Parameters

Manual for the Parameters configuration page in the configuration area.

Updated 27 min read
On this page (25 sections)
  1. Overview
  2. Using the Parameters Page
  3. Parameter Settings
  4. Engineering Settings
  5. Branding
  6. Guest Settings
  7. Redundancy
  8. Email Settings
  9. AI Chat
  10. MCP OAuth
  11. Languages
  12. Alarm Settings
  13. Viewer Colors
  14. Active Directory
  15. Login and Password Policy
  16. Part 11 Compliance
  17. Historian
  18. Numpad
  19. Gateways
  20. OPC UA Server
  21. MQTT Broker
  22. Training Simulator
  23. Debugging
  24. Knowledge Base
  25. Notes

The Parameters page contains project-wide system settings organized into sections. These settings control application behavior, branding, communication, runtime appearance, gateways, historian behavior, and feature configuration for the entire project.

Changes on this page apply globally and are not limited to a single page, device, or user.

Parameters is accessible only to users in the Administrators group.

Using the Parameters Page

The Parameters page is organized as a list of collapsible sections. The Sections list on the left lists every section on the page. Selecting an entry in the Sections list opens that section and scrolls to it, and the entry for the section currently at the top is highlighted while scrolling. On narrow displays the Sections list is hidden and the sections remain available in the main list.

Each section is shown as a header that can be opened or closed. Select a section header to expand or collapse it. Sections start collapsed so the full list of sections stays visible.

The search box at the top filters the settings. Enter text in the Search parameters field to show only the settings whose label contains the entered text. Sections that contain a match open automatically, and a No matching parameters message is shown when nothing matches. Use the clear button next to the search box to reset the filter. Expand all and Collapse all open or close every section at once.

Most settings are saved automatically. A setting is stored as soon as the field loses focus or the control is changed, and a short confirmation is shown after the value is saved.

The AI Chat section and the Redundancy Shared Secret field use an explicit Save button instead of automatic saving. After a value in these areas is edited, an Unsaved changes indicator is shown next to the Save button, and the value is stored only when Save is used. A confirmation is requested before leaving the page or collapsing the section while unsaved changes are present.

Color settings accept a color value or the name of a Color Library entry. The color picker lists the library entries, and picking one stores the name, so the setting follows that entry and the theme the station is using. Enter or pick a color value instead to keep the setting fixed.

ControlFunction
Sections listLists every section. Selecting an entry opens that section and scrolls to it.
Section headerExpands or collapses the section.
Search parametersFilters the settings by label text and opens the sections that contain a match.
Clear buttonClears the search text and shows all sections.
Expand allOpens every section.
Collapse allCloses every section.

Parameter Settings

The Parameter Settings section provides export and import of the Parameters page parameter set. This is used to back up the current configuration or move the project-wide settings to another system.

Export, import, and page-scoped API access include all Parameters page parameters except AI chat settings and redundancy-related settings. These excluded settings remain managed through their dedicated configuration flows.

SettingDescriptionExampleUnits / Format
ExportExports the Parameters page parameter set to a JSON file. AI chat settings and redundancy-related settings are excluded.parameters.jsonJSON
ImportImports a previously exported JSON file and applies the contained parameter values. AI chat settings and redundancy-related settings are skipped.parameters.jsonJSON

Engineering Settings

The Engineering Settings section contains engineering and maintenance settings used during design, import, export, and page history handling.

