The document discusses different types of thin clients that can be used to access an InduSoft Web Studio application remotely. It describes the installation, configuration and execution of web thin clients, secure viewer thin clients, and mobile access thin clients. Web thin clients allow remote access via a web browser while secure viewer thin clients use a dedicated viewer application. Both require configuration of the application files, data server, and firewall ports on the application server.

4. Server Thin Client
Installation
Software License Not required
Product (IWS) Not required
Application Files Not required
Execution
Graphical Interface
Background Tasks No
Communication Tasks No

6. Web Thin Client
The user access the application from an Internet Explorer Web Browser.
Ideal for multi-purpose stations (e.g.: Manager’s computer).
Secure Viewer Thin Client
The user access the application from any computer with another
instance of the Viewer. Ideal for operator stations or dual-monitor.
Mobile Access (MA) Thin Client
The user access the application from any browser that supports HTML5.
Ideal for mobile devices, such as tablets and smartphones.
Mobile Access (MA) Thin Client “Tabular”
The user access the application from any browser. Ideal for legacy
mobile devices with web browsing capabilities.

7. Web Thin Client
Web Thin Clients
Server
(Indusoft Web Studio)

8. Secure Viewer Thin Client
Thin Clients
Server
(Indusoft Web Studio)

9. MA Thin Client (HTML5)
New
MA Thin Client (HTML5)
MA “Tabular” Thin Client (HTML1)

10. MA Thin Client (HTML5)
MA Thin Clients
Server
(Indusoft Web Studio)

11. MA “Tabular” Thin Client
SMA “Tabular”
Thin Clients
Server
(Indusoft Web Studio)

12. Server Thin Client
File Server Application Files
(e.g.: screen files,
(e.g.: File System, Web Server) tags lists, etc) Thin Client
Component(s)
Data Server Online / History
(e.g.: Plug-In, Web Browser)
Information
(e.g.: tag values,
TCP/IP Server trend history, etc )

13. Server Thin Client
File Server TCP Port HTTP/HTTPS
Microsoft Web 80/443 over TCP/IP
Server (IIS) Thin Client
Web Tunneling Component(s)
Gateway
TCP Port 1234 (e.g.: Plug-In, Web
Browser)
Data Server TCP Port InduSoft protocol
TCP/IP Server 1234 over TCP/IP

14. Server Local
Tag value IS shared among all Tag value is NOT shared among any
stations (Servers and Thin Clients) stations (Servers and Thin Clients)
Example: Tank Level, Valve State, Example: Current User, Alarm Filter
Production Counter, etc. Period, Report Name, etc.

15. Primary
Server
Thin Client(s)
Secondary
Server

16. Typical architectures
Web Thin Client
Cloud-based MA Thin Client
Server Web Thin Client
MA Thin Client
Local HMI
Secure Viewer
Thin Client
Controller + I/O
(e.g.: PLC)

18. Installation, Configuration, Execution
Web Thin Client
System File Server
Web Thin Client Server (IIS)
Web Tunneling Gateway
Redundancy
Secure Viewer Thin Client
System File Server
Web Thin Client Server (IIS)
Web Tunneling Gateway
Redundancy
RDP solution for non-Microsoft devices
MA Thin Client
MAT Thin Client (Tabular)
SSL for IIS Web Server

19. Web Thin Client
Basic Installation
- Preparing the Project
 Save all Screens as HTML (File Server part)
 Enable TCP/IP Server Task (Data Server part)
Your project is ready to be served to a Web Thin Client
- Preparing the Web Server
 Configure the Web Server Root directory to point to the Project’s Web subfolder
 Open Firewall ports 80 (http) and 1234 (InduSoft TCP/IP Server)
- Running the Server Application
 Call the Runtime and make sure that the Web Server is running
- Connecting through Internet Explorer
 Open an Internet Explorer session and type the URL to the computer where the project
is running followed by the startup page name
e.g. http://192.168.1.102/startup.html
 You will be asked to enter a valid user name and a password. Once the credentials have
been validated, you will be able to connect to the server project and navigate through
the screens

