SIMATIC Logon-
Central, cross-plant user management

"Ready for Validation" now also applies to machine-level applications. SIMATIC Logon and the WinCC flexible options Audit and Change Control cover the main requirements of GMP (Good Manufacturing Practice) and of the US Food and Drug Administration (FDA) for compulsory validation of applications according to CFR 21 Part 11 in the pharmaceutical industry, to active ingredient manufacture in the pharmaceutical industry and to some extent in the cosmetics industry.

optional for HMI devices from series 170* upwards and for PC-Systems under WinCC flexible Advanced

* not TP 177A

User management with SIMATIC Logon integrates itself in the safety system and user management of Windows and in this way meets the FDA requirements .

Key benefits

Central, cross-plant user management, integrated in Windows User Management
High levels of security due to measures on both the administrator
and user sides
Integratied in logging procedures of WinCC flexible/Audit

When employing SIMATIC Logon you can connect WinCC flexible stations (PC systems as well as Panels) to a central user management.
The users have not to be setup inside the user administration of each device, but are administrated centrally at one Log-on-Server. Thus the efforts for user administration are reduced while security and clearness increase.

Configuration
In a first step the user administration of each WinCC flexible station has to be configured by adding the following information

Required user groups and their rights
Name of the central station where the central user administration is installed.

The central user administration is configured by using the same names of user groups. All users are registered here and are assigned to a user group. Every user defined in a user group of the same name on the central station has access to the connected WinCC flexible stations.
If the network fails between the central station with SIMATIC Logon and WinCC flexible station, the operation is handled through a local, predefined emergency user.
The password aging and the password regulations for the structure of a password are defined according to the configuration on the central station and then also apply for all decentrally connected WinCC flexible stations or the respective users.
The administrator is able to set up new users online as well as block existing users. SIMATIC Logon also supports electronic signature.

FDA compliance during runtime is guaranteed by several security mechanisms

Unambiguous identification of each user (Username and password)
Lockout after several incorrect entries of a password
Automatic logoff after a predefined time

Licensing
To set up a central user management you need the following licenses

SIMATIC Logon basic license
SIMATIC Logon Remote Access-License (for 3 or 10 devices)
according to the number of connected stations you can install several Remote Access licenses

Additional information: