FAQ  02/2017

Remote Access to WinCC

and PCS 7 Plants with
"RealVNC"
SIMATIC PCS 7 and WinCC

https://support.industry.siemens.com/cs/ww/de/view/55422236
 This entry is from the Siemens Industry Online Support. The general terms of use
(http://www.siemens.com/terms_of_use) apply.

Security Siemens provides products and solutions with industrial security functions that
informa- support the secure operation of plants, systems, machines and networks.
tion In order to protect plants, systems, machines and networks against cyber
threats, it is necessary to implement – and continuously maintain – a holistic,
state-of-the-art industrial security concept. Siemens’ products and solutions only
form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems,
machines and networks. Systems, machines and components should only be
connected to the enterprise network or the internet if and to the extent necessary
and with appropriate security measures (e.g. use of firewalls and network
segmentation) in place.
Additionally, Siemens’ guidance on appropriate security measures should be
taken into account. For more information about industrial security, please visit
http://www.siemens.com/industrialsecurity.
Siemens’ products and solutions undergo continuous development to make them
more secure. Siemens strongly recommends to apply product updates as soon
as available and to always use the latest product versions. Use of product
versions that are no longer supported, and failure to apply latest updates may
increase customer’s exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial
© Siemens AG 2017 All rights reserved

Security RSS Feed under http://www.siemens.com/industrialsecurity.

Contents
1 Overview ............................................................................................................. 3
1.1 What is "RealVNC"? ............................................................................. 3
1.2 System Requirements .......................................................................... 3
2 Installation .......................................................................................................... 4
2.1 "RealVNC" Server (Service Mode) ....................................................... 4
2.2 "RealVNC" Server (User Mode) ........................................................... 9
3 Configuration of the "RealVNC" Server ........................................................ 12
4 Establishing a Connection with the "RealVNC" Viewer .............................. 15
5 SIMATIC Remote Services .............................................................................. 19
5.1 Making Changes on the "RealVNC" Server ....................................... 19
5.2 Making Changes on the "RealVNC" Viewer ....................................... 21
6 Literature .......................................................................................................... 22
7 History............................................................................................................... 23

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 2
 1 Overview

1 Overview
1.1 What is "RealVNC"?
The basic functions of "RealVNC" permit the transfer of the screen content of a
remote PC (server) to a local PC (viewer). Furthermore, it is possible operate the
remote PC by transmitting mouse and key commands.

Figure 1-1

Note Trademarks
RealVNC is a registered trademark of RealVNC Ltd. in the USA and in other
countries.
© Siemens AG 2017 All rights reserved

1.2 System Requirements

Current version combinations of PCS 7 and WinCC with "RealVNC" are given in
the Compatibility Tool in Entry ID 64847781.

ATTENTION Pay attention to the information and notes from the following manual
concerning remote access:

SIMATIC Process Control System PCS 7 Support and Remote Dialup

https://support.industry.siemens.com/cs/ww/en/view/38621092

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 3
 2 Installation

2 Installation
The "VNC for Windows" software can be procured and downloaded at this address:
https://www.realvnc.com/download/

The version used in this example is the "VNC Enterprise Edition for Windows
V5.1.0".

2.1 "RealVNC" Server (Service Mode)

The VNC server is started automatically in service mode as a Windows service.
You therefore have the option of connecting up to the system before a user is
logged on.
Below are instructions for installing the "RealVNC" server in service mode.

Procedure
1. Start the setup by double-clicking the executable file of "RealVNC". You need
administrator rights to do the installation.