20. Web Thin Client
Web Server: using IIS (Internet Information
Services)
- Installing IIS
 On the Windows Control Panel, select Programs
and Features
 Click on the Turn Windows features on and off
 We recommend installing the following features:
 IIS Management Console
 ASP and ASP.Net
 ISAIP Extensions and ISAPI Features
 You may need to use these features on MA,
SMA and WTG
- Configuring IIS – 2 options (using Console):
 Point the Web Server to the Project’s Web folder
 Create a Virtual Directory pointing to the Project’s
Web Folder
- Configure MIME Types
 On the Console, select the very Root
 Under the IIS group, click on MIME Type
 Enter all the file extensions present on the project’s
Web Subfolder

21. SSL
IIS (Internet Information Services) using SSL
- Purpose
 Provides more security, protecting from attacks through the use of Certificates (HTTPS)
 Browsers opening pages served through SSL check a Certificate and validates it
- Configure Server Computer to use SSL
 Get a certificate from a Certificate Authority. Or..
 Create a self-signed certificate following the steps below
 Using MMC, configure the Certificate Store (Local Computer)
 On IIS Console, create a Self-Signed Certificate (User computer name)
 Enable SSL on the Bindings settings associating it the Self-Signed Certificate that you created
- Configure Client Computer to accept a self-signed Certificate
 Ideally, using Internet Explorer, open a page from the to the Server through SSL (https) using the
Computer Name (this is used on the Certificate)
 Once the certification validation fails, open the page anyway
 On the URL field, click on the warning regarding the Certification and open the View Certificate
Window.
 Import the Certificate to the Trusted Root Certification Authorities
 Now the Certificate is valid to be used with ANY browser

22. Web Thin Client
Redundancy
 Configure the Redundant Servers (both InduSoft project and IIS)
 On the development environment to the Ribbon->Project tab and click on Web
 On the Data Server IP Address you can enter the IP Address of the computer that will be the
Primary Server
 Click on Advanced: you will be able to enter the Secondary IP Address
 Backup URL: URL where the Web files are stored (Project’s Web folder) from the
Secondary Server
It is used to download the files from the secondary Web server when the primary
Web server is not available
-

23. Web Thin Client
Web Tunneling Gateway
- Installation
 Used on the case when the port 1234 is blocked by Firewalls
 Installs an extension on IIS (IndWebSvc)
 Installation: The installer is located at InduSoft Web Studio
v7.1BinWebTunnelingGateway.exe
Note: Follow the additional instructions related to ISAPI and CGI
Restrictions, as well as Handler Mapping on the Help system
- Configuration
 On the development environment to the Ribbon->Project tab and
click on Web
 On the Data Server IP Address enter the Computer’s IP Address. If
the Web Server is on the same computer as the Project, you can
type the localhost address
 Click on Advanced
 Enable the Web Tunneling Gateway
 Enter the IP Address that needs to be visible by the Web Thin
Client
 In case of Redundant Systems, enter the secondary IP addresses
and Backup URL
 RUN the VERIFY command to save this information on the
project’s web pages

24. Secure Viewer Thin Client
Server Configuration
- Preparing the Project (Data Server)
 Enable TCP/IP Server Task
Your project is ready to be served to a Secure Viewer Thin Client
- Preparing the File Server (2 options)
1. Use a Web Server and configure the Root directory to point to the Project’s root folder
(folder where the .app is). OR
2. Share on the network the Project’s root folder
 Open Firewall port 1234 (InduSoft TCP/IP Server), and, if using http, port 80
- Running the Server Application
 Call the Runtime (make sure that the Web Server is running in case of http)
- Additional Optional Configuration
 If using Redundant Systems, repeat the steps above on the Secondary Server computer
 If you want to use Web Tunneling Gateway, follow the same instructions to enable it as
on the previous topic

25. Secure Viewer Thin Client
Client Installation and Configuration
 Install the Secure Viewer application (ThinClientSetup.exe)
 Run the InduSoft Secure Viewer Thin Client Configuration
 On the Data Server IP Address, enter the Server’s IP or Name
 On the URL field, configure the path to the Server’s .App file
 If you are using a shared folder, you will enter here the path as in the example below:
ComputerName<Path>ProjectName.app
 If you are using a Web Server, enter the URL to the .App file, as in the example below:
http://computer name/ProjectName.app
 Configure the other parameters, such as Secondary Server information, WTG, etc…