SettingDescriptionExampleUnits / Format
CSV DelimiterDelimiter character used when exporting or importing CSV files from the system.;Character
Page History Max BackupsMaximum number of page versions kept in Page History, counted over all pages together. The oldest versions are removed first.100Integer
PythonScript History Max BackupsMaximum number of Python script history backups retained. Older entries are removed once this limit is exceeded.100Integer
Python Script Execution TimeoutTime after which a running Python script is flagged as timed out. When the duration is exceeded, a system event is logged, the script status variable is set to TimedOut so it can be alarmed on, and a best-effort interrupt is attempted. Set generously because report generation can legitimately take minutes. Set to 0 to disable the watchdog.600Seconds
Document viewer accessFolders the Document Viewer object may serve, and the user groups that may see them. Each rule is one folder and covers everything below it; a rule without user groups allows every user group. An empty field means the Document Viewer shows nothing at all, which is the default. The most specific matching folder decides, so a rule on a subfolder can be stricter than the rule on its parent folder. Guests never have access, and Administrators are not exempt.D:/Reports = Operators,SupervisorsFolder and user groups per rule
HTTP CompressionCompresses pages, scripts, stylesheets and data sent over HTTP. The browser unpacks them automatically and the pages stay the same. Use this for access over a slow link, such as a VPN; on a fast local network it makes no visible difference. A client that does not ask for compression receives the same response as without this setting. The setting applies at once, without a restart. Off by default.OffOn / Off
HTTPS CompressionThe same for HTTPS. Use this as a last resort for a slow link, and only in combination with a secure VPN: a compressed HTTPS page can be exposed to the BREACH attack, in which someone who can watch the network and can make the browser of a logged-in user send many requests works out text on a page from the size of the encrypted responses. When a reverse proxy handles HTTPS in front of EnvisionSCADA, the server receives plain HTTP and HTTP Compression applies. Off by default.OffOn / Off

Branding

The Branding section controls the appearance of the login page and parts of the runtime user interface.

Several color settings accept a text value and also provide a color picker in the user interface.

11 rows
SettingDescriptionExampleUnits / Format
Company NameText displayed on the login page as the application title.Text
Login Screen Background ImageBackground image used on the login page.JPEG image
Login Title Font ColorFont color of the title on the login page.#RRGGBBHex color
Login Box Background ColorBackground color of the login dialog.#RRGGBBHex color
Login Input Box Font ColorFont color used in the login input fields.#RRGGBBHex color
Login Input Box Background ColorBackground color used in the login input fields.#RRGGBBHex color
Login Change Password Font ColorFont color for the change password link or text.#RRGGBBHex color
Login Input Box Border ColorBorder color of the login input fields.#RRGGBBHex color
Login Button Background ColorBackground color of the login button.#RRGGBBHex color
Login Button Font ColorFont color of the login button.#RRGGBBHex color
Login Show Password Icon ColorColor of the show password icon on the login page.#RRGGBBHex color

Guest Settings

The Guest Settings section controls the default behavior for users who are not logged in.

SettingDescriptionExampleUnits / Format
Guest Home PagePage opened for guest users. This references the Name of a page configured on the Pages page.Text
Guest Default LanguageDefault display language applied to guest users.Language code

Redundancy

The Redundancy section configures the primary-standby high-availability behavior of the system.

These settings define the participant addresses and synchronization timing used between the redundant nodes.

12 rows
SettingDescriptionExampleUnits / Format
Enable RedundancyEnables high-availability behavior for the primary-standby system.trueBoolean
Participant 1 IP AddressIP address of the first redundancy participant.IP Address
Participant 2 IP AddressIP address of the second redundancy participant.IP Address
Participant 1 PortTCP port used by the first participant.Integer
Participant 2 PortTCP port used by the second participant.Integer
Redundancy Shared SecretShared secret used to authenticate the connection between the redundant nodes. It is stored encrypted on each node and is not replicated, so the same secret is set on both nodes. Enter a value and use Save to store it, or select Clear stored secret and use Save to remove it. This field uses an explicit Save button.Password
Backfill Max RecordsMaximum number of records sent per backfill synchronization batch.Integer
Forefill Max RecordsMaximum number of records sent per forward synchronization batch.Integer
Base Request TimeoutBase timeout for redundancy requests.Seconds
Request TimeoutOverall timeout for redundancy requests.Seconds
Max AttemptsMaximum number of retry attempts for redundancy communication.Integer
Attempt DelayDelay between retry attempts.ms

Email Settings

The Email Settings section configures the SMTP server used for outgoing email notifications such as alarm-related messages.

SettingDescriptionExampleUnits / Format
SMTP ServerHostname or IP address of the outgoing SMTP server.Host name / IP
SMTP UsernameUsername for SMTP authentication.Text
SMTP PasswordPassword for SMTP authentication.Password
SMTP SenderSender email address used for outgoing messages.Email address
SMTP TLS PortPort number used for TLS-secured SMTP connections.Integer

AI Chat

The AI Chat section configures the built-in AI assistant for runtime users and administrators.

