Secure deployment of PLM client applications€¦ · Architecture Overview • Teamcenter...

Case Study:Secure deployment of PLM clientapplications

Matthias Junge

Junge PLM Consulting Limited

M. Junge | Junge PLM Consulting Limited | PLM Europe 2008 | Secure Deplyment of PLM Applications | Slide 2

Case Study - Abstract

• Research and Development is becoming more and more distributed and mobile.Authoring applications like NX and TC Engineering still need client applicationson workstations and notebooks, which may be distributed across the enterprise.

• Now a days it is more difficult to deploy specific and compatible versions of clients,especially when they need to be synchronized with server updates.

• A special configuration customization needs to be in place as mobile engineersoften require administration rights on their computers to maintain special applications,other than NX or TC Engineering.

• This presentation will explain and demonstrate the feasibility of protecting configurationand customization of PLM applications in large scale, distributed industry environments.

• Matt worked with a large scale consumer product manufacture for over 11 years in theroles R&D Support Engineer, CAD and PDM System Administrator, PLM IT Product Managerand Team Lead. In August 2008 he left the company as he was relocating to Ireland.

• Matt's recent project activities included NX and Teamcenter Updates as well as EngineeringCollaboration rollouts and deployments. In his new role, Matt works an external consultant.

Junge PLM Consulting


Agenda

• Today's challenges in development

• Engineering IT perspective

• Deployment technologies

• PLM client applications

• Configuration characteristics

• Configuration Security drivers, advantages

• Configuration Security concept and setup

• Ideal configuration cycle


Today's Challenges inDevelopment

• Distributed development centres, Concurrent engineering

• A-synchronic development in platform or competence centres

• Development around the clock: 24/7

• On-site/ Off-Shore supplier integration

• Increasingly mobile engineers

• Complex environments for engineers

• IT provides tools for every purpose, but from different suppliers

• Working with different databases

• Managing export and import of data

• Different GUI’s and different application behaviour

Simplification is needed

DevelopmentDevelopmentBackboneBackbone


The Rise of Virtual Collaboration

0

20

40

60

80

100%

2000 2005 2010

Different time,different place

Same time,different place

Same time,same place

Working alone

Work Styles

Percentage of work productthat will depend on groupinput

Source: Gartner Group 2004 (http://www.gartner.com/teleconferences/attributes/attr_103789_115.ppt)


Engineering IT Perspective

• Client Server Environments

• Authoring applications like NX and TCEngineering

• Data and configuration need to be distributed(closer to the user)

• Complex interfaces between applications

• Client applications on workstations andnotebooks

• Compatible versions of clients

• Synchronized with server updates

• Administration rights to maintain specialapplications

• Configuration responsibility (Global vs. Local)

HighLatencyNetwork

Low / MediumLatency Network

• How to secure configuration throughout the IT infrastructure andorganization?

• Could collaboration with suppliers be covered as well?

Case Study - Target


Deployment Technologies

• From Install Server to PLM users

– Desktop users

– Power user

– Mobil user

• As Installation Package distributed

– Script based (self made)

– OS based (Microsoft SMS, SUN Jumpstart)

– OEM based (NetInstall)


PLM Client Applications(Examples)

• Unigraphics NX

• TC Engineering

• TC Enterprise

• AutoCAD

• TC Visualization

• Mentor Graphics

• Solid Edge

• Alias

• Cinema4D

• Photoshop

• Freehand

• IsoDraw

M-CADProduct Development

Tooling

M-CADProduct Development

Tooling

Industrial DesignIndustrial Design

Customer ServiceCustomer Service

Product Lifecycle Data ViewerProduct Lifecycle Data Viewer

Architectural Design, Facility ManagementArchitectural Design, Facility Management

E-CAD DevelopmentE-CAD Development


Unigraphics NXArchitecture Overview

•

TeamcenterEnterprise

(PDM)

TeamcenterEngineering

(iMAN)

NC-CAMModeling Drafting 3D CablingPlottingHarnessDesign

Siemens PLM Unigraphics NX

Tooling

Core Configuration (ugii_env.dat, customer defaults, etc)

DataExchange

CODIM

Methods

LibrariesUDF Pattern 3D Catalog 3D Catalog

BCT3D-Pool

BCTInspector

BCTRaster

TNCremoNT

AdvancedPPU

LTXE\Pak

LTXSchematics3rd Party Applications

Special Applications


Unigraphics NXInstall Packages Overview

User

Company

3rd Party Apps

Maintenance Pack

Quality Releases

Major Releases

Install Package


Unigraphics NXConfiguration

• Environment settings

• ugii_env.dat (Text)

• Customer Defaults (XML)

• Definition files (Text):

– Load Options

– Metric, Modeling,SMD, CAM

• Toolbar, Menu, Dialogue files (Text)

• Special Applications (Binaries)

• Special Application configurations (Text)

• 3rd Party Application configurations

Operating System Environment

TC Engineering Environment

Unigraphics NX Environment

3rd Party Applications Environments

Customizing Environment


• Mobile engineers will have administration rights on their workstations

• Its just the type of their nature, what they will do…

• To assure:

– No accidental changes on application configuration

– Methods support

– Standard compliance

– Data integrity

A configuration security system is valuable

Configuration SecurityDrivers, Needs


Configuration SecurityConcept

User Request to Start Application

Configuration Security Check

PLM Application Start

No Application StartNot OK

OK


Configuration SecuritySetup

• Unigraphics NX user exit: Configuration Check Sum– Generated from Engineering IT

– Integrated in Install Package

– Checked on PLM application start-up

• Security Check Reference: List of customization files

• Text, XML files: Check Sum Tag– 1st line in configuration files, 2nd line in XML or script configuration files

– Marked as comment: #(CONFIG_CORE_ID=945F/6434E33) <15.10.2008>

• Binary files: Existents Check on local File System


Configuration SecurityBehavior - To Be

• Changed configuration files

Not possible to start application

• Missing files

Not possible to start application

• Necessary local or user depended changes:

– Plotter settings

– Site specific settings

– Method irrelevant settings

• Can be marked:

– Prior to one configuration line (UG NX):_OK_TO_MODIFY1_

– Prior to two configuration lines (TC Eng):_OK_TO_MODIFY2_

...# This is an example configuration file## Set to 0 to disable a variable# Set to 1 to enable a variable# Unset will take the default#__OK_TO_MODIFY1__# VARIABLE_FREE_TO_SET = 1#...


Configuration Cycle

Users

User Groups

Engineering IT

Data Center

• Method Documents

• Use Cases

• Configuration Proposals

• Test Scenarios


Summary

• This case study proves the feasibility to protect configuration andcustomization

– Ready to be used in

• Distributed development sites

• Collaboration with suppliers

– Independently from

• IT or DC platforms

• Installation package structure

• Deployment technology

– But still there are open issues and room for enhancement

• Sophisticated binary checks

• Windows Registry

• Checker or workflow integration

• Junge PLM Consulting has the experience to evaluate, investigate, coordinateand help to implement PLM projects in complex large scale industryenvironments


Thank you.

Created by: Matthias Junge

Junge PLM Consulting Limited

Galway Technology Centre

IDA Business Park, Mervue

Galway

Ireland

Tel: +353-1-2769177

Fax: +353-91-755635

Mobil: +353-87-6328767

E-Mail: [email protected]

Web: www.JungePLMconsulting.com (under construction)

Date post:	24-Apr-2020
Category:	Documents
Upload:	others
View:	34 times
Download:	0 times