The Parameters page contains project-wide system settings organized into sections. These settings control application behavior, branding, communication, runtime appearance, gateways, historian behavior, and feature configuration for the entire project.
Changes on this page apply globally and are not limited to a single page, device, or user.
Parameters is accessible only to users in the Administrators group.
Using the Parameters Page
The Parameters page is organized as a list of collapsible sections. The Sections list on the left lists every section on the page. Selecting an entry in the Sections list opens that section and scrolls to it, and the entry for the section currently at the top is highlighted while scrolling. On narrow displays the Sections list is hidden and the sections remain available in the main list.
Each section is shown as a header that can be opened or closed. Select a section header to expand or collapse it. Sections start collapsed so the full list of sections stays visible.
The search box at the top filters the settings. Enter text in the Search parameters field to show only the settings whose label contains the entered text. Sections that contain a match open automatically, and a No matching parameters message is shown when nothing matches. Use the clear button next to the search box to reset the filter. Expand all and Collapse all open or close every section at once.
Most settings are saved automatically. A setting is stored as soon as the field loses focus or the control is changed, and a short confirmation is shown after the value is saved.
The AI Chat section and the Redundancy Shared Secret field use an explicit Save button instead of automatic saving. After a value in these areas is edited, an Unsaved changes indicator is shown next to the Save button, and the value is stored only when Save is used. A confirmation is requested before leaving the page or collapsing the section while unsaved changes are present.
Color settings accept a color value or the name of a Color Library entry. The color picker lists the library entries, and picking one stores the name, so the setting follows that entry and the theme the station is using. Enter or pick a color value instead to keep the setting fixed.
| Control | Function |
|---|---|
| Sections list | Lists every section. Selecting an entry opens that section and scrolls to it. |
| Section header | Expands or collapses the section. |
| Search parameters | Filters the settings by label text and opens the sections that contain a match. |
| Clear button | Clears the search text and shows all sections. |
| Expand all | Opens every section. |
| Collapse all | Closes every section. |
No rows match the filter.
Parameter Settings
The Parameter Settings section provides export and import of the Parameters page parameter set. This is used to back up the current configuration or move the project-wide settings to another system.
Export, import, and page-scoped API access include all Parameters page parameters except AI chat settings and redundancy-related settings. These excluded settings remain managed through their dedicated configuration flows.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Export | Exports the Parameters page parameter set to a JSON file. AI chat settings and redundancy-related settings are excluded. | parameters.json | JSON |
| Import | Imports a previously exported JSON file and applies the contained parameter values. AI chat settings and redundancy-related settings are skipped. | parameters.json | JSON |
No rows match the filter.
Engineering Settings
The Engineering Settings section contains engineering and maintenance settings used during design, import, export, and page history handling.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| CSV Delimiter | Delimiter character used when exporting or importing CSV files from the system. | ; | Character |
| Page History Max Backups | Maximum number of page versions kept in Page History, counted over all pages together. The oldest versions are removed first. | 100 | Integer |
| PythonScript History Max Backups | Maximum number of Python script history backups retained. Older entries are removed once this limit is exceeded. | 100 | Integer |
| Python Script Execution Timeout | Time after which a running Python script is flagged as timed out. When the duration is exceeded, a system event is logged, the script status variable is set to TimedOut so it can be alarmed on, and a best-effort interrupt is attempted. Set generously because report generation can legitimately take minutes. Set to 0 to disable the watchdog. | 600 | Seconds |
| Document viewer access | Folders the Document Viewer object may serve, and the user groups that may see them. Each rule is one folder and covers everything below it; a rule without user groups allows every user group. An empty field means the Document Viewer shows nothing at all, which is the default. The most specific matching folder decides, so a rule on a subfolder can be stricter than the rule on its parent folder. Guests never have access, and Administrators are not exempt. | D:/Reports = Operators,Supervisors | Folder and user groups per rule |
| HTTP Compression | Compresses pages, scripts, stylesheets and data sent over HTTP. The browser unpacks them automatically and the pages stay the same. Use this for access over a slow link, such as a VPN; on a fast local network it makes no visible difference. A client that does not ask for compression receives the same response as without this setting. The setting applies at once, without a restart. Off by default. | Off | On / Off |
| HTTPS Compression | The same for HTTPS. Use this as a last resort for a slow link, and only in combination with a secure VPN: a compressed HTTPS page can be exposed to the BREACH attack, in which someone who can watch the network and can make the browser of a logged-in user send many requests works out text on a page from the size of the encrypted responses. When a reverse proxy handles HTTPS in front of EnvisionSCADA, the server receives plain HTTP and HTTP Compression applies. Off by default. | Off | On / Off |
No rows match the filter.
