WinCC V7.4 Web Navigator Edge IE Mode: Setup and Troubleshooting

David Krause12 min read
SiemensTroubleshootingWinCC
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Overview

Siemens WinCC V7.4 SP1 Web Navigator was engineered around the legacy Microsoft Internet Explorer (IE) ActiveX plug-in stack. The deprecation of the standalone IE11 desktop application and its removal from Windows 11 / Windows Server 2022 makes it impossible to launch the original WinCC Web Navigator plug-in with a normal browser shortcut. The supported path forward is the Chromium-based Microsoft Edge Internet Explorer Mode (IE Mode), which renders IE-only ActiveX controls inside a Chromium tab. This reference walks through the complete Edge-side configuration, the WinCC Web Navigator client installation, and the resolution of the two field-reported failure modes: a webnavigatorclient.exe installer that loops on a restart prompt, and a published client that is stuck on the Connecting screen.

Scope: WinCC V7.4 SP1 (Update 1 through Update 18 inclusive) running on Windows 10 LTSC 2019 / 2021, Windows 11, or Windows Server 2016 / 2019 / 2022. Standalone WinCC RT, WinCC Server, or WinCC WebNavigator server role.

Background: WinCC Web Navigator and the IE Retirement

Microsoft retired the Internet Explorer 11 desktop application on June 15, 2022, for most Windows 10 SKUs and removed the iexplore.exe binary entirely from Windows 11 22H2 and later. WinCC V7.4 SP1's Web Navigator client depends on the Microsoft WinCC WebNavigator ActiveX control, which uses the MSHTML (Trident) rendering engine plus signed ActiveX hosting. Edge IE Mode re-implements both behaviours inside a Chromium process:

  • The MSHTML engine is loaded in-process as edge.exe --ie-mode for any URL listed in the Enterprise Mode Site List or opened from the ie-mode tab action.
  • ActiveX hosting is supported only when the IE Mode tab is launched in the user's security context (not in a kiosk sandbox).
  • The WinCCWebNavigatorClientSetup.exe (often called webnavigatorclient.exe in field notes) installs the cabinet-signed ActiveX and the WinCCViewerRT runtime components.

See the Siemens Knowledge Base article 109792981 — How do you operate the WinCC V7.4 SP1 WebNavigator with Microsoft Edge? for the vendor's official configuration sequence.

Prerequisites

Component Minimum Recommended
Microsoft Edge (Chromium) 92.0.902.55 (IE Mode stable) 110.0.1587.46 or later (KB5008212 era)
Edge channel Stable Stable (Beta/Dev break IE Mode intermittently)
Windows 10 1909 with IE11 optional feature 21H2 / 22H2 LTSC
Windows 11 21H2 23H2
Windows Server 2016 (Desktop Experience) 2019 / 2022 (Desktop Experience)
WinCC version V7.4 SP1 Update 1 V7.4 SP1 Update 14 or newer
.NET Framework on client 4.7.2 4.8
IIS on WinCC server 10 with CGI / ISAPI 10 with WebNavigator publisher configured
Port (default) TCP 80 (HTTP) TCP 443 (HTTPS with self-signed cert trusted on clients)
Windows 11 24H2 and Windows Server 2025 removed the IE Mode opt-in from Edge 124+ on some channels. If you are commissioning a new fleet, pin Edge to Extended Stable or use WinCCViewerRT.exe as the supported fallback.

Enable Microsoft Edge IE Mode (Single Workstation)

This is the manual sequence used when no Group Policy or Enterprise Site List is pushed from Active Directory.

  1. Open Microsoft Edge and type edge://settings/defaultBrowser in the address bar.
  2. Set Allow sites to be reloaded in Internet Explorer mode to Allow.
  3. Choose Default under How to reload sites if you want Edge to auto-promote IE-mode-eligible pages; choose Don't allow and use the manual tab reload if you want explicit operator control.
  4. Optionally set Let Internet Explorer open sites in Microsoft Edge to Always so legacy shortcuts redirect cleanly.
  5. Close Edge completely (all windows, including the tray icon) and restart it.

Verify the setting persisted:

edge://settings/defaultBrowser

The toggle must report Allowed in red text. If it is greyed out, a Group Policy override is in effect — see the Enterprise Deployment section.

Add the WinCC Web Navigator URL to Trusted Sites

Edge IE Mode respects the same Windows Internet Options security zones that legacy IE used. The ActiveX installation step requires the URL to be in the Trusted Sites zone, and the runtime graphics plug-in will only initialise without a security prompt if the zone is trusted.

