cliu
b85a65250c
Read-only re-check on the shared R1.05 test server plus a diff of the R1.03 and R1.05 manual editions. - installation-security: R1.05 OS list, Defender exceptions, IT security 2.0/3.0, LAPS, automatic configuration merge (jupgutl), PRM chapter, port 34597; setup_check.ps1 gets -Version (default 1.05.00). - data-access: L45 renumbered (new ch. 4 RESTful API), extended OPC UA functions off by default, OPC UA methods (OPCUAC_METHOD_CALL2_DF), Information Model Mapper, ServerConfig.xml in %TLS_SAV_PATH%. - equipment: Modbus unchanged; IEC 104/61850 run as EQT managers (eqtdbg, eqtfrcscn), IEC 61850 report control blocks, upgrade steps. - Issues ISS-076..090; R1.05 notes on ISS-003/008/032/034/061; progress and version-differences updated. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
47 lines
3.4 KiB
Markdown
47 lines
3.4 KiB
Markdown
---
|
|
name: installation-security
|
|
description: >-
|
|
CI Server R1.05 installation, upgrade and Windows/IT security. Use when the user wants to
|
|
prepare Windows for CI Server, check whether a machine meets the setup requirements, install,
|
|
reinstall, upgrade or uninstall CI Server, merge configuration files after an upgrade
|
|
(automatic merge, jupgutl, upgrade report), apply or extend a licence, install CI Server Remote
|
|
Connect, set up Vnet/IP drivers or network addresses, apply the IT Security Tool (IT security
|
|
version 2.0 or 3.0), set up LAPS, check or open firewall ports, manage the CIX_ groups and
|
|
CIX_PROCESS account, install CI Server next to PRM, or run CI Server on a virtual machine.
|
|
Sources IM 36K01C10-01EN and IM 36K01C30-01EN (5th editions).
|
|
---
|
|
|
|
# Installation and security (R1.05)
|
|
|
|
First written for R1.03 (frozen on branch `r1.03`), re-checked against the R1.05 manuals
|
|
(5th editions, Feb. 2026) and the R1.05 test server on 2026-10-08.
|
|
|
|
Background: `knowledge/manuals/IM36K01C10-01EN.md` (Setup) and
|
|
`knowledge/manuals/IM36K01C30-01EN.md` (Security Guide). Known issues:
|
|
`knowledge/manuals/IM36K01A50-01EN.md` (IT Security tool, install path, VMs).
|
|
|
|
Rules:
|
|
- Run the `system-check` skill first.
|
|
- Installing, upgrading, changing Windows settings or IT security needs an elevated session,
|
|
changes the machine and often needs restarts: follow the user's chosen way of working and
|
|
confirm before each step. In *prepare only* mode, produce a checklist for the user.
|
|
- Never copy old setup files over new ones after an upgrade: compare and merge. The R1.05
|
|
automatic merge does not cover every file (Setup summary §3).
|
|
- Before a reinstall or upgrade, set the startup type of *CI Service* and *VAGW Bossd* to
|
|
Manual. From R1.04 VAGW Bossd is stopped and started with `vagwstarter.exe` (Setup summary §3).
|
|
- Read paths from the `TLS_*` variables: the manuals print the default install paths, which
|
|
may not be where CI Server is installed (ISS-086).
|
|
- IT security (IT Security Tool, CIX_ groups, LAPS) is **from docs only** for R1.05: the R1.05
|
|
test server runs Windows Server 2025, where the tool is not supported, and it is not installed.
|
|
|
|
| Task | Where | Status |
|
|
|---|---|---|
|
|
| Check a machine against the setup and security requirements | `tasks/setup-check.md` | verified (R1.03; R1.05 checks run one by one) |
|
|
| New installation (physical, VM, dual-redundant): order of work, Windows settings, Vnet/IP, install, IT security, licence | Setup summary §2 | from docs |
|
|
| Start/stop CI Server and VAGW Bossd, reinstall, upgrade (incl. HAC), extend licence, uninstall | Setup summary §3 | from docs |
|
|
| Upgrade with automatic merge of configuration files (installer checkbox, `jupgutl`, merge report and conflict log) | Setup summary §3 | from docs (files and merge patterns checked on the R1.05 test server) |
|
|
| Install CI Server Remote Connect; web ports | Setup summary §2.4 | from docs |
|
|
| CI Server and PRM on one computer or connected | Setup summary §4 | from docs |
|
|
| Firewall ports for CI Server and drivers | Security Guide summary §3 | from docs (web, DURM, SMDMON, RESTful API ports checked on R1.03 / R1.05) |
|
|
| IT Security Tool (version 2.0 / 3.0), user management types, CIX_ groups/accounts, change service account | Security Guide summary §2, §5, §7 | from docs |
|
|
| LAPS (linked domain management with IT security 3.0) | Setup summary §2.1.6, Security Guide summary §7 | from docs |
|