Branding
The Branding section controls the appearance of the login page and parts of the runtime user interface.
Several color settings accept a text value and also provide a color picker in the user interface.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Company Name | Text displayed on the login page as the application title. | Text | |
| Login Screen Background Image | Background image used on the login page. | JPEG image | |
| Login Title Font Color | Font color of the title on the login page. | #RRGGBB | Hex color |
| Login Box Background Color | Background color of the login dialog. | #RRGGBB | Hex color |
| Login Input Box Font Color | Font color used in the login input fields. | #RRGGBB | Hex color |
| Login Input Box Background Color | Background color used in the login input fields. | #RRGGBB | Hex color |
| Login Change Password Font Color | Font color for the change password link or text. | #RRGGBB | Hex color |
| Login Input Box Border Color | Border color of the login input fields. | #RRGGBB | Hex color |
| Login Button Background Color | Background color of the login button. | #RRGGBB | Hex color |
| Login Button Font Color | Font color of the login button. | #RRGGBB | Hex color |
| Login Show Password Icon Color | Color of the show password icon on the login page. | #RRGGBB | Hex color |
No rows match the filter.
Guest Settings
The Guest Settings section controls the default behavior for users who are not logged in.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Guest Home Page | Page opened for guest users. This references the Name of a page configured on the Pages page. | Text | |
| Guest Default Language | Default display language applied to guest users. | Language code |
No rows match the filter.
Redundancy
The Redundancy section configures the primary-standby high-availability behavior of the system.
These settings define the participant addresses and synchronization timing used between the redundant nodes.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Enable Redundancy | Enables high-availability behavior for the primary-standby system. | true | Boolean |
| Participant 1 IP Address | IP address of the first redundancy participant. | IP Address | |
| Participant 2 IP Address | IP address of the second redundancy participant. | IP Address | |
| Participant 1 Port | TCP port used by the first participant. | Integer | |
| Participant 2 Port | TCP port used by the second participant. | Integer | |
| Redundancy Shared Secret | Shared secret used to authenticate the connection between the redundant nodes. It is stored encrypted on each node and is not replicated, so the same secret is set on both nodes. Enter a value and use Save to store it, or select Clear stored secret and use Save to remove it. This field uses an explicit Save button. | Password | |
| Backfill Max Records | Maximum number of records sent per backfill synchronization batch. | Integer | |
| Forefill Max Records | Maximum number of records sent per forward synchronization batch. | Integer | |
| Base Request Timeout | Base timeout for redundancy requests. | Seconds | |
| Request Timeout | Overall timeout for redundancy requests. | Seconds | |
| Max Attempts | Maximum number of retry attempts for redundancy communication. | Integer | |
| Attempt Delay | Delay between retry attempts. | ms |
No rows match the filter.
Email Settings
The Email Settings section configures the SMTP server used for outgoing email notifications such as alarm-related messages.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| SMTP Server | Hostname or IP address of the outgoing SMTP server. | Host name / IP | |
| SMTP Username | Username for SMTP authentication. | Text | |
| SMTP Password | Password for SMTP authentication. | Password | |
| SMTP Sender | Sender email address used for outgoing messages. | Email address | |
| SMTP TLS Port | Port number used for TLS-secured SMTP connections. | Integer |
No rows match the filter.
AI Chat
The AI Chat section configures the built-in AI assistant for runtime users and administrators.
It contains provider settings, model selection, API endpoint settings, the system prompt, and runtime limits.
Tool availability depends on the user's group membership. AI chat for non-administrator runtime users is limited to read-only runtime tools that read live values, active alarms, events, and historian data. Writing variable values, executing Python scripts, configuration tools, design tools, and database queries are available only to users in the Administrators group. Tools that change runtime or configuration state always request an explicit confirmation in the chat before they are executed.