It contains provider settings, model selection, API endpoint settings, the system prompt, and runtime limits.

Tool availability depends on the user's group membership. AI chat for non-administrator runtime users is limited to read-only runtime tools that read live values, active alarms, events, and historian data. Writing variable values, executing Python scripts, configuration tools, design tools, and database queries are available only to users in the Administrators group. Tools that change runtime or configuration state always request an explicit confirmation in the chat before they are executed.

When AI chat creates, changes, or deletes records of the configuration type shown on the open page, the page list is reloaded automatically so the result is visible without a manual refresh. The applied filters, sorting, and the chat panel stay as they are. A change to a different configuration type leaves the open page unchanged.

14 rows
SettingDescriptionExampleUnits / Format
Enable AI ChatMaster switch for the AI chat feature. When disabled, AI chat is unavailable to both runtime users and administrators.trueBoolean
Runtime AIControls whether the runtime AI chat balloon is shown to non-administrator runtime users. When disabled, the balloon is hidden for runtime users, while administrators can still use AI chat if Enable AI Chat is turned on.falseBoolean
ProviderAI provider used by the system. The current page supports OpenAI and Anthropic.OpenAI / AnthropicEnum
Runtime ModelModel used for standard runtime users.Text
Developer ModelOptional override model used for users in the Administrators group. When empty, Runtime Model is used.Text
EndpointOptional custom API endpoint.URL
API KeyAPI key used for authentication with the selected provider.Password
Clear Stored API Key OverrideRemoves the stored API key override.falseBoolean
Anthropic VersionAPI version header required when the Anthropic provider is selected.2023-06-01Text
System PromptSystem instruction text sent with AI chat requests.Text
Max Tool RoundsMaximum number of tool-call rounds allowed per chat request.Integer
Max History MessagesMaximum number of previous chat messages included in a request.Integer
Max TokensMaximum tokens requested from the provider.Integer
TemperatureSampling temperature used for model responses.Number

MCP OAuth

The MCP OAuth section enables and configures OAuth 2.0 authentication for the MCP server. When it is turned off, the MCP server keeps using HTTP Basic authentication and the session cookie only. When it is turned on, the MCP server also accepts OAuth 2.0 bearer tokens and publishes its discovery endpoints, so OAuth-aware clients can sign in interactively. Access granted through OAuth carries the same permissions as the account used to sign in.

The signing key is stored on each server and is not replicated. On a single server it is generated automatically when the field is left empty. For a redundant pair, set the same signing key on both servers so that a token issued by the primary is accepted by the standby.

SettingDescriptionExampleUnits / Format
Enable MCP OAuth 2.0Turns OAuth 2.0 on for the MCP server. When off, only HTTP Basic authentication and the session cookie are used.falseBoolean
MCP OAuth access token lifetimeHow long an issued access token stays valid. Clients refresh automatically before it expires.60Minutes (1 - 1440)
MCP OAuth signing keySecret that signs access tokens. Leave empty on a single server to generate one automatically. Set the same value on both servers of a redundant pair. Stored encrypted and not replicated.Text

Languages

The Languages section configures the project languages available to users and the default language used by the system.

The project language texts are translated on the Translations page, opened with the Translations button of Project Language Texts. That page lists the operator texts of the project with one column per language and provides the import and export of the texts as CSV; see the Translations article.

SettingDescriptionExampleUnits / Format
Default LanguageSystem-wide default display language applied when no user-specific language is set.Language code
Languages In FileOrdered list of enabled languages currently available in the project translations file.Language code list
Add LanguageAdds another supported language to the project.Language code
Project Language TextsThe Translations button opens the Translations page, where the operator texts of the project are translated, imported and exported.Button

Alarm Settings

The Alarm Settings section defines the colors used for different alarm states in the runtime viewers, and the rules for alarm shelving and alarm cascading. Shelving from the Alarm Viewer and the Parent Alarms, Suppress When and Release Delay (s) settings of an alarm are described in the Alarm Viewer and Alarms articles.

SettingDescriptionExampleUnits / Format
Alarm ActiveColor used for active alarms.#RRGGBBHex color
Alarm ReturnedColor used for returned alarms.#RRGGBBHex color
Alarm Active AcknowledgedColor used for active alarms that have been acknowledged.#RRGGBBHex color
Alarm Returned AcknowledgedColor used for returned alarms that have been acknowledged.#RRGGBBHex color
Maximum Shelve Time (min)Longest duration for which an operator can shelve an alarm in the Alarm Viewer. The Shelve Alarm dialog offers only the preset durations up to this value and limits a custom duration to it.480Minutes (1 to 10080)
Shelvable SeveritiesCheckboxes Critical, High, Medium and Low that select the severities an operator can shelve. The Shelve button in the Alarm Viewer is disabled for the other severities, and the Runtime API and MCP refuse them.High, Medium, LowCheckboxes
Shelve Requires ReasonWhen on, the Reason field of the Shelve Alarm dialog must be filled in before an alarm can be shelved; the Runtime API and MCP require the Reason value in the same way.trueBoolean
Cascade Window (s)Number of seconds before a parent alarm goes active during which an already active alarm that has it in its Parent Alarms is still folded under it as a consequence. An alarm that went active earlier than this window stays annunciated.10Seconds (0 to 600)

Viewer Colors

The Viewer Colors section defines the shared appearance of runtime viewers such as alarm and event tables.

These settings control the background, font, border, hover, row, header, and icon colors used by the viewers.

These settings follow the Color Library in the same way as the other color settings on this page, so the viewers change with the theme the station is using.

19 rows
SettingDescriptionExampleUnits / Format
Viewer Background ColorBackground color of the viewer.#RRGGBBHex color
Viewer Line ColorLine color used in the viewer.#RRGGBBHex color
Viewer Font ColorDefault font color used in the viewer.#RRGGBBHex color
Viewer Input Background ColorBackground color of viewer input controls.#RRGGBBHex color
Viewer Input Font ColorFont color of viewer input controls.#RRGGBBHex color
Viewer Button Background ColorBackground color of viewer buttons.#RRGGBBHex color
Viewer Button Font ColorFont color of viewer buttons.#RRGGBBHex color
Viewer Border ColorBorder color of the viewer.#RRGGBBHex color
Viewer Button Background Color HoverButton background color on hover.#RRGGBBHex color
Viewer Button Font Color HoverButton font color on hover.#RRGGBBHex color
Viewer Border Color HoverBorder color on hover.#RRGGBBHex color
Viewer Row Hover ColorRow background color on hover.#RRGGBBHex color
Viewer Row Alternate ColorAlternate row background color.#RRGGBBHex color
Viewer Row Border ColorBorder color between rows.#RRGGBBHex color
Viewer Header Background ColorBackground color of the viewer header.#RRGGBBHex color
Viewer Icon ColorDefault icon color in viewers.#RRGGBBHex color
Viewer Icon Color HoverIcon color on hover.#RRGGBBHex color
Viewer Column Header Font ColorFont color of column headers.#RRGGBBHex color
Viewer Header Form Background ColorBackground color of the header filter or form area.#RRGGBBHex color

Active Directory

The Active Directory section configures LDAP or Active Directory login integration for domain users.

When enabled, users can authenticate with their domain credentials and can be mapped to EnvisionSCADA groups through the User Groups configuration.

SettingDescriptionExampleUnits / Format
Enable Active DirectoryEnables Active Directory or LDAP authentication.trueBoolean
LDAP HostHost name or IP address of the LDAP or Active Directory server.Host name / IP
LDAP PortPort used for the LDAP connection.Integer
Search BaseBase distinguished name used for directory searches.LDAP DN
Use Secure Socket LayerUses SSL for the LDAP connection.falseBoolean
Verify Server CertificateVerifies the server certificate when SSL is enabled.trueBoolean

Login and Password Policy

These settings control sign-in protection and the password policy for local accounts. Active Directory accounts are managed by the domain and are not affected by the password policy.

The password policy applies when a password is set or changed. Existing passwords continue to work until they are changed.

