R1.05 re-check: installation-security, data-access, equipment #27

Merged
cliu merged 8 commits from docs/r105-recheck-install-access-equipment into main 2026-10-08 19:13:20 +11:00
Owner

Summary

Read-only re-check of the three skills with the most R1.05 manual changes, against the R1.05 manual editions (Feb. 2026) and the shared R1.05 test server.

  • equipment: Modbus unchanged (datasets, setup files, tools identical to R1.03). IEC 60870-5-104 / IEC 61850 now run as EQT managers (eqt104, eqt850, etaman; tools eqtdbg, eqtfrcscn not in the manual). IEC 61850 report control blocks (IEC61850_RCB_DF), eqt850.sup changes, upgrade steps from R1.03 (L41 App. 1).
  • data-access: L45 section numbers remapped (new ch. 4 RESTful API, port 34597). Since R1.04 OPC UA server A&C/history/PubSub and client A&C are off by default (*_ENABLE_EXTENDED_FUNC). OPC UA methods (MTD_* signals, OPCUAC_METHOD_CALL2_DF), Information Model Mapper, model change events, data types, certificate-expiry warning. ServerConfig.xml now in %TLS_SAV_PATH%.
  • installation-security: R1.05 OS list, Defender exceptions, IT security 2.0/3.0, LAPS, automatic configuration merge on upgrade (jupgutl), new PRM chapter, port 34597. tools/setup_check.ps1 gets -Version (default 1.05.00).
  • Issues ISS-076..090 (manual vs installed software differences and open questions); R1.05 notes added to ISS-003/008/032/034/061.
  • New knowledge/r105-verification.md: what is not tested (not available on the test server: IT security, Vnet/IP, upgrade merge, PRM, IEC 104/61850, A&E direct alarms, PubSub) and the steps awaiting user verification (V1 eqpdbg main info, V2 setup_check.ps1, V3 Engineering Module forms, V4 decision to load CI-Eng-Sample on the shared server).

Test plan

  • Manual revision tables and text diffs R1.03 → R1.05 for C10, C30, A50, L40, L41, L45, L50, E20 (scratchpad only, no manual text copied)
  • Read-only checks on the R1.05 test server: setup files, tls\src dataset definitions, data dictionary, processes, ports, certificates, firewall, Windows settings; temporary export folder removed; nothing written, started or stopped
  • Sample CI-Eng-Sample qli files: every field used still exists unchanged on R1.05
  • tools/setup_check.ps1 parses without errors (not run)
  • User: V1–V3 in knowledge/r105-verification.md (screenshots), decision on V4

🤖 Generated with Claude Code

## Summary Read-only re-check of the three skills with the most R1.05 manual changes, against the R1.05 manual editions (Feb. 2026) and the shared R1.05 test server. - **equipment**: Modbus unchanged (datasets, setup files, tools identical to R1.03). IEC 60870-5-104 / IEC 61850 now run as EQT managers (`eqt104`, `eqt850`, `etaman`; tools `eqtdbg`, `eqtfrcscn` not in the manual). IEC 61850 report control blocks (`IEC61850_RCB_DF`), `eqt850.sup` changes, upgrade steps from R1.03 (L41 App. 1). - **data-access**: L45 section numbers remapped (new ch. 4 RESTful API, port 34597). Since R1.04 OPC UA server A&C/history/PubSub and client A&C are off by default (`*_ENABLE_EXTENDED_FUNC`). OPC UA methods (`MTD_*` signals, `OPCUAC_METHOD_CALL2_DF`), Information Model Mapper, model change events, data types, certificate-expiry warning. `ServerConfig.xml` now in `%TLS_SAV_PATH%`. - **installation-security**: R1.05 OS list, Defender exceptions, IT security 2.0/3.0, LAPS, automatic configuration merge on upgrade (`jupgutl`), new PRM chapter, port 34597. `tools/setup_check.ps1` gets `-Version` (default 1.05.00). - **Issues** ISS-076..090 (manual vs installed software differences and open questions); R1.05 notes added to ISS-003/008/032/034/061. - **New `knowledge/r105-verification.md`**: what is *not tested* (not available on the test server: IT security, Vnet/IP, upgrade merge, PRM, IEC 104/61850, A&E direct alarms, PubSub) and the steps *awaiting user verification* (V1 `eqpdbg` main info, V2 `setup_check.ps1`, V3 Engineering Module forms, V4 decision to load CI-Eng-Sample on the shared server). ## Test plan - [x] Manual revision tables and text diffs R1.03 → R1.05 for C10, C30, A50, L40, L41, L45, L50, E20 (scratchpad only, no manual text copied) - [x] Read-only checks on the R1.05 test server: setup files, `tls\src` dataset definitions, data dictionary, processes, ports, certificates, firewall, Windows settings; temporary export folder removed; nothing written, started or stopped - [x] Sample `CI-Eng-Sample` qli files: every field used still exists unchanged on R1.05 - [x] `tools/setup_check.ps1` parses without errors (not run) - [ ] User: V1–V3 in `knowledge/r105-verification.md` (screenshots), decision on V4 🤖 Generated with [Claude Code](https://claude.com/claude-code)
cliu added 2 commits 2026-10-08 18:34:07 +11:00
Read-only re-check on the shared R1.05 test server plus a diff of the
R1.03 and R1.05 manual editions.

