Overview
Siemens WinCC V7.4 SP1 Web Navigator was engineered around the legacy Microsoft Internet Explorer (IE) ActiveX plug-in stack. The deprecation of the standalone IE11 desktop application and its removal from Windows 11 / Windows Server 2022 makes it impossible to launch the original WinCC Web Navigator plug-in with a normal browser shortcut. The supported path forward is the Chromium-based Microsoft Edge Internet Explorer Mode (IE Mode), which renders IE-only ActiveX controls inside a Chromium tab. This reference walks through the complete Edge-side configuration, the WinCC Web Navigator client installation, and the resolution of the two field-reported failure modes: a webnavigatorclient.exe installer that loops on a restart prompt, and a published client that is stuck on the Connecting screen.
Background: WinCC Web Navigator and the IE Retirement
Microsoft retired the Internet Explorer 11 desktop application on June 15, 2022, for most Windows 10 SKUs and removed the iexplore.exe binary entirely from Windows 11 22H2 and later. WinCC V7.4 SP1's Web Navigator client depends on the Microsoft WinCC WebNavigator ActiveX control, which uses the MSHTML (Trident) rendering engine plus signed ActiveX hosting. Edge IE Mode re-implements both behaviours inside a Chromium process:
- The MSHTML engine is loaded in-process as
edge.exe --ie-modefor any URL listed in the Enterprise Mode Site List or opened from theie-modetab action. - ActiveX hosting is supported only when the IE Mode tab is launched in the user's security context (not in a kiosk sandbox).
- The
WinCCWebNavigatorClientSetup.exe(often calledwebnavigatorclient.exein field notes) installs the cabinet-signed ActiveX and the WinCCViewerRT runtime components.
See the Siemens Knowledge Base article 109792981 — How do you operate the WinCC V7.4 SP1 WebNavigator with Microsoft Edge? for the vendor's official configuration sequence.
Prerequisites
| Component | Minimum | Recommended |
|---|---|---|
| Microsoft Edge (Chromium) | 92.0.902.55 (IE Mode stable) | 110.0.1587.46 or later (KB5008212 era) |
| Edge channel | Stable | Stable (Beta/Dev break IE Mode intermittently) |
| Windows 10 | 1909 with IE11 optional feature | 21H2 / 22H2 LTSC |
| Windows 11 | 21H2 | 23H2 |
| Windows Server | 2016 (Desktop Experience) | 2019 / 2022 (Desktop Experience) |
| WinCC version | V7.4 SP1 Update 1 | V7.4 SP1 Update 14 or newer |
| .NET Framework on client | 4.7.2 | 4.8 |
| IIS on WinCC server | 10 with CGI / ISAPI | 10 with WebNavigator publisher configured |
| Port (default) | TCP 80 (HTTP) | TCP 443 (HTTPS with self-signed cert trusted on clients) |
WinCCViewerRT.exe as the supported fallback.Enable Microsoft Edge IE Mode (Single Workstation)
This is the manual sequence used when no Group Policy or Enterprise Site List is pushed from Active Directory.
- Open Microsoft Edge and type
edge://settings/defaultBrowserin the address bar. - Set Allow sites to be reloaded in Internet Explorer mode to Allow.
- Choose Default under How to reload sites if you want Edge to auto-promote IE-mode-eligible pages; choose Don't allow and use the manual tab reload if you want explicit operator control.
- Optionally set Let Internet Explorer open sites in Microsoft Edge to Always so legacy shortcuts redirect cleanly.
- Close Edge completely (all windows, including the tray icon) and restart it.
Verify the setting persisted:
edge://settings/defaultBrowser
The toggle must report Allowed in red text. If it is greyed out, a Group Policy override is in effect — see the Enterprise Deployment section.
Add the WinCC Web Navigator URL to Trusted Sites
Edge IE Mode respects the same Windows Internet Options security zones that legacy IE used. The ActiveX installation step requires the URL to be in the Trusted Sites zone, and the runtime graphics plug-in will only initialise without a security prompt if the zone is trusted.
- Open Edge and type
edge://settings/clearBrowserData— skip the clearing step, the goal is just to enter a settings page. - From the Edge menu choose Settings → Cookies and site permissions → Pop-ups and redirects and confirm the WinCC server URL is not blocked.
