Citect Anywhere

Quick Start Guide

Legal Information

DISCLAIMER

AVEVA Group plc makes no representations or warranties with respect to this manual and, to the maximum extent
permitted by law, expressly limits its liability for breach of any warranty that may be implied to the replacement of
this manual with another. Further, AVEVA Group plc reserves the right to revise this publication at any time
without incurring an obligation to notify any person of the revision.

COPYRIGHT

© 2019 AVEVA Group plc. All rights reserved.

No part of this documentation shall be reproduced, stored in a retrieval system, or transmitted by any means,
electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of AVEVA. No
liability is assumed with respect to the use of the information contained herein.

Although precaution has been taken in the preparation of this documentation, AVEVA assumes no responsibility
for errors or omissions. The information in this documentation is subject to change without notice and does not
represent a commitment on the part of AVEVA. The software described in this documentation is furnished under a
license agreement. This software may be used or copied only in accordance with the terms of such license
agreement.

ArchestrA, Aquis, Avantis, Citect, Citect HMI, Citect SCADA, DYNSIM, eDNA, EYESIM, InBatch, InduSoft,
InStep, IntelaTrac, InTouch, PIPEPHASE, PRiSM, PRO/II, PROVISION, ROMeo, SIM4ME, SimCentral,
SimSci, Skelta, SmartGlance, Spiral Software, Termis, WindowMaker, WindowViewer, and Wonderware are
trademarks of AVEVA and/or its subsidiaries. An extensive listing of AVEVA trademarks can be found at:
https://sw.aveva.com/legal.

All other brands may be trademarks of their respective owners.

Publication date: August 2019

CONTACT INFORMATION

AVEVA Group plc

High Cross Madingley Road
Cambridge CB3 OHB. UK
https://www.aveva.com/

For information on how to contact sales, customer training, and technical support see
https://sw.aveva.com/contact.
Validity Note

The present documentation is intended for qualified technical personnel responsible for the implementation,
operation and maintenance of the products described. It contains information necessary for the proper use of the
products. However, those who wish to make a more "advanced" use of our products may find it necessary to
consult our nearest distributor in order to obtain additional information.

The contents of this documentation are not contractual and in no way constitute an extension to, or
restriction of, the contractual warranty clauses.
4

Contents

Legal Information 2

Contents 4

Safety Information 6

Chapter 1: Welcome 8

About Citect Anywhere 8

Chapter 2: Getting Started 9

Licensing 10

Installing and Configuring Citect Anywhere Server 11

Configuring Windows Firewall 13

Configuring Remote Desktop Service 14

Configuring User Access to Citect SCADA Clients 16

Installing and Configuring Citect Anywhere Secure Gateway 17

Connecting to a Citect Anywhere Server 19

Connecting via the Secure Gateway 21

Connecting Directly to the Citect Anywhere Server 21

Citect Anywhere Quick Start Guide

5

Logging on to Citect SCADA 21

Citect Anywhere Quick Start Guide

 Sa fe ty In fo rma ti o n • 6

Safety Information

Read these instructions carefully, and familiarize yourself with Citect Anywhere before trying to
install, operate, or maintain your system. The following special messages may appear throughout this
documentation or on the Citect Anywhere application to warn of potential hazards or to call attention to
information that clarifies or simplifies a procedure.

This is the safety alert symbol. It is used to alert you to potential personal injury hazards.
Obey all safety messages that follow this symbol to avoid possible injury or death.

The addition of this symbol to a Danger or Warning safety label indicates that an electrical
hazard exists, which will result in personal injury if the instructions are not followed.

DANGER

DANGER indicates an imminently hazardous situation which, if not avoided, will result in death or
serious injury.

WARNING

WARNING indicates a potentially hazardous situation which, if not avoided, can result in death or
serious injury.

CAUTION

CAUTION indicates a potentially hazardous situation which, if not avoided, can result in minor or
moderate injury.

Citect Anywhere Quick Start Guide

7 • Sa fe ty In fo rma ti o n

CAUTION

CAUTION, used without the safety alert symbol, indicates a potentially hazardous situation which, if
not avoided, can result in equipment damage.

Please Note

Electrical equipment should be installed, operated, serviced, and maintained only by qualified personnel. No
responsibility is assumed by AVEVA for any consequences arising out of the use of this material.

A qualified person is one who has skills and knowledge related to the construction and operation of electrical
equipment and the installation, and has received safety training to recognize and avoid the hazards
involved.

Citect Anywhere Quick Start Guide

 8

Chapter 1: Welcome

Welcome to the Citect Anywhere Quick Start Guide. This guide provides an overview of the steps that need
to be carried out so that you can use your Citect Anywhere application to remotely connect to Citect
SCADA clients.

About Citect Anywhere

Citect Anywhere enables you to remotely access a running Citect SCADA client with a mobile device
including tablets and smartphones, and laptop computers. You can view and control the client through a
web browser without needing to install it on your portable device. You can interact with the Citect SCADA
client from anywhere in real-time.

