cliu
83af63ab53
Full manual diffs (C50, R30, C60, L20, C40, L35, R10, R20, J10, L30, L50, P30, G10, C10) and read-only checks on the shared R1.05 test server where the permission system allowed them. Skills and summaries moved to R1.05. Issues ISS-092..129 (gaps 104-107, 114-115, 130-131 unused); ISS-074 closed (manual and software agree), ISS-091 corrected by ISS-119. version-differences: unlisted manual changes and installed-only changes. r105-verification: V5-V9 and new not-tested rows. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
144 lines
9.1 KiB
Markdown
144 lines
9.1 KiB
Markdown
# R1.05 verification checklist
|
||
|
||
Two kinds of R1.05 checks are open after the read-only re-check of 2026-10-08:
|
||
|
||
- **Not tested:** the function is not available on the R1.05 test server, so it cannot be
|
||
tested there at all. The content stays "from docs" and is marked **not tested** with the
|
||
reason. Nothing to do until a suitable system exists.
|
||
- **Awaiting user verification:** Claude could not run the step itself (refused as a remote
|
||
command, needs an administrator, needs the GUI). Claude prepared the steps and expected
|
||
results below; the user runs them on the server or in the GUI and sends the output or a
|
||
screenshot, and Claude records the result in the task file and in `progress.md`.
|
||
|
||
All steps below are read-only: they open forms or print information and save nothing.
|
||
Close every form with *Cancel*.
|
||
|
||
## Not tested on the R1.05 test server
|
||
|
||
| Area | Reason | Where marked |
|
||
|---|---|---|
|
||
| IT Security Tool (version 2.0 / 3.0), `CIX_` groups, `CTM_PROCESS`, LAPS, GPO import | Tool not installed; Windows Server 2025 is not supported by the tool | skill `installation-security`, C10/C30 summaries |
|
||
| Vnet/IP drivers, VAGW Bossd | No Vnet/IP card; not supported on Server 2025 | skill `installation-security`, C10 summary |
|
||
| Upgrade from R1.03/R1.04 with the automatic configuration merge (`jupgutl`, `-c` argument) | Fresh R1.05 install, no upgrade to observe; an upgrade test needs a separate machine | C10 summary, ISS-086 |
|
||
| CI Server with PRM | No PRM | C10 summary, ISS-090 |
|
||
| IEC 60870-5-104 and IEC 61850 (EQT managers, report control blocks, `eqtdbg`, `eqtfrcscn`) | No device and no EQT line on the server | skill `equipment`, L40/L41 summaries, ISS-076–079 |
|
||
| OPC A&E `OPXAES_DIR_ALM`, OPC UA PubSub, imported information model | Needs another client/server or extra server instances | skill `data-access`, ISS-085 |
|
||
| Enterprise operation on the HTML display, RDP Connect, Password Check, custom alarm acknowledgement | No enterprise setup or RDP target; displays must not be changed on the shared server | skill `graphics`, ISS-093, 098, 099 |
|
||
| Storage groups, aggregation, `ITEM_HISTORY` reads, archive | A new storage group needs a CI Server restart; no archive device | skill `history-management`, ISS-103 |
|
||
| Separate CI Portal node, gateway core, setup-file changes, CSP effect on displays | Single node, no gateway licence, shared server | skills `portal-setup`, `system-management`, ISS-111, 116 |
|
||
| Monitoring processes (`int*mon`) | Starting processes on the shared server | skill `system-management` |
|
||
| CENTUM VP virtual test, HIS-TSE connection (G10 ch. 14–15) | No CENTUM VP, no `tls\vagw` | G10 summary, ISS-127 |
|
||
|
||
## Awaiting user verification
|
||
|
||
### V1. `eqpdbg` main info (skill `equipment`, L40 summary §3): **done 2026-10-08**
|
||
|
||
Run by Claude over ssh at the user's request; output as expected (recorded in the L40 summary).
