Overview
Replacing an aging panel PC with a SIMATIC Microbox PC running WinAC while keeping the same AVEVA (formerly Wonderware) InTouch SCADA is a common modernization path in brownfield plants. The core question is whether a software PLC behaves like a hardware S7-300 to external HMI software. The short answer: yes — WinAC presents the same S7 communication interfaces (PROFINET, PROFIBUS DP, TCP/ISO-on-TCP, MPI, OPC DA/UA) that a physical CPU 317 does, with the same fetch/write semantics visible to OPC and DAServer clients.
This reference walks through the three viable integration paths between a WinAC RTX/PLC runtime on a Microbox IPC and AVEVA InTouch:
- Native S7 TCP via DAServer for Siemens (DASS7) — the lowest-friction path.
- OPC DA bridge (WinAC OPC server) to InTouch OPCLink — useful where the InTouch node already trusts a local OPC DA source.
- DASABCIP (CIP/Ethernet/IP) — viable only when the S7-300 firmware exposes the optional “S7-CIP” interface, which 31x CPUs do not by default.
The decision tree favors DASS7 for new builds, OPC DA for legacy Wonderware nodes, and DASABCIP only when the PLC side already runs an AB or third-party controller alongside the S7.
Architecture and Topology
A WinAC installation on a Microbox PC is, from the network's perspective, indistinguishable from a physical S7-300 station. The WinAC RTX runtime binds to a real-time extension of Windows and exposes its process image through the same S7 communication stack that a CPU 315/317 would use. From InTouch's standpoint, the only difference is the rack/slot metadata: a WinAC slot is reported as PC station type “WinLC” or “WinAC RTX” instead of physical S7.
Either the DAServer or the OPC bridge may be co-located on the Microbox PC or installed on a separate SCADA node. Co-location minimizes latency but reduces the SCADA tier's portability; the recommended pattern is to run the DAServer on the SCADA server and let InTouch access it through the platform's native access name mechanism.
WinAC Software PLC Fundamentals
WinAC is Siemens' Windows Automation Center — a software PLC family available in three variants relevant to a Microbox deployment:
| Variant | Real-time layer | PROFINET | PROFIBUS | OPC DA | Typical use |
|---|---|---|---|---|---|
| WinAC PLC | Windows kernel timer | Via CP | Via CP | Yes | Non-deterministic soft PLC, low cost |
| WinAC RTX | IntervalZero RTX64 (real-time extension) | Native PROFINET IO controller | Via CP5601/CP5611 | Yes | Hard-replacement for S7-300; deterministic cycle ≥ 1 ms |
| WinAC ODK | RTX (or WinAC PLC base) | Inherited | Inherited | Yes | C/C++ integration inside the PLC cycle |
For an S7-300 replacement on a Microbox PC, WinAC RTX is the supported choice. Its PROFINET stack is identical to a CPU 317-2 PN/DP and is configured from the same STEP 7 or TIA Portal hardware catalog (under PC Systems → WinLC RTX / WinAC RTX). When InTouch or a DAServer queries for rack/slot it sees a slot 0 PC station with type “WinLC RTX” rather than a physical 317 — most S7 DAServers handle this transparently.
Communications available on WinAC
- TCP/ISO-on-TCP (port 102) — used by DASS7, SIMATIC NET OPC, and TIA-portal online functions.
- PROFINET IO (RT/IRT) — controller role, used for distributed I/O on ET 200S/SP/PN.
- PROFIBUS DP master — requires CP 5601/CP 5611 PCI/PCIe card in the Microbox.
- OPC DA 2.05 / 3.0 — embedded WinAC OPC server, accessible locally on the Microbox.
- S7 MPI — exposed via PC adapter or internal virtual bus for legacy STEP 7 programming.
