User Manual

Cyber Security Concepts -
How to Secure the System
4
45
Siemens Application Note
Smart Infrastructure
- Profile
Provide read access to all Windows client accounts, read/write access
to the Web Server account.
 Shared
Provide read access on all files and subfolders to the Web Server account
and all Windows client accounts.
 All other folders
Provide read/write access to the [System Account] only ([System Account]
is configured in SMC).
Do not provide access on these folders to any other account!
4.7 Server Services
The following services are deployed on the Desigo CC Server:
 GMS_WCCILpmon_[Project Name]
 Siemens GMS HDB Service
 Siemens GMS Closed Mode Service
 Siemens GMS SMC ProjectData Service
 SQL Server ([Instance Name]) and SQL Server Browser
Microsoft SQL Server services for the History / MNS Database (if the
database is deployed on the Desigo CC Server).
Additional services are installed depending on the extension modules deployed
(please refer to the respective integration guides), for example:
 OPC Enum
Belongs to the Desigo CC OPC Server
 UA Local Discovery Server
Belongs to the Desigo CC OPC Server
 UA COM Server Wrapper
Belongs to the Desigo CC OPC Server
 Siemens BT Video API Service
This service is part of the Video Extension Module and can also be deployed
on a remote machine as an option.
 VMS Service (Embedded Siveillance VMS200).
Installed separately by users, not by the Video Extension Module.
4.8 LMS – License Management System
The BT LMS (Licensing Management System) provides the common BT Licensing
solution to support the global SI (Smart Infrastructure) initiatives. To harden an
LMS installation, please refer to the following link:
https://wiki.siemens.com/pages/viewpage.action?pageId=98192486