Resolving the WinCC "Network is Not Available" Installation Error on VMware Workstation
Engineers deploying SIMATIC WinCC V7.x inside a VMware Workstation or Oracle VM VirtualBox guest frequently encounter the setup-time error The Network is not available. Do you want to reestablish the connection to the network immediately before the OPC Core Components sub-installer is launched. The dialog halts the setup even when the guest OS has a healthy bridged or NAT adapter, and reproducing the failure consumes the better part of a working day when the actual cause is a configuration choice unrelated to the adapter itself.
This reference documents both confirmed root causes, the correct VMware network topology for the WinCC installer, the .NET prerequisite that the Siemens setup relies on, and the verification procedure that proves a clean install.
1. Problem Summary
| Field | Value |
|---|---|
| Symptom | Setup dialog "The Network is not available. Do you want to reestablish the connection to the network?" appears before OPC Core Components is installed. |
| Setup log marker | Fails during the OPC Core Components sub-installer; sometimes during WinCC Explorer registration. |
| Host OS observed | Windows 7 x64, Windows 10, Windows 11 |
| Guest OS observed | Windows XP SP3 32-bit, Windows 7 x86/x64 |
| Hypervisor | VMware Workstation (12.x, 15.x, 16.x, 17.x), Oracle VM VirtualBox 5.x/6.x/7.x |
| Network adapters tried | NAT, Bridged, USB-Wi-Fi passthrough, Host-only — all fail with same dialog when root cause is present. |
| Antivirus state | Disabled in guest; some hosts run ESET, Kaspersky, or Defender with real-time scanning enabled. |
The error string is generated by the Windows Installer bootstrapper that wraps OPC Core Components Redistributable (x86). The bootstrapper performs a WinHttpSendRequest call during component registration; if the call returns ERROR_WINHTTP_CANNOT_CONNECT (12029) or ERROR_WINHTTP_TIMEOUT (12002), the user-facing dialog is displayed regardless of whether the network is actually functional.
2. Root Cause Analysis
Two independent root causes have been confirmed in field deployments. Either can trigger the dialog, and both can coexist.
2.1 Root Cause A — Setup Launched from a VMware Shared Folder
When the WinCC install media is copied into a VMware shared folder (e.g. \\vmware-host\Shared Folders\WinCC_Install\) and Setup.exe is launched from that UNC path, the MSI bootstrapper attempts to resolve the working directory over the VMware shared-folder mini-redirector. The redirector presents the path as an offline network resource during the early phase of msiexec execution. The bootstrapper interprets the redirector's slow response or the LANManager session negotiation as "network not available" and surfaces the dialog.
Symptom signature:
- Setup runs from
E:\WinCC\(a VMware shared folder mounted as drive letter) but not fromD:\WinCC\(a virtual CD/DVD drive with the ISO mounted). - Setup completes on the same VM if the source is relocated to a local NTFS volume, even with the same network adapter topology.
- The dialog appears only when the path prefix is
\\vmware-host\or\\.\vmware-host\.
2.2 Root Cause B — .NET Framework 3.5 Not Enabled in the Guest
WinCC V7.0 SP2 through V7.4 require the .NET Framework 3.5 feature (which provides the 2.0/3.0 CLR) even on Windows 7 or later guests, because OPC Core Components and the WinCC Configuration Studio rely on the 2.0 CLR. Windows 7 ships with .NET 3.5 disabled by default, and VMware guests are no exception. The WinCC setup checks the registry key HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.5 before launching OPC Core Components; if the key is absent, the bootstrapper prompts the user, but if the key is present with an incomplete install, the bootstrapper instead triggers the network re-establishment dialog while it tries to download a feature update from Windows Update.
Symptom signature:
- Fresh Windows XP SP3 or Windows 7 guest with no other Siemens software installed.
- No antivirus in the guest; .NET 3.5 never enabled via Control Panel.
- Dialog appears regardless of which network adapter type is selected.
3. Supported VMware Configuration
| Component | Supported Value | Notes |
|---|---|---|
| Hypervisor | VMware Workstation Pro 12.5.7 or later; VMware Workstation Player 15.5.2 or later | Earlier 12.x builds lack USB3 and shared-folder hardening that affects UNC resolution. |
| Host OS | Windows 7 SP1 x64, Windows 10 20H2 or later, Windows 11 21H2 or later | Windows 11 24H2 may require VMware Workstation 17.5.1 or later to power on guests with the WinCC installer present. |
| Guest OS for WinCC 7.0 SP2 | Windows XP SP3 32-bit, Windows 7 SP1 32/64-bit, Windows Server 2008 R2 | WinCC 7.0 SP2 is not certified for Windows 10 or Windows 11. |
| Guest OS for WinCC 7.4 SP1 | Windows 7 SP1, Windows 10 LTSC 2019, Windows Server 2012 R2 / 2016 / 2019 | Use 64-bit guest for projects larger than 4,000 tags. |
| Guest RAM | Minimum 4 GB; 8 GB recommended for PCS 7 | WinCC Runtime + SQL Server + OPC require 6 GB minimum. |
| Guest disk | 60 GB thin-provisioned SCSI | WinCC with archives needs an additional 20–40 GB. |
| Virtual NIC 1 | Bridged (replicate physical connection) | Required for fixed IP and domain membership. |
| Virtual NIC 2 (optional) | NAT | Use only for outbound Windows Update during .NET 3.5 enablement. |
| CD/DVD | Mount ISO of WinCC install media directly | Do not map a network share. |
| Shared folders | Disabled during installation | Re-enable after the WinCC setup is fully complete. |
| Antivirus in host | Disabled or set to exclude *.iso, msi*.tmp, and the guest VMDK |
Real-time scanning breaks OPC Core Components signing verification. |
4. Prerequisites
- A valid WinCC V7.x install ISO built from the Siemens Automation License Manager or downloaded from the Siemens Industry Online Support portal.
- VMware Workstation Pro or Player installed on the host.
- A Windows XP SP3 or Windows 7 SP1 guest with at least 4 GB RAM and 60 GB disk, fully patched.
- Local Administrator rights inside the guest.
- The 24-character product key for WinCC RT (visible in ALM under "WinCC Runtime").
- Hostname of the guest set to a NetBIOS-compatible string (15 chars or fewer, no hyphens in the first character).
- Static IP address assigned if the runtime will be addressed by STEP 7 or a customer HMI panel.
5. Step-by-Step Resolution
5.1 Mount the ISO Instead of Using a Shared Folder
- Power off the guest.
- In VMware Workstation, open VM > Settings > CD/DVD (SATA).
- Select Use ISO image file and browse to
WinCC_V7.0_SP2.isoon a host NTFS volume that is not mapped as a VMware shared folder. - Tick Connected and click OK.
- Power on the guest and verify Windows Explorer shows the ISO as drive
D:\(or the next free letter).
\Device\CdRom0 device as a local, offline-capable source. It does not invoke the redirector, so the "network not available" trigger condition is never reached.5.2 Disable VMware Shared Folders for the Session
- In VMware Workstation open VM > Settings > Options > Shared Folders.
- Set Folder Sharing to Disabled for the duration of the install.
- Confirm with
net usein the guest that no\\vmware-host\mapping exists.
5.3 Configure the Virtual Network Adapter
- Open VM > Settings > Network Adapter.
- Select Bridged: Connected directly to the physical network.
- Tick Replicate physical network connection state if the host moves between wired and wireless networks.
- (Optional) Add a second adapter as NAT if Windows Update is needed for .NET 3.5.
- From inside the guest, run
ipconfig /alland confirm an IPv4 address on the same subnet as the host.
5.4 Enable .NET Framework 3.5 Inside the Guest
This step is the most frequently missed and is the reason some engineers see the same dialog even after switching to ISO install.
Windows 7 SP1 guest:
- Open Control Panel > Programs and Features.
- Click Turn Windows features on or off.
- Tick .NET Framework 3.5 (includes .NET 2.0 and 3.0).
- Click OK. If prompted, choose Download features from Windows Update.
- Verify with
reg query "HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.5" /v Install. Expected output:Install REG_DWORD 0x1.
Windows XP SP3 guest (offline):
- Insert the Windows XP SP3 installation CD as a second ISO.
- Open
cmdas Administrator. - Run
D:\dotnetfx35.exe /x:%TEMP%\net35(extract to a temp folder). - Run
msiexec /i %TEMP%\net35\wcu\dotNetFramework\dotNetFx35setup.exe /lang:ENU /norestartif a full redistributable is supplied, or copydotnetfx35.exefrom the Windows XP installation media if available. - Confirm with
reg query "HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.5"shows theInstallvalue of1and aVersionof3.5.30729.1or later.
5.5 Disable Host-Side Real-Time Scanning of the Install Tree
- On the host, open the antivirus console (ESET, Kaspersky, Defender, or third-party).
- Add the folder containing the ISO to the real-time exclusion list.
- Optionally, temporarily disable the real-time shield for the duration of the install.
- Reboot the host to ensure the new exclusion path is loaded into the filter driver.
5.6 Begin the WinCC Installation
- Inside the guest, browse to the mounted ISO drive.
- Right-click
Setup.exeand choose Run as Administrator. - Select Package Installation (not "Custom Installation") if only the WinCC runtime is required.
- When the product selection dialog appears, tick WinCC Installation only and clear all other options such as WebNavigator, DataMonitor, or Connectivity Pack unless licensed.
- When the OPC Core Components sub-installer starts, the previously failing dialog will not appear; the progress bar will complete without user interaction.
- Continue through the WinCC Configuration and SQL Server 2008 R2 / 2014 prompts.
- Transfer the WinCC RT license from ALM at the end of the install.
6. Verification Procedure
- Open WinCC Explorer and load a sample project such as
MyProject.MCPfromC:\Program Files\Siemens\Automation\WinCC\WinCC Projects\. - Press the Activate button (the green traffic light) and confirm Runtime starts without OPC red-banner errors.
- Open All Programs > Siemens Automation > SIMATIC > WinCC > Tools > WinCC Diagnosis.
- Verify no yellow or red entries in Connections, Tags, or Alarms.
- From the host, run
winrs -r:<guest> -u:<admin> "reg query \"HKLM\SOFTWARE\Siemens\Automation\WinCC\" /v Version"and confirm a version string such as7.0.2.0is returned. - Reboot the guest twice in a row; WinCC Runtime must auto-start on both boots without manual intervention.
7. VMware Network Adapter Reference
| Adapter Type | Behavior | Suitable for Install | Suitable for Runtime |
|---|---|---|---|
| Bridged | Guest appears as a peer on the LAN with its own MAC and IP from the host's DHCP, or a static IP you assign. | Yes | Yes (recommended) |
| NAT | Guest shares the host's IP and reaches the outside through the host's NAT. Internal network is isolated. | Yes (for Windows Update only) | Acceptable if external clients address the host's port forward |
| Host-only | Private network between host and guest. No external routing. | Yes (if no Windows Update is needed) | Acceptable for isolated lab work |
| Custom (VMnet2..9) | User-defined virtual switch. | Yes | Yes (if routable) |
| USB-Wi-Fi passthrough | A physical USB Wi-Fi adapter is passed into the guest. | Not necessary; bridged is sufficient | Not necessary |
For Step 7 + WinCC to communicate with a real S7 PLC over PROFINET, the bridged adapter must map to a wired Ethernet port on the host, not the Wi-Fi MAC, because PROFINET discovery uses Layer 2 multicast and most Wi-Fi drivers strip LLDP frames.
8. Installation Source Method Comparison
| Source | Behavior | Recommended | Caveat |
|---|---|---|---|
| Mounted ISO via virtual CD/DVD | Bootstrapper reads from \Device\CdRom0; no network stack touched. |
Yes | Requires ~5 GB free on the host. |
| Copy of install media on a local NTFS volume in the guest | Bootstrapper reads from C:\WinCC\; no network involved. |
Yes | Requires ~6 GB free inside the guest. |
| VMware shared folder (host → guest) | UNC path \\vmware-host\Shared Folders\...; redirector may stall. |
No | Triggers the "Network is not available" dialog in many setups. |
| Network share on a Windows file server | UNC path \\server\share\...; depends on SMB signing. |
Marginal | If SMB signing is required by Group Policy, MSI bootstrapper fails to open the file. |
| External USB DVD drive passed through | Physical media presented to the guest as a SCSI CD-ROM. | Yes | Slow; use only when ISO cannot be built. |
| WinCC install files streamed from a SIMATIC Field PG | PG's DVD drive shared over a private link. | Marginal | Same UNC issue as VMware shared folders. |
9. .NET Framework 3.5 Activation Detail
The WinCC V7.0 SP2 setup calls MsiGetProductInfo on the {2BC7B5F4-8C2D-4B9C-9C5E-3A2E1E2F1A3B} product code (placeholder; check your ALM for the actual GUID) to verify .NET 3.5 SP1 is installed. If the call returns ERROR_UNKNOWN_PRODUCT, the OPC bootstrapper initiates a feature-on-demand request over WinHTTP. With the VMware bridged adapter, this succeeds and the install proceeds. With NAT, it succeeds only if Windows Update is reachable. With Host-only or no network, it fails and produces the dialog.
The dism /online /enable-feature /featurename:NetFx3 /all /source:D:\sources\sxs command-line path is the most reliable for Windows 7 SP1 and Windows Server 2008 R2. For Windows XP SP3, .NET 3.5 must be installed from the XP redistributable or the WinCC install media, not from Windows Update (XP is out of mainstream support and the update channel is closed).
10. Troubleshooting Matrix
| Observed Symptom | Likely Cause | Diagnostic Step | Fix |
|---|---|---|---|
| "Network is not available" at OPC Core Components step | Setup source is on a VMware shared folder | Check Get-Location in PowerShell inside the setup; verify the path prefix |
Mount the ISO and reinstall |
| Same dialog after switching to ISO | .NET 3.5 missing in guest | reg query "HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.5" |
Enable .NET 3.5 feature and reboot |
| Same dialog on second host with bridged adapter | Host antivirus is blocking MSI signing verification | Disable real-time shield and re-run setup | Add an exclusion for the install folder |
| Dialog appears, then setup continues when "Yes" is clicked | OPC bootstrapper is doing a one-time WinHTTP probe | Open %TEMP%\Opccore_*.log and look for HTTP 12029 |
Acceptable, but if it repeats, check the bridged adapter |
| Dialog appears 3 or more times during a single setup | MSI is repeatedly trying to call WinHttpSendRequest
|
Inspect setup.log for "WinHttpSendRequest failed" |
Enable .NET 3.5 first, then run setup |
| "Internal Error 2711" follows the dialog | Missing Microsoft.VC90.CRT redistributable |
Check HKLM\SOFTWARE\Microsoft\VisualStudio\9.0\VC\
|
Install vcredist_x86.exe from the WinCC install media |
| Setup completes but WinCC Explorer crashes on launch | Guest video memory < 64 MB; VMware SVGA driver missing | Check dxdiag Display tab |
Allocate 128 MB video RAM; install VMware Tools |
| Runtime starts but tags show "connection failed - no provider" | Bridged adapter is on a Wi-Fi MAC | Check ipconfig /all description field |
Re-bridge to a wired Ethernet port |
| Setup halts at "SQL Server 2014 Setup" with 0x851A001A | SQL Server 2014 not supported on Windows XP SP3 | Check WinCC release notes for SQL compatibility | Use WinCC 7.0 SP3 with SQL Server 2008 R2 on XP |
11. Common Pitfalls
- Assuming a network adapter change will fix the dialog. The bridged/NAT/host-only switch has no effect on root cause A (shared folder) and only a partial effect on root cause B (missing .NET 3.5 with NAT or no network).
- Re-enabling shared folders after Step 7 is installed. Some users disable shared folders for the WinCC install, then turn them back on. If the same VM is later used to add a redundancy partner or a WinCC/Connectivity Pack, the original dialog returns for the new sub-installer. Keep shared folders disabled for the full lifecycle of the project.
- Using a USB-Wi-Fi adapter for the bridged network. USB passthrough creates a separate virtual NIC that does not participate in the host's ARP table. Some PROFINET discovery tools will not see the S7 PLC.
- Installing .NET 4.x first and assuming 3.5 is covered. .NET 4.x is a separate CLR. WinCC V7.0 SP2 through V7.4 require the 2.0/3.0/3.5 CLR. They are side-by-side, not supersets.
-
Skipping the host reboot after changing the antivirus exclusion. Some filter drivers (notably ESET's
eamonm) do not reload their exclusion tables until the next boot, so the first install attempt after the change still fails. -
Using an ISO that was downloaded over HTTPS but extracted with a third-party tool that strips the UDF filesystem markers. WinCC ISOs are authored as UDF; tools that misinterpret them as ISO 9660 will produce a copy that the setup sees as corrupt. Use the original
.isoand mount it natively with VMware Workstation's CD/DVD device.
12. Compatibility Notes for Newer WinCC Versions
For WinCC Runtime Unified (TIA Portal V16 and later) the install path is different: the setup is launched from the TIA Portal installation media and the .NET requirement is .NET Framework 4.7.2 or later plus .NET 6 for the Unified runtime. Refer to the TIA Portal V21 installation guide for WinCC Runtime Unified for the exact matrix. The shared-folder caveat from this article still applies: do not launch the Unified setup from a \\vmware-host\ path.
For Windows 11 24H2 hosts, verify the VMware Workstation build supports the WinCC install media. VMware Workstation 17.5.1 or later is recommended; older 17.0 builds may fail to power on the guest with an "Internal Error" when the WinCC Runtime service is registered.
13. Long-Term Hardening for Engineering Workstations
- Create a base Windows 7 SP1 x64 VM with .NET 3.5 pre-enabled, sysprepped, and converted to a template (
.vmtx). - From the template, deploy a new VM for each WinCC project, mount the ISO from the network share, and never copy the install media into the VM disk.
- Use bridged networking on a wired Ethernet port and assign a static IP that is reserved in DHCP.
- Snapshot the VM immediately after the WinCC install completes, before the project is loaded, to provide a known-good rollback point.
- Document the VMware Workstation build, the host OS build, the guest OS build, and the WinCC SP in the project folder so future migrations are reproducible.
Why does the WinCC installer show "Network is not available" even though the guest has a bridged adapter and can ping the host?
The dialog is generated by the OPC Core Components MSI bootstrapper when the setup is launched from a VMware shared folder (UNC path beginning with \\vmware-host\) or when .NET Framework 3.5 is not enabled inside the guest. The bridged adapter is healthy; the bootstrapper's WinHTTP probe is the trigger. Mount the install ISO as a virtual CD/DVD and enable .NET 3.5 via dism /online /enable-feature /featurename:NetFx3 /all.
Can I install WinCC V7.0 SP2 on a Windows 10 or Windows 11 guest?
No. WinCC V7.0 SP2 is certified only for Windows XP SP3 (32-bit) and Windows 7 SP1 (32/64-bit). For Windows 10, use WinCC V7.4 SP1 or later, or WinCC V7.5. For Windows 11, use WinCC V7.5 SP2 Update 5 or later. The "Network is not available" dialog has the same root causes on newer versions; fix them by using an ISO source and enabling .NET 3.5 (for V7.x) or .NET 4.7.2 + .NET 6 (for Unified runtime).
Do I need .NET Framework 3.5 on a Windows 7 guest if I already have .NET 4.8 installed?
Yes. WinCC V7.0 SP2 through V7.4 require the 2.0/3.0/3.5 CLR because the OPC Core Components and WinCC Configuration Studio are compiled against that runtime. .NET 4.x is a separate, side-by-side CLR. Enable .NET 3.5 from Control Panel > Programs and Features > Turn Windows features on or off, or run dism /online /enable-feature /featurename:NetFx3 /all /source:D:\sources\sxs with the Windows 7 installation media mounted.
Should I use NAT, Bridged, or Host-only for the WinCC installation VM?
Use Bridged for production projects so the WinCC Runtime has a stable IP address that STEP 7 and external clients can reach. NAT is acceptable for a transient install that needs Windows Update to enable .NET 3.5, then switch back to Bridged. Host-only works for fully isolated lab work but cannot reach Windows Update without extra configuration. Avoid USB-Wi-Fi passthrough for the bridged NIC because PROFINET discovery uses Layer 2 multicast that most Wi-Fi drivers strip.
What is the difference between installing from an ISO versus a VMware shared folder?
An ISO mounted as a virtual CD/DVD presents the install files over the \Device\CdRom0 device path, which the Windows Installer bootstrapper treats as a local, offline-capable source. A VMware shared folder presents the files over the SMB redirector as a UNC path; if the redirector is slow or the LANManager session times out during the early MSI handshake, the bootstrapper triggers the "Network is not available" dialog. Mounting the ISO avoids the network stack entirely for the install and is the recommended source.
Where can I find the official compatibility matrix for WinCC V7.x and VMware?
The official SIMATIC WinCC V7.x release notes are published in the Siemens Industry Online Support portal at support.industry.siemens.com under entry ID 64847782 (WinCC V7.0 SP2) and 109746529 (WinCC V7.5). The release notes list the supported guest operating systems and required Windows components. The VMware Workstation compatibility guide is published by Broadcom under the VMware Workstation Pro documentation set.