When AI chat creates, changes, or deletes records of the configuration type shown on the open page, the page list is reloaded automatically so the result is visible without a manual refresh. The applied filters, sorting, and the chat panel stay as they are. A change to a different configuration type leaves the open page unchanged.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Enable AI Chat | Master switch for the AI chat feature. When disabled, AI chat is unavailable to both runtime users and administrators. | true | Boolean |
| Runtime AI | Controls whether the runtime AI chat balloon is shown to non-administrator runtime users. When disabled, the balloon is hidden for runtime users, while administrators can still use AI chat if Enable AI Chat is turned on. | false | Boolean |
| Provider | AI provider used by the system. The current page supports OpenAI and Anthropic. | OpenAI / Anthropic | Enum |
| Runtime Model | Model used for standard runtime users. | Text | |
| Developer Model | Optional override model used for users in the Administrators group. When empty, Runtime Model is used. | Text | |
| Endpoint | Optional custom API endpoint. | URL | |
| API Key | API key used for authentication with the selected provider. | Password | |
| Clear Stored API Key Override | Removes the stored API key override. | false | Boolean |
| Anthropic Version | API version header required when the Anthropic provider is selected. | 2023-06-01 | Text |
| System Prompt | System instruction text sent with AI chat requests. | Text | |
| Max Tool Rounds | Maximum number of tool-call rounds allowed per chat request. | Integer | |
| Max History Messages | Maximum number of previous chat messages included in a request. | Integer | |
| Max Tokens | Maximum tokens requested from the provider. | Integer | |
| Temperature | Sampling temperature used for model responses. | Number |
No rows match the filter.
MCP OAuth
The MCP OAuth section enables and configures OAuth 2.0 authentication for the MCP server. When it is turned off, the MCP server keeps using HTTP Basic authentication and the session cookie only. When it is turned on, the MCP server also accepts OAuth 2.0 bearer tokens and publishes its discovery endpoints, so OAuth-aware clients can sign in interactively. Access granted through OAuth carries the same permissions as the account used to sign in.
The signing key is stored on each server and is not replicated. On a single server it is generated automatically when the field is left empty. For a redundant pair, set the same signing key on both servers so that a token issued by the primary is accepted by the standby.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Enable MCP OAuth 2.0 | Turns OAuth 2.0 on for the MCP server. When off, only HTTP Basic authentication and the session cookie are used. | false | Boolean |
| MCP OAuth access token lifetime | How long an issued access token stays valid. Clients refresh automatically before it expires. | 60 | Minutes (1 - 1440) |
| MCP OAuth signing key | Secret that signs access tokens. Leave empty on a single server to generate one automatically. Set the same value on both servers of a redundant pair. Stored encrypted and not replicated. | Text |
No rows match the filter.
Languages
The Languages section configures the project languages available to users and the default language used by the system.
The project language texts are translated on the Translations page, opened with the Translations button of Project Language Texts. That page lists the operator texts of the project with one column per language and provides the import and export of the texts as CSV; see the Translations article.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Default Language | System-wide default display language applied when no user-specific language is set. | Language code | |
| Languages In File | Ordered list of enabled languages currently available in the project translations file. | Language code list | |
| Add Language | Adds another supported language to the project. | Language code | |
| Project Language Texts | The Translations button opens the Translations page, where the operator texts of the project are translated, imported and exported. | Button |
No rows match the filter.