SettingDescriptionExampleUnits / Format
PasswordMinLengthMinimum number of characters required for a new or changed password.8Integer (4 to 128)
PasswordRequireComplexityWhen True, a new or changed password must contain an uppercase letter, a lowercase letter, a digit, and a symbol.TrueTrue / False
PasswordExpiryDaysNumber of days after which a password must be changed at sign-in. Set to 0 for unlimited (no expiry).0Days (0 = unlimited)
AdminSessionTimeoutMinutesInactivity timeout for Administrator sessions, after which the user is signed out. Guest displays are not affected.240Minutes
LoginThrottleFreeAttemptsNumber of failed sign-in attempts allowed before a progressive delay is applied, counted per user name and per source address.5Integer
LoginThrottleStepSecondsAdditional delay added for each failed attempt beyond the free attempts.2Seconds
LoginThrottleMaxDelaySecondsMaximum delay applied to a delayed sign-in attempt.30Seconds
LoginThrottleWindowMinutesPeriod of inactivity after which the failed-attempt count resets.15Minutes
EnforceSingleSessionWhen True, a new login ends any previous session of the same user. This supports the continuous-session rule of the Part 11 signing policy.FalseTrue / False

Part 11 Compliance

The Part 11 Compliance section enables 21 CFR Part 11 compliance mode and configures which operations require an electronic signature before they can be executed.

When Part 11 compliance mode is enabled, any action included in Signature Required Actions prompts for a signature. The ComplianceMode.Disable action is always included and cannot be removed, so disabling compliance mode always requires a signature.

SettingDescriptionExampleUnits / Format
Enable Part 11 ComplianceEnables 21 CFR Part 11 compliance mode. When enabled, the selected signature-required actions prompt for an electronic signature before they are executed.falseBoolean
Signature Required ActionsOperator actions that require an electronic signature when Part 11 compliance mode is enabled: Download recipes to the process, Write variables marked Signature Required, Acknowledge alarms and events, Shelve alarms, Edit schedules in the Scheduler, and Restart devices. Each entry shows its action key in brackets. Write variables marked Signature Required applies to the variables that have Signature Required selected on the General tab of the variable dialog; see the Electronic Signatures article. Disable Part 11 compliance mode is always included and cannot be removed. Configuration changes are recorded in the audit trail without a signature.Multi-select
Signature MeaningsThe meanings offered in the Meaning list of the signature dialog, one per line. 21 CFR 11.50 requires the meaning to be part of the signature record. An empty list falls back to Approval, Review and Responsibility.Approval, Review, ResponsibilityOne per line
Always Require Both Signature ComponentsWhen True, every signing asks for the user name and the password. When False, only the first signing of a continuous session requires both components; later signings in the same session require the password only, as allowed by 21 CFR 11.200(a)(1).TrueBoolean

Historian

The Historian section configures where historical data is stored and how historian rotation is managed.

It also provides historian deletion and size overview functions.

Rotation exists to bound disk usage so the historian cannot fill the volume and stop the system. It is not the record retention mechanism for a 21 CFR Part 11 deployment. The archive database that a Data Forwarder writes to holds the records for the mandated period.

Size Rotation Days and Audit Retention Days longer than the longest period the archive database can be unavailable. Rotation removes records on age alone and does not check whether a Data Forwarder has already sent them, so a record that ages out while the archive server is unreachable is not recoverable. If the archive server can be offline for two weeks for maintenance or a network fault, set the retention periods well above that.

Setting Audit Retention Days to 0 disables audit trail rotation and keeps the audit records indefinitely, which removes the constraint at the cost of unbounded growth on the local disk. Signature records are never removed by rotation.

SettingDescriptionExampleUnits / Format
Rotate HistorianEnables periodic historian rotation.trueBoolean
Rotation DaysNumber of days historic trend, alarm, and event records are kept. Records older than this are permanently removed. Shown only when Rotate Historian is enabled.365Days
Audit Retention DaysNumber of days audit trail records are kept. Records older than this are permanently removed. Shown only when Rotate Historian is enabled.365Days
Historian Database PathFile system path of the historian database. Leave empty to use the default location. The file must exist at the path. The Move the Historian Database to Another Drive article describes the procedure.Path
Delete Historical DataDeletes the historian data store after confirmation.Action
Current SizeDisplays the current size of the historian database.Information

Numpad

The Numpad section configures the on-screen numpad and keyboard used on touch systems.

SettingDescriptionExampleUnits / Format
Numpad ScaleScale factor for the on-screen numpad.Number
Numpad ColorFont or key color of the numpad.#RRGGBBHex color
Numpad Background ColorBackground color of the numpad.#RRGGBBHex color
Enable KeyboardEnables the on-screen keyboard.trueBoolean
Keyboard ColorFont or key color of the keyboard.#RRGGBBHex color
Keyboard Background ColorBackground color of the keyboard.#RRGGBBHex color
Keyboard ScaleScale factor for the on-screen keyboard.Number

Gateways

The Gateways section configures the built-in Modbus TCP server and the Modbus RTU servers used to expose project variables to external systems.

When a server is enabled, additional communication settings become available in the page.

Two independent Modbus RTU slave servers are available. Enable Modbus RTU Slave configures the first COM port and Enable Modbus RTU Slave (Port 2) configures a second COM port. Each port has its own Port Name, Baud Rate, Parity, Stop Bits, Handshake, Unit ID, and Verbose settings, and both ports expose the same project variable mapping.

15 rows
SettingDescriptionExampleUnits / Format
Enable Modbus TCP ServerEnables the Modbus TCP server gateway.trueBoolean
Port (Default 502)TCP port used by the Modbus TCP server.502Integer
Verbose TCPVerbose level for the Modbus TCP server.0Integer
Enable Modbus RTU SlaveEnables the Modbus RTU server gateway.trueBoolean
Port NameSerial port used by the Modbus RTU server.Text
Baud RateBaud rate used by the Modbus RTU server. Available values are 1200, 2400, 4800, 9600, 19200, 38400, 57600, and 115200.9600Enum
ParityParity setting for the serial port. Available values are None, Odd, and Even.None / Odd / EvenEnum
Stop BitsStop bits setting for the serial port. Available values are None, One, Two, and OnePointFive.None / One / Two / OnePointFiveEnum
HandshakeHandshake mode for the serial port. Available values are None, XOnXOff, RequestToSend, and RequestToSendXOnXOff.None / XOnXOff / RequestToSend / RequestToSendXOnXOffEnum
Unit IDUnit ID used by the Modbus RTU server.Integer
Modbus RTU VerboseVerbose level for the Modbus RTU server.0Integer
Enable Modbus RTU Slave (Port 2)Enables a second Modbus RTU server gateway on a separate COM port. When enabled, it exposes the same Port Name, Baud Rate, Parity, Stop Bits, Handshake, Unit ID, and Verbose settings for the second port.trueBoolean
Modbus Variables ExportExports the Modbus gateway variable mapping.CSV
Modbus Variables ImportImports the Modbus gateway variable mapping.CSV UTF-8
Max Forwarding Queue SizeMaximum number of pending items buffered for each outbound gateway queue (Modbus TCP and RTU servers, OPC UA server, Kafka, and the alarm and event forwarding queues). Bounds memory if a server fails to start or a consumer stops draining; the oldest items are dropped when the limit is reached. MQTT clients are buffered separately through Max Publish Queue Size on the MQTT Clients page.50000Integer

OPC UA Server

The OPC UA Server section configures the OPC UA server that runs inside EnvisionSCADA. The server publishes every variable that has OPC UA ticked in its variable settings as a node under the ENVISION folder. The first segment of the variable name (the part before the first dot) becomes a sub folder, so PLC1.Pump1_Speed is published as Pump1_Speed inside the PLC1 folder and a variable without a dot, for example Counter, is published directly under the ENVISION folder. Clients read the live value, subscribe to changes, and write to variables that have Writeable ticked. A Writeable Local variable counts as a license point, see the Local Variables article.

Variables that also have Historize ticked expose their Historian data through OPC UA Historical Access. The node carries the Historizing attribute and the HistoryRead access level, and a client reads raw values for a time range with the HistoryRead service (for example the history view of an OPC UA client or a historian collector). A single HistoryRead call returns at most 10000 values per node; a client asks for the rest through the continuation point returned with the first page. Values are returned as stored in the Historian with their UTC timestamps and quality, and history can only be read through OPC UA, never inserted, replaced or deleted.

