Siemens APACS+ Wonderware HMI Migration: MBI/MNI to PCS 7 Path

David Krause16 min read
SCADA ConfigurationSiemensTechnical Reference
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Siemens APACS+ Wonderware HMI Migration: MBI/MNI to PCS 7 Reference

The Moore APACS distributed control system shipped from the factory with Wonderware InTouch bundled as the OEM "ProcessSuite" package. Plants that standardized on this combination in the 1990s now face an end-of-support cliff: ProcessSuite is on the Siemens mature-product list, no new licenses are sold beyond 2006, and primary support ended in 2010. This reference covers the four viable upgrade paths from Windows 3.1 / InTouch v5 to a current operating system and HMI, with detailed coverage of the MBI/MNI interface hardware, OPC bridging, virtualization, and the Siemens DBA migration toolchain.

Lifecycle warning: ProcessSuite is no longer available for new license sale. Any migration plan must assume that ongoing engineering will be performed on InTouch, PCS 7, or a third-party OPC client, and that the resulting license footprint will not be resalable.

1. Legacy Stack Overview

The Moore APACS controller used Wonderware extensively as its front-end HMI and repackaged it as ProcessSuite. Original ProcessSuite bundles contained InTouch v7.11, the APACS API I/O driver, the 4-Mation configuration utilities, and DDE-based tag database integration. The reference architecture looked like this:

APACS Controller ACM / MFP Module 4-Mation Logic MBI / MNI Card ISA or PCI Slot Module Bus Driver Operator Station Windows 3.1 / NT 4.0 InTouch 5 / ProcessSuite Original Data Flow: ACM module database → Module Bus serial protocol → MBI/MNI card → APACS API driver (DDE) → InTouch tag DB 4-Mation / DBA tool → exports point database and graphics source → rebuilds InTouch window scripts and tag names DDE = Dynamic Data Exchange (legacy) | MBI = Module Bus Interface | MNI = Module Net Interface | ACM = Application Control Module

The original flow was strictly DDE-based: the APACS API DLL exposed points as DDE topics, and InTouch polled them at 250 ms or 1 s intervals. There was no native OPC server in the original ProcessSuite release.

2. MBI vs MNI Hardware: Slot and Bus Selection

The Module Bus Interface (MBI) and Module Net Interface (MNI) cards are the physical bridge between the APACS I/O backplane (Module Bus) and the operator workstation. Selecting the correct variant is the single most common source of migration delays.

Attribute MBI (Module Bus Interface) MNI (Module Net Interface)
Topology Direct local bus connection to a single APACS chassis Network connection to multiple APACS chassis over Module Net
Bus Form Factors ISA half-length, PCI half-length ISA full-length, PCI full-length
Typical Use Single-controller workstations, engineering stations Plant-wide operator consoles, redundant servers
Max Workstations 1 per ACM (with redundant pair) Up to 32 per network segment
Replacement Modern Equivalent PCIe-to-PCI adapter card + legacy PCI MBI Ethernet-attached OPC server over existing Module Net
Driver Required APACS API / Module Bus Driver APACS API / Module Net Driver
Critical PCI migration warning: When replacing an ISA MBI/MNI with a new PCI MBI/MNI in the upgraded PC, Siemens requires that the ACM firmware on every connected controller be upgraded to a revision that supports the new card revision ID. Skipping this step produces intermittent communication dropouts and ACM watchdog faults that are nearly impossible to trace to the card swap. Siemens strongly recommends upgrading the firmware on every I/O module in the affected chassis, not only the ACM.

3. Migration Path Decision Matrix

There is no single correct upgrade path. The decision depends on the remaining life of the APACS controllers, plant cybersecurity policy, and whether the operator graphics need modern features (alarm shelving, historical trending, redundancy).