Alarm Settings
The Alarm Settings section defines the colors used for different alarm states in the runtime viewers, and the rules for alarm shelving and alarm cascading. Shelving from the Alarm Viewer and the Parent Alarms, Suppress When and Release Delay (s) settings of an alarm are described in the Alarm Viewer and Alarms articles.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Alarm Active | Color used for active alarms. | #RRGGBB | Hex color |
| Alarm Returned | Color used for returned alarms. | #RRGGBB | Hex color |
| Alarm Active Acknowledged | Color used for active alarms that have been acknowledged. | #RRGGBB | Hex color |
| Alarm Returned Acknowledged | Color used for returned alarms that have been acknowledged. | #RRGGBB | Hex color |
| Maximum Shelve Time (min) | Longest duration for which an operator can shelve an alarm in the Alarm Viewer. The Shelve Alarm dialog offers only the preset durations up to this value and limits a custom duration to it. | 480 | Minutes (1 to 10080) |
| Shelvable Severities | Checkboxes Critical, High, Medium and Low that select the severities an operator can shelve. The Shelve button in the Alarm Viewer is disabled for the other severities, and the Runtime API and MCP refuse them. | High, Medium, Low | Checkboxes |
| Shelve Requires Reason | When on, the Reason field of the Shelve Alarm dialog must be filled in before an alarm can be shelved; the Runtime API and MCP require the Reason value in the same way. | true | Boolean |
| Cascade Window (s) | Number of seconds before a parent alarm goes active during which an already active alarm that has it in its Parent Alarms is still folded under it as a consequence. An alarm that went active earlier than this window stays annunciated. | 10 | Seconds (0 to 600) |
No rows match the filter.
Viewer Colors
The Viewer Colors section defines the shared appearance of runtime viewers such as alarm and event tables.
These settings control the background, font, border, hover, row, header, and icon colors used by the viewers.
These settings follow the Color Library in the same way as the other color settings on this page, so the viewers change with the theme the station is using.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Viewer Background Color | Background color of the viewer. | #RRGGBB | Hex color |
| Viewer Line Color | Line color used in the viewer. | #RRGGBB | Hex color |
| Viewer Font Color | Default font color used in the viewer. | #RRGGBB | Hex color |
| Viewer Input Background Color | Background color of viewer input controls. | #RRGGBB | Hex color |
| Viewer Input Font Color | Font color of viewer input controls. | #RRGGBB | Hex color |
| Viewer Button Background Color | Background color of viewer buttons. | #RRGGBB | Hex color |
| Viewer Button Font Color | Font color of viewer buttons. | #RRGGBB | Hex color |
| Viewer Border Color | Border color of the viewer. | #RRGGBB | Hex color |
| Viewer Button Background Color Hover | Button background color on hover. | #RRGGBB | Hex color |
| Viewer Button Font Color Hover | Button font color on hover. | #RRGGBB | Hex color |
| Viewer Border Color Hover | Border color on hover. | #RRGGBB | Hex color |
| Viewer Row Hover Color | Row background color on hover. | #RRGGBB | Hex color |
| Viewer Row Alternate Color | Alternate row background color. | #RRGGBB | Hex color |
| Viewer Row Border Color | Border color between rows. | #RRGGBB | Hex color |
| Viewer Header Background Color | Background color of the viewer header. | #RRGGBB | Hex color |
| Viewer Icon Color | Default icon color in viewers. | #RRGGBB | Hex color |
| Viewer Icon Color Hover | Icon color on hover. | #RRGGBB | Hex color |
| Viewer Column Header Font Color | Font color of column headers. | #RRGGBB | Hex color |
| Viewer Header Form Background Color | Background color of the header filter or form area. | #RRGGBB | Hex color |
No rows match the filter.
Active Directory
The Active Directory section configures LDAP or Active Directory login integration for domain users.
When enabled, users can authenticate with their domain credentials and can be mapped to EnvisionSCADA groups through the User Groups configuration.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Enable Active Directory | Enables Active Directory or LDAP authentication. | true | Boolean |
| LDAP Host | Host name or IP address of the LDAP or Active Directory server. | Host name / IP | |
| LDAP Port | Port used for the LDAP connection. | Integer | |
| Search Base | Base distinguished name used for directory searches. | LDAP DN | |
| Use Secure Socket Layer | Uses SSL for the LDAP connection. | false | Boolean |
| Verify Server Certificate | Verifies the server certificate when SSL is enabled. | true | Boolean |
No rows match the filter.
Login and Password Policy
These settings control sign-in protection and the password policy for local accounts. Active Directory accounts are managed by the domain and are not affected by the password policy.
