Fixing WinCC Web Navigator Authorization and Alarm Text Issues

David Krause11 min read
SiemensTroubleshootingWinCC
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Overview

Two symptom clusters appear repeatedly when an integrator installs WinCC V6.0 SP3 together with Web Navigator V6.1 SP1:

  1. The Authorizations dialog opened from Graphics Designer > Object Properties > Miscellaneous > Authorization is empty, so access levels cannot be assigned to buttons, screens, or soft-keys.
  2. The Alarm Control rendered in the Web Navigator Runtime shows the timestamp, status, and priority, but the message text column is blank, even though the same alarms display correctly in the native WinCC Runtime.

Both symptoms share a common root cause family: WinCC V6.0 SP3 is not compatible with Web Navigator V6.1 SP1. Web Navigator V6.1 SP1 was packaged against WinCC V6.0 SP4 runtime libraries and language resources. A secondary contributor is the language configuration of the WinCC project; WinCC V6 ships with five supported configuration languages (English US, French, Spanish, Italian, German) and any other base language – for example Icelandic – produces a fragmented authorization and text-library dataset that Web Navigator cannot resolve.

This reference walks through root-cause analysis, the official compatibility matrix, the free upgrade path to WinCC V6.0 SP4, and field-verified workarounds for sites that cannot immediately upgrade.

Affected Software Versions

Component Installed (Symptomatic) Compatible Required Notes
WinCC V6.0 SP3 V6.0 SP4 SP3 cannot host Web Navigator V6.1 SP1 runtime DLLs
Web Navigator Server V6.1 SP1 V6.1 SP1 Was released only against WinCC V6.0 SP4
Web Navigator Client V6.1 SP1 V6.1 SP1 Browser plug-in, IE 6/7 era
Graphics Designer V6.0 SP3 V6.0 SP4 Authorization list loaded from internal text library
Alarm Logging V6.0 SP3 V6.0 SP4 Text library column resolution affected by SP level
User Administrator V6.0 SP3 V6.0 SP4 Authorizations are project-scope, not editor-scope
OS Windows XP SP2 / Server 2003 Same Regional settings must be English (US)

Refer to the official WebNavigator / WinCC compatibility entry (entry ID 23991658) in the Siemens Product Support database and the master WinCC V6.0 SP4 compatibility document (entry ID 21927773) for the full matrix.

Root Cause Analysis

Why the Authorization Window is Empty

Authorizations configured in the User Administrator are stored in a project-internal authorization table and, simultaneously, exposed as localization keys to the graphics pipeline. The Graphics Designer queries the text library at editor open time using the editor's current configuration language. If the project was created with a base language that is not one of the five supported configuration languages, the authorization entries are written to a localized text-library column that Graphics Designer cannot bind to. The dialog therefore appears empty even though User Administrator shows the rights correctly.

This was reproduced in the field by switching the Graphics Designer configuration language to English (US): the authorization list immediately populated. Switching back to the original (Icelandic) base language re-emptied the list.

Why the Alarm Message Text is Blank

The WinCC alarm text pipeline stores the active Message Text in the text library column that matches the active configuration language at compile time. The Web Navigator Runtime, in contrast, reads the column that matches its own configured runtime language. When those two columns diverge, Web Navigator renders the timestamp, status, and acknowledgment columns but cannot resolve the localized MsgText field, leaving the message column empty. Native WinCC Runtime, which uses the same language column as the editor, displays the text normally.

Why SP Mismatch Amplifies Both Failures

Web Navigator V6.1 SP1 was compiled against WinCC V6.0 SP4 internal structures, including the extended text-library schema, revised authorization enumeration, and the newer alarm-locking service. Running that server against a WinCC V6.0 SP3 project produces partial schema reads. Authorization enumeration succeeds but returns an empty enum; alarm read succeeds for header columns but the MsgText field bind fails. A mixed install is therefore the dominant field cause of the dual symptom.

Critical: Siemens formally documents that Web Navigator V6.1 SP1 is only supported on WinCC V6.0 SP4 (and later WinCC V6.x hot-fix rollups). See the official compatibility note (entry 23991658).

Pre-Upgrade Verification

Before applying any patch, capture a baseline so the upgrade can be reverted without data loss.

  1. Open WinCC Explorer > Tools > Project Duplicator and create a complete project duplicate on a separate drive.
  2. Export all User Administrator accounts and authorization assignments via User Administrator > File > Export to a CSV file. This captures the UTF-16 text the upgrade may need to re-map.
  3. From Alarm Logging, export the active message configuration to a .csv for diff comparison after the patch.
  4. Note the current Computer Properties > General runtime language and the Graphics Designer configuration language. Both must be reconciled post-upgrade.
  5. Stop the WinCC Explorer service and the CCWriteEngine service before installing the hot-fix rollup.

Primary Resolution: Upgrade to WinCC V6.0 SP4

The deterministic fix for both symptom clusters is to align WinCC with the Web Navigator V6.1 SP1 prerequisite. Siemens distributed WinCC V6.0 SP4 as a no-charge upgrade for V6.x license holders.

Ordering the Update Package

  1. Open the Siemens Product Support request referenced in entry 22450372 (WinCC V6.0 SP4 update request).
  2. Log in with the Siemens Support Customer Center credentials associated with the original WinCC license.
  3. Select the OS variant that matches the runtime host (Windows XP Professional SP2, Windows Server 2003 SP1, or Windows 2000 SP4).
  4. Download the WinCC_V60_SP4_HF7.exe (or later HF rollup noted in the compatibility note). The HF rollups are cumulative; only the highest-numbered package is required.

Installation Procedure

  1. Close all WinCC editors, the Explorer, and any client sessions.
  2. Stop the services S7DOS, CCWriteEngine, CCAlgRtServer, and CCMsgServer via services.msc.
  3. Launch the SP4 executable. When prompted, choose Update existing installation.
  4. Reboot when the installer completes; the Web Navigator V6.1 SP1 server service re-registers against the upgraded CCRT.dll, CCAlg.dll, and text-library *.tlb resources.
  5. Open the project once in WinCC Explorer in Configuration mode to force the project-internal schema migration. The Explorer prompts to back-convert; confirm.

Post-Upgrade Reconciliation

  1. Open Computer Properties > General and confirm the runtime language equals the Graphics Designer configuration language.
  2. Open the Text Library Editor. Verify that the column headers read English (US), French, Spanish, Italian, German in that order. Any other column header indicates the original project used a non-supported base language and the relevant texts must be re-entered under one of the five supported columns.
  3. Open User Administrator and re-validate every user's authorization set. The schema migration occasionally drops redundant rows.
  4. Open Graphics Designer and re-open any screen that uses Miscellaneous > Authorization. The list will now populate.

Field-Workable Workarounds (Pre-Upgrade)

If an upgrade cannot be executed in the current maintenance window, the following have been verified in the field as interim mitigations.

Workaround A: Force Configuration Language to English (US)

  1. In WinCC Explorer, select the project root.
  2. Open Tools > Language Settings (or Options > Language in the editor).
  3. Disable every editor language except English (US). Keep English (US) as the runtime default as well.
  4. Re-open Graphics Designer. The Authorization dialog now lists all configured levels.
  5. Re-open Alarm Logging and re-save each message; the text is written to the English column that Web Navigator queries.
Trade-off: Any localized alarm text previously entered under a non-supported base language is hidden when the language is switched to English (US). Document which strings are lost before applying.

Workaround B: Re-Author Alarm Texts in the Web Navigator Runtime Language

  1. Open Alarm Logging > Message Configuration.
  2. For every message that displays blank in Web Navigator, click into the Message Text field for the Web Navigator runtime language column.
  3. Re-enter or copy the text. The field now carries a non-null entry in the Web Navigator's expected column.
  4. Save and re-activate Runtime.

Workaround C: Runtime Reset

Deactivating and reactivating Runtime frequently clears transient language-binding corruption.

  1. In WinCC Explorer, click the Activate button to stop Runtime.
  2. Wait for the CCAlgRtServer and CCMsgServer services to fully stop (verify in services.msc).
  3. Click Activate again. Authorization and alarm text bindings are rebuilt from the current configuration language.

Workaround D: Windows Regional and Anti-Virus Sanity Check

  • Confirm Control Panel > Regional and Language Options is set to English (United States), not English (United Kingdom). Several field reports traced the empty authorization list back to UK locale, which collides with WinCC's US locale binding.
  • Temporarily disable any third-party anti-virus with file-system hooks (McAfee, Trend Micro, Sophos). These have been observed to block the *.tlb text-library writes during configuration-mode saves.
  • Re-test the authorization dialog after each variable change.

Verification Procedure

After applying the primary fix or any workaround, verify both symptom clusters end-to-end.

  1. Authorization list: In Graphics Designer, open any screen, select a button, navigate to Properties > Miscellaneous > Authorization. Confirm the drop-down lists every level defined in User Administrator. Assign User_Admin to a button and save.
  2. User-level enforcement: In Runtime, log on as a non-administrative user. Confirm the button is hidden or disabled per its Authorization setting. Log out and back in as the administrator to confirm the button is visible.
  3. Alarm text in WinCC Runtime: Trigger a configured alarm from the AS (e.g. via the WinCC tag simulator). Confirm the message text appears in the Alarm Control.
  4. Alarm text in Web Navigator Runtime: Connect a browser to the Web Navigator server (typically http://<server>/WebNav), authenticate as the same Web user, and confirm the message text column is populated identically to the native Runtime.
  5. Multi-client: Repeat step 4 from a second Web client on a separate host. If only one client shows blank text, the issue is client-side caching; clear the browser cache and reload.

Troubleshooting Matrix

Symptom Likely Cause Diagnostic Fix
Authorization dialog empty in Graphics Designer Non-supported configuration language (e.g. Icelandic, Norwegian) Check Computer Properties > General > Language Switch to English (US) or upgrade to WinCC V6.0 SP4
Authorization dialog empty after PC restart Stale *.tlb cache Inspect GraCS\<Project>\<Lang>\*.tlb Deactivate/reactivate Runtime, then re-open project
Authorization dialog empty, single user affected Local Windows ACL on CCAuthorization.dll Check file permissions in WinCC project directory Reset ACLs, run as WinCC administrator
Alarm text blank in Web Navigator only Mismatched editor vs Web Navigator language Compare Text Library Editor columns Re-author alarm text in Web Navigator runtime language column
Alarm text blank in Web Navigator AND native Runtime Alarm Logging schema mismatch Open Alarm Logging > Properties, check SP version Upgrade to WinCC V6.0 SP4
Alarm text blank only on second client Browser cache Check %TEMP%\WebNavigator\*.cache Clear cache, restart IE
Both symptoms appear intermittently Anti-virus hooking file-system writes Check AV logs for .tlb writes Add WinCC directory to AV exclusion list
Symptoms appear after hot-fix install Incomplete SP rollback Compare DLL versions in \bin Reinstall full WinCC V6.0 SP4 rollup

Long-Term Path: Migration to TIA Portal WinCC

WinCC V6 is at end of life. Sites still running V6.0 SP4 should plan a migration to WinCC Web Navigator RT Professional within TIA Portal. In TIA Portal, user administration for the Web client is decoupled from the editor language: the Web Navigator client user administration and the WinCC Unified user management provide separate, language-independent authorization stores that are not subject to the V6 text-library binding limitation. Migrating a V6 project is performed through the TIA Portal migration tool with an as-built export.

Configuration Reference: Language Codes

Code Display Name Used In WinCC V6 Editor Used In Web Navigator RT
1033 English (United States) Yes (required) Yes (default)
1036 French (France) Yes Yes
1034 Spanish (Spain, traditional sort) Yes Yes
1040 Italian (Italy) Yes Yes
1031 German (Germany) Yes Yes
1039 Icelandic No – not supported as configuration language Runtime only
2057 English (United Kingdom) Not recommended – collides with US binding Not recommended

FAQ

Why is the Authorization dialog empty in Graphics Designer even though User Administrator shows the levels?

The Graphics Designer reads authorization entries from the project text library column matching its configuration language. If the project was created in a language WinCC V6 does not support as a configuration language (only English US, French, Spanish, Italian, German), the column binding fails and the dialog appears empty. Switch the configuration language to English (US), or upgrade to WinCC V6.0 SP4, which decouples the authorization enumeration from the localized text library.

Is WinCC V6.0 SP3 compatible with Web Navigator V6.1 SP1?

No. Siemens explicitly states that Web Navigator V6.1 SP1 requires WinCC V6.0 SP4 or later. Installing V6.1 SP1 against a V6.0 SP3 host causes empty authorization lists, blank alarm message text, and other schema-binding failures. Refer to Siemens support entry 23991658 for the official compatibility statement.

How do I get the WinCC V6.0 SP4 upgrade?

It is available free of charge to licensed WinCC V6.x users via the Siemens Support Customer Center. Submit the form referenced in Siemens support entry 22450372, select the OS variant matching your runtime host (Windows XP SP2, Server 2003, or Windows 2000 SP4), and download the cumulative hot-fix rollup.

Why does the alarm message text show in WinCC Runtime but not in Web Navigator Runtime?

The active alarm text is stored in the text-library column matching the Graphics Designer / Alarm Logging configuration language, while Web Navigator reads the column matching its own runtime language. When those columns diverge, Web Navigator receives a null MsgText field. Re-author the alarm text in the Web Navigator runtime language column, or align both sides on English (US).

Can I migrate a WinCC V6 Web Navigator project to TIA Portal without losing user authorizations?

Yes. Export the User Administrator table to CSV from WinCC V6, migrate the project using the TIA Portal migration tool, then re-import the CSV into the TIA Portal WinCC Web Navigator RT Professional user administration. The TIA Portal user store is language-independent and does not require the V6 text-library alignment. See the TIA Portal Web Navigator user administration documentation.

Back to blog