The security settings are the OPC UA client device settings in the other direction: Enable Secure Channel, Subject Name, Validate Client Certificate, Username and Password have the same meaning as on the OPC UA Devices page, applied to connecting clients instead of to a connected server. All of them are off or empty by default, which gives an unsecured endpoint with anonymous access. Each of these settings restarts the OPC UA server when changed, which disconnects its clients.

In a redundant pair both servers run and both accept client connections. The standby publishes the values it receives from the primary, so a client reads the same data on either node, and a write on the standby is forwarded to the primary before it reaches the device. A write is accepted only on an enabled variable that has Writeable ticked.

SettingDescriptionExampleUnits / Format
Enable OPC UA ServerEnables the OPC UA server. The remaining settings in this section become available when the server is enabled.trueBoolean
Port (Default 4840)TCP port of the OPC UA endpoint (opc.tcp://<host>:<port>).4840Integer
Verbose (0:Default 1:Info 2:Debug)Verbose level for the OPC UA server. Level 1 logs the effective security configuration and session authentication, level 2 also logs every history read.0Integer
Enable Secure ChannelOff: the server offers an unsecured endpoint (security mode None). On: the server offers Sign & Encrypt endpoints only, with the security policies Basic256Sha256, Aes128_Sha256_RsaOaep and Aes256_Sha256_RsaPss, and clients must connect with security.falseBoolean
Subject NameSubject name of the server certificate, looked up in the Windows certificate store under Local Computer / Personal, the same lookup as Subject Name on the OPC UA Devices page. Leave empty to use the certificate that EnvisionSCADA generates for itself (ENVISIONOpcUaServer). The certificate needs a private key that the EnvisionSCADA service account can read. On Docker, the server certificates, including the generated one, are kept in the /app/certs/pki folders; see the Docker article to keep them when the container is recreated. Available when Enable Secure Channel is on.CN=EnvisionSCADA OPC UA, O=CompanyText
Validate Client CertificateOff: every client certificate is accepted. On: a client certificate must chain to Local Computer / Trusted Root Certification Authorities or be present in Local Computer / Trusted People. A rejected certificate is written to the Certificates/Rejected folder of the application so it can be imported into Trusted People. Available when Enable Secure Channel is on.falseBoolean
UsernameLeave empty for anonymous access. With a user name set, anonymous access is off and every client session must present this user name and the password.Text
PasswordPassword that goes with the Username. On an unsecured endpoint the client encrypts it with the server certificate, so it does not travel in clear text.Text

MQTT Broker

The MQTT Broker section configures the MQTT broker that runs inside EnvisionSCADA. The broker accepts connections from external MQTT clients and routes messages between them. It does not read or write project variables.

When the broker is enabled, the port, TLS, authentication, and topic access control settings become available in the page. Press Edit MQTT Broker Users to manage broker user accounts and their topic rules.

SettingDescriptionExampleUnits / Format
Enable MQTT BrokerEnables the built-in MQTT broker.falseBoolean
MQTT Broker PortPort used by the MQTT broker for unencrypted connections.1883Integer
Enable TLSEnables TLS encryption on the MQTT broker.falseBoolean
TLS PortPort used by the MQTT broker for TLS-encrypted connections.8883Integer
Certificate NameSubject name of the server certificate used for TLS, looked up in the Windows certificate store under Local Computer / Personal. On Docker the certificate is read from the files in the /app/certs/tls folder (see the MQTT Broker article). The certificate needs a private key.Text
Allow AnonymousWhen enabled, MQTT clients can connect without credentials. When disabled, clients must supply a username and password configured in the MQTT broker user list.falseBoolean
Enforce Topic ACLWhen enabled, clients can only publish or subscribe to topics that have been explicitly granted in the topic access control list.falseBoolean
Broker Log EntriesNumber of entries kept in the broker log shown on the MQTT Broker Log page. The oldest entries are dropped once the limit is reached. The log is held in memory only and is cleared when the broker restarts, so a higher value uses more memory while the broker runs. A changed value applies immediately, without restarting the broker.2000Integer (100-100000)

Training Simulator

The Training Simulator setting enables the training simulator mode.

