The Schneider Electric industrial software business and AVEVA have merged to trade as AVEVA Group plc, a UK listed company.
The Schneider Electric and Life Is On trademarks are owned by Schneider Electric and are being licensed to AVEVA by Schneider Electric.
ThinManager® and Relevance ® UpdateThinManager Overview, Roadmap Review to 10.0 and Beyond
Confidential Property of AVEVA Group plc.
Keith Jones, Director, ThinManager International
Agenda
About ThinManager, Our Customers and Product Family
ThinManager Overview
• How ThinManager Works
• Thin Clients and ‘Zero’ Clients
• Core Functionality
The Business Case for ThinManager
Migrating using ThinManager to Reduce Downtime and Implementation Risks
Mobility (Short Overview)
ThinManager Roadmap
• New in ThinManager 10.0 (Current) and ThinManager 11.0 (November 2018)
Summary, Q&A
Page 2Confidential Property of AVEVA Group plc. |
About ThinManager
History
Automation Control Products
• Evolved from a systems integration business
ThinManager first released in 1999
• Relevance Technology integrated in 2013
Over 50,000 licenses in more than 5,000 customer sites
• Over 10% of Fortune 500 Companies
• Over 1,000 different organizations
Designed and Built for the needs of an automation environment
What Is ThinManager?
ThinManager is software which provides Centralized Configuration,
Management, Visualization and Security of Thin Clients and Mobile Devices,
Servers, and Virtual Machines in Terminal Services based Networks.
ThinManager ensures your applications are securely delivered, and available
to the people that need them, when and where they need them, regardless
of system failures.
Content Types
HMI
MES
CMMS
ERP
Web Content
IP/USB Cameras
Terminal Shadow
Panels
Linux/Unix
Devices
Thin/Zero Clients
Mobile Devices
PCs
Users
Individuals
User Groups
Locations
Facility
Lines/Areas
Assets/Devices
Win
do
ws
Bas
edV
NC
DELIVER CONTENT IN 3 WAYS
ThinManager Securely Delivers Content
ThinManager will safely and securely deliver Content to any combination
of Device, User and Location.
Traditional Automation Network
7
Dedicated PCs for dedicated applications.
Control Room Plant Floor Offices
Plant Floor
HMI MESHMI
ThinManager Solution
Terminal servers running Plant Floor applications.Thin ‘Zero’ Clients for User Stations. Mobile Devices for Mobile Users.
Plant Floor
HMI / MES
Control Room Plant Floor Offices
Terminal to Terminal Shadowing• MultiSession• Tiling, Virtual Screens
Office GradeThin Clients
Mobile Users
HMI / ERP / MES
• MultiSession• MultiMonitor• Instant Failover• Redundant
Ethernet• Camera Feeds
PLANT FLOOR
CONTROL ROOM
OFFICES
Deliver sessions tomultiple monitors and/or
virtual screens on a single thin client
Deliver virtual desktops or
manage PCsas thin clients
Industrial PanelsRemote Desktop to
HMI (via VNC)
Feedsfrom USB & IP
cameras
Deliver content to theright person at the
right time and place
Deliver applications based on what is assigned to the
terminal or user.
Industrial Thin Clients
ThinManager can easilyassign content to users.
This allows applications to follow a user as they move from terminal to terminal.
ThinManager provides secure configuration and delivery of content to any combination
of device, user and location.
Applications& Content
ThinManager
Application Delivery
USERS
PC
HMI MESERPHTTPCMMSHMI
ThinManager Customers
Food & Beverage Energy
ThinManager Customers
CPG & Pharmaceutical Manufacturing
ThinManager Customers
Metals & Mining Water and Wastewater
ThinManager Vertical Adoption
6%
9%
10%
11%
25%
9%
8%
3%
5%
9%
5%
Building/Construction
Chemical
Consumer Products
Energy Oil & Gas
Food/Beverage
Medical/Pharmaceutical
ThinManager Products
ThinManager ®
• Released December 2017 – ThinManager 10.0
Relevance® first released 2013
• Adding location awareness
• Today a standard capability of ThinManager
ThinManager Thin Client Software
• WinTMC, iTMC, aTMC, uTMC
TermMon
• ActiveX Control
How does ThinManager work?