Path OS Target HMI Target Hardware Reuse Estimated Effort Risk Profile
A. InTouch Upgrade Windows XP Pro SP3 / Win 7 InTouch 9.5 / 10.x with APACS OPC bridge Reuse ISA MBI; new PCI MBI requires ACM FW upgrade Medium Moderate (DDE replacement)
B. Virtualization Windows XP Pro host Original InTouch 5 in MS Virtual PC 2004 USB-to-ISA bridge or pass-through MBI Low High (latency, support, MS licensing)
C. OPC Bridge Windows XP / Win 7 / Server 2008 InTouch + Matrikon OPC for APACS, or ICONICS Genesis64 Existing MBI/MNI or new OPC-attached gateway Medium-High Low (open standard)
D. PCS 7 Migration Windows Server 2008 R2 / 2012 R2 WinCC / PCS 7 OS via Siemens DBA tool Acquisition Station OS migration, controllers retained High Low long-term, high short-term

4. Path A: InTouch Upgrade with OPC Bridge

This path retains the existing operator graphics investment and modernizes only the workstation tier. The defining engineering task is replacing the original DDE-based APACS API with an OPC DA 2.0 / 3.0 server.

4.1 Prerequisites

  • Wonderware InTouch v9.5 or later license with at least the same I/O point count as the legacy database.
  • Matrikon OPC Server for APACS (or equivalent third-party OPC DA server that wraps the APACS API).
  • OPC Link client for InTouch, which ships with the Wonderware I/O Server pack and acts as the DA-to-InTouch bridge.
  • Workstation with either an ISA slot (to retain the legacy MBI/MNI) or a free PCI slot plus budget for ACM firmware upgrades.

4.2 Tag Database Conversion

The original ProcessSuite tag database was stored in DBDump text files exported from 4-Mation. Convert in three steps:

  1. Export the full point list from 4-Mation with Point > Export > All Points. The output is a CSV with columns TagName,Descriptor,EU_High,EU_Low,ScanPeriod,AlarmPriority.
  2. Import the CSV into the new OPC server's configuration utility. Verify that the server populates its address space with the APACS point names exactly as exported; mismatched capitalization breaks InTouch access names.
  3. Regenerate the InTouch access name list using Special > Substitution referencing the new OPC topic. The $(PROJECTNAME)ACC macro must point to the OPC Link topic, not the legacy APACS API topic.

4.3 DDE-to-OPC Translation Table

Legacy DDE Topic OPC Item Path (Matrikon APACS) Notes
=APACS!TagName.F_CV APACS.Channel1.TagName.F_CV Process variable (current value)
=APACS!TagName.SP APACS.Channel1.TagName.SP PID setpoint
=APACS!TagName.MODE APACS.Channel1.TagName.MODE Auto/Manual/Computer mode
=APACS!TagName.ALM APACS.Channel1.TagName.ALM Alarm word (bit-packed)
=APACS!TagName.ENG_HI APACS.Channel1.TagName.ENG_HI Engineering range high

5. Path B: Virtualization for Minimum Engineering Effort

Microsoft Virtual PC 2004 (free download from Microsoft) supports running Windows NT 4.0 and Windows 3.1 inside a virtual hard disk on a Windows XP Pro host. This is occasionally used as a stopgap to preserve a working ProcessSuite application while the rest of the plant moves forward.

5.1 Hardware Pass-Through

Virtual PC 2004 does not natively expose ISA slots to guest operating systems. The two practical workarounds are:

  • USB-to-ISA bridge (e.g., the Arcom ZB88 or equivalent). Latency is typically 50-150 ms per I/O scan, which is unacceptable for closed-loop display but adequate for supervisory monitoring.
  • Network bridge: run a separate physical Windows NT workstation with the MBI card installed, then expose its data to the XP host via Matrikon OPC Tunneller or KEPware's Bridge. The XP host runs InTouch; the NT workstation runs the APACS API driver.
DDE removal in Windows XP: Windows XP removes the Win16 DDE subsystem that ProcessSuite originally relied on. Even within a Virtual PC 2004 guest running Windows NT 4.0, the guest's DDE must be the integration path. Do not attempt to bridge DDE between the XP host and the NT guest — it is not supported and produces connection drops every 30-60 minutes due to XP service hardening.