This setting is configured separately on the Parameters page and is not part of the gateway server settings.

SettingDescriptionExampleUnits / Format
Enable Training SimulatorEnables the training simulator mode.falseBoolean

Debugging

The Debugging section contains diagnostic logging settings used to retain additional information for service analysis and troubleshooting.

Use these settings when you need to keep file-based traces of system events or embedded AI chat tool activity. All log files are written to the File Logging Path directory, and Log Retention Days and Log Maximum Size (MB) limit the disk space they use.

SettingDescriptionExampleUnits / Format
Enable File LoggingWrites system log entries to text files named EnvisionLog_[date]_[n].txt in the File Logging Path directory. A new file is started every day and when a file reaches 300 MB.trueBoolean
Enable AI Tool Activity LoggingStores embedded AI chat MCP tool requests and results as JSON in the AiToolActivity subfolder of the File Logging Path directory, one file per day, so tool activity can be reviewed during troubleshooting.trueBoolean
File Logging PathDirectory used for all log files: the system log files, the application error log and the AI tool activity log. Leave empty to use the default Logs folder inside the EnvisionSCADA application directory. The installer creates this folder and limits access to administrators and the application. Existing installations keep their previously configured path.Folder path
Log Retention DaysLog files in the File Logging Path directory that were last written more than this number of days ago are deleted. 0 keeps all log files.30Integer (0-3650), days
Log Maximum Size (MB)Maximum total size of the log files in the File Logging Path directory. When the total exceeds this value, the oldest files are deleted first. 0 disables the size limit.1024Integer (0-1048576), MB

When the application encounters an unexpected error, the browser shows a generic error page with a reference code and the time the error occurred. Technical detail is not shown on the page. The full error, including the reference code and the request path, is written to an error log file named EnvisionErrors_[date]_[n].txt in the File Logging Path directory. This error log is always written, independently of the Enable File Logging setting. To investigate a reported error, ask the operator for the reference code shown on the error page and locate the matching entry in the error log file. If the error log file cannot be written, the System Log records the reference code, the request path and the error message instead.

Log retention runs when the application starts, every hour, and directly after Log Retention Days or Log Maximum Size (MB) is changed. Log files last written more than Log Retention Days ago are deleted. When the total size of the log files exceeds Log Maximum Size (MB), the oldest files are deleted first, and the most recent file of each log is kept. Retention applies only to the log files EnvisionSCADA creates: EnvisionLog_[date]_[n].txt, EnvisionErrors_[date]_[n].txt and the files in the AiToolActivity subfolder. Other files in the File Logging Path directory are left in place. Every run that deletes files adds an entry to the System Log. In a redundant setup, each server applies the limits to its own log files.

Knowledge Base

The Knowledge Base section controls access to the built-in product documentation.

SettingDescriptionExampleUnits / Format
Allow anonymous Knowledge Base accessAllows the Knowledge Base page to be opened without logging in. Clear this setting when Knowledge Base access should require the normal user login flow.falseBoolean

Notes

Most parameter changes are applied immediately. Some settings, especially redundancy, Active Directory, and gateway-related settings, may require reconnecting clients or restarting related services to fully apply the change.

Use Export before making major changes so the current parameter set can be restored if needed.

Color settings use hexadecimal color values. A color picker is available in the user interface for supported fields.

Gateway exports and imports are separate from the full Parameters export and import.

The AI Chat API key is stored encrypted in the configuration database. Leaving the API Key field empty keeps the current stored key.

Two engine tuning parameters are system-managed: ChangeBusDrainWindow, the batching window of the variable change bus (100 ms), and ChangeBusSafetyNetInterval, the interval at which every alarm, event and script condition is re-evaluated regardless of changes (5000 ms). The configuration API and MCP return them but refuse to change them, and the Parameters page has no field for them. Their defaults are the intended values; a change made under guidance in the Parameters table of the configuration database applies at the next start.

Something missing or wrong in this article? Contact us