SIMATIC Microbox PC Hardware Platform
The SIMATIC Microbox product line (IPC227G, IPC277G, IPC427G, IPC627G depending on generation) is Siemens' fanless compact IPC designed for cabinet-mount and edge use. Important characteristics for WinAC deployment:
| Feature | Typical spec (IPC227G / IPC427G) | WinAC implication |
|---|---|---|
| CPU | Intel Atom / Celeron quad-core | Sufficient for WinAC RTX ≤ 8 MB code |
| RAM | 4–16 GB DDR3/DDR4 | RTX reserves a configurable amount; keep ≥ 4 GB free |
| Storage | SSD (M.2 / 2.5") | Use SLC/industrial SSD; wear affects license durability |
| Network | 2× GbE (Intel i210/i211) | Bind PROFINET to a dedicated NIC; second NIC for plant network |
| PCIe | 0–1 slot (mPCIe/PCIe x1) | CP 5601/CP 5613 for PROFIBUS; CP 1625/CP 1628 for PROFINET |
| OS | Windows 10 IoT Enterprise LTSC 2019/2021 | Required by WinAC RTX; disable Windows updates on runtime image |
A two-NIC topology is strongly recommended. The first NIC carries PROFINET to ET 200 stations (real-time, isolated); the second NIC carries the plant Ethernet that reaches the SCADA server. Do not route PROFINET and plant traffic over the same physical port — the DCP/discovery frames will interfere with InTouch's polling.
AVEVA InTouch HMI Architecture
AVEVA InTouch HMI is the operator visualization layer in the AVEVA PI System / System Platform stack. From a connectivity standpoint it is data-source agnostic: any server that exposes tags through one of InTouch's supported I/O mechanisms can be used.
| Access mechanism | Protocol | Typical driver | Update rate | WinAC compatible? |
|---|---|---|---|---|
| SuiteLink | TCP, AVEVA proprietary | DAServer for Siemens (DASS7) | 50–500 ms | Yes (recommended) |
| DDE | DDE / FastDDE | Legacy Wonderware I/O Server | 100 ms+ | Yes (legacy) |
| OPC DA | COM-based OPC | OPCLink (built into InTouch) | 50–500 ms | Yes (WinAC OPC DA) |
| OPC UA | TCP-based OPC UA | IO server with UA wrapper | 100–1000 ms | Indirect (through UA wrapper) |
| DASABCIP (CIP) | EtherNet/IP | DAServer for AB / CIP | 50–500 ms | Not native on S7-300 |
InTouch's Access Name concept binds a tagname prefix to a network node + protocol. In a WinAC project the typical pattern is one Access Name per PLC and one Access Name per OPC source if mixing protocols.
Communication Path Comparison
| Criterion | DASS7 (S7 TCP) | WinAC OPC DA + OPCLink | DASABCIP (EtherNet/IP) |
|---|---|---|---|
| Configuration effort | Low | Medium | High — requires CIP-side routing |
| Data throughput | High (synchronous + asynchronous S7 functions) | Medium (DA subscription overhead) | Medium (CIP I/O messaging) |
| Symbolic addressing | Yes (with STEP 7 symbol export) | Yes (OPC item path) | Limited (tag-based) |
| Fault tolerance | Redundancy via WinAC S7-REDCONNECT | Single point of failure (OPC) | CIP scanner fault handling |
| License cost | Included in AVEVA System Platform | OPCLink included with InTouch | Separate DASABCIP license |
| Plant compatibility | Native Siemens | Vendor-neutral | Requires CIP gateway or 31x-CIP firmware |
| Recommendation | First choice | Legacy / mixed-vendor | Only when AB controller is co-resident |
Prerequisites
Before commissioning the integration, verify that the following hardware, software, and licensing components are in place.
Hardware
- SIMATIC Microbox PC (IPC227G or newer) with two physical GbE ports and an SSD.
- Plant network switch reachable from the SCADA server (managed, with IGMP snooping disabled on PROFINET VLAN).
- SCADA server with a fixed IP and adequate resources to run the AVEVA DAServer (minimum: 4 GB RAM, Windows Server 2016 or newer).
Software
- Windows 10 IoT Enterprise LTSC 2019 or 2021 on the Microbox.
- WinAC RTX 2023 or current release, installed with RTX64 runtime.
- STEP 7 V5.7 or TIA Portal V18+ with the WinAC RTX HSP installed.
- AVEVA System Platform 2020 R2 or newer, including InTouch and the DAServer for Siemens (DASS7).
Licensing
- WinAC RTX license key (Automation License Manager, USB or software-bound).
- AVEVA DAServer runtime license (per server).
- InTouch runtime license for each ViewApp / WindowViewer node.
Step-by-Step: Configuring WinAC RTX on the Microbox
-
Install RTX64. Reboot when prompted. Verify the RTX64 service is running:
sc query RTX64Svc— state must be RUNNING. - Install WinAC RTX. During setup, select “WinAC RTX” and the matching PROFINET option (CP 1625/1628 or onboard Intel).