5.2 Virtualization Suitability Matrix

Use Case Recommended? Rationale
Emergency life-extension (3-12 months) Yes Acceptable latency; preserves working ProcessSuite license
Regulated batch record (21 CFR Part 11) No Audit trail cannot be guaranteed across VM boundary
Cybersecurity policy mandates modern EOL OS No ProcessSuite < XP is itself unsupported
Long-term operations (> 24 months) No Plan PCS 7 or OPC migration instead

6. Path C: OPC Bridge with Third-Party OPC Server

The Matrikon OPC Server for APACS wraps the APACS API and exposes the controller point database as OPC DA 2.05a items. Plants often pair this server with the Wonderware OPC Link client, ICONICS Genesis64, or a custom .NET application for long-term HMI modernization.

6.1 OPC Server Topology

APACS Controller ACM Module Bus 4-Mation Config MBI / MNI Card PCI / ISA Slot OPC Server Workstation Matrikon OPC for APACS OPC DA 2.05a / 3.0 InTouch OPC Link DAServer / OPCLink ICONICS / 3rd-party Genesis64 / Kepware Solid lines = Module Bus (proprietary) | Dashed lines = OPC DA / TCP

6.2 OPC Item Naming Convention

Matrikon's APACS OPC server exposes the namespace as Channel.Device.Group.Tag. For a single-channel single-controller configuration:

Channel1.ACM01.AI_101.PV          // analog input PV
Channel1.ACM01.AI_101.EU_HI       // engineering range high
Channel1.ACM01.PID_201.MODE      // control mode word
Channel1.ACM01.DO_301.STATE      // digital output state

For multi-controller configurations exposed via the MNI, the Device segment carries the controller name as configured in the OPC server.

6.3 Configuring OPC Link in InTouch

  1. Install OPC Link on the InTouch workstation as a Windows service.
  2. Open the OPC Link configuration and add the Matrikon APACS server as a server hierarchy node.
  3. For each tag, define an access name using the pattern OPC_MATRIKON with application Matrikon.OPC.APACS and topic Default.
  4. Define InTouch item names as OPCMatrikon_PV:Channel1.ACM01.AI_101.PV or use the Bridge mode to map the OPC tag name directly to the InTouch tag name.
  5. Set the poll-on-demand flag for non-critical tags and use unsolicited reporting for alarms to reduce bus traffic.
OPC DA vs OPC UA: Matrikon's APACS server exposes OPC DA only. If the target HMI client (ICONICS, WinCC, or a custom .NET application) requires OPC UA, install a DA-to-UA bridge such as Matrikon OPC UA Wrapper or Siemens' own OPC UA server in PCS 7. Do not assume OPC DA will pass through UA-native firewalls without a bridge.

7. Path D: PCS 7 Migration via the Siemens DBA Tool

The Siemens Database Administrator (DBA) tool is the only Siemens-supported path for converting a ProcessSuite / 4-Mation application into a PCS 7 Operator Station (WinCC) project. It preserves the controller-side engineering and produces a complete WinCC graphics and alarm tree on the OS side.

7.1 DBA Tool Workflow

  1. Inventory the existing 4-Mation modules, ACM configuration, and ProcessSuite window source. Export each ACM's database to the .exp format using 4-Mation.
  2. Install the DBA tool on a Windows Server 2008 R2 or 2012 R2 engineering station matching the target PCS 7 V8.x or V9.x version.
  3. Import the .exp files into the DBA. The tool maps 4-Mation modules to PCS 7 CFC charts and SFC sequences.
  4. Compile the WinCC OS project. The DBA translates ProcessSuite AlarmWorx and dynamic objects into WinCC alarm classes and faceplate instances.
  5. Load the compiled OS to the AS-OS network and verify against the live ACM database.

7.2 What the DBA Tool Does Not Convert

  • Custom 4-Mation script blocks that reference external DLLs must be re-engineered in CFC.
  • ProcessSuite Vision graphic extensions (custom ActiveX controls) are not migrated; WinCC re-implements these as WinCC Graphics Designer objects.
  • Operator graphics using legacy Wonderware SmartSymbol objects must be reviewed manually for WinCC symbol library equivalents.

8. ACM Firmware Upgrade Considerations for PCI MBI Migration

Swapping an ISA MBI for a new PCI MBI card is not a like-for-like replacement. The PCI card uses a different bus-mastering mechanism and a new card revision ID that the ACM firmware must recognize.

