Opening a platform connection to a controller (niagarad)

Connecting to the controller using Workbench demonstrates that the controller is on line and functioning. Workbench provides tools for installing software and commissioning the controller station.
Prerequisites: The controller is new from the factory. The only software on it are factory defaults. It is connected to the same network as the Supervisor PC, has a valid IP address, and its power is on. You are running Workbench on your Supervisor PC.
  1. To open a connection to the platform daemon that is running on the controller, click File > Open > Open Platform.
    The Connect/Open Platform window opens.
    Image

    The daemon runs automatically when the controller is powered up. As shown above, the connection defaults to a secure Type Platform TLS Connection. After initial platform configuration you will always access the platform using this type of secure connection. (TLS stands for Transport Layer Security.)

    For this initial installation purposes only, the system requires a regular platform connection.

    Image
  2. Change Type to Platform Connection and click OK.
    The Authentication window opens and prompts you for your credentials.
    Image

    The factory default Username is tridium. The factory default Password is niagara.

  3. Confirm the factory default credentials, and click OK.
    The platform detects the default credentials and opens the Change Platform Defaults Wizard.
    Image

    The system will not let you continue with default credentials. User names and passwords form the front-line of defense against unauthorized system access.

  4. Follow the wizard, which includes creating a Passphrase, Username and strong Password. Click Next, followed by clicking Finish.
    The passphrase protects the platform’s file system, encrypting the HSQL database when you create a station copy. The Distribution File Installer requires the system passphrase to restore a backup .dist file. The Station Copier requires the same system passphrase to transfer a local file.

    Best practice: Use the same Passphrase for your Supervisor and controller platforms.

    The system completes making the connection between the host and Workbench, and displays the Nav Container View
    Image
  5. Make sure that for Type the Platform TLS Connection is selected from the drop-down list; for Host IP, enter the IP address for the controller; then click OK.
    A secure TLS connection is the default. This protocol provides data encryption and server authentication to prevent malicious hacks into the system.
    The Identify Verification window opens with an error message.
    Image
    The error message indicates that the controller’s server certificate is self-signed. As such, it can encrypt data communication, but it cannot authenticate the server (the controller) to its client ( Workbench). This is because none of the root certificates in the Workbench Trust Store recognize this certificate. Since you know that the controller is a valid server you can accept the self-signed certificate temporarily so as to continue with the login.