26. Mobile Access (v7.1)
Project Configuration
 Requires IIS – No additional configuration required!!!
 On the development environment to the Ribbon->Project tab and click on Mobile Access
 Alternatively, on the Project Explorer TreeView, you can go to the Graphics tab, expand the
Thin Client folder and open the Mobile Access configuration
 You can configure Alarms, Trend Tags and Widgets for any Tag
 You can create areas and Sub-areas with different configurations
 Enable the TCP/IP Server runtime task
 Call the Runtime!
 On any browser, including from Tables and mobile, type http://<ComputerIP>/MA

27. Mobile Access Tabular
Project Configuration
 Requires IIS (ASP) – Configure it to point the Project’s folder, or Web, or WebSMA subfolders
 On the development environment to the Ribbon->Project tab and click on Mobile Access Tabular
 Alternatively, on the Project Explorer TreeView, you can go to the Graphics tab, expand the Thin
Client folder and open the Mobile Access Tabular configuration
 You can configure the Tags that you want to display or control as well as Alarm Configurations
 Enable the TCP/IP Server runtime task
 Call the Runtime!
 On any browser, including from Tables and mobile, type http://<ComputerIP>/<Path>/logon.asp

28. Non-Windows RDP Access
Server Configuration
 Configure a Windows 2008 R2 Server Roles for Remote Desktop Sessions and Remote
Desktop Sessions host
 Configure additional settings, such as Network Authentication Level, License Mode,
Groups and Users, Audio and Video playback option, etc…
 Install and Configure the SecureViewer on the Server
 Configure the User’s property to launch InduSoft Secure Viewer on LogOn
(Server Manager->Configuration->Local Users and Groups->Users->Properties
Enviroment tab->Starting Program->Start the Following Program on LogOn
Configure it to start the InduSoft Secure Viewer Thin ClientViewer.exe
 Use a Remote Desktop Application to connect to the Server, such as
- PocketCloud: For devices powered with iOS (iPads, iPhones, etc)
- Remote RDP: For devices powered with Android (Tablets or phones)
- Microsoft Remote Desktop Connection: For computers powered with Mac OSX
InduSoft has a special TechNote for this case

30. Main Topics
Installation
File Server communication
Data Server communication
Updated product
Updated project
Security

31. Troubleshooting
Web Thin Client requires the Plug-in ISSymbol.ocx. If you want it to be installed by automatically
downloading it from the Web Site, you MUST run Internet Explorer as Administrator (right-click, Run as
Administrator)
NOTE: Please notice that the ISSymbol installation file is around 16MB large, so its download process may take a
few minutes. During this download time, you will not see anything happening in the Browser
If you are having problems opening a page that you have already opened before, delete the Temporary
Files from the Browser. This is specially helpful when you do not see the changes that you did on the
Server project
Both Server and Thin Clients should be on the Same IWS version, including Service Pack. Or, at least the
Thin Client (Web or Secure Viewer) version needs to be newer than the Server
If you are going to use IIS do not place your project under your user Documents folder. This folder is
protected by the Operating System. Recommendation: create a specific folder for the project, e.g.
c:Project
When using IIS, you MUST configure the MIME types and open the WWW, http and https services and
ports on the Firewall
Always make sure that the TCP/IP Server Runtime task is Running and the port is configured on the
Firewall
Can’t Start the Web Server? The TCP/IP port 80 is probably being used by another program: Skype,
TeamViewer, CodeSys ENI, GE Cymplicity/Proficy

32. Troubleshooting
Browser Error 404 means that the HTML Page does not exist on that server, but the server does have a Web
Server enabled
If the Web Server cannot be reached (not enabled, or firewall blocked) the error is that the browser could
not connect to the Server and not to the Page
If the page can be reached and you get the Error connecting to Server ‘<IP Address>’, this means that the
Web page was found, that ISSymbol was installed, and that the TCP/IP Server can’t be reached. In which case
Either the TCP/IP Server is not running
Firewall is blocking the port 1234 (most common error)
Wrong IP Address configured on the Data Server IP Address setting
Use the Telnet command to try to connect to the port 1234. E. g.:

34. Email
(US) info@indusoft.com
(Brazil) info@indusoft.com.br
(Germany) info@indusoft-germany.de
USA
Support support@indusoft.com
Web site
(English) www.indusoft.com
(Portuguese) www.indusoft.com.br
(German) www.indusoft-germany.de Brazil
Phone (512) 349-0334 (US)
+55-11-3293-9139 (Brazil)
+49 (0) 6227-732510 (Germany) Germany
Toll-Free 877-INDUSOFT (877-463-8763)
Fax (512) 349-0375