About this document Applicable documents 1 About this document Goal and purpose This document describes the commissioning process for the Connect X300 Gateway, Sinteso Portal, and SintesoView. Target group Activity Qualification ● ● IT security officers Support companies when it comes...
About this document Revision history Document overview 1.2 Revision history The reference document's version applies to all languages into which the reference document is translated. The first edition of a language version or a country variant may, for example, be version 'd' instead of 'a' if the reference document is already this version.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art security concept. Siemens’ portfolio only forms one element of such a concept. You are responsible for preventing unauthorized access to your plants, systems,...
2.3 Safety regulations for the method of operation National standards, regulations and legislation Siemens products are developed and produced in compliance with the relevant European and international safety standards. Should additional national or local safety standards or legislation concerning the planning, mounting, installation,...
Page 10
Safety Safety regulations for the method of operation Electrical installations WARNING Electrical voltage Electric shock ● Work on electrical installations may only be carried out by qualified electricians or by instructed persons working under the guidance and supervision of a qualified electrician, in accordance with the electrotechnical regulations.
● Personal injury or damage to property caused by poor maintenance or lack of maintenance 2.4 Standards and directives complied with A list of the standards and directives complied with is available from your Siemens contact. 2.5 Hardening Communication The external DSL router connects the customer network to the Internet/cloud server via the WAN port (X2P1) of the Connect X300 Gateway.
The SSH port is closed automatically after a timeout of 12 hours or if the network is switched off/on. ● A separate SSH key must be requested from Siemens HQ Support for SSH access. The USB ports are closed except for the following: ●...
Page 13
Safety Release Notes WARNING Limited or non-existent fire detection Personal injury and damage to property in the event of a fire. ● Read the 'Release Notes' before you plan and/or configure a fire detection installation. ● Read the 'Release Notes' before you carry out a firmware update to a fire detection installation.
The Sinteso Cloud Apps is an innovative portfolio of Cloud software products for Siemens fire protection systems. It is a collection of Apps that use Cloud technology to connect to the fire protection systems and is designed to assist fire protection companies in digitizing their service and maintenance offering and to increase efficiency while reducing time and travel costs.
4.4 Hardware installation and secure use of Cloud apps Hardware installation requirements ● The Connect X300 Gateway may not be installed on a fire control panel. ● The gateway is not public (i.e. not accessible by building users). Install it behind a locked (i.e. secured) door.
Page 17
Before you start Hardware installation and secure use of Cloud apps Secure use of Sinteso Cloud Apps Only properly trained personnel may use Sinteso Tunnel at the station. Personnel must be able to troubleshoot problems that may occur when the remote configuration fails.
Gateway, and the fire control panel. The various tasks may take place at different times. There are, however, two dependencies that must be considered: 1. An Internet connection to Connect X300 Gateway is required to register the Connect X300 Gateway.
Create a Siemens-ID 5 Order account and subscription 5.1 Create a Siemens-ID You must have a Siemens-ID to order the product using the subscription manager and to use the Sinteso Portal. You can use all ordered Cloud products using a Siemens-ID.
Page 20
11. Go to your e-mail account and select 'Verify my email'. You receive the verification information. Siemens-ID login is now completed. An error message displays if you select 'Verify my email' a second time: The URL can only be used one time.
System (LMS) You must be registered as a Siemens customer. This process applies to Siemens partners outside the USA. 1. Order the appropriate licenses from you Customer Support representative. 2. You receive an email from the License Management System (LMS) with Entitlement ID (license key) to activate the product in Account Manager.
Setup Connect X300 Gateway 6 Setup 6.1 Connect X300 Gateway Operation LED (WD) Operation LED (L1) Internet connection LED (L2) DC 24 V power supply On/Off switch LAN Ethernet port (X1P1) for fire control panel and initial commissioning WAN Ethernet port (X2P1) for Internet...
2. Connect the computer to the Connect X300 Gateway using Ethernet connection X1P1. 3. Connect the Connect X300 Gateway to the Internet using Ethernet connection X2P1. 4. Switch on the gateway and wait until LED WD and LED L1 are permanently green.
