Hello Norman,

You have got it right! It’s a correct IP-address but only from the IEM "perspective".

To be honest I understand a basic concept but I’m afraid I didn't quite grasp it when our IT department's guy was explaining it to me ;) But basically, there are two separate networks securely joined together in our edge ecosystem where one includes the virtual IED and IEM and the other a physical IED (and PLCs and other devices) on which we had trouble logging in. Devices in both of the networks uses different IP-address to access the same IED (and other devices) and there was incorrect record for translating address properly when communication between networks was needed.

After setting it properly we are able to log in to the IE Flow Creator. The virtual IED and IEM are on the same network so it worked right even before changing a record.

Thanks for your help!

Best regards,
Petr

Hello Petr,

which IED and Flow Creator version do you use?

Could you please check if the IP-Address of your Device matches the IP-Address of the Edge Device certificate. 

You can check the certificate in your browser directly, please see my screenshot attached.

If both IP-Addresses does not match, you are not able to log in to the Flow Creator.

This can happen 

 - if you uploaded custom certificates to your IED

 - The IP-Address of your IED changed and the IED is not connected to the IEM. If the IED is not connected to your IEM the certificates cannot be updated ==> Connect your IED to the IEM and reboot your device will solve this issue 

Hello Norman,

IED version ied-os-1.9.0-27-amd64

IE Flow Creator version V1.12.0.-1

Hello Norman,

Note that we can log in to Flow Creator on the virtual edge that is secured the same way.

IED version  ievd-1.12.0-3-a

IE Flow Creator version V1.12.0-1

Petr

I uninstalled IE Flow Creator and installed it again and this is the part of the log file.