|
||
|
||
On the R1.05 test server, in a normal command prompt:
|
||
|
||
```
|
||
eqpdbg 0 EQPMDC
|
||
```
|
||
|
||
Type `1` (Get main info), Enter, read the output, then `-1` (Exit). Expected: line type 107,
|
||
the Modbus line(s) attached, scan interval (tick) in ms, number of slaves, line load %.
|
||
Do not choose any other action number. Send a screenshot of the output.
|
||
|
||
### V2. Setup check script (skill `installation-security`, task `setup-check.md`): **done 2026-10-08**
|
||
|
||
Run by Claude (temporary copy, deleted afterwards): 12 OK, 5 CHECK, 20 DIFF after fixing the
|
||
firewall check (see `setup-check.md`).
|
||
|
||
Copy `tools/setup_check.ps1` from this repo to a scratch folder on the server, run it in an
|
||
**elevated** Windows PowerShell, then delete the copy:
|
||
|
||
```
|
||
powershell -NoProfile -ExecutionPolicy Bypass -File setup_check.ps1
|
||
```
|
||
|
||
Expected (from the one-by-one checks of 2026-10-08): CI Server 1.05.00 OK; Windows Server 2025
|
||
Datacenter shown as not in the list; DIFF for firewall domain profile, Defender, automatic
|
||
updates, defrag / component cleanup, page file, .NET 3.5, missing `CIX_` groups; CHECK lines
|
||
for IT security. Send the result table (screenshot or text).
|
||
|
||
### V3. Engineering Module forms (skill `data-access`): **form definitions checked 2026-10-08**
|
||
|
||
Claude has no GUI access to the server. Checked instead in the installed form definitions
|
||
(`tls\wap\cfg`): the main menu has the *OPC UA Information Model Mapper* action (dataset
|
||
`UASERVER_MAPPER_DF`); each user in the project tree has *Add API key* (dataset `API_KEYS_DF`);
|
||
the OPC UA client point form has `READ_NODE_INFO` and `REBROWSE`; the method form has node ID
|
||
type, parent object node ID, manual argument fields and no process-area field. Screenshots of
|
||
the open forms are optional.
|
||
|
||
In the Engineering Module on the server (log on as a user with engineering rights), open each
|
||
form below, take a screenshot, and close it with *Cancel*:
|
||
|
||
1. *Tools › OPC UA Information Model Mapper*: the mapper window opens (shows *New Mapping*).
|
||
2. *Authorisation › Users*, any user: the *Add API Key* function exists (do not create a key).
|
||
3. An OPC UA client point form (*New* on an OPC UA station is enough to see it, then
|
||
*Cancel*): the checkbox *Read additional node information* exists.
|
||
4. An OPC UA client method form: fields for node ID type, *Options* tab (parent object node ID)
|
||
and *Arguments* tab; no process-area field.
|
||
|
||
If no OPC UA client line exists on the server, steps 3–4 need one: skip them and say so.
|
||
|
||
### V5. Graphics files (skill `graphics`; ISS-092, 094, 096, 097)
|
||
|
||
Read-only. Copy `C:\Users\Admin\AppData\Local\Temp\claude\C--Claude-ci-server-engineer\…\scratchpad\gfx\collect.ps1`
|
||
(kept in Claude's scratchpad; it only lists names and copies factory files) to a temporary folder
|
||
on the server, run it, send back the files it writes (`Layouts.readme`, factory layouts,
|
||
`jwuiutl.cmd`, `connectrdp.cmd`, `jwuiutl_help.txt`, AOG/symbol/component lists,
|
||
mobileoperator file list), then delete the folder. Also search the mobileoperator chart code for
|
||
`PEN_COUNT_LIMIT`. Expected: `connectrdp.cmd` present, help as on R1.03, AOG list with
|
||
`AOG_OPCUA_Methods` / `AOG_UAC_MethodArg_Call2`.