  1. Open Edge and type edge://settings/clearBrowserData — skip the clearing step, the goal is just to enter a settings page.
  2. From the Edge menu choose Settings → Cookies and site permissions → Pop-ups and redirects and confirm the WinCC server URL is not blocked.
  3. Open Internet Options from the Windows Run dialog (inetcpl.cpl) or via Edge → Settings → Default browser → Internet Options.
  4. Switch to the Security tab, select Trusted sites, and click Sites.
  5. Uncheck Require server verification (https:) for all sites in this zone if the WinCC WebNavigator is published over plain HTTP.
  6. Add the URL. Use the bare host for HTTP (http://winccsrv) or the FQDN for HTTPS (https://winccsrv.contoso.local). Wildcards (*.contoso.local) are supported.
  7. Click Add → Close → OK.
Important: If the WinCC server uses a self-signed certificate, also import it into Trusted Root Certification Authorities → Local Computer. The Edge IE Mode tab inherits the machine trust store for ActiveX prompts.

Open the WinCC Web Navigator in Edge

  1. Open a new tab in Edge and navigate to the Web Navigator URL, for example http://winccsrv/WebNavigator/ or the configured alias.
  2. If the page loads in modern Edge rendering, click the three-dot menu on the tab and choose Reload in Internet Explorer mode. Alternatively, look for the small IE ring icon in the address bar's right side and click it to enter IE Mode.
  3. When prompted by Edge, choose Open in Internet Explorer mode next time only if you want the URL persisted into the local edge://settings/defaultBrowser site list.
  4. If you still get a blank or modern-rendered page, close the tab, reopen it with Ctrl+Shift+M disabled (do not use the mobile emulator), and retry.

The page should now display the WinCC Web Navigator login. The ActiveX bar at the top will request installation of WinCC Web Navigator Control if it is not yet present.

Install webnavigatorclient.exe

The full WinCC Web Navigator client runtime is installed by running WinCCWebNavigatorClientSetup.exe (sometimes referred to in field tickets as webnavigatorclient.exe). It installs:

  • WinCCWebNavigatorControl.dll (signed ActiveX)
  • WinCCViewerRT.exe and supporting runtime
  • Registry keys under HKLM\SOFTWARE\Siemens\WinCC\Web Navigator\Client
  • WinCC Web Navigator URL Handler for webnavigator://

Launch the installer elevated (right-click → Run as administrator) and follow the wizard. Accept the cabinet signing certificate if the UAC prompt appears. Restart the workstation at the end of the installer when prompted.

Issue 1: webnavigatorclient.exe Restart Loop

Symptom

The installer runs through its UI, reaches the end, and prompts for a restart. After the restart, launching the same installer starts over and prompts for a restart again. Repeating the cycle indefinitely does not clear the flag.

Root Cause

Windows Installer (MSI) records a Pending Reboot flag whenever a previous installer run completed a file-in-use rename, pending registry write, or service restart. WinCC's installer checks the standard reboot-flag registry locations; if any of them is set, it refuses to commit and re-arms the prompt.

Registry key (HKLM) Meaning Safe to delete?
SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired Windows Update flagged a reboot Only after the update itself finishes
SOFTWARE\Microsoft\Updates\UpdateExeVolatile Another MSI is mid-flight After confirming no installer is running
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\InProgress MSI engine busy After confirming no installer is running
SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations File-in-use rename pending After closing all Office and Edge tabs
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon (PendingReboot value) Logon-time reboot pending After verifying no GPO reboot is required

Resolution

  1. Stop the Windows Installer service: net stop msiserver from an elevated command prompt.
  2. Stop the Windows Update service: net stop wuauserv.
  3. Close all Edge, IE-mode, and Office processes. Check tasklist | findstr /i "wincc ie edge".
  4. Back up and clear the registry keys listed above using reg delete or regedit. Example: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired" /f.
  5. Reboot the workstation cleanly. Do not skip — clearing PendingFileRenameOperations without a reboot leaves the file-rename queue in an undefined state.
  6. Re-run WinCCWebNavigatorClientSetup.exe elevated.
Field-proven caveat: Some Windows 10 22H2 systems report a phantom RebootRequired key for up to 48 hours after a cumulative update. If the registry key returns immediately after deletion, install KB5028166 or later to clear the bug, or use DISM /Online /Cleanup-Image /StartComponentCleanup /ResetBase to normalise the update state.