- Activate the license via Automation License Manager; confirm the license appears in the “Effective” tab.
- Open STEP 7 / TIA Portal and add the PC station: PC Systems → WinLC RTX. Configure slot 1 as WinLC and slot 2 as IE/PROFINET.
- Map the PROFINET interface to the dedicated GbE port and assign the IP. Avoid overlapping the SCADA plant subnet.
- Download the configuration (PC station → target → WinLC). The runtime starts in “RUN” once download is complete.
- Verify WinAC is reachable from the engineering station via “Accessible nodes”. The Microbox should appear with type “PC Station (WinLC RTX)”.
C:\ProgramData\Siemens\Automation\WinACRTX\). Antivirus scans can stall the PROFINET cycle by 100 ms+, breaking deterministic I/O.Step-by-Step: Configuring DAServer for Siemens (DASS7)
- Install the AVEVA DAServer for Siemens on the SCADA server (or co-locate on the Microbox if you accept the single-point-of-failure).
- Launch the DAServer Manager and create a new Siemens TCP/IP port. Set the PLC IP address to the Microbox's PROFINET/plant NIC.
- Configure connection parameters: rack 0, slot 1 (WinLC default). Set the connection type to “PG/OP” or “OP” depending on whether the engineering station will also connect through this channel.
-
Define a topic in Device Groups with a meaningful prefix, e.g.
MBOX_DB. -
Import symbols: export the STEP 7 symbol table to CSV and use the DAServer's symbol importer. Each row becomes an item with the syntax
DB100.DBD0,MW10, or symbolic alias. - Test the connection with the built-in Server Tester. Items should turn green; failure reasons appear in the message log.
- Activate the configuration by clicking Runtime → Save and Activate. The DAServer console will switch to “Running” state.
Sample DAServer port definition (DASPlc.ini)
[SiemensTCP]
Description = WinAC RTX on Microbox
Protocol = Siemens_TCP
PortName = S7ONLINE
HostName = 192.168.10.42
Rack = 0
Slot = 1
ConnectionType = OP
PollRate = 200
Timeout = 3000
Step-by-Step: Configuring the InTouch Access Name
- Open InTouch WindowMaker on the engineering station.
- Navigate to Special → Access Names and click Add.
- Set Name to
MBOX_WINAC. - Set Node Name to the SCADA server (or
localhostif DAServer is co-located). - Set Application Name to
DASERVER. - Set Topic Name to the topic defined above (e.g.
MBOX_DB). - Choose SuiteLink as the protocol.
- Click Save. InTouch will start reading items from the DAServer immediately.
Tag prefix example
Item: MBOX_WINAC:TANK101_LEVEL
Tagname: TANK101_LEVEL
Access Name: MBOX_WINAC
Item: TANK101_LEVEL
Updates: 200 ms (matches DAServer poll rate)
Step-by-Step: Configuring the OPC DA Path (Alternative)
If SuiteLink is unavailable (e.g. very old InTouch or unsupported DAServer version), the WinAC OPC server can be exposed to InTouch through the bundled OPCLink driver.
- On the Microbox, confirm the WinAC OPC server is registered:
opcenum.exe → Siemens WinAC OPC Server → Server State = Running - On the SCADA server, launch OPCLink Explorer and connect to
\<Microbox IP>\Siemens.WinACOPCServer. - Create an OPC Access Name in InTouch with application
OPCLINKand topicdefault. - Reference tags as
OPC_ACCESS:TAGNAME. OPCLink translates between OPC DA and InTouch's tag engine.
Verification
After each stage of configuration, perform a four-step verification to catch regressions early.