2. Start the installation by clicking "Next >".

© Siemens AG 2017 All rights reserved

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 4
 2 Installation

3. Acknowledge the terms of license.

© Siemens AG 2017 All rights reserved

4. Select the components to be installed.

Select the "VNC Server" and "VNC Mirror Driver" components.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 5
 2 Installation

5. Specify the target path of the installation.

© Siemens AG 2017 All rights reserved

6. Add an exception to the Windows firewall for VNC Server by setting a check
mark as shown.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 6
 2 Installation

7. Start the installation with the settings explained above.

© Siemens AG 2017 All rights reserved

8. Select an option for licensing the software.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 7
 2 Installation

9. You complete the installation by clicking "Finish".

The VNC server starts in Service mode.
© Siemens AG 2017 All rights reserved

Hinweis To connect a local computer to the VNC server, the VNC Viewer must be
installed and started on the local computer.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 8
 2 Installation

2.2 "RealVNC" Server (User Mode)

The VNC server is not started automatically in user mode. You have to start the
VNC server manually.

Changing the "RealVNC" to User Mode

Procedure
1. Follow the instructions in section 2.1.

2. After successful installation as in section 2.1 the VNC server runs in Service
mode.

3. Right-click the VNC icon to open the pop-up menu and select the menu
command "Open..." to open the VNC Server dialog.
© Siemens AG 2017 All rights reserved

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 9
 2 Installation

4. Right-click the VNC icon to open the pop-up menu and select the menu
command "Stop VNC Server" to close the VNC Server.
© Siemens AG 2017 All rights reserved

Acknowledge the subsequent dialog box with "Yes".

5. Start the VNC Server (User Mode) via the Windows Start menu.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 10
 2 Installation

6. The VNC Server is now in User Mode. The VNC Server dialog opens with the
corresponding message.
© Siemens AG 2017 All rights reserved

Hinweis To connect a local computer to the VNC server, the VNC Viewer must be
installed and started on the local computer.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 11
 3 Configuration of the "RealVNC" Server

3 Configuration of the "RealVNC" Server

The settings below comply with the Industrial Security guidelines for PCS 7 and
WinCC plants. The requirement for remote access for service purposes is that a
competent person be present to monitor the remote access.
The following safety features are configured:
• Access is permitted only through password identification on the VNC server.
• The remote access must be confirmed by the plant staff.
• The plant staff can stop remote user operation at any time.
• The connection can be disconnected at any time.

The instructions below describe how to configure the VNC Server.

Procedure

1. Right-click the VNC icon to open the pop-up menu and open the status
overview with the "Options…" menu command.
© Siemens AG 2017 All rights reserved

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 12
 3 Configuration of the "RealVNC" Server

2. Use the following settings for "Security".

© Siemens AG 2017 All rights reserved

3. Click "OK" and assign a VNC password under "Users & Permissions".

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 13
 3 Configuration of the "RealVNC" Server

4. Use the settings shown under "Connection".

© Siemens AG 2017 All rights reserved

5. Click "OK" to close the "Options" menu.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 14
 4 Establishing a Connection with the "RealVNC" Viewer

4 Establishing a Connection with the

"RealVNC" Viewer
The instructions below describe how to establish a connection to a target system.

Procedure

1. Open the VNC Viewer via the Windows Start menu.

© Siemens AG 2017 All rights reserved

2. Enter the IP address of the VNC server.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 15
 4 Establishing a Connection with the "RealVNC" Viewer

3. For the "Encryption" setting select "Always on".

There is no need to make any other settings, because they are preset by the
VNC server.

4. If you are setting up a connection to the target system for the first time, confirm
the signature of the VNC server with the "Continue" button.
© Siemens AG 2017 All rights reserved

5. Enter the password of the target system.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 16
 4 Establishing a Connection with the "RealVNC" Viewer

6. The access must be confirmed on the target system.

• "Accept" enables you to operate the target system.

• "View only" transfers the contents of the target system's screen.

The VNC Viewer window opens on the local system with the contents of the
target system's screen.