Verification

After successful install, the following files must exist:

%ProgramFiles%\Siemens\Automation\WinCC Web Navigator\Client\WinCCWebNavigatorControl.dll
%ProgramFiles%\Siemens\Automation\WinCC Web Navigator\Client\WinCCViewerRT.exe

And the registry hive HKLM\SOFTWARE\Siemens\WinCC\Web Navigator\Client\InstallPath must point to the install folder.

Issue 2: Web Navigator Stuck on the Connecting Screen

Symptom

A workstation that previously opened the Web Navigator successfully now opens Edge, enters IE Mode, and the WinCC graphic window sits on the splash screen reading Connecting... indefinitely. No error message is displayed, and the progress indicator does not advance.

Root Cause Path

The Connecting splash is the client waiting for the WinCC Web Navigator server to complete its HTTP handshake and push the initial picture. The five typical failure points are listed below in order of frequency observed in the field.

# Cause Diagnostic Fix
1 Web Navigator publisher is stopped on the WinCC server Open WinCC Explorer → Web Navigator → check the publisher status icon Right-click → Publish; verify the IIS application pool WinCCWebNavigator is Started
2 Windows Firewall blocks inbound TCP 80 / 443 on the WinCC server Test-NetConnection -ComputerName winccsrv -Port 80 Enable the predefined World Wide Web Services (HTTP) inbound rule
3 Edge proxy setting forces the IE-mode tab through an intercepting proxy that strips ActiveX edge://settings/systemOpen proxy settings Add the WinCC server to the proxy bypass list
4 TLS mismatch on HTTPS deployment (e.g., server on TLS 1.0 only) Check schannel event log for Event ID 36888 Enable TLS 1.2 server-side or reissue a modern certificate
5 Client-side stale cookie or IE-mode session cache Edge → Settings → Cookies → See all cookies and site data Delete cookies for the WinCC server host and clear edge://settings/clearBrowserDataCookies and other site data

Server-Side Checks

  1. Open IIS Manager on the WinCC server. Expand Sites → Default Web Site and confirm the WebNavigator application is present and its application pool is started.
  2. Right-click the application and choose Manage Application → Browse. The browser should display the WinCC Web Navigator landing page without errors.
  3. From the WinCC Explorer, open Web Navigator → Diagnostics and review the published graphic count. Zero pictures published means the publisher configuration was reset.
  4. Verify the WinCC WebNavigator service is set to Automatic (Delayed Start) and currently in Running state. Restart with net stop "WinCC WebNavigator" & net start "WinCC WebNavigator".

Client-Side Checks

  1. Disable the Edge extension IE Mode Helper if installed — third-party extensions occasionally intercept the IE-mode tab launch and break the ActiveX host.
  2. Open edge://flags and ensure Enable IE Mode is set to Default (not Disabled).
  3. Launch the URL with the --ie-mode-test Edge flag: msedge.exe --ie-mode --ie-mode-test=http://winccsrv/WebNavigator/. If the test page loads, the URL is recognised as IE-mode-eligible.
  4. If still stuck, run WinCCViewerRT.exe /server:winccsrv directly from %ProgramFiles%\Siemens\Automation\WinCC Web Navigator\Client. If the standalone runtime opens the picture, the IE Mode ActiveX host is at fault; if not, the server itself is unreachable.

Alternative: WinCCViewerRT.exe

When IE Mode is blocked by the operating system or by tenant policy, the supported fallback is the WinCCViewerRT.exe runtime. It is part of the same WinCC Web Navigator client install and bypasses the browser entirely:

  • Standalone executable — no IE Mode, no Chromium Edge, no third-party browser.
  • Reads the published Web Navigator configuration directly over TCP port 80 / 443.
  • Supports command-line startup for kiosk boot scenarios: WinCCViewerRT.exe /server:winccsrv /project:Plant1 /autostart.
  • Independent of Edge version, Windows 11 24H2, or any browser retirement.

For greenfield deployments on Windows 11 23H2 and later, plan the runtime station with WinCCViewerRT.exe as the primary and Edge IE Mode only as the engineering / supervisor browser. This avoids any future browser-engine compatibility regressions.

Enterprise Deployment via Group Policy

For multi-site fleets, push the IE Mode configuration centrally using the Microsoft Edge Administrative Templates (MicrosoftEdge.admx) and an Enterprise Mode Site List XML.