- Open Internet Options from the Windows Run dialog (
inetcpl.cpl) or via Edge → Settings → Default browser → Internet Options. - Switch to the Security tab, select Trusted sites, and click Sites.
- Uncheck Require server verification (https:) for all sites in this zone if the WinCC WebNavigator is published over plain HTTP.
- Add the URL. Use the bare host for HTTP (
http://winccsrv) or the FQDN for HTTPS (https://winccsrv.contoso.local). Wildcards (*.contoso.local) are supported. - Click Add → Close → OK.
Open the WinCC Web Navigator in Edge
- Open a new tab in Edge and navigate to the Web Navigator URL, for example
http://winccsrv/WebNavigator/or the configured alias. - If the page loads in modern Edge rendering, click the three-dot menu on the tab and choose Reload in Internet Explorer mode. Alternatively, look for the small IE ring icon in the address bar's right side and click it to enter IE Mode.
- When prompted by Edge, choose Open in Internet Explorer mode next time only if you want the URL persisted into the local edge://settings/defaultBrowser site list.
- If you still get a blank or modern-rendered page, close the tab, reopen it with
Ctrl+Shift+Mdisabled (do not use the mobile emulator), and retry.
The page should now display the WinCC Web Navigator login. The ActiveX bar at the top will request installation of WinCC Web Navigator Control if it is not yet present.
Install webnavigatorclient.exe
The full WinCC Web Navigator client runtime is installed by running WinCCWebNavigatorClientSetup.exe (sometimes referred to in field tickets as webnavigatorclient.exe). It installs:
-
WinCCWebNavigatorControl.dll(signed ActiveX) -
WinCCViewerRT.exeand supporting runtime - Registry keys under
HKLM\SOFTWARE\Siemens\WinCC\Web Navigator\Client - WinCC Web Navigator URL Handler for
webnavigator://
Launch the installer elevated (right-click → Run as administrator) and follow the wizard. Accept the cabinet signing certificate if the UAC prompt appears. Restart the workstation at the end of the installer when prompted.
Issue 1: webnavigatorclient.exe Restart Loop
Symptom
The installer runs through its UI, reaches the end, and prompts for a restart. After the restart, launching the same installer starts over and prompts for a restart again. Repeating the cycle indefinitely does not clear the flag.
Root Cause
Windows Installer (MSI) records a Pending Reboot flag whenever a previous installer run completed a file-in-use rename, pending registry write, or service restart. WinCC's installer checks the standard reboot-flag registry locations; if any of them is set, it refuses to commit and re-arms the prompt.
| Registry key (HKLM) | Meaning | Safe to delete? |
|---|---|---|
SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired |
Windows Update flagged a reboot | Only after the update itself finishes |
SOFTWARE\Microsoft\Updates\UpdateExeVolatile |
Another MSI is mid-flight | After confirming no installer is running |
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\InProgress |
MSI engine busy | After confirming no installer is running |
SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations |
File-in-use rename pending | After closing all Office and Edge tabs |
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon (PendingReboot value) |
Logon-time reboot pending | After verifying no GPO reboot is required |
Resolution
- Stop the Windows Installer service:
net stop msiserverfrom an elevated command prompt. - Stop the Windows Update service:
net stop wuauserv. - Close all Edge, IE-mode, and Office processes. Check
tasklist | findstr /i "wincc ie edge". - Back up and clear the registry keys listed above using
reg deleteor regedit. Example:reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired" /f. - Reboot the workstation cleanly. Do not skip — clearing
PendingFileRenameOperationswithout a reboot leaves the file-rename queue in an undefined state. - Re-run
WinCCWebNavigatorClientSetup.exeelevated.
KB5028166 or later to clear the bug, or use DISM /Online /Cleanup-Image /StartComponentCleanup /ResetBase to normalise the update state.Verification
After successful install, the following files must exist:
%ProgramFiles%\Siemens\Automation\WinCC Web Navigator\Client\WinCCWebNavigatorControl.dll
%ProgramFiles%\Siemens\Automation\WinCC Web Navigator\Client\WinCCViewerRT.exe
And the registry hive HKLM\SOFTWARE\Siemens\WinCC\Web Navigator\Client\InstallPath must point to the install folder.
Issue 2: Web Navigator Stuck on the Connecting Screen
Symptom
A workstation that previously opened the Web Navigator successfully now opens Edge, enters IE Mode, and the WinCC graphic window sits on the splash screen reading Connecting... indefinitely. No error message is displayed, and the progress indicator does not advance.