You can connect via 'Advanced' > 'Proceed to 169.254.169.254' once the following message displays. 6. Read and accept the 'End User License Agreement'. 7.2.2 Register the Connect X300 Gateway You accepted the license agreement. 1. Enter the 'Username' and the 'Password'. The default for both is 'admin'.
Set up the IP and Proxy address if you are not using a direct Internet connection. A gateway is registered. See Register the Connect X300 Gateway [➙ 23] 1. Connect your computer to the Connect X300 Gateway using Ethernet connection X1P1.
5. Select 'Network' > 'Proxy' to setup proxy addresses and enter the port number for the proxy server. 6. Disconnect the computer from the Connect X300 Gateway via the Ethernet connection X1P1. 7.3 Create and activate a new company in the Cloud The following section describes how to acquire a license using the License Management System (LMS).
Page 27
Service. 4. Select 'Log in / Register'. 5. Enter the log-in data for your Siemens-ID and select ‘Log in'. 6. On the Welcome page, select 'First steps'. 7. Click the link to the activation key (Entitlement-ID from the confirmation email).
Page 28
Commissioning Create and activate a new company in the Cloud 10. (Optional) Select 'Features' to display license details. 11. Check the entries and select 'Activate'. Features and expiration dates are displayed in the Subscriptions tab. The load state is displayed via the license. The subscription is activated after the load time expires.
Page 29
Commissioning Create and activate a new company in the Cloud A6V12153163_en--_e 29 | 52...
The following is a brief description on how to create a site in Asset Manager. Detailed information on Asset Manager is available in document Asset Manager A6V12060067. 1. Select https://assets.bpcloudapps.siemens.com/. The log-in page opens for the Asset Manager. 2. Select 'Log in / Register'.
The number of possible sites and data points depends on the purchased license. Select the Account Manager and 'Subscriptions' . This information is only visible with the role of Fire Administrator. 7.4.2 Register the Connect X300 Gateway Asset Manager is opened. 1. Select 'Sites' and the new site.
Page 32
The 'Add devices' dialog box displays. As an option, you can enter the data in fields 'Custom name' and 'Custom description'. The entries are only visible in the Cloud. 6. Select 'Add'. The Connect X300 Gateway is added to the list 'All devices' and is online. 32 | 52 A6V12153163_en--_e...
Commissioning Register with Asset Manager 7.4.3 Assign distribution Asset Manager is opened. 1. Select 'Sites' 2. Select 'Applications'. 3. Select the device. The 'Assign distribution' dialog box displays. The image may vary from the actual selection. 1. In the 'Select distribution' drop-down list, select option 'FS20 Cerberus EN IP7'. 2.
Copy Site-ID from the SintesoWorks 1. Open the SintesoWorks. 2. Select 'File' > 'Site properties'. 3. Copy 'Site ID'. Register Connect X300 Gateway in the portal The Connect X300 Gateway is registered. 1. Select the App changer 2. Select Sinteso Portal 3.
Commissioning Configuring a Gateway 5. Select the new site with the warning from the site list. 6. Select 'Edit' The 'Edit Site' dialog box displays. ◈ In the 'Applicable Safety Standard' drop-down list, select 'European Standard (EN)'. 1. Enter the Site-ID from the engineering tool in the field 'Site-ID'. The information is available in Site-ID information.
Page 36
Commissioning Configuring a Gateway 2. Highlight the 'FG2004' element in the 'Hardware' task card. 3. Assign the required IP address to the 'FG2004' element in the 'Network' tab under 'IP address'. Information: All setting options in the other tabs of the detail editor have no influence on the behavior of the Cloud Gateway.
Page 37
Commissioning Configuring a Gateway 7. Highlight the following element in the 'Operation' task card: 'Site' > 'Global system configuration' > 'Global behaviour' 8. In the 'Overview' tab under 'Event 'Cloud gateway connection fault' enabled' and 'Event 'Connection to cloud lost' enabled', set whether events relating to the connection to the cloud gateway are to be displayed on the 'PMI' or not.