| Stage | Tool | Expected result |
|---|---|---|
| WinAC RTX reachability | STEP 7 / TIA → Accessible Nodes | Microbox appears as PC Station (WinLC RTX), status RUN |
| DAServer connectivity | DAServer Server Tester | All items show quality “Good”, values match PLC online view |
| InTouch polling | DBDump / Tag Monitor | Tag values update at configured poll rate, no $Access fault |
| Write-back path | InTouch button bound to a writeable tag | PLC tag changes within one cycle, OPC quality remains Good |
Quick health-check command set
# Ping the Microbox from the SCADA server
ping 192.168.10.42
# Confirm S7 TCP port is open (port 102)
Test-NetConnection -ComputerName 192.168.10.42 -Port 102
# Check WinAC runtime state
sc query WinACRTX
# Check DAServer service
sc query "AVEVA DAServer"
Troubleshooting Matrix
| Symptom | Likely root cause | Diagnostic | Resolution |
|---|---|---|---|
| Microbox not visible in “Accessible Nodes” | PROFINET NIC has no IP or wrong subnet |
ipconfig /all on the Microbox |
Assign correct IP, ensure RTX64 has bound the PROFINET interface |
| DAServer reports “Connection refused” | Windows Firewall on Microbox blocks port 102 |
Test-NetConnection -Port 102 from SCADA |
Add inbound rule for TCP 102 on Microbox, or disable FW on plant NIC |
| DAServer connects but items show “Bad quality” | Rack/slot mismatch | STEP 7 PC station config → Slot 1 type | Set Rack=0, Slot=1 to match WinLC RTX default |
| InTouch tag shows “$Access" | Access Name misspelled or DAServer not running | DAServer Manager → Runtime Status | Correct spelling, start DAServer service |
| Tags update but jitter > 1 s | Plant switch flooded with multicast | Wireshark capture on SCADA NIC | Enable IGMP snooping or separate PROFINET VLAN |
| Write from InTouch silently fails | DB area is read-only in PLC | STEP 7 DB properties → Attributes | Uncheck “Read-only in AS” or use M/PA area |
| DAServer crashes after a few hours | DCOM authentication failure | Windows Event Log → DCOM errors | Set OPC DA path instead; or fix service account “LocalSystem” impersonation |
| WinAC RTX runtime stops cyclically | RTX64 not licensed or license expired | Automation License Manager → Effective | Reactivate license; ensure date/time is correct |
| PROFINET devices go to “Station failure” | Real-time NIC mismatch | STEP 7 → PROFINET IO Diagnostics | Rebind PROFINET interface; do not share with Windows NIC |
Security and Hardening Notes
- Disable SMBv1 and unnecessary Windows services on the Microbox.
- Place the PROFINET and plant segments on separate VLANs; the Microbox's dual NIC design supports this natively.
- Use a service account for DAServer with least privilege; do not run it as Administrator.
- Lock down port 102 with Windows Firewall to only allow the SCADA server's IP.
- Enable audit logging on the WinAC project directory to detect unauthorized program changes.
FAQ
Can a SIMATIC Microbox PC running WinAC connect directly to AVEVA InTouch without an additional CPU?
Yes. WinAC RTX presents the same S7 communication interface as a physical CPU 317. InTouch can read tags from WinAC through the AVEVA DAServer for Siemens (DASS7) over S7 TCP/port 102, or through WinAC's built-in OPC DA server using OPCLink. No hardware S7-300/400 CPU is required.
Does the DASABCIP driver work with WinAC RTX?
Not natively. The DASABCIP driver speaks EtherNet/IP (CIP), which S7-300 CPUs do not expose unless equipped with the optional “S7-CIP” add-on firmware. Use DASS7 instead, and reserve DASABCIP for plants where Allen-Bradley ControlLogix or CompactLogix controllers are present alongside the Siemens hardware.
What is the difference between WinAC PLC and WinAC RTX?
WinAC PLC runs as a Windows kernel-mode application with millisecond-level jitter that depends on Windows scheduling. WinAC RTX runs on the IntervalZero RTX64 real-time extension and delivers deterministic cycle times down to 1 ms. For an S7-300 replacement where PROFINET IRT or fast PROFIBUS DP cycles are required, choose WinAC RTX.
How many tags can InTouch poll from a single WinAC via DASS7?
DASS7 is connection-limited, not tag-limited: a single S7 connection handles several thousand items. InTouch itself can support tens of thousands of tags per node. The practical bottleneck is the Microbox CPU: keep the WinAC OB1 cycle under 50 ms to maintain stable SuiteLink updates at 200 ms poll rate.
Should the DAServer run on the Microbox PC or on a separate SCADA server?
Run the DAServer on a separate SCADA server whenever possible. Co-location is simpler but creates a single point of failure: a Windows update or antivirus scan on the Microbox will interrupt SCADA polling. A separate SCADA server also makes it easier to add redundancy (two DAServers, two network paths) and to harden Windows on the runtime image.