The User Experience
Step 1
• Thin client powered on
• Boots from ThinManager
• Get firmware and configuration
Step 2
• Configuration directs thin client to terminal server(s), cameras and other sources
• Pass login information
• Start sessions
• Runs application(s), deliver content
• Operator interacts with application(s)
Technical Functionality
Thin Client to ThinManager
Configuration to Thin Client
Session Request to Servers
TS CAL Request
TS CAL Permission
Session Display
Thin Clients, Zero Clients
No OS or Firmware
Industrially Robust (for Plant operation)
Connectivity:
• LAN
• Video
• Network
• USB
• (Serial)
• (Audio)
Zero Client Characteristics
ThinManager Thin Client Types
Two Types of ThinManager Capable Thin (Zero) Client:
• ThinManager Ready Clients
‒ Boot with special BIOS
‒ Limited to certain devices, manufacturers
• ThinManager Compatible
‒ PXE Boot from ThinManager
‒ Dozens of Manufacturers
https://kb.thinmanager.com/index.php/Supported_Hardware
Thin Client Benefits – Technology Drivers
Robust and Reliable
• No Moving Parts Typically
• High MTBF
Environmental
• Built for purpose –
‒ Hazardous/Temperature/Vibration
Secure
Lower Energy
• Reduced Support Infrastructure Required
27
Core ThinManager Functionality
Core Functionality
Wizard-based Configuration
Failover Management
• Server, Application, Network
• Instant Failover
AppLink
Terminal Shadowing
User Security
• Biometrics, Card Readers, AD Integration
Software Clients
• WinTMC, iTMC, aTMC, uTMC
MultiSession
SmartSession Load Balancing
Display Versatility:
• MultiMonitor, Tiling
• Virtual Screens
• Keyboard/Mouse Sharing
IP and USB Camera Support
Remote Management
Location Awareness (Relevance)
ThinManager – Business Case
Why do customers buy ThinManager?
Software Benefits
Increases Reliability and Reduces Unscheduled Downtime
Centralizes Management and Control
Improves Security
Reduces Energy Cost
Reduces Operational Management Cost
Increased Reliability
Processing is moved to a central location off the production floor
Failover and Redundancy provide backups in case of server failure
PCs with hard drives replaced with solid-state industrial hardware
MTBF of a thin client is far higher than PC
• Many customers have clients running for 10+ years!
Increased Control
Configuration at centralized ThinManager instead at every PC
• Install Once – Use Many
Deploy and deny application access with ease
Shadow terminals remotely
Remote management across the network
System status is shown in ThinManager interface
Increased Security
Easy to configure user access
• Obscure user credentials from operators
Active Directory Synchronisation and Authentication
Encryption of all communications and data
No hard drive with sensitive information to lose or have stolen
Control installation of rogue programs
• Processing can be kept in secure room
• No floppy or CD drives on thin clients
• USB disabled by default
Decreased Energy Costs
Thin clients use 15% of the energy of a PC
Less power consumption
• 8 watts vs. 96 watts on average
Lower cooling costs
Lower UPS requirements
Decreased Maintenance Costs
Simple Configuration – OT-centric
Mainframe-style architecture for the Windows environment
• Fewer Systems to Operate and Maintain
‒ Decreases hard drives to a few terminal servers
‒ Patching and Anti-virus on a few servers
‒ 1 server ≈ 25+ industrial users
Rapid terminal replacement by semi-skilled personnel
• No loss of process control
Example - When a PC Fails…
Typical Real World Scenario:
• Industrial Plant, 50 PCs, lifetime of PC is 2 years
• Therefore, 1 failure every 2 weeks
On Failure:
• Replace PC with new unit (from storage)
• Install OS (or Image)
• Patch, Update antivirus, configure
Average of 1 day of work, and process is down
Thin Client Terminal Replacement
If a thin client fails, it can be rapidly replaced by unskilled personnel
• Technician disconnects and removes failed unit
• Reconnects new unit and powers on
‒ Spare is often held in local inventory (cheap!)
