**************************************************************************** Software Release: Secomea RDM 4.5 build 11412 - public release Release Date: 2011-10-12 **************************************************************************** *************** OUTPUT 1 is now forced "ON" by LinkManager connect. * IMPORTANT * *************** If you are already using OUTPUT 1 for some other purpose, you will need to rewire this port to use another OUTPUT port, or refrain from upgrading to this firmware. This functionality change was introduced in RDM firmware release 4.4; please see the corresponding release notes for more information. **************************************************************************** (c) Copyright 2011, Secomea A/S. All rights reserved. **************************************************************************** **************************************************************************** Scope and production information **************************************************************************** This is Secomea Remote Device Management release 4.5 build 11412. This release note describes changes since release 4.4 build 11122. GateManager software is not updated by this release (latest GateManager release is still 4.4.11212.208). Please refer to the older release notes for further information. Products covered: --------------------------------------------------- LinkManager 6041 (Software version) SiteManager 3229 (Hardware with DIN mount and UMTS interface) SiteManager 3129 (Hardware with DIN mount and UMTS interface) SiteManager 1029 (Hardware with DIN mount and UMTS interface) SiteManager 3034 (Hardware with DIN mount and 4-port switch) SiteManager 3134 (Hardware with DIN mount and 4-port switch) SiteManager 2029 (Hardware with UMTS interface) SiteManager 2129 (Hardware with UMTS interface) SiteManager 2034 (Hardware with dual DEV interfaces) SiteManager 2134 (Hardware with dual DEV interfaces) SiteManager Soft 6040 (Software version, external agent support) SiteManager PC 6240 (Software version, internal agent support) Version and Build numbers: ------------------------------------------------------- LinkManager Installers version 4.5.0.11412 SiteManager firmware version 4.5 build 11412 SiteManager Soft Installer version 4.5.0.11412 SiteManager PC Installers version 4.5.0.11412 **************************************************************************** 1. Highlights of this release **************************************************************************** - In addition to on-demand access (using LinkManager) and permanent access using Relays, the SiteManager SiteManager 1xxx and 3xxx models now also support traditional IPSec based VPN by including Secomea's user friendly EasyTunnel functionality. - Support for new SiteManager 1029 and 3229 models. - Please notice the critical bug fix for SM2xxx models (see below). **************************************************************************** 2. New features and improvements. **************************************************************************** LinkManager ---------------------------------- - LinkManager console now shows various trouble-shooting information when it fails to connect or logon to the GateManager (#4658). - Increase size of supported UDP datagrams from 4K to 64K. SiteManager ---------------------------------- - Add IPSec based VPN support (#4555). This functionality is based on Secomea's EasyTunnel Client module, which requires a suitable Secomea TrustGate EasyTunnel Server as the central VPN concentrator. See online help for more information. Note: Only available in SiteManager 1xxx and SiteManager 3xxx models. - Normally, the SiteManager connects to GateManager using an advanced "fast-trial" method, which includes auto-detection of local proxies and trying connecting with multiple protocols to multiple target addresses simultaneously. In a few cases, this "fast-trail" method has been observed to cause some firewalls to block SiteManager traffic, so you can now disable this method by setting the "Preferred Protocol" parameter (under GateManager > Advanced settings) to a value other than "Auto". When the "Preferred Protocol" is set to one of the non-Auto values, the SiteManager will try each of the protocol in turn, and not try to auto-detect local proxies. Note that it still will try all of the protocols even if the preferred protocol doesn't work (#4627). Enabling the EasyTunnel Client (VPN) functionality will always disable the "fast-trail" connection method. This is done to avoid some potentially tricky routing problems when the GateManager server address is covered by one of the VPN tunnel subnets, but the GateManager is not local to the VPN concentrator. - If SiteManager is configured to connect to the GateManager, but fails for two consequitive hours, it will reboot unconditionally (#4673). This is a remedy to work around possible local network problems like a failing DHCP