Page 38
Commissioning Configuring a Gateway Proceed as follows to configure the 'Station' as 'GAP' or 'Secondary GAP': 'Station' is configured as a ↑ router station or ↑ Ethernet station. 1. Open the 'Global system configuration' > 'FS20 network configuration' > 'Ethernet sub-net' elements in the tree view of the 'Network' task card.
Commissioning Initializing the Gateway Fig. 1: Route in the Ethernet sub-net Configuring permanent access for 'SintesoView' 1. Select the 'Hardware' task card. 2. Select the 'Station' for which you wish to configure permanent access for SintesoView. 3. Select the 'SintesoView' tab in the detail editor. 4.
1. Open the network settings of your computer. 2. In the Ethernet properties, enter the static IP address '192.168.200.5'. 3. Connect the computer to the Connect X300 Gateway using Ethernet port X1P1. The IP address of the Gateway is '192.168.200.1'; pinging the Gateway is not possible due to security reasons.
Commissioning Connect tunnel 1. Select 'Commissioning' > 'Download site' in SintesoWorks. The 'Download site' and 'Connect' windows open in SintesoWorks. 2. Select the connection in the 'Connect' window and click on 'OK'. The 'Stations' are listed in the 'Download site' window. 3.
Permanent access must be configured for 'SintesoView' to use 'SintesoView', see 7.9.2 Install Tunnel Connection for the Cloud Login to the https://sintesoportal.siemens.com. 1. In the navigation bar, select 'Sites'. 2. Select one site from the list if you operate multiple sites.
The connection to Sinteso Portal is lost and inconsistent data is saved to the fire control panel. ● Only use the Siemens 'Cloud device' tool for informational purposes and not to connect to the Cloud. Select in this case the function 'Connect' or 'Disconnect' / 'Log out'.
Avoid connection problems Use the 'Disconnect' button to disconnect the Sinteso Portal from the fire control panel. Cause: Using 'Disconnect' or 'Log out' from the Siemens 'Cloud devices' window results in an unstable connection to the Cloud. 7.9.5 Check tunnel connection...
Commissioning Connecting SintesoView 1. Connect to the Sinteso Portal using a tunnel connection [➙ 43]. 2. In the status bar, double-click the 'Cloud devices' symbol. 3. Only analyze the connection entries framed in blue. 4. In the Sinteso Portal, select 'Disconnect'. 7.10 Connecting SintesoView Prerequisites ●...
Commissioning SintesoWorks Remote 4. Select the 'Station' that you wish to display and/or operate and enter a valid PIN. 5. Click on 'OK'. The connection is established. Connect from the Favorites list with 'Station' Enabling for viewing and/or operating the 'Station' with SintesoView is granted. ...
Page 47
Commissioning SintesoWorks Remote Loading an existing 'Site' NOTICE Unauthorized characters in the ↑ 'Site' name or in the path: < > / \ | : ? * " % # 'Site' may not be able to be saved or loaded. ●...
Maintenance Update the Connect X300 Gateway 8 Maintenance 8.1 Update the Connect X300 Gateway The Asset Manager (see section, Working with Connect X300 Devices): ● Updates the operating system ● Resets the password ● Displays service state ● Restarts devices (see Information [➙ 49])
Update process or device activation is failing You have obtained suitable engineering specialist training. You are logged into a Connect X300 device via web interface. 1. Go to Maintenance tab > Device operation section. 2. Choose an operation and click the respective button:...
Page 50
You must contact Siemens customer support before you perform a factory reset. Have the device information ready, such as Activation ID and Serial Number. After Siemens customer support deleted the device in the back office, the device is ready for cloud registration.
Glossary Glossary Ethernet station Participants in the Ethernet sub-net without local connection for the PC. The arrangement of operating and display elements on a fire control panel or on a fire terminal. Includes the LEDs, buttons, the display, and the operation options such as the key switch, fire brigade control and display (FBA), and the EVAC NL Person Machine Interface.