- installation-security: R1.05 OS list, Defender exceptions, IT security
  2.0/3.0, LAPS, automatic configuration merge (jupgutl), PRM chapter,
  port 34597; setup_check.ps1 gets -Version (default 1.05.00).
- data-access: L45 renumbered (new ch. 4 RESTful API), extended OPC UA
  functions off by default, OPC UA methods (OPCUAC_METHOD_CALL2_DF),
  Information Model Mapper, ServerConfig.xml in %TLS_SAV_PATH%.
- equipment: Modbus unchanged; IEC 104/61850 run as EQT managers
  (eqtdbg, eqtfrcscn), IEC 61850 report control blocks, upgrade steps.
- Issues ISS-076..090; R1.05 notes on ISS-003/008/032/034/061;
  progress and version-differences updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
New knowledge/r105-verification.md lists the R1.05 functions not available
on the test server (not tested) and the read-only steps prepared for the
user to verify on the server or in the GUI (eqpdbg, setup_check.ps1,
Engineering Module forms) plus the CI-Eng-Sample load decision.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
cliu added 1 commit 2026-10-08 18:35:42 +11:00
tools/manual_diff.py: word-level diff of one manual between two doc folders.
version-differences.md: the 20 manuals whose revision tables list only
contact information were diffed; E10 and E30 have real content changes,
the rest wording only. CLAUDE.md: re-checks use the full diff.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
cliu added 1 commit 2026-10-08 18:39:01 +11:00
V1 eqpdbg main info and V2 setup_check.ps1 run read-only on the R1.05
test server (temporary copy deleted). setup_check.ps1 counted
program-limited 'any port' rules (e.g. Remote Desktop Shadow) as allowing
the CI Server ports; now only port rules or any-port rules without a
program limit count. V3 checked in the installed form definitions.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
cliu added 1 commit 2026-10-08 19:10:29 +11:00
Classes, sub-items, Modbus loopback and OPC UA loopback pass on R1.05.
New examples/CI-Eng-Sample/shared/: snapshot, reduced load/remove,
test and DSS temp-file cleanup scripts for shared servers. Before/after
snapshot identical; ISS-091 (dss_*.tmp left in tls\lst); ISS-080 note.
Certificate files of the test await deletion by the user.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
cliu added 1 commit 2026-10-08 19:12:16 +11:00
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
cliu added 1 commit 2026-10-08 19:12:32 +11:00
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
cliu added 1 commit 2026-10-08 19:12:47 +11:00
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
cliu merged commit ed8955872d into main 2026-10-08 19:13:20 +11:00
cliu deleted branch docs/r105-recheck-install-access-equipment 2026-10-08 19:13:20 +11:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: cliu/ci-server-engineer#27
No description provided.