8.1 Required ACM Firmware Revision

Siemens documentation requires ACM firmware revision 8.4 or later for PCI MBI compatibility on APACS+ controllers. Earlier revisions report a Module Bus Fault with a card-identification mismatch in the ACM diagnostic log.

8.2 I/O Module Firmware

Siemens strongly recommends upgrading all I/O modules in the affected chassis to firmware revision matching the ACM upgrade. This is the most expensive line item in the migration budget and is frequently underestimated.

Component Quantity Assumption Cost Driver?
ACM firmware upgrade 1 per controller Yes — license + 2 hours downtime
I/O module firmware 8-32 per chassis Yes — license + sequential downtime
Module Bus cabling verification 1 per chassis No — reuse existing
PCI MBI card 1 per workstation Yes — hardware cost

9. ProcessSuite Licensing Constraints

ProcessSuite Vision is not equivalent to a generic InTouch license. The ProcessSuite license specifically entitles the user to run the bundled InTouch v7.11 binary and the APACS API driver. Modifying a ProcessSuite-created project to run under a separately purchased InTouch v9.x or v10.x is prohibited by the Siemens/Moore license agreement for the ProcessSuite bundle.

License audit risk: If the existing ProcessSuite application is migrated to a modern InTouch without a corresponding PCS 7 OS license, a Siemens license audit will classify the installation as out-of-compliance. The practical options are (a) PCS 7 migration via DBA, (b) a current InTouch with OPC bridge and no ProcessSuite license claim, or (c) replacement with a non-Siemens HMI such as ICONICS Genesis64.

10. Power and Thermal Sizing for the New Workstation

Replacing the original 1990s operator console with an industrial PC requires verifying that the new chassis can be installed in the existing console furniture without exceeding thermal or power budgets.

10.1 Single-Phase Power Calculation

Typical industrial-grade panel PC: 120 V single-phase, 2.5 A full load.

S = V x I
S = 120 V x 2.5 A
S = 300 VA = 0.30 kVA

10.2 Three-Phase Power Calculation (Operator Console Cluster)

If the operator console is fed from a three-phase 208 V panel and the panel PC draws 2.5 A per phase:

S = sqrt(3) x V_LL x I_line / 1000
S = 1.732 x 208 V x 2.5 A / 1000
S = 0.90 kVA

10.3 UPS Sizing

For a 30-minute holdup on a 300 VA single-phase load at 0.8 power factor:

E = S x PF x t
E = 300 VA x 0.8 x 0.5 h
E = 120 Wh battery capacity minimum

Always apply a 1.25 derating factor for battery aging: 120 Wh x 1.25 = 150 Wh minimum nominal battery capacity.

11. Troubleshooting Matrix

Symptom Likely Root Cause Diagnostic Step Resolution
InTouch tags show "?????" after migration to OPC OPC Link access name uses wrong topic Verify OPC Link hierarchy tree and application name Reconfigure access name to point at Matrikon server topic
ACM reports Module Bus Fault after PCI MBI swap ACM firmware revision < 8.4 Read ACM diagnostic log via 4-Mation Upgrade ACM firmware to 8.4 or later
OPC server loses connection every 30-60 minutes XP service hardening closing DDE bridge Check Event Viewer for DDE termination Replace DDE bridge with native OPC DA client
ProcessSuite window will not open in InTouch v9.x Vision license restriction Verify license key matches ProcessSuite SKU Purchase InTouch license separately or migrate to PCS 7
High latency (> 2 s) on scanned tags USB-to-ISA bridge in virtualization path Measure round-trip with OPC tag simulator Move MBI to physical NT workstation and bridge via OPC
Alarm priority mismatch between APACS and WinCC DBA tool default mapping incorrect Compare APACS AlarmWorx table to WinCC alarm class list Edit alarm class priority mapping in DBA tool
Virtual PC guest cannot see ISA MBI Virtual PC 2004 does not expose ISA Confirm Virtual PC hardware list Use USB-to-ISA bridge or separate physical NT station

12. Verification and Commissioning Checklist

Use this checklist for sign-off after any of the four migration paths:

  1. Tag database parity: export the InTouch / WinCC tag list and compare to the 4-Mation export line-for-line. Mismatches must be < 0.1%.
  2. Alarm round-trip: force-trigger an alarm from the ACM engineering station and verify it appears in the HMI within 2 seconds and clears within 5 seconds of the trigger being removed.
  3. Mode changes: cycle each PID loop through Auto, Manual, Computer, and Cascade modes from the HMI. Verify the ACM database reflects the change within 1 scan period.
  4. Setpoint writes: change the setpoint from the HMI and verify the new value is written back to the ACM and observed on an independent engineering station.
  5. Trending: verify historical trend data is captured at the configured scan rate and that the trend buffer survives an HMI restart.
  6. Redundancy: if the plant uses redundant HMI servers, fail over the primary and confirm the secondary takes over within the configured switchover time.
  7. Backup: verify the backup of the new InTouch / WinCC project and OPC server configuration completes and is restorable to a cold workstation.

13. Reference Documentation

For lifecycle status and Siemens' official position on APACS+ support windows, refer to the Siemens APACS+ Lifecycle Solutions brochure:

For historical context on the Moore-to-Wonderware integration model and the lifecycle considerations that drive modern migration projects, see the Control Engineering editorial coverage of legacy HMI life extension:

For the underlying OPC standards that the modern migration paths depend on, the OPC Foundation maintains the current DA 3.0 specification and conformance test tools:

For Microsoft Virtual PC 2004 (used only in the virtualization path for life extension of Windows 3.1 / NT 4.0 ProcessSuite installations), the official Microsoft download is archived at:

FAQ

What is the difference between an MBI and an MNI card in an APACS system?

An MBI (Module Bus Interface) is a workstation card that connects directly to a single APACS chassis over the Module Bus and is intended for a local engineering or single-controller operator station. An MNI (Module Net Interface) connects to multiple APACS chassis over the Module Net network and is used for plant-wide operator consoles serving up to 32 workstations per network segment. Both are available in ISA and PCI form factors, but PCI cards require ACM firmware revision 8.4 or later.

Can a ProcessSuite application be opened directly in InTouch 9.x or 10.x?

No. ProcessSuite Vision is licensed to run only on the bundled InTouch v7.11 binary. Modifying a ProcessSuite-created project to run on a separately purchased InTouch v9.x or v10.x violates the Siemens/Moore license agreement. The supported migration path is to use the Siemens DBA tool to convert the 4-Mation configuration into a PCS 7 OS (WinCC) project.

Why does my new PCI MBI card produce a Module Bus Fault after installation?

The ACM firmware on the connected controller does not recognize the new PCI MBI card's revision ID. The ACM must be upgraded to firmware revision 8.4 or later before the new PCI MBI can communicate. Siemens recommends upgrading the firmware on every I/O module in the same chassis at the same time to avoid subsequent mismatches.

What replaces the original DDE-based APACS API driver in Windows XP?

DDE was removed from Windows XP. The replacement is an OPC DA 2.05a or 3.0 server such as Matrikon OPC for APACS, paired with an OPC Link client on the InTouch workstation or a direct OPC DA client on a third-party HMI such as ICONICS Genesis64. Native OPC DA is the only stable data path on XP and later.

Is Microsoft Virtual PC 2004 a viable long-term platform for ProcessSuite?

Only as a 3-12 month life-extension measure. Virtual PC 2004 cannot expose an ISA MBI to the guest operating system, so a USB-to-ISA bridge or a separate physical Windows NT workstation is required. Latency of 50-150 ms is typical and is unsuitable for closed-loop operator displays or 21 CFR Part 11 audit trails. Plan a PCS 7 migration or OPC bridge migration within the first year.

What is the minimum ACM firmware revision for a PCI MBI card?

ACM firmware revision 8.4 or later is required for PCI MBI compatibility. Earlier revisions report a card-identification mismatch in the ACM diagnostic log and produce a Module Bus Fault within 60 seconds of the workstation booting with the new card installed.

Does the Siemens DBA tool convert ProcessSuite Vision graphics to WinCC?

Partially. The DBA tool converts standard ProcessSuite AlarmWorx and dynamic objects into WinCC alarm classes and faceplate instances. Custom ActiveX controls, SmartSymbol objects, and Vision-specific extensions are not auto-converted and must be re-engineered manually in the WinCC Graphics Designer.

Back to blog