Citect Anywhere Quick Start Guide

 9

Chapter 2: Getting Started

To use Citect Anywhere to remotely connect to Citect SCADA clients, you need to:

1. Install Citect SCADA and check that you are able to connect to the Citect SCADA client.

2. Install and configure the Citect Anywhere Server on the computer where Citect SCADA is installed.

3. Configure Windows Firewall on the computer where the Citect Anywhere Server is installed.

4. Configure Windows Remote Desktop Service (RDS) on the computer where the Citect Anywhere
Server is installed.

5. Configure User Access to Citect SCADA on the computer where the Citect Anywhere Server is
installed.

If your Citect Anywhere Server will be accessed by computers outside the operations network, it is
recommended that you also install the Secure Gateway. For more information, see Installing and
Configuring Citect Anywhere Secure Gateway .

After you have completed the steps listed above, you should be able to connect to a Citect SCADA client
using Citect Anywhere.

Note: This guide only provides an overview of the steps. Detailed information for each step is available in
different guides, a reference to which is provided at the end of each section. Look for the heading "For more
information...".

Citect Anywhere Quick Start Guide

10 • Licensing

Licensing

Citect Anywhere is licensed for use with the following Citect SCADA versions:

l v7.20 (SP5a)

l v7.40 (SP1 and SP2)

l v7.50

l 2016

l 2018

l 2018 R2.

In order to run Citect Anywhere, licenses are required for the following:

1. Microsoft Remote Desktop Service (RDS): Every remote desktop session opened with a browser using
Citect Anywhere consumes an RDS license. Confirm that the required number of RDS licenses is
available to users.

2. Citect SCADA License(s) - Availability of a Citect SCADA license is verified every time a user attempts
to connect to a Citect SCADA Client using Citect Anywhere.

3. Citect Anywhere License(s) - Citect Anywhere licenses are available as a bundle of 5, with one license
being used per active connection. When connection is established with a Citect SCADA client, a
license is used up. The license becomes available for use again when the session is terminated.

Note: Connection to a Citect SCADA client is possible only if you have a Citect SCADA floating license
that has been activated.

For more information...

Refer to the following chapters in the Citect Anywhere Server Installation and Configuration Guide:

l Overview

l Configuring Citect Anywhere Server

Citect Anywhere Quick Start Guide

 In sta l l i n g a n d C o n fi g u ri n g C i te ct An yw h e re Se rve r • 1 1

Installing and Configuring Citect Anywhere Server

A basic installation of Citect Anywhere Server usually takes about five minutes. Check that all installation
prerequisites have been met before starting the installation procedure.

To install Citect Anywhere Server:

1. Run the Citect Anywhere installer file setup.exe from your installation media.

2. Select Citect Anywhere Server when presented with the options to select the installation component.

3. Click Next through every dialog box, accept the EULA and then click Finish.

4. Configure the Citect Anywhere Server using the Configuration Console.

Citect Anywhere Quick Start Guide

1 2 • In sta l l i n g a n d C o n fi g u ri n g C i te ct An yw h e re Se rve r

For more information...

Refer to the following chapters in the Citect Anywhere Server Installation and Configuration Guide:

l Installation

l Configuring the Citect Anywhere Server

Citect Anywhere Quick Start Guide

 C o n fi g u ri n g Wi n d o w s Fi re w a l l • 1 3

Configuring Windows Firewall

If the Windows Firewall is enabled on the computer where the Citect Anywhere Server is installed,
configure it to enable the Citect Anywhere client connection.

1. Open the Windows Control Panel and then Windows Firewall.

2. Select Advanced Settings and select Inbound Rules.

3. Click New Rule.

4. Select Port and click Next.

5. Enter the specific port: 8080. Click Next.

6. Select to apply the rule on the Domain, Private and Public networks. Click Next.

7. Assign a name for the rule.

8. Click Finish.

For more information...

Refer to the following section in the Citect Anywhere Installation and Configuration Guide:

l Before You Install

Citect Anywhere Quick Start Guide

1 4 • C o n fi g u ri n g R e mo te D e skto p Se rvi ce

Configuring Remote Desktop Service

Complete these steps on the computer on which the Citect Anywhere Server is installed:

1. Navigate to the Control Panel. Select System and Security | System.

2. Select the Advanced system settings option on the left. The System Properties dialog is displayed.

3. Click the Remote tab.

4. Select the Allow remote connections to this computer option.

5. Click Select Users. The Remote Desktop Users dialog is displayed.

6. Add the required users and click OK.

Citect Anywhere Quick Start Guide

 C o n fi g u ri n g R e mo te D e skto p Se rvi ce • 1 5

Note: For more details about configuring RDS, search for Tech Note 8890 on the Tech Note, FAQ page of
the AVEVA Knowledge and Support Center. You will need to register with the site before you can access
the document.

For more information...

Refer to the following chapters in the Citect Anywhere Installation and Configuration Guide:

l Configuring the Citect Anywhere Server

Citect Anywhere Quick Start Guide

1 6 • C o n fi g u ri n g U se r Acce ss to C i te ct SC AD A C l i e n ts

Configuring User Access to Citect SCADA Clients

Add local users and domain groups to the Citect Anywhere groups to assign access privileges to the Citect
SCADA client - View-only client or Control client. To do this:

1. Add users to the Windows user groups VjcaView or VjcaControl added by the installer.

2. Navigate to the Control Panel. Select Administrative Tools |  Computer Management. Locate the
Citect Anywhere groups, right-click on the required group.

