SIMATIC PCS 7 Process Control System - Siemens

2 Administration
■ Overview
2/4
System-neutral components
Central user management, access control and electronic
signature
SIMATIC Logon is a central user administration function with access
control based on Windows 2000/XP and Windows Server
2003 for:
• System components of SIMATIC PCS 7
• Non-system components linked via an interface
It can be used to fulfill the validation requirements of 21 CFR Part
11. An electronic signature function can also be used in conjunction
with SIMATIC Logon.
SIMATIC Logon Upgrade
All previous versions can be upgraded to the current version.
■ Design
The optional chipcard reader can be used for access control in
addition to the keyboard. SIMATIC Logon additionally supports
logon devices which can be operated with a Microsoft device
driver for the respective operating system (e.g. logon devices on
a USB interface). It is also possible to connect logon devices via
a separately created device-specific drive.
The number of SIMATIC Logon licenses required depends on
the number of clients/single stations that access applications for
which SIMATIC Logon is used for access protection.
SIMATIC Logon was developed for the SIMATIC PCS 7 process
control system but can also be used together with other SIMATIC
products in the context of Totally Integrated Automation (TIA),
e.g. with SIMATIC WinCC. A requirement for working together is
that user groups have already been created in the partner applications,
or can be defined.
SIMATIC Logon is already integrated in the system software
of the SIMATIC PCS 7 V7.0 process control system. Separate
licenses are not required in this context.
Siemens ST PCS 7 · November 2007
© Siemens AG 2007
■ Function
SIMATIC Logon Admin Tool
Using the SIMATIC Logon Admin Tool it is possible to assign the
roles defined in the SIMATIC PCS 7 applications (e.g. Automation
License Manager and SIMATIC BATCH) to the Windows
users/user groups. Administrators with the necessary Windows
administrator privileges can also use the SIMATIC Logon Admin
Tool to edit Windows users and user groups.
SIMATIC Logon Service
The login dialog of the SIMATIC Logon Service is activated when
an application is started which is managed by SIMATIC Logon.
The user receives his specific privileges after making the login,
password and domain entries. The SIMATIC Logon Service dialog
for logoff, user change or password edit can be called in the
applications.
SIMATIC Electronic Signature
The SIMATIC Electronic Signature means that operations cannot
be performed until enabled by previously assigned Windows
users/user groups. Users/user groups are assigned to the operations
in the respective application.
At the moment this function is implemented as a system function
only on SIMATIC BATCH. However, the Electronic Signature can
be used on any products in the specific applications.
The software products listed here under "Selection and ordering
data" are only relevant to use in the TIA environment.