Special Considerations for SCADA Enhanced Failover

This topic covers iFIX Enhanced Failover special considerations. It does not cover High Availability for Configuration Hub servers. iFIX Enhanced Failover should not be used on a node participating in a High Availability setup.

If using Enhanced Failover, you must be in Maintenance Mode to make changes to your Database or Model in Configuration Hub. Maintenance Mode allows you to temporarily suspend synchronization between the two SCADA nodes in an Enhanced Failover pair. This allows you to add or modify groups and tags in your iFIX database while the Scan, Alarm, and Control (SAC) program is running. When you enter Maintenance Mode, SCADA synchronization temporarily stops; synchronization between the SCADA pair is suspended. After Maintenance Mode is enabled, you can make changes to the database on the primary node.

Additionally, all changes to a Failover pair’s Database or Model must be made on the Primary node. Changes made to a Failover pair’s Database or Model on the Secondary node cannot be published.

Every time you make a change in the configuration and publish, the data is reloaded in the configuration and the driver is restarted. This is important to know if you are making changes on a live system. You will NOT need to restart iFIX after you make any changes in the Configuration Hub. However, after you exit Maintenance Mode, you will need to stop and restart the driver from Mission Control on the secondary in order to pick up the configuration changes.

Using Configuration Hub with iFIX Enhanced Failover

In an Enhanced Failover setup, both the Primary and Secondary Nodes can register and login to Configuration Hub. See iFIX Plugin Registration.

  1. Once registered, you can login and work with Configuration Hub on the Primary and Secondary nodes.
  2. When making changes to the Database or Model you must be in Maintenance Mode, and those changes must be made on the Primary node.
  3. Changes made while in Maintenance Mode need to be published in Configuration Hub to the iFIX node.
  4. Once all changes to the Database or Model have published, disable Maintenance Mode in the Primary Node. This will allow the Primary Node to synchronize changes with the Secondary Node.

Deleting Servers or Groups

Be aware that when the iFIX SCADA Enhanced Failover pair has the OPC UA Driver configured, any server or group delete operation in the Configuration Hub UI on the Primary will not be deleted on Secondary after the maintenance mode synchronization happens. The Secondary SCADA continues to retrieve data since the server and/or group still exist on the Secondary. As a workaround, manually delete the server and group files from the secondary SCADA, since you cannot run Configuration Hub on the Secondary SCADA. The UA client will continue to receive data from these servers/groups until the OUA driver is restarted (via Mission Control or iFIX restart) on the Secondary SCADA, forcing the driver to reload the configuration from disk, which will no longer have those servers/groups.

Server and Group configuration files are found in the PDB\iFixUaClient folder, in Servers and Groups folders, respectively. Each server and group have its own file. In each of these folders, compare the contents on the Primary node to those on the Secondary. If a file exists on the Secondary but not on the Primary then open the file in a text editor and verify that it is a server or group that was deleted from the Primary. If so, delete that file from the Secondary.

For all other operations, the synchronization works as expected such as: Server Create, Driver tag deletions or updates, Group updates, and so on.

Notes on Certificate Management

When the iFIX SCADA is part of an Enhanced Failover pair and we have enabled the OPC UA Driver on the SCADA, each physical SCADA needs to establish trust with the configured OPC UA Server separately. After both SCADAs can communicate to a remote OPC UA Server individually using their certificates, you can then bring the iFIX SCADAs up as failover pair. Be sure to confirm that you can communicate individually first.

Special I/O Addresses

There are special I/O addresses in iFIX that are very helpful in a Redundancy Configuration for the OPC UA Client. Using the ConnectionStatus and EndpointUrl addresses, you can see the overall connected status of a (logical) server, and the endpoint it is currently using for data.