The password policy applies when a password is set or changed. Existing passwords continue to work until they are changed.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| PasswordMinLength | Minimum number of characters required for a new or changed password. | 8 | Integer (4 to 128) |
| PasswordRequireComplexity | When True, a new or changed password must contain an uppercase letter, a lowercase letter, a digit, and a symbol. | True | True / False |
| PasswordExpiryDays | Number of days after which a password must be changed at sign-in. Set to 0 for unlimited (no expiry). | 0 | Days (0 = unlimited) |
| AdminSessionTimeoutMinutes | Inactivity timeout for Administrator sessions, after which the user is signed out. Guest displays are not affected. | 240 | Minutes |
| LoginThrottleFreeAttempts | Number of failed sign-in attempts allowed before a progressive delay is applied, counted per user name and per source address. | 5 | Integer |
| LoginThrottleStepSeconds | Additional delay added for each failed attempt beyond the free attempts. | 2 | Seconds |
| LoginThrottleMaxDelaySeconds | Maximum delay applied to a delayed sign-in attempt. | 30 | Seconds |
| LoginThrottleWindowMinutes | Period of inactivity after which the failed-attempt count resets. | 15 | Minutes |
| EnforceSingleSession | When True, a new login ends any previous session of the same user. This supports the continuous-session rule of the Part 11 signing policy. | False | True / False |
No rows match the filter.
Part 11 Compliance
The Part 11 Compliance section enables 21 CFR Part 11 compliance mode and configures which operations require an electronic signature before they can be executed.
When Part 11 compliance mode is enabled, any action included in Signature Required Actions prompts for a signature. The ComplianceMode.Disable action is always included and cannot be removed, so disabling compliance mode always requires a signature.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Enable Part 11 Compliance | Enables 21 CFR Part 11 compliance mode. When enabled, the selected signature-required actions prompt for an electronic signature before they are executed. | false | Boolean |
| Signature Required Actions | Operator actions that require an electronic signature when Part 11 compliance mode is enabled: Download recipes to the process, Write variables marked Signature Required, Acknowledge alarms and events, Shelve alarms, Edit schedules in the Scheduler, and Restart devices. Each entry shows its action key in brackets. Write variables marked Signature Required applies to the variables that have Signature Required selected on the General tab of the variable dialog; see the Electronic Signatures article. Disable Part 11 compliance mode is always included and cannot be removed. Configuration changes are recorded in the audit trail without a signature. | Multi-select | |
| Signature Meanings | The meanings offered in the Meaning list of the signature dialog, one per line. 21 CFR 11.50 requires the meaning to be part of the signature record. An empty list falls back to Approval, Review and Responsibility. | Approval, Review, Responsibility | One per line |
| Always Require Both Signature Components | When True, every signing asks for the user name and the password. When False, only the first signing of a continuous session requires both components; later signings in the same session require the password only, as allowed by 21 CFR 11.200(a)(1). | True | Boolean |
No rows match the filter.
Historian
The Historian section configures where historical data is stored and how historian rotation is managed.
It also provides historian deletion and size overview functions.
Rotation exists to bound disk usage so the historian cannot fill the volume and stop the system. It is not the record retention mechanism for a 21 CFR Part 11 deployment. The archive database that a Data Forwarder writes to holds the records for the mandated period.
Size Rotation Days and Audit Retention Days longer than the longest period the archive database can be unavailable. Rotation removes records on age alone and does not check whether a Data Forwarder has already sent them, so a record that ages out while the archive server is unreachable is not recoverable. If the archive server can be offline for two weeks for maintenance or a network fault, set the retention periods well above that.
Setting Audit Retention Days to 0 disables audit trail rotation and keeps the audit records indefinitely, which removes the constraint at the cost of unbounded growth on the local disk. Signature records are never removed by rotation.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Rotate Historian | Enables periodic historian rotation. | true | Boolean |
| Rotation Days | Number of days historic trend, alarm, and event records are kept. Records older than this are permanently removed. Shown only when Rotate Historian is enabled. | 365 | Days |
| Audit Retention Days | Number of days audit trail records are kept. Records older than this are permanently removed. Shown only when Rotate Historian is enabled. | 365 | Days |
| Historian Database Path | File system path of the historian database. Leave empty to use the default location. The file must exist at the path. The Move the Historian Database to Another Drive article describes the procedure. | Path | |
| Delete Historical Data | Deletes the historian data store after confirmation. | Action | |
| Current Size | Displays the current size of the historian database. | Information |
No rows match the filter.
Numpad
The Numpad section configures the on-screen numpad and keyboard used on touch systems.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Numpad Scale | Scale factor for the on-screen numpad. | Number | |
| Numpad Color | Font or key color of the numpad. | #RRGGBB | Hex color |
| Numpad Background Color | Background color of the numpad. | #RRGGBB | Hex color |
| Enable Keyboard | Enables the on-screen keyboard. | true | Boolean |
| Keyboard Color | Font or key color of the keyboard. | #RRGGBB | Hex color |
| Keyboard Background Color | Background color of the keyboard. | #RRGGBB | Hex color |
| Keyboard Scale | Scale factor for the on-screen keyboard. | Number |
No rows match the filter.
Gateways
The Gateways section configures the built-in Modbus TCP server and the Modbus RTU servers used to expose project variables to external systems.
When a server is enabled, additional communication settings become available in the page.
Two independent Modbus RTU slave servers are available. Enable Modbus RTU Slave configures the first COM port and Enable Modbus RTU Slave (Port 2) configures a second COM port. Each port has its own Port Name, Baud Rate, Parity, Stop Bits, Handshake, Unit ID, and Verbose settings, and both ports expose the same project variable mapping.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Enable Modbus TCP Server | Enables the Modbus TCP server gateway. | true | Boolean |
| Port (Default 502) | TCP port used by the Modbus TCP server. | 502 | Integer |
| Verbose TCP | Verbose level for the Modbus TCP server. | 0 | Integer |
| Enable Modbus RTU Slave | Enables the Modbus RTU server gateway. | true | Boolean |
| Port Name | Serial port used by the Modbus RTU server. | Text | |
| Baud Rate | Baud rate used by the Modbus RTU server. Available values are 1200, 2400, 4800, 9600, 19200, 38400, 57600, and 115200. | 9600 | Enum |
| Parity | Parity setting for the serial port. Available values are None, Odd, and Even. | None / Odd / Even | Enum |
| Stop Bits | Stop bits setting for the serial port. Available values are None, One, Two, and OnePointFive. | None / One / Two / OnePointFive | Enum |
| Handshake | Handshake mode for the serial port. Available values are None, XOnXOff, RequestToSend, and RequestToSendXOnXOff. | None / XOnXOff / RequestToSend / RequestToSendXOnXOff | Enum |
| Unit ID | Unit ID used by the Modbus RTU server. | Integer | |
| Modbus RTU Verbose | Verbose level for the Modbus RTU server. | 0 | Integer |
| Enable Modbus RTU Slave (Port 2) | Enables a second Modbus RTU server gateway on a separate COM port. When enabled, it exposes the same Port Name, Baud Rate, Parity, Stop Bits, Handshake, Unit ID, and Verbose settings for the second port. | true | Boolean |
| Modbus Variables Export | Exports the Modbus gateway variable mapping. | CSV | |
| Modbus Variables Import | Imports the Modbus gateway variable mapping. | CSV UTF-8 | |
| Max Forwarding Queue Size | Maximum number of pending items buffered for each outbound gateway queue (Modbus TCP and RTU servers, OPC UA server, Kafka, and the alarm and event forwarding queues). Bounds memory if a server fails to start or a consumer stops draining; the oldest items are dropped when the limit is reached. MQTT clients are buffered separately through Max Publish Queue Size on the MQTT Clients page. | 50000 | Integer |
No rows match the filter.
OPC UA Server
The OPC UA Server section configures the OPC UA server that runs inside EnvisionSCADA. The server publishes every variable that has OPC UA ticked in its variable settings as a node under the ENVISION folder. The first segment of the variable name (the part before the first dot) becomes a sub folder, so PLC1.Pump1_Speed is published as Pump1_Speed inside the PLC1 folder and a variable without a dot, for example Counter, is published directly under the ENVISION folder. Clients read the live value, subscribe to changes, and write to variables that have Writeable ticked. A Writeable Local variable counts as a license point, see the Local Variables article.
Variables that also have Historize ticked expose their Historian data through OPC UA Historical Access. The node carries the Historizing attribute and the HistoryRead access level, and a client reads raw values for a time range with the HistoryRead service (for example the history view of an OPC UA client or a historian collector). A single HistoryRead call returns at most 10000 values per node; a client asks for the rest through the continuation point returned with the first page. Values are returned as stored in the Historian with their UTC timestamps and quality, and history can only be read through OPC UA, never inserted, replaced or deleted.
The security settings are the OPC UA client device settings in the other direction: Enable Secure Channel, Subject Name, Validate Client Certificate, Username and Password have the same meaning as on the OPC UA Devices page, applied to connecting clients instead of to a connected server. All of them are off or empty by default, which gives an unsecured endpoint with anonymous access. Each of these settings restarts the OPC UA server when changed, which disconnects its clients.
In a redundant pair both servers run and both accept client connections. The standby publishes the values it receives from the primary, so a client reads the same data on either node, and a write on the standby is forwarded to the primary before it reaches the device. A write is accepted only on an enabled variable that has Writeable ticked.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Enable OPC UA Server | Enables the OPC UA server. The remaining settings in this section become available when the server is enabled. | true | Boolean |
| Port (Default 4840) | TCP port of the OPC UA endpoint (opc.tcp://<host>:<port>). | 4840 | Integer |
| Verbose (0:Default 1:Info 2:Debug) | Verbose level for the OPC UA server. Level 1 logs the effective security configuration and session authentication, level 2 also logs every history read. | 0 | Integer |
| Enable Secure Channel | Off: the server offers an unsecured endpoint (security mode None). On: the server offers Sign & Encrypt endpoints only, with the security policies Basic256Sha256, Aes128_Sha256_RsaOaep and Aes256_Sha256_RsaPss, and clients must connect with security. | false | Boolean |
| Subject Name | Subject name of the server certificate, looked up in the Windows certificate store under Local Computer / Personal, the same lookup as Subject Name on the OPC UA Devices page. Leave empty to use the certificate that EnvisionSCADA generates for itself (ENVISIONOpcUaServer). The certificate needs a private key that the EnvisionSCADA service account can read. On Docker, the server certificates, including the generated one, are kept in the /app/certs/pki folders; see the Docker article to keep them when the container is recreated. Available when Enable Secure Channel is on. | CN=EnvisionSCADA OPC UA, O=Company | Text |
| Validate Client Certificate | Off: every client certificate is accepted. On: a client certificate must chain to Local Computer / Trusted Root Certification Authorities or be present in Local Computer / Trusted People. A rejected certificate is written to the Certificates/Rejected folder of the application so it can be imported into Trusted People. Available when Enable Secure Channel is on. | false | Boolean |
| Username | Leave empty for anonymous access. With a user name set, anonymous access is off and every client session must present this user name and the password. | Text | |
| Password | Password that goes with the Username. On an unsecured endpoint the client encrypts it with the server certificate, so it does not travel in clear text. | Text |
No rows match the filter.
MQTT Broker
The MQTT Broker section configures the MQTT broker that runs inside EnvisionSCADA. The broker accepts connections from external MQTT clients and routes messages between them. It does not read or write project variables.
When the broker is enabled, the port, TLS, authentication, and topic access control settings become available in the page. Press Edit MQTT Broker Users to manage broker user accounts and their topic rules.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Enable MQTT Broker | Enables the built-in MQTT broker. | false | Boolean |
| MQTT Broker Port | Port used by the MQTT broker for unencrypted connections. | 1883 | Integer |
| Enable TLS | Enables TLS encryption on the MQTT broker. | false | Boolean |
| TLS Port | Port used by the MQTT broker for TLS-encrypted connections. | 8883 | Integer |
| Certificate Name | Subject name of the server certificate used for TLS, looked up in the Windows certificate store under Local Computer / Personal. On Docker the certificate is read from the files in the /app/certs/tls folder (see the MQTT Broker article). The certificate needs a private key. | Text | |
| Allow Anonymous | When enabled, MQTT clients can connect without credentials. When disabled, clients must supply a username and password configured in the MQTT broker user list. | false | Boolean |
| Enforce Topic ACL | When enabled, clients can only publish or subscribe to topics that have been explicitly granted in the topic access control list. | false | Boolean |
| Broker Log Entries | Number of entries kept in the broker log shown on the MQTT Broker Log page. The oldest entries are dropped once the limit is reached. The log is held in memory only and is cleared when the broker restarts, so a higher value uses more memory while the broker runs. A changed value applies immediately, without restarting the broker. | 2000 | Integer (100-100000) |
No rows match the filter.
Training Simulator
The Training Simulator setting enables the training simulator mode.
This setting is configured separately on the Parameters page and is not part of the gateway server settings.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Enable Training Simulator | Enables the training simulator mode. | false | Boolean |
No rows match the filter.
Debugging
The Debugging section contains diagnostic logging settings used to retain additional information for service analysis and troubleshooting.
Use these settings when you need to keep file-based traces of system events or embedded AI chat tool activity. All log files are written to the File Logging Path directory, and Log Retention Days and Log Maximum Size (MB) limit the disk space they use.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Enable File Logging | Writes system log entries to text files named EnvisionLog_[date]_[n].txt in the File Logging Path directory. A new file is started every day and when a file reaches 300 MB. | true | Boolean |
| Enable AI Tool Activity Logging | Stores embedded AI chat MCP tool requests and results as JSON in the AiToolActivity subfolder of the File Logging Path directory, one file per day, so tool activity can be reviewed during troubleshooting. | true | Boolean |
| File Logging Path | Directory used for all log files: the system log files, the application error log and the AI tool activity log. Leave empty to use the default Logs folder inside the EnvisionSCADA application directory. The installer creates this folder and limits access to administrators and the application. Existing installations keep their previously configured path. | Folder path | |
| Log Retention Days | Log files in the File Logging Path directory that were last written more than this number of days ago are deleted. 0 keeps all log files. | 30 | Integer (0-3650), days |
| Log Maximum Size (MB) | Maximum total size of the log files in the File Logging Path directory. When the total exceeds this value, the oldest files are deleted first. 0 disables the size limit. | 1024 | Integer (0-1048576), MB |
No rows match the filter.
When the application encounters an unexpected error, the browser shows a generic error page with a reference code and the time the error occurred. Technical detail is not shown on the page. The full error, including the reference code and the request path, is written to an error log file named EnvisionErrors_[date]_[n].txt in the File Logging Path directory. This error log is always written, independently of the Enable File Logging setting. To investigate a reported error, ask the operator for the reference code shown on the error page and locate the matching entry in the error log file. If the error log file cannot be written, the System Log records the reference code, the request path and the error message instead.
Log retention runs when the application starts, every hour, and directly after Log Retention Days or Log Maximum Size (MB) is changed. Log files last written more than Log Retention Days ago are deleted. When the total size of the log files exceeds Log Maximum Size (MB), the oldest files are deleted first, and the most recent file of each log is kept. Retention applies only to the log files EnvisionSCADA creates: EnvisionLog_[date]_[n].txt, EnvisionErrors_[date]_[n].txt and the files in the AiToolActivity subfolder. Other files in the File Logging Path directory are left in place. Every run that deletes files adds an entry to the System Log. In a redundant setup, each server applies the limits to its own log files.
Knowledge Base
The Knowledge Base section controls access to the built-in product documentation.
| Setting | Description | Example | Units / Format |
|---|---|---|---|
| Allow anonymous Knowledge Base access | Allows the Knowledge Base page to be opened without logging in. Clear this setting when Knowledge Base access should require the normal user login flow. | false | Boolean |
No rows match the filter.
Notes
Most parameter changes are applied immediately. Some settings, especially redundancy, Active Directory, and gateway-related settings, may require reconnecting clients or restarting related services to fully apply the change.
Use Export before making major changes so the current parameter set can be restored if needed.
Color settings use hexadecimal color values. A color picker is available in the user interface for supported fields.
Gateway exports and imports are separate from the full Parameters export and import.
The AI Chat API key is stored encrypted in the configuration database. Leaving the API Key field empty keeps the current stored key.
Two engine tuning parameters are system-managed: ChangeBusDrainWindow, the batching window of the variable change bus (100 ms), and ChangeBusSafetyNetInterval, the interval at which every alarm, event and script condition is re-evaluated regardless of changes (5000 ms). The configuration API and MCP return them but refuse to change them, and the Parameters page has no field for them. Their defaults are the intended values; a change made under guidance in the Parameters table of the configuration database applies at the next start.