{"log":"2023/06/01 09:44:35 AuthService Initial StatusLog File created successfully.\n","stream":"stderr","time":"2023-06-01T09:44:35.58053019Z"}
{"log":"2023/06/01 09:44:35 Starting certificate handler server...\n","stream":"stderr","time":"2023-06-01T09:44:35.58068318Z"}
{"log":"2023/06/01 09:44:35 SendStatusToFileChannel execution started\n","stream":"stderr","time":"2023-06-01T09:44:35.581060223Z"}
{"log":"2023/06/01 09:44:35 Socket address is set in environment variable. /certificates/edge.sock\n","stream":"stderr","time":"2023-06-01T09:44:35.581102163Z"}
{"log":"2023/06/01 09:44:35 Certificate path is set in environment variable. /home/edge/sim-edge-certificate/certificate.crt\n","stream":"stderr","time":"2023-06-01T09:44:35.581126512Z"}
{"log":"2023/06/01 09:44:35 Ip path is set in environment variable. /home/edge/sim-edge-ip/edgeip.txt\n","stream":"stderr","time":"2023-06-01T09:44:35.581149324Z"}
{"log":"2023/06/01 09:44:35 Running to get runtime certificate...\n","stream":"stderr","time":"2023-06-01T09:44:35.581171992Z"}
{"log":"2023/06/01 09:44:35 Start GetApplicationId\n","stream":"stderr","time":"2023-06-01T09:44:35.581194312Z"}
{"log":"2023/06/01 09:44:39 -- waiting for auth-api to setUp\n","stream":"stderr","time":"2023-06-01T09:44:39.739241672Z"}
{"log":"2023/06/01 09:44:41 -- waiting for auth-api to setUp\n","stream":"stderr","time":"2023-06-01T09:44:41.743001441Z"}
{"log":"2023/06/01 09:44:43 -- waiting for auth-api to setUp\n","stream":"stderr","time":"2023-06-01T09:44:43.748511654Z"}
{"log":"2023/06/01 09:44:45 -- waiting for auth-api to setUp\n","stream":"stderr","time":"2023-06-01T09:44:45.749933271Z"}
{"log":"2023/06/01 09:44:47 -- waiting for auth-api to setUp\n","stream":"stderr","time":"2023-06-01T09:44:47.752481723Z"}
{"log":"2023/06/01 09:44:49 -- waiting for auth-api to setUp\n","stream":"stderr","time":"2023-06-01T09:44:49.754861669Z"}
{"log":"2023/06/01 09:44:51 -- waiting for auth-api to setUp\n","stream":"stderr","time":"2023-06-01T09:44:51.758471986Z"}
{"log":"2023/06/01 09:44:53 End GetApplicationId\n","stream":"stderr","time":"2023-06-01T09:44:53.588359846Z"}
{"log":"2023/06/01 09:44:53 Start Register...\n","stream":"stderr","time":"2023-06-01T09:44:53.588540916Z"}
{"log":"2023/06/01 09:44:53 Start connect\n","stream":"stderr","time":"2023-06-01T09:44:53.588632957Z"}
{"log":"2023/06/01 09:44:53 Start handshakeAndRegister\n","stream":"stderr","time":"2023-06-01T09:44:53.588720078Z"}
{"log":"2023/06/01 09:44:53 Start writeData\n","stream":"stderr","time":"2023-06-01T09:44:53.588916135Z"}
{"log":"2023/06/01 09:44:53 End writeData\n","stream":"stderr","time":"2023-06-01T09:44:53.591145912Z"}
{"log":"2023/06/01 09:44:53 End handshakeAndRegister\n","stream":"stderr","time":"2023-06-01T09:44:53.591397087Z"}
{"log":"2023/06/01 09:44:53 End connect\n","stream":"stderr","time":"2023-06-01T09:44:53.59195358Z"}
{"log":"2023/06/01 09:44:53 Starting reader....\n","stream":"stderr","time":"2023-06-01T09:44:53.592006572Z"}
{"log":"2023/06/01 09:44:53 End Register\n","stream":"stderr","time":"2023-06-01T09:44:53.592052113Z"}
{"log":"2023/06/01 09:44:53 Start GetCertificate\n","stream":"stderr","time":"2023-06-01T09:44:53.592096933Z"}
{"log":"2023/06/01 09:44:53 Start writeData\n","stream":"stderr","time":"2023-06-01T09:44:53.592268823Z"}
{"log":"2023/06/01 09:44:53 End writeData\n","stream":"stderr","time":"2023-06-01T09:44:53.592313811Z"}
{"log":"2023/06/01 09:44:53 End GetCertificate\n","stream":"stderr","time":"2023-06-01T09:44:53.592358836Z"}
{"log":"2023/06/01 09:44:53 Start reader\n","stream":"stderr","time":"2023-06-01T09:44:53.592405588Z"}
{"log":"2023/06/01 09:44:53 Start getEventVOFromPayload\n","stream":"stderr","time":"2023-06-01T09:44:53.601047014Z"}
{"log":"2023/06/01 09:44:53 End getEventVOFromPayload - Success\n","stream":"stderr","time":"2023-06-01T09:44:53.601101314Z"}
{"log":"2023/06/01 09:44:53 Start receiver\n","stream":"stderr","time":"2023-06-01T09:44:53.601123514Z"}
{"log":"2023/06/01 09:44:53 Start writeCertificate\n","stream":"stderr","time":"2023-06-01T09:44:53.60114449Z"}
{"log":"2023/06/01 09:44:53 Decoding base 64\n","stream":"stderr","time":"2023-06-01T09:44:53.601210647Z"}
{"log":"2023/06/01 09:44:53 writeCertificate Edge Ips: [edge003.ad001.siemens.net]\n","stream":"stderr","time":"2023-06-01T09:44:53.602259445Z"}
{"log":"2023/06/01 09:44:53 End writeCertificate\n","stream":"stderr","time":"2023-06-01T09:44:53.6025183Z"}
{"log":"2023/06/01 09:44:53 End receiver\n","stream":"stderr","time":"2023-06-01T09:44:53.602546224Z"}
{"log":"2023/06/01 09:44:56 done getcertificate\n","stream":"stderr","time":"2023-06-01T09:44:56.592699564Z"}
{"log":"2023/06/01 09:46:39 Start Login\n","stream":"stderr","time":"2023-06-01T09:46:39.354185632Z"}
{"log":"2023/06/01 09:46:39 No error reading the body part\n","stream":"stderr","time":"2023-06-01T09:46:39.354265373Z"}
{"log":"2023/06/01 09:46:39 No error while decoding to json\n","stream":"stderr","time":"2023-06-01T09:46:39.354505315Z"}
{"log":"2023/06/01 09:46:39 Start generateToken\n","stream":"stderr","time":"2023-06-01T09:46:39.354560419Z"}
{"log":"2023/06