Overview
Siemens Sentron Power Manager 3.0 is delivered with a built-in OPC DA (Data Access) 2.0/3.0 server that exposes measured values gathered from SENTRON PAC multifunction meters (PAC3100, PAC3200, PAC4200, PAC4220) over Modbus TCP. The OPC DA server runs as an out-of-process COM service (OpcEnum + the Sentron-specific OPC server CLSID) on the configuration PC.
When the WinCC 7 SCADA runtime must consume those values from a different Windows host, the OPC DA contract requires either:
- Both applications on the same workstation (in-proc / local COM),
- A correctly configured DCOM link between the two workstations, or
- A bypass using the native Modbus TCP driver of WinCC 7 against the PAC meters directly.
This reference covers all three paths, with emphasis on the DCOM-free Modbus TCP route that eliminates the entire OpcEnum / LaunchPermission / AccessPermission matrix that is otherwise mandatory for cross-machine OPC DA.
Prerequisites
| Component | Version / Setting |
|---|---|
| Sentron Power Manager | 3.0 or 3.1 (includes OPC DA server) |
| WinCC | 7.0 / 7.2 / 7.3 / 7.4 / 7.5 (RT or RC) |
| Operating system (Power Manager host) | Windows XP SP3 (legacy) or Windows 7 SP1 (32-bit recommended by vendor) |
| Operating system (WinCC host) | Windows 7 SP1 / Windows 10 LTSC / Windows Server 2008 R2 minimum |
| PAC meters | SENTRON PAC3100 / PAC3200 / PAC4200 / PAC4220 with Modbus TCP enabled (default port 502) |
| Network | TCP/IP reachable both ways, ICMPv4 allowed, same subnet or routed |
| User accounts | Matching or trusted domain accounts on both PCs (required for DCOM path) |
Verify PAC reachability first with a Modbus poll tool before touching OPC:
modpoll -m tcp -p 502 -a 1 -r 1 -t 4 -c 1 192.168.10.50
If that returns a non-zero register, the meter is reachable and the OPC server is not required at all.
Architecture Comparison
| Option | Software on each PC | DCOM needed? | Maintenance effort | Failure surface |
|---|---|---|---|---|
| A. Local OPC (single PC) | Sentron PM + WinCC on one workstation | No | Lowest | Single point of failure |
| B. Remote OPC via DCOM | Sentron PM on PC1, WinCC on PC2 | Yes, both sides | High | Firewall, identity, COM security, OpcEnum, callback DCOM, RPC ports |
| C. Direct Modbus TCP | WinCC on PC2, native driver to PAC | No | Low | One TCP port per meter |
For new installations, prefer Option C. Use Option A when consolidating hardware. Use Option B only when the meter is already aggregated inside Power Manager and that consolidation has business value.
Option A — Local OPC Server (Avoid DCOM Entirely)
Install the WinCC 7 SCADA runtime on the same physical or virtual machine that hosts Sentron Power Manager 3.x. With both processes in the same logon session, the OPC client (WinCC) and the OPC server (Power Manager) negotiate COM locally, so no DCOM is involved.
- Install Sentron Power Manager 3.x and confirm the OPC DA service registers. Open Component Services → Computers → My Computer → DCOM Config and verify a Sentron-related application is listed.
- Install WinCC 7 on the same host. Select the WinCC OPC channel component during setup.
- In the WinCC Explorer, add a new OPC Channel → OPC DA connection. Browse the local computer; the Sentron Power Manager OPC server appears automatically.
- Insert tags by browsing the server namespace or entering ItemIDs manually (ItemIDs in Sentron follow the form
Channel.Device.Tagsuch asLine1.PAC4200.U_L1_N).
Option B — Remote OPC via DCOM (Two-PC Architecture)
When the topology mandates two PCs, configure DCOM end-to-end. The official Siemens procedure for the equivalent SIMATIC NET OPC server is documented in Siemens Support Entry 22033262 — "How do you get remote access to the SIMATIC NET OPC server?" The same procedure applies to the Sentron Power Manager OPC server, because it also exposes its COM object through OpcEnum on the same DCOM port range.
B.1 — Required Windows firewall and RPC ports
| Port | Protocol | Purpose |
|---|---|---|
| 135 | TCP | RPC Endpoint Mapper (always required) |
| 5000-5020 | TCP | OPC callback / dynamic RPC range (Sentron uses ~5003-5005) |
| 137, 139 | TCP/UDP | NetBIOS (legacy; can be disabled if not used) |
| 445 | TCP | SMB for DCOM launch and authentication |
B.2 — DCOM configuration procedure
- On the Power Manager PC, open
dcomcnfg.exe. - Navigate to Component Services → Computers → My Computer → DCOM Config.
- Locate the Sentron OPC server entry (right-click → Properties if the name is truncated; the CLSID is vendor-specific and can be confirmed with the Sentron 3.x installation log).
- General tab: Authentication Level = Connect. Identity = Interactive User (single-user setup) or This User with a domain service account (recommended for unattended WinCC service).
- Location tab: enable Run application on this computer.
-
Security tab:
- Launch and Activation Permissions: add the WinCC service account, grant Local Launch, Remote Launch, Local Activation, Remote Activation.
- Access Permissions: add the same account with Local Access and Remote Access.
- Configuration Permissions: leave at defaults (Administrators).
- On the WinCC PC, open
dcomcnfg.exeand add the same account to Default Security tab (Access, Launch, Configuration) — required for the client side to launch the proxy. - Windows Firewall → Inbound Rules: enable Distributed Transaction Coordinator (RPC) and OPC Enumerator (OpcEnum) on both machines. The OpcEnum rules are not pre-installed; add custom rules for TCP
135and the dynamic OPC range 5000-5020. - Restart the
OPCEnumservice on both machines:net stop OpcEnum && net start OpcEnum.
B.3 — Verify the COM link with OPC Scout
OPC Scout is shipped with SIMATIC NET and acts as a generic OPC DA client. It is useful to isolate whether a failure is on the DCOM layer or on the WinCC configuration layer.
- On the WinCC PC, launch OPC Scout V10 (Start → SIMATIC → SIMATIC NET → OPC Scout).
- Click Add Server → select the network computer name of the Power Manager PC.
- If the Sentron server appears in the list, DCOM is working.
- Add a group, drag tags from the namespace, observe the values refresh at the configured update rate (default 1000 ms for PAC).
If OPC Scout cannot enumerate the remote server, the issue is at the DCOM / RPC / firewall layer — not at WinCC. Do not touch WinCC until OPC Scout succeeds.
Option C — Direct Modbus TCP from WinCC 7 (Recommended)
WinCC 7 includes a native Modbus TCP channel driver that polls Modbus registers directly. The PAC meters expose all relevant values (voltage, current, power, energy, THD, status) as standard Modbus holding registers, documented in the PAC4200 Modbus address list.
C.1 — Verify the PAC Modbus map
Common PAC4200 registers (function code 0x03, holding registers, base address 1 in the manual):
| Register (1-based) | Function code | Value | Unit | Scaling |
|---|---|---|---|---|
| 1 | 0x03 | Voltage L1-N | V | × 0.1 |
| 3 | 0x03 | Voltage L2-N | V | × 0.1 |
| 5 | 0x03 | Voltage L3-N | V | × 0.1 |
| 13 | 0x03 | Current L1 | A | × 0.001 |
| 15 | 0x03 | Current L2 | A | × 0.001 |
| 17 | 0x03 | Current L3 | A | × 0.001 |
| 25 | 0x03 | Active power L1 | W | × 1 |
| 27 | 0x03 | Active power L2 | W | × 1 |
| 29 | 0x03 | Active power L3 | W | × 1 |
| 801 | 0x03 | Total active energy, import | Wh | × 1 |
| 803 | 0x03 | Total active energy, export | Wh | × 1 |
C.2 — Configure the Modbus TCP channel in WinCC Explorer
- Right-click Tag Management → Add New Driver → select
MODBUS TCPIP.MODBUSTCPfrom the list (the channel is part of the standard WinCC 7 install). - Create a Connection per PAC meter. Properties:
- IP address:
192.168.10.50(example) - Port:
502 - Station address (Modbus unit ID):
1 - Timeout: 1500 ms
- Update time: 1000 ms (do not go below 500 ms on PAC meters — the internal measurement cycle is 200 ms but averaging of the last 10 cycles limits useful throughput)
- IP address:
- Add tags. Tag properties:
- Data type: Float 32 IEEE 754 (for the scaled voltage / current / power values)
- Address: register number in zero-based form expected by the WinCC driver (the WinCC MODBUSTCP driver addresses registers from 0; subtract 1 from the 1-based register number above; e.g. register 1 → address 0)
- Length: 2 words (4 bytes) for Float32
- Swap bytes / words: Yes (PAC sends big-endian / Modbus word order; WinCC expects little-endian word swap on Intel hosts)
WinCC 7 OPC Channel Configuration (when Option B is used)
- In WinCC Explorer, Tag Management → Add New Driver →
OPC.OPCDA. - Right-click OPC Groups → System Parameters: set the OPC server name to the Sentron Power Manager server exactly as it is registered (use the name from
dcomcnfg, not the human-readable label). - Run the OPC Item Browser; if the channel cannot reach the server, the browser returns "Server not found" — that is a DCOM failure, not a configuration failure.
- Add tags by dragging from the browser, or by manually entering the ItemID. The Sentron server uses a hierarchical ItemID structure:
ChannelName.DeviceName.Measurement, e.g.SENTRON.PAC4200_1.VoltageL1N. - Set a sensible update rate (1000-2000 ms). The Sentron OPC server caches reads internally, so hammering at 100 ms only increases network traffic without improving accuracy.
Verification
| Check | Method | Pass criterion |
|---|---|---|
| PAC reachable |
modpoll on TCP/502 |
Register reads return expected scaled value |
| Sentron OPC local | OPC Scout on PM PC | Tags update at configured rate |
| Sentron OPC remote | OPC Scout on WinCC PC pointing to PM PC | Tags update across the network |
| WinCC OPC channel | WinCC Tag Management → OPC Item Browser | All PAC tags visible, no red items |
| WinCC Modbus channel | WinCC tag simulator on a Float32 tag | Value matches handheld multimeter within instrument class |
| WinCC runtime | Graphics Designer → I/O field bound to tag | Value updates on screen, no ... quality indicator |
| Long-term stability | 24-hour logging at 1 s | No timeouts, no disconnects, archive records continuous |
Troubleshooting Matrix
| Symptom | Likely cause | Remediation |
|---|---|---|
| OPC Scout: "Access denied" on remote server | DCOM Access Permissions missing for the WinCC user | Add account under DCOM Config → Server → Security → Access Permissions; restart RPCSS
|
| OPC Scout: server not in list | Firewall blocks 135 / 5000-5020 | Open inbound TCP 135 and 5000-5020 on both hosts |
| OPC Scout: "Call rejected by callee" | Server Identity set to Launching User on a service-mode WinCC | Change Identity to This User with a service account that can log on interactively |
| WinCC OPC channel: tags in red | Sentron OPC server stopped | Start Sentron Power Manager Service; verify in services.msc |
| WinCC Modbus: value stuck at 0 | Byte-swap flag wrong | Toggle Word swap; PAC sends big-endian registers |
| WinCC Modbus: sporadic timeout | Two devices share the same station address | Set unique Modbus unit ID per PAC (default 1 — change to 1, 2, 3, 4 for the four meters) |
| WinCC OPC: slow updates | Update rate below PAC averaging window | Set update rate to 1000 ms or higher |
| Sentron PM: "OPC server not registered" | OPC components not installed (custom PM install) | Reinstall with OPC Server feature enabled |
| Cross-workgroup / cross-domain | No trust between domains | Create matching local accounts with identical passwords on both PCs; restrict NTLM to NTLMv2 |
Field-Proven Caveats
- Windows XP on the Power Manager PC forces NTLMv1 in some configurations; force NTLMv2 in Local Security Policy → Network security: LAN Manager authentication level on the XP host when interoperating with Windows 7.
- The Sentron Power Manager OPC server CLSID changes between major versions (3.0 vs 3.1). Hard-coding the CLSID in WinCC scripts breaks across upgrades; always reference the server by ProgID when scripting.
- When the PAC meter is on a managed switch port with energy-efficient Ethernet (EEE / 802.3az), Modbus TCP may drop connections on link-down events. Disable EEE on the switch port.
- WinCC 7.5 and later ship with the OPC UA channel as well, but the Sentron 3.x OPC server is OPC DA only. A bridge (such as a third-party DA-to-UA wrapper) is required if the SCADA side is OPC UA only.
- When four PAC meters are read by Sentron PM, do not exceed an aggregate poll interval of 250 ms inside Power Manager — the OPC server's internal cache cannot serve WinCC faster than that without dropping tags.
FAQ
Do I need DCOM to read Sentron Power Manager 3.0 from WinCC 7 on a different PC?
Yes, if the data path is OPC DA. WinCC 7 acts as the OPC DA client and the Sentron Power Manager OPC server exposes COM objects only via DCOM on a remote host. To skip DCOM entirely, poll the PAC meters directly with the WinCC Modbus TCP driver.
Can OPC Scout validate the DCOM link before I touch WinCC?
Yes. OPC Scout (shipped with SIMATIC NET) is a generic OPC DA client. If it can browse and read tags on the remote Power Manager PC, DCOM, firewall, and identity are all correct. If it cannot, the fault is below WinCC and you should not adjust the WinCC OPC channel.
What is the Sentron Power Manager OPC server ProgID?
The exact ProgID is registered during installation and appears in Component Services → DCOM Config. The corresponding WinCC OPC channel entry is typically SENTRON.PowerManager or similar. Confirm by running regedit on the Power Manager PC and inspecting HKEY_CLASSES_ROOT for the Sentron CLSID after install.
Which TCP ports must be open for cross-machine OPC DA?
Open inbound TCP 135 (RPC Endpoint Mapper), TCP 445 (SMB for DCOM launch), and the dynamic range 5000-5020 (OPC callback and OpcEnum). The Sentron OPC server typically uses ports in the 5003-5005 range inside that band.
Is WinCC 7 still supported on Windows 10 for this configuration?
WinCC 7.4 SP1 and WinCC 7.5 are supported on Windows 10 LTSC (2019/2021) per the Siemens compatibility tool. Older WinCC 7.0/7.2 versions on Windows XP/7 are out of mainstream support; plan a migration to WinCC 7.5 with the Modbus TCP driver to avoid legacy DCOM configurations.