‒ Can be different model or manufacturer
ThinManager detects unit change and asks to reconnect session.
Work continues! No loss of application, minimal downtime and about 10-20 minutes of elapsed time.
ThinManager – Reducing Downtime when Migrating
Strategies for Migration
41
When implementing a solution with ThinManager, two scenarios are encountered in reality
‘Green Field’ Installation
• Designing and Best Practices considerations
• Not really ‘Migration’
Migrating Existing (Operational) Architecture
• Far more common
• Far more complex
System Migration Scenarios
42
By far the easiest way to implement a thin client / ThinManager solution
Design Considerations:
• Users and Applications
‒ HMI, Historians, Work Order Systems, Reporting Tools, etc. etc…
• Hardware
‒ Servers – Sized for applications and users
‒ Operator Terminals
– Selected for Environment Concerns
– Hazardous Areas (C1/D1, C1/D2), Operating Temperature, Wash down, etc.
– Industrial vs. Commercial
• Software
‒ Licenses for Applications, ThinManager, Server and CALs
Green Field Implementation
Typical Scenario:
You have a number of PC based systems, maybe some servers on a running plant
You wish to migrate to an RDS architecture
• Using ThinManager to manage and maintain
Issues?
• Some, but not all, applications are the same
• Not all application software is the same version
• Some software will only run on older OS versions
• Plant Downtime must be minimised
Migration
Existing Architecture Example
PLC PLC PLC
PLC PLC PLC
Final Architecture
Terminal Servers
Thin
Client
Thin
ClientThin
Client
Thin
Client
PLCs
All Application Software installed on Servers
• Any application software can be implemented
Servers handle multiple sessions
• Sized appropriately
• Load balancing in ThinManager if desired
Servers can be located anywhere
No limit on number of servers
• Easy to scale
Server Architecture Benefits
Typical Project Approach
▸ Prepare
• Produce a Detailed Project Plan
• Evaluate Potential Pitfalls and Failure Scenarios
• Plan for Side-by-Side Staging
▸ Design, Test
• Design the future architecture
• Test Offline with new hardware and software
• Ensure FAT conditions are met
▸ Side-by-Side Implementation
• Old and New Systems should be able to be switched between and viewed simultaneously
▸ Go Live
• Final switchover to new architecture
47
Install New Terminal Servers
• Install ThinManager (usually on these)
Install Application Software on Servers
• If Multiple Versions, use Virtual Workstations
Connect Thin Clients to Network
• Configure Thin Clients in ThinManager
• Configure Display Clients for New Solution and also existing (running) application
Deploy Thin Clients
Validate Applications
Migration Stages
49
Existing Applications running on existing systems
New Applications running on server systems, delivered to thin client
Side-By-Side Implementation
PLC
PLC
50
Optionally deliver old Application to Thin Client using ThinManager
• Simultaneously with new application using ThinManager Display Client
Discontinue using old Application on PC
Discontinue using old Application Display Client
Side-By-Side Implementation
PLC
51
IT Integration
• May require AD configuration etc.
Additional Hardware may be required to be attached to thin clients
• RFID Readers, Biometrics, Touchscreens, Serial devices etc.
Network bandwidth
• Generally not an issue unless video is being incorporated
Licensing
• RDS CALs will be needed
• Product Licensing for RDS architectures may be different
‒ Especially considering Failover/Redundancy aspects
• ThinManager Licenses will be required
Other Considerations
Mobility and ThinManager
What is Relevance?