3. Select Add to Group from the context menu and add any users who require access to that group.

For more information...

Refer to the following chapters in the Citect Anywhere Installation and Configuration Guide:

l Configuring Citect Anywhere Server

Citect Anywhere Quick Start Guide

 In sta l l i n g a n d C o n fi g u ri n g C i te ct An yw h e re Se cu re Ga te w a y • 17

Installing and Configuring Citect Anywhere Secure Gateway

A basic installation of Citect Anywhere Secure Gateway usually takes about five minutes, similar to the
Citect Anywhere Server. Check that the installation prerequisites have been met before starting the
installation procedure.

To install Citect Anywhere Secure Gateway:

1. Run the Citect Anywhere installer file setup.exe from your installation media.

2. Select Citect Anywhere Secure Gateway and/or Citect Anywhere Authentication Server when
presented with the options to select the installation components.

These components can be installed on separate computers if required. If your Secure Gateway Server
needs to be installed outside your operations network, it is recommended that the Authentication Server
be installed separately within the operations network.

3. Click Next through the dialog boxes, accept the EULA and then click Finish.

4. Configure the Citect Anywhere Server using the Configuration Portal.

Citect Anywhere Quick Start Guide

1 8 • In sta l l i n g a n d C o n fi g u ri n g C i te ct An yw h e re Se cu re Ga te w a y

For more information...

Refer to the following chapters in the Citect Anywhere Secure Gateway Installation and Configuration
Guide:

l Installation

l Configuring the Secure Gateway

Citect Anywhere Quick Start Guide

 C o n n e cti n g to a C i te ct An yw h e re Se rve r • 1 9

Connecting to a Citect Anywhere Server

The Secure Gateway needs to be configured to point to your Citect Anywhere Server in order to use SSL for
accessing Citect SCADA. To do this:

1. Edit the config.js file located on the computer where the Secure Gateway is installed. This file is located
in the following folder:

\Program Files (x86)\AVEVA\Citect Anywhere\Citect Anywhere Secure

Gateway\WebServer\CitectAnywhere\

2. Find the commented line:

//       address:"", // Address of server

3. Uncomment the line by removing the initial "//".

4. With the quotation marks, type the name or IP address of the computer on which the Citect Anywhere
Server is installed.
For example:

      address: "VD-CA-SRV", // Address of server

Access to the Citect Anywhere Server is routed through the Secure Gateway node. When you navigate to
the https://<Name or IP Address of computer on which Secure Gateway is installed> or IP Address>/, the
following page appears:

Citect Anywhere Quick Start Guide

2 0 • C o n n e cti n g to a C i te ct An yw h e re Se rve r

The setup steps completed above will route the connection through to the Citect Anywhere Server using the
supplied credentials.

Note: A page refresh and clearing the cookies on every client are required each time the Address property
in the config.js is changed.

For more information...

Refer to the following chapters in the Citect Anywhere Secure Gateway Installation and Configuration
Guide:

l Post-Installation

Citect Anywhere Quick Start Guide

 C o n n e cti n g vi a th e Se cu re Ga te w a y • 2 1

Connecting to a Citect SCADA Client

Connection to a Citect SCADA client is achieved through a Citect Anywhere web client in the following
ways:

l Through the Secure Gateway

l Directly to the Citect Anywhere Server

Connecting via the Secure Gateway

Open an HTML5 compliant browser and point it to the URL of the computer on which the Secure Gateway is
installed:

https://server:port/

Connecting Directly to the Citect Anywhere Server

If the web client is on the SCADA network, you can connect directly to the Citect Anywhere Server. Open
an HTML5 compliant browser and point it to the URL of the Citect Anywhere Server:

http://computer name or IP Address:8080/

This URL will automatically redirect to the following URL:

http://computer name:8080/CitectAnywhere/start.html

Specify the Citect Anywhere Server port in the URL to tell the browser to use the web server that is built-in
to the Citect Anywhere Server service. HTTPS may also be used.

Logging on to Citect SCADA

1. After the Citect Anywhere Server web page appears, enter the user credentials. This user needs to
belong to the VjcaView or VjcaControl group.

Citect Anywhere Quick Start Guide

2 2 • L o g g i n g o n to C i te ct SC AD A

2. Once you have entered your credentials, click Connect.

The connection dialog appears momentarily while the web browser connects to the RDP host where the
Citect Anywhere Server is installed.

The Citect SCADA client is launched at the remote node.

Note: Once connected, closing the Citect SCADA client will log off and end the session. Closing the
browser will close the Citect client, log off and end the Citect Anywhere session.

For more information...

Refer to the following chapters in the Citect Anywhere Web Client User Guide:

l Using AVEVA Citect Anywhere

l Viewing a Citect SCADA Client with Citect Anywhere

Citect Anywhere Quick Start Guide