7. You can change the type of access at any time during a session using the
options in the "Inputs" tab.
© Siemens AG 2017 All rights reserved

Note The settings on the VNC Server for blocked functions (for example File Transfer,
Chat...) are NOT overwritten from here.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 17
 4 Establishing a Connection with the "RealVNC" Viewer

8. On the target system you end the remote access by right-clicking the
"RealVNC" icon in the taskbar and selecting "Disconnect VNC Viewers".
© Siemens AG 2017 All rights reserved

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 18
 5 SIMATIC Remote Services

5 SIMATIC Remote Services

The Siemens "common Remote Service Platform" (cRSP) is part of the SIMATIC
Remote Services offering. Comprehensive information about the services offering
is available in this online entry:
https://support.industry.siemens.com/sc/ww/de/sc/2281
The cRSP supports various versions of VNC. We recommend changing the
settings appropriately to ensure optimum operation with RealVNC.

5.1 Making Changes on the "RealVNC" Server

The settings below are required when using the cRSP on the "RealVNC" Server.

Procedure

1. Right-click the VNC icon in the menu bar and open the status overview with the
"Options..." menu command.
© Siemens AG 2017 All rights reserved

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 19
 5 SIMATIC Remote Services

2. Under "Security" you set the "Authentication" to "VNC password" and the
"Encryption" to "Prefer off".
© Siemens AG 2017 All rights reserved

3. Apply the settings with "OK".

Note It is not necessary to encrypt with "RealVNC" in the Siemens common Remote
Service Platform (cRSP) and there is therefore no provision for this.
The security guidelines are complied with by the security concept of the cRSP.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 20
 5 SIMATIC Remote Services

5.2 Making Changes on the "RealVNC" Viewer

The settings below are required when using the cRSP on the "RealVNC" Viewer.
The table below shows the changes that need to be made. Please note, however,
that these settings are usually made by your cRSP Administrator.

For this please get in touch with your Siemens contact.

Procedure

1. Open "WinVnc" as Application Type in the Customer System.

2. We recommend making the settings below using the "Edit" button.

© Siemens AG 2017 All rights reserved

The name of the application is changed in RealVNC. By entering "RealVNC"

as client type the Java applet of the RealVNC Viewer is used.

Note You need administrator rights to make changes in the Siemens Remote Service
Platform.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 21
 6 Literature

6 Literature
This list is by no means complete and is only a selection of relevant information.

Subject area Title

\1\ SIMATIC Remote https://support.industry.siemens.com/sc/ww/de/sc/2281
Services
© Siemens AG 2017 All rights reserved

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 22
 7 History

7 History
Version Date Change
V1.0 10.10.2011 First edition
V1.1 18.10.2011 Adapting Siemens Remote Service
V2.0 23.02.2015 Revision for PCS 7 V8.1
V2.1 25.01.2016 Text adjustments
V2.2 04.04.2016 Revision for PCS 7 V8.1 SP1
V2.3 16.04.2016 Notes to manuals added
V2.4 21.02.2017 Notes to manuals added

Siemens Services – Competent technical support round the clock

Do you have any questions or do you need support? Using the Industry Online
Support Portal, you can access all of our Service and Support know-how round the
clock or query any of the services that are relevant to you.
The Online Support Page is the central Web address
(https://support.industry.siemens.com/) for information about products, solutions,
systems and services in automation and drive technology, and specific sectors of
© Siemens AG 2017 All rights reserved

industry. At the click of a mouse button, you have access to product manuals,
helpful downloads, and application examples – in short, all the information you
could ever need.
Siemens Industry’s Technical Support offers you fast and competent support for
any technical queries you may have including a number of tailor-made offerings
ranging from basic support to individual support contracts.
You can use the Web form below to send queries to Technical Support:
http://www.siemens.com/industry/supportrequest.
In the Service Catalog (https://support.industry.siemens.com/cs/sc?lc=en-WW),
you can find detailed information about other services like Training Services, Plant
Data Services, spare part services, repair services, on-site and maintenance
services, as well as retrofitting and modernization services, service programs, and
contracts.

Remote Access to WinCC and PCS 7 Plants with "RealVNC"

Entry ID: 55422236, V2.4, 02/2017 23