAS Professional Technical Bulletin (LIT-12011279) for more information
regarding computer/server recommendations.
For best performance, use SAS hard drives, not SATA hard drives.
ADX prerequisite software includes the Windows operating system and SQL Server software, Windows .NET Framework,
and any other software or Service Packs required for your ADX configuration.
For best performance, use the maximum amount of memory. An ADX with 16 GB RAM has much greater performance than
an ADX with only 4 GB RAM. A 32-bit operating system does not support more than 4 GB of RAM.
Refer to the Network and IT Guidance for the BAS Professional Technical Bulletin (LIT-1201279) for specific Microsoft
Windows operating system settings that may be required for your Metasys system configuration.
For SQL Server 2014 software or SQL Server 2012 software, you must purchase a core license for each individual processor
core (with a minimum of four core licenses). For example, if you have a single processor with dual cores, purchase four core
licenses (the minimum) for SQL Server 2014 software or SQL Server 2012 software. For SQL Server 2008 software, you
must purchase a processor license for each individual processor you have. You do not need to purchase multiple licenses
if you have a single processor divided into multiple cores. For example, if you have a single processor with dual cores,
purchase one license for SQL Server software.
To use SQL Server 2014 with Metasys products, you must install Microsoft cumulative update package 3 (KB2984923) for
SQL Server 2014. To download the update package, visit http://support.microsoft.com/kb/2984923/.
11
Table 3: MVE, Extended Architecture System Requirements (5-, 10-, 25-User Split ADX Systems)
Recommended
1
Server Platform
Web/Application Server
2.20 GHz E5 Series Intel Xeon® Quad Core single processor or better.
2
3
DVD drive
Note: Advanced Reporting System and Energy Essentials can reside on the ADX web/application server.
Note: Metasys UI must reside on the ADX web/application server.
Database Server
2.20 GHz E5 Series Intel Xeon® Quad Core single processor or better.
3
DVD drive
Recommended
4
Memory
16 GB RAM (web/application server and database server)
7,8
Supported
Operating Systems
and Database
5,6
Software
7,8
7,8
7
Microsoft SQL Server 2008 R2 Standard or Enterprise with SP2 (32-bit)
SQL Server 2008 Standard or Enterprise with SP3 (32-bit)
Required Web
Browser for
Metasys Client
Computers
(Other browsers, such as Google® Chrome and Mozilla Firefox, may also be used but are not fully
supported.)
Supported Virtual
Environments
Communication
Ethernet network interface card (100 or 1000 Mbps).
12
Table 3: MVE, Extended Architecture System Requirements (5-, 10-, 25-User Split ADX Systems)
Supported User
Interfaces
Ready Access Portal
Additional Software CCT
Included on the
Export Utility
ADX Product Disks
SCT
Launcher
Optional Hardware Any network or local printer supported by the qualified Windows operating system
1
2
3
4
5
6
7
8
and any other software or service packs required for your ADX configuration.
For best performance, use the maximum amount of memory. An ADX with 16 GB RAM has much greater performance than
an ADX with only 4 GB RAM. Also, a 32-bit operating system only supports a maximum of 4 GB of RAM.
The web/application and database servers must have the same operating system installed.
Table 4: MVE, Extended Architecture System Requirements (50-User Unified ADX Systems)
Recommended
1
Server Platform
2.4 GHz Intel Xeon® single processor
2
3
before installation of ADS software. Configure RAID 5 with disk write-caching turned on.
DVD drive
Recommended
Memory
32 GB RAM minimum
13
6,7
Supported
Operating Systems
and Database
4,5
Software
6,7
6,7
6
Microsoft SQL Server 2008 R2 Standard or Enterprise with SP2 (32-bit) or SQL Server 2008 Standard
or Enterprise with SP3 (32-bit)
Required Web
Browser for
Metasys Client
Computers
(Other browsers, such as Google Chrome and Mozilla Firefox, may also be used but are not fully
supported.)
Other Required
Software
Components
Microsoft .NET Framework version 3.5 and later
Supported Virtual
Environments
Network
Communication
Ethernet network interface card (100 or 1000 Mbps)
Supported User
Interfaces
Ready Access Portal
14
Additional Software CCT
Included on the
Export Utility
ADX Product Disks
Ready Access Portal
SCT
Launcher
Optional Hardware Any network or local printer supported by the qualified Windows operating system.
1
2
3
4
5
6
7
and any other software or service packs required for your ADX configuration.
To use Metasys Advanced Reporting, selection of Microsoft SQL Server Reporting Services during SQL Server installation
is required.
Building Efficiency
507 E. Michigan Street, Milwaukee, WI 53202
Metasys® and Johnson Controls® are registered trademarks of Johnson Controls, Inc.
All other marks herein are the marks of their respective owners.© 2015 Johnson Controls, Inc.
Published in U.S.A.
www.johnsoncontrols.com
15

Metasys For Validated Environments, Extended Architecture Product

Transcription

Similar documents

The NCCS State Charity Office Database System

MVE 800 Series -190°C High Efficiency Freezer

konfig - Auto-Trol Technology

MVE 1800 Series -190°C High Efficiency Freezer

Mission College

Network and IT Guidance for the BAS Professional Technical Bulletin