Root Cause Path
The Connecting splash is the client waiting for the WinCC Web Navigator server to complete its HTTP handshake and push the initial picture. The five typical failure points are listed below in order of frequency observed in the field.
| # | Cause | Diagnostic | Fix |
|---|---|---|---|
| 1 | Web Navigator publisher is stopped on the WinCC server | Open WinCC Explorer → Web Navigator → check the publisher status icon | Right-click → Publish; verify the IIS application pool WinCCWebNavigator is Started
|
| 2 | Windows Firewall blocks inbound TCP 80 / 443 on the WinCC server | Test-NetConnection -ComputerName winccsrv -Port 80 |
Enable the predefined World Wide Web Services (HTTP) inbound rule |
| 3 | Edge proxy setting forces the IE-mode tab through an intercepting proxy that strips ActiveX |
edge://settings/system → Open proxy settings
|
Add the WinCC server to the proxy bypass list |
| 4 | TLS mismatch on HTTPS deployment (e.g., server on TLS 1.0 only) | Check schannel event log for Event ID 36888
|
Enable TLS 1.2 server-side or reissue a modern certificate |
| 5 | Client-side stale cookie or IE-mode session cache | Edge → Settings → Cookies → See all cookies and site data | Delete cookies for the WinCC server host and clear edge://settings/clearBrowserData → Cookies and other site data |
Server-Side Checks
- Open IIS Manager on the WinCC server. Expand Sites → Default Web Site and confirm the
WebNavigatorapplication is present and its application pool is started. - Right-click the application and choose Manage Application → Browse. The browser should display the WinCC Web Navigator landing page without errors.
- From the WinCC Explorer, open Web Navigator → Diagnostics and review the published graphic count. Zero pictures published means the publisher configuration was reset.
- Verify the
WinCC WebNavigatorservice is set to Automatic (Delayed Start) and currently in Running state. Restart withnet stop "WinCC WebNavigator" & net start "WinCC WebNavigator".
Client-Side Checks
- Disable the Edge extension IE Mode Helper if installed — third-party extensions occasionally intercept the IE-mode tab launch and break the ActiveX host.
- Open
edge://flagsand ensure Enable IE Mode is set to Default (not Disabled). - Launch the URL with the
--ie-mode-testEdge flag:msedge.exe --ie-mode --ie-mode-test=http://winccsrv/WebNavigator/. If the test page loads, the URL is recognised as IE-mode-eligible. - If still stuck, run
WinCCViewerRT.exe /server:winccsrvdirectly from%ProgramFiles%\Siemens\Automation\WinCC Web Navigator\Client. If the standalone runtime opens the picture, the IE Mode ActiveX host is at fault; if not, the server itself is unreachable.
Alternative: WinCCViewerRT.exe
When IE Mode is blocked by the operating system or by tenant policy, the supported fallback is the WinCCViewerRT.exe runtime. It is part of the same WinCC Web Navigator client install and bypasses the browser entirely:
- Standalone executable — no IE Mode, no Chromium Edge, no third-party browser.
- Reads the published Web Navigator configuration directly over TCP port 80 / 443.
- Supports command-line startup for kiosk boot scenarios:
WinCCViewerRT.exe /server:winccsrv /project:Plant1 /autostart. - Independent of Edge version, Windows 11 24H2, or any browser retirement.
For greenfield deployments on Windows 11 23H2 and later, plan the runtime station with WinCCViewerRT.exe as the primary and Edge IE Mode only as the engineering / supervisor browser. This avoids any future browser-engine compatibility regressions.
Enterprise Deployment via Group Policy
For multi-site fleets, push the IE Mode configuration centrally using the Microsoft Edge Administrative Templates (MicrosoftEdge.admx) and an Enterprise Mode Site List XML.
- Download the latest Microsoft Edge for Business policy template.
- Copy
msedge.admxandmsedge.admlinto%SystemRoot%\PolicyDefinitionson a Windows DC. - In Computer Configuration → Administrative Templates → Microsoft Edge, configure:
| Policy | Value |
|---|---|
| Configure the Enterprise Mode Site List | \\contoso.local\NETLOGON\edge-ie-mode.xml |
| Internet Explorer Integration (InternetExplorerIntegrationLevel) | Enabled — IE Mode |
| Send all intranet sites to Internet Explorer | Disabled (be explicit per-site instead) |
| Allow Internet Explorer Mode testing (InternetExplorerModeTest) | Enabled |
- Publish the site list, example content:
<?xml version="1.0" encoding="UTF-8"?>
<site-list version="2">
<site url="http://winccsrv/WebNavigator/">
<compat-mode>IE11</compat-mode>
<open-in>IE11</open-in>
</site>
<site url="http://winccsrv">
<compat-mode>IE11</compat-mode>
<open-in>IE11</open-in>
</site>
</site-list>
- Force a Group Policy refresh:
gpupdate /forceon the target workstation. - Restart Edge and verify
edge://compat/enterpriseshows the WinCC server URLs as IE Mode.
Verification Checklist
| Step | Pass criterion |
|---|---|
| Edge IE Mode toggle |
edge://settings/defaultBrowser reports Allowed
|
| Trusted Sites | WinCC server FQDN listed in inetcpl.cpl → Security → Trusted Sites
|
| ActiveX installed |
WinCCWebNavigatorControl.dll present and registered (check regsvr32 /s exit code 0) |
| Server reachability |
Test-NetConnection -Port 80 returns TcpTestSucceeded: True
|
| Publisher status | WinCC Explorer shows green icon for Web Navigator publisher |
| Picture load | Login screen appears within 8 seconds of IE-Mode tab opening |
| Graphic render | First published picture displays within 5 seconds of login |
Troubleshooting Matrix
| Symptom | Likely component | First action |
|---|---|---|
| Installer loops on restart | MSI Pending Reboot flag | Clear RebootRequired and reboot |
| Page loads in modern Edge | IE Mode not active | Use the tab menu → Reload in Internet Explorer mode |
| ActiveX blocked bar | Trusted Sites not set | Add URL to Trusted Sites and refresh |
| Stuck on Connecting | Server-side publisher or firewall | Verify IIS app pool and TCP 80 reachability |
| Blank IE-mode tab | Enterprise Site List missing | Add URL to edge-ie-mode.xml
|
| Edge policy locked | Group Policy override | Audit HKLM\SOFTWARE\Policies\Microsoft\Edge
|
| Crash on ActiveX load | Outdated WinCCWebNavigatorControl.dll
|
Reinstall the client with the matching WinCC V7.4 SP1 update version |
| Slow render over WAN | Network MTU / proxy | Bypass proxy for WinCC server, increase IIS response buffer |
FAQ
Why does Microsoft Edge keep asking to reload the WinCC Web Navigator in IE Mode?
The Enterprise Mode Site List either does not include the URL or the InternetExplorerIntegrationLevel policy is set to IE Mode without a per-site entry. Add the full URL (for example http://winccsrv/WebNavigator/) to edge-ie-mode.xml or use the tab's Reload in Internet Explorer mode option and tick Open in IE Mode next time.
How do I fix the webnavigatorclient.exe installer restart loop?
Clear the Windows Installer pending-reboot flags under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired and HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations, stop the msiserver service, reboot cleanly, then re-run WinCCWebNavigatorClientSetup.exe elevated. The loop is almost always caused by a previous MSI leaving RebootRequired set.
The WinCC Web Navigator is stuck on the Connecting screen — what is failing?
It is the client waiting for the Web Navigator server to respond. Verify the IIS application pool WinCCWebNavigator is started on the server, that the WinCC Web Navigator service is running, that TCP 80 (or 443) is reachable from the client (Test-NetConnection -Port 80), and that the Edge proxy bypass list includes the WinCC server host.
Can I use WinCCViewerRT.exe instead of the Edge IE Mode browser?
Yes. WinCCViewerRT.exe is shipped with the same WinCC Web Navigator client install and renders graphics without any browser. Launch it with WinCCViewerRT.exe /server:winccsrv /project:Plant1 for a permanent, browser-independent runtime. It is the recommended fallback on Windows 11 24H2 where Edge IE Mode may be unavailable.
Is Edge IE Mode supported on Windows 11 24H2 and Windows Server 2025?
Microsoft Edge IE Mode is still present in Chromium Edge 124+ on Windows 11 24H2, but Microsoft has stated IE Mode will be retired in a future channel. For long-term support, plan a migration path that uses WinCCViewerRT.exe as the primary runtime and reserve Edge IE Mode for engineering and supervisor workstations only.