server, misbehaving switching equipment, etc. The SiteManager will not reboot if any of the following conditions are fulfilled: - The GateManager configuration is missing or incomplete - Remote Management is disabled (by configuration or INPUT 1) - SMS Wakeup is enabled - The Software Watchdog is disabled - Reboot appliance if 3G modem fails, after it has worked previously. This is an attempt to reset and revive the 3G modem (#4578). - Add option to allow access from UPLINK to serial port (#4602). Device Agents ---------------------------------- - For most device agents, Go To Appliance is now only available when LinkManager is connected to the SiteManager and/or agent. The former Go To Appliance to device agents from LinkManager's domain view has been removed, as this form of "unconnected" access is not reflected by setting the OUT 1 port to ON (thus failing to indicate remote access active). Go To Appliance for SiteManager itself is still available in the unconnected state. - New Vendor Agents: Omron USB-based PLCs are now supported (#4560). On LinkManager side, the PLC is accessed via the virtual COM port. - Enhanced Vendor Agents (improved operability): ABB Robot agent has been updated to support current ABB . Old ABB Robot agent renamed to "ABB Robot (Legacy driver)". Fatek agent supports "Ethernet Adaptor Configuration" program (#4531). Mitsubishi PLC agent improvements (#4329). Omron serial agent now has hardware flow-control option (#4579). Schneider Ethernet agent now also supports HMI (#4704). Siemens MPI agent now has optional latency settings that may improve stability of connections over slow internet lines (#4653). - Custom Agent improvements: New "Custom Forwarding" agent provides limited traffic forwarding capabilities between UPLINK and DEV networks, including optional source and destination NAT (#4601). Scada agent how has option to enable source NAT (#3723). Serial agent now has additional serial port settings. **************************************************************************** 3. Bug Fixes. **************************************************************************** LinkManager ---------------------------------- - Work around various 3rd party anti-virus and personal firewalls that prevented LinkManager startup leaving tray icon in yellow state (#4523). - Work around various issues installing the virtual adapter (#3933). - Allow form DOMAIN\USER in web proxy user account field (#4623). - Omit the "alias" field when installing the first certificate, as this field has been seen to confuse new LinkManager users (#4529). - Fix some minor stability issues with the Virtual COM port (#4687). - Importing a configuration file would ignore imported GateManager certificates if local password had been changed (#4652). - LinkManager internal DNS lookup sometimes failed to work (#4659). SiteManager ----------------------------------- - CRITICAL BUG FIX: Some SiteManager 2xxx units may fail to boot after a firmware upgrade. Only units currently running firmware release 4.4 build 11122 (or a beta firmware between build 11064 and 11404) are at risk. YOU ARE STRICTLY ADVISED NOT TO UPGRADE OR DOWNGRADE TO ANY OTHER FIRMWARE VERSION THAN THIS ONE (RELEASE 4.5 BUILD 11412) OR LATER. Not all units are affected; it depends on the particular Compact Flash card installed in the hardware, which will vary from the factory depending on availability. Once this 11412 firmware has been installed, it makes precautionary changes to the boot configuration, so it will be safe to downgrade to any previous firmware versions again. (#4613) - Fix counting of number of failed agents in Setup Wizard (#4641). - Report serial port busy (in LinkManager console) also if serial port is used directly via the forwarding agent or a device relay (#4602). - Use ISO-8859-1 as default encoding for imported xml config files (#4573). - More 3G modems are supported (#4582 #4584 #4698). - If LinkManager tried to use serial port while in direct use, further connections from LinkManager to the serial port were rejected (#4602). - Various GUI elements have been reworked to behave more consistent across different configuration pages (#3938 #4214). - Importing a configuration file would fail if local password had been changed (#4644). - Fix various "SMS Wakeup" stability issues (#4705). Device Agents ---------------------------------- - Fixed handling of 2-stop bits in serial agents (#4579). - Latency settings could not be cleared on some serial agents (#4701). **************************************************************************** 4. Upgrade information. **************************************************************************** All Software Products ----------------------------------- - Please notice that all Software products - LinkManager, SiteManager Soft, and SiteManager PC - must be upgraded by running the corresponding Installer program using an administrator account. LinkManager 6041 ----------------------------------- - LinkManager comes with its own virtual "LinkManager Adapter" network driver, which is installed and setup by the LinkManager Installer. On Windows XP, this driver is installed silently, but on Windows Vista and Windows 7 you will have to confirm the installation of the adapter. When upgrading a LinkManager 3.7 or older, the LinkManager Installer automatically migrates all configuration and certificates from the VMware based installation. Once upgraded to 4.0 or newer, you cannot downgrade the LinkManager to an older version. - First time you start LinkManager after the upgrade (or after a new installation), you may be prompted to accept the installation of Secomea's CA certificate as a trusted root certificate. You should allow this to prevent Windows from looking for new COM port drivers (it won't find any) each time you establish a serial connection. SiteManager PC 6240 ----------------------------------- - SiteManager PC comes with its own virtual "SiteManager Adapter" network driver, which is installed and setup by the SiteManager PC Installer. On Windows XP, this driver is installed silently, but on Windows Vista and Windows 7 you will have to confirm the installation of the adapter. SiteManager Soft 6040 ----------------------------------- - SiteManager Soft requires VMware to operate, also after the update. - To upgrade an existing SiteManager Soft, you must run the SiteManager Soft Installer program. Just upgrading the firmware file is not possible, as the firmware file id for SiteManager Soft has changed from v40 to v6040. SiteManager 2xxx ----------------------------------- - Due to changes to the flash memory handling on SiteManager 2xxx, it is only possible to downgrade from this firmware release to a firmware release 4.1 build 9454 or newer. Device Agents ----------------------------------- - Previously installed standard agents are automatically removed when you upgrade to this firmware which includes all of the standard agents. - This means that you will need to reinstall the agents if you downgrade to a firmware release older than 4.0. **************************************************************************** 5. Known issues or limitations **************************************************************************** - Due to new restrictions on secure web-site certificate authentication, Internet Explorer 7, Firefox 3, or newer may prevent you from accessing https based services via the LinkManager's Go To Appliance functionality in the non-activated state (Domain view). This is because the Go To Appliance function uses a different IP address than the actual IP address of the remote device, so the browser suspects that the target device's certificate (typically self-signed) may be a forgery. There is no easy way to get around this problem, so you will have to follow the somewhat tedious procedure of your browser to bypass the warnings and connect to the device anyway. Note: You should not store the certificate permanently in Firefox. - SiteManager Soft currently does not run as a service under Windows 7 64 bit OS. Instead it must be started in User mode, by adding it to the Startup folder. - Please note that using the PPI option require optimal bandwidth for both the LinkManager and the SiteManager. This is due to the PPI protocol and Step7 software per design does not take into account the delays (latency) that may occur when relaying the communication over long distances. **************************************************************************** 6. Special notes for GateManager Owners **************************************************************************** In the following table, the "Revision" field column is the text you must enter when you add a firmware file to the Appliance Products repository: Product Firmware file "Revision" field ---------------- ---------------------- ---------------------- SiteManager 1029 v1029_11412.ffs oper:v1029_11412 SiteManager 2029 v29_11412.ffs oper:v29_11412 SiteManager 2129 v2129_11412.ffs oper:v2129_11412 SiteManager 2034 v34_11412.ffs oper:v34_11412 SiteManager 2134 v2134_11412.ffs oper:v2134_11412 SiteManager 3129 v3129_11412.ffs oper:v3129_11412 SiteManager 3229 v3229_11412.ffs oper:v3229_11412 SiteManager 3034 v3034_11412.ffs oper:v3034_11412 SiteManager 3134 v3134_11412.ffs oper:v3134_11412 SiteManager 6040 (*) oper:v6040_11412 SiteManager 6240 (*) oper:v6240_11412 LinkManager 6041 (*) oper:v6041_11412 Agents (**) agent:v09_..._11412 (*) LinkManager and SiteManager Soft/PC cannot be upgraded from GateManager; to upgrade, run the relevant Installer program. (**) Agents are included in the base firmware, so there are no separate agent firmware files. Agent firmware versions shown in the "Revision" field follows the build number of the base firmware. **************************************************************************** END ****************************************************************************