By interfacing with internal/external positioning elements (‘Resolvers’), Relevance allows
applications to be securely delivered to mobile devices when and where they are needed.
Relevance manages your mobile-based working environment by delivering the right applications
to the right person and at the right time & place.
Applications and information can be made available based on the location of a mobile device, the
user of a mobile device, the time that the mobile device is being used or any combination of these
criteria.
The Problem is Access
What About Here? And Here? And Here?
Access
Here
Relevance
TermSecure Adds User Security, Mobility
• Mobility limited to user moving around terminals
TermSecure (without Relevance)
Relevance
Relevance adds Location Information
Relevance User and Location Services
Mobile Devices are managed exactly the same way as thin clients
in ThinManager.
• Location content can be geo-fenced to physically limit where the
content can be accessed.
Example:
A QR Code on PLC panel is scanned by mobile device and an
instance of PLC Software is delivered to the tablet with the correct
configuration file automatically opened.
Location Based Mobility
Lo
cati
on
Co
nte
nt
Locations
Locations enabled if a Relevance License present
• Relevance is standard in all new ThinManager licenses
Locations hierarchy designed in ThinManager
With Relevance:
• Information can be delivered
‒ To the right person
‒ With the right authentication
‒ At the right location
Location Resolution is achieved using several technologies
These can be combined for additional security
• Quick Response Code (QRC)
• Bluetooth
‒ Bluetooth Beacons
‒ Mobile Devices
• WiFi
• GPS
Location Resolvers
Relevance Actions
Resolver Actions define how location content is used and delivered
ThinManager Roadmap
ThinManager 10.0
Released December, 2017
Highlights:
• Enhancements for
• Productivity
• Visualisation
• Security
• Mobility
• And More….
Tiling, Virtual Screen and Camera for WinTMC
• WinTMC support for Tiling, Virtual Screens and Cameras. This is the first of our mobile clients to support
these features. Other mobile clients will follow suit in a subsequent release.
Authentication Pass Through
• ThinManager can pass Relevance User credentials natively to supported HMI products using a token
based technology. API is available to software manufacturers
Productivity Features in ThinManager Release 10
Separate Active X Events
• Previously, an ActiveX event gets raised and the EventCode would determine which event occurred.
Now the events will be raised separately, reducing the need for scripting.
New uTMC Client Supports Augmented Reality on Microsoft Hololens
• A new ThinManager client for the Microsoft Hololens supports 2D content as well as QR Code scanning
and Bluetooth beacons.
Support for up to 6 monitors
• Users can now drive up to 6 monitors on a single terminal with supported hardware.
Visualisation Features in ThinManager Release 10
PIN Authentication
• A user PIN can now be utilized instead of a password.
Password Caching
• Provides a configurable time period for password caching (i.e. use password at start of shift, but
then only use badge or PIN remainder of shift).
Security Features in ThinManager Release 10
iPhone as a Beacon
• Bluetooth enabled devices can be used as a beacon for authentication.
• Hence a user can be resolved on approach to a fixed terminal
Enhanced Touch Module
• This module allows users of iTMC and aTMC mobile clients to set delay between mouse click-down and
mouse click-up.
Mobility Features in ThinManager Release 10
Server 2016 support
• General improvements enhance compatibility with Microsoft Server 2016.
Multiple Domain Support
• ThinManager now supports multiple (trusted) domains.
Improved Session Scaling Performance
• Session Scaling now utilizes the GPU for increased performance.
Writable Custom Variables
• End users can now write to custom variables within the ThinManager platform.
Additional New Features in ThinManager Release 10
Summary
70
At X-Change
• ThinManager Expo Stand
Online www.thinmanager.com
• Web Seminars, Technical Papers, Videos
• Download Software and Trial Licenses
• Self-Paced Online Training for End Users
• SI Certification for System Integrators
‒ www.thinmanager.com/si
From your Wonderware Southern Africa Representative
Direct Contact
More Information
Questions?
Page 71Confidential Property of Schneider Electric |