|
||
|
||
### V6. History checks (skill `history-management`; ISS-100, 101)
|
||
|
||
`hisdbg`, Enter at the node prompt, then `1`, `20`, `6`, `-1` (no other number). Expected: menu −1…22,
|
||
system groups of types 21, 6, 1058, 36, 4; clients such as ITH*, ALH, ADTSTO, LGHUMH, RPTMAN.
|
||
And `type %TLS_ROOT_PATH%\tls\com\history_start.cmd` (also `history_stop.cmd`, `item_start.cmd`,
|
||
`item_stop.cmd`); send the output to compare with R1.03.
|
||
|
||
### V7. Setup File Editor GUI (skill `portal-setup`; ISS-112, 113)
|
||
|
||
Start menu *CI Server › Setup File Editor*, save nothing: Status of `jwuiisg.sup` (expected
|
||
*Default*); open it: tabs Information, General, Client communication, Enterprise, Tuning,
|
||
Compatibility, Mobile Operator, Proxy Service, Security, Access Control; screenshots of General,
|
||
Client communication and Access Control; `dur.sup` General tab shows a cleared *Gateway Core*
|
||
box. Close with *Cancel*.
|
||
|
||
### V8. Start-script extension hook (skill `system-management`; ISS-121)
|
||
|
||
Needs admin and a CI Server restart, so only on a non-shared system or with approval: put
|
||
`cieng_integration_start.cmd` (one line starting `intcpumon -n intcpumon`) in `tls\com`,
|
||
restart, check `durwfp -p intcpumon -t 0` returns 0, remove the file and restart again.
|
||
|
||
### V9. Blocking and string writes (skill `item-engineering`; ISS-129)
|
||
|
||
Needs a decision: temporary sample items on the shared server, block/unblock with `dssqld -m`,
|
||
`itmval -p` with and without `-o`, a 120-character write to a string item of length 100
|
||
(expected 99 characters, status 12); remove everything afterwards.
|
||
|
||
### V4. CI-Eng-Sample on the R1.05 test server: **reduced load tested 2026-10-08**
|
||
|
||
The user approved a reduced load (no history group, no user `CIENG`, no layouts/displays) that
|
||
is removed again afterwards. Scripts: `examples/CI-Eng-Sample/shared/`.
|
||
|
||
- Load: 0 errors in every step; R1.05 accepts the sample's `@VERSION 1.03.00` files.
|
||
- Classes: `DEMO.COUNTER` counts (65 → 68 in 3 s); `TANK1.CALC.VOLUME` = 100 for level 50
|
||
(traditional class); `TANK1.JFLOW.sPerMin` = 2 for inflow 120 (Java class); sub-item
|
||
`TANK1.LEVEL.MAX` follows the level.
|
||
- Modbus loopback (mirror started for the test only): setpoint 1234 → readback 1234,
|
||
`PLC1.COMM_OK` = 1; `eqpdbg 0 EQPCIENG` slave info: `CIENG_PLC` ON_SCAN, line GOOD.
|
||
- OPC UA loopback: after the two certificate moves done by the user, `UA.COMM_OK` = 1 (status
|
||
5), `UA.SRV_STATE` = 0, `UA.LEVEL_COPY` followed `TANK1.LEVEL` (62.5). While the server still
|
||
rejected the client, the Boolean status item showed 0 with status 4 (ISS-080).
|
||
- Remove: 0 errors. Before/after snapshot: all datasets identical (count and name hash), no
|
||
`CIENG*` record left. Left over and cleaned: 34 `dss_*.tmp` files in `tls\lst` (ISS-091),
|
||
`OPXCIENG.log`, the temporary sample copy.
|
||
- Certificates: the test's files (client own certificate `<host>_OPXCIENG.der/.pem`, the
|
||
server certificate trusted in the client store, the client certificate trusted in the
|
||
server store) and the `pkiserver\rejected` folder created by the test were deleted with the
|
||
user's approval. `OPCUAC_PKI_CERTIFICATES_DF` went back from 3 to 1 record by itself: the
|
||
dataset follows the certificate files. The server is back in its original state.
|