  1. Download the latest Microsoft Edge for Business policy template.
  2. Copy msedge.admx and msedge.adml into %SystemRoot%\PolicyDefinitions on a Windows DC.
  3. In Computer Configuration → Administrative Templates → Microsoft Edge, configure:
Policy Value
Configure the Enterprise Mode Site List \\contoso.local\NETLOGON\edge-ie-mode.xml
Internet Explorer Integration (InternetExplorerIntegrationLevel) Enabled — IE Mode
Send all intranet sites to Internet Explorer Disabled (be explicit per-site instead)
Allow Internet Explorer Mode testing (InternetExplorerModeTest) Enabled
  1. Publish the site list, example content:
<?xml version="1.0" encoding="UTF-8"?>
<site-list version="2">
  <site url="http://winccsrv/WebNavigator/">
    <compat-mode>IE11</compat-mode>
    <open-in>IE11</open-in>
  </site>
  <site url="http://winccsrv">
    <compat-mode>IE11</compat-mode>
    <open-in>IE11</open-in>
  </site>
</site-list>
  1. Force a Group Policy refresh: gpupdate /force on the target workstation.
  2. Restart Edge and verify edge://compat/enterprise shows the WinCC server URLs as IE Mode.

Verification Checklist

Step Pass criterion
Edge IE Mode toggle edge://settings/defaultBrowser reports Allowed
Trusted Sites WinCC server FQDN listed in inetcpl.cpl → Security → Trusted Sites
ActiveX installed WinCCWebNavigatorControl.dll present and registered (check regsvr32 /s exit code 0)
Server reachability Test-NetConnection -Port 80 returns TcpTestSucceeded: True
Publisher status WinCC Explorer shows green icon for Web Navigator publisher
Picture load Login screen appears within 8 seconds of IE-Mode tab opening
Graphic render First published picture displays within 5 seconds of login

Troubleshooting Matrix

Symptom Likely component First action
Installer loops on restart MSI Pending Reboot flag Clear RebootRequired and reboot
Page loads in modern Edge IE Mode not active Use the tab menu → Reload in Internet Explorer mode
ActiveX blocked bar Trusted Sites not set Add URL to Trusted Sites and refresh
Stuck on Connecting Server-side publisher or firewall Verify IIS app pool and TCP 80 reachability
Blank IE-mode tab Enterprise Site List missing Add URL to edge-ie-mode.xml
Edge policy locked Group Policy override Audit HKLM\SOFTWARE\Policies\Microsoft\Edge
Crash on ActiveX load Outdated WinCCWebNavigatorControl.dll Reinstall the client with the matching WinCC V7.4 SP1 update version
Slow render over WAN Network MTU / proxy Bypass proxy for WinCC server, increase IIS response buffer

FAQ

Why does Microsoft Edge keep asking to reload the WinCC Web Navigator in IE Mode?

The Enterprise Mode Site List either does not include the URL or the InternetExplorerIntegrationLevel policy is set to IE Mode without a per-site entry. Add the full URL (for example http://winccsrv/WebNavigator/) to edge-ie-mode.xml or use the tab's Reload in Internet Explorer mode option and tick Open in IE Mode next time.

How do I fix the webnavigatorclient.exe installer restart loop?

Clear the Windows Installer pending-reboot flags under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired and HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations, stop the msiserver service, reboot cleanly, then re-run WinCCWebNavigatorClientSetup.exe elevated. The loop is almost always caused by a previous MSI leaving RebootRequired set.

The WinCC Web Navigator is stuck on the Connecting screen — what is failing?

It is the client waiting for the Web Navigator server to respond. Verify the IIS application pool WinCCWebNavigator is started on the server, that the WinCC Web Navigator service is running, that TCP 80 (or 443) is reachable from the client (Test-NetConnection -Port 80), and that the Edge proxy bypass list includes the WinCC server host.

Can I use WinCCViewerRT.exe instead of the Edge IE Mode browser?

Yes. WinCCViewerRT.exe is shipped with the same WinCC Web Navigator client install and renders graphics without any browser. Launch it with WinCCViewerRT.exe /server:winccsrv /project:Plant1 for a permanent, browser-independent runtime. It is the recommended fallback on Windows 11 24H2 where Edge IE Mode may be unavailable.

Is Edge IE Mode supported on Windows 11 24H2 and Windows Server 2025?

Microsoft Edge IE Mode is still present in Chromium Edge 124+ on Windows 11 24H2, but Microsoft has stated IE Mode will be retired in a future channel. For long-term support, plan a migration path that uses WinCCViewerRT.exe as the primary runtime and reserve Edge IE Mode for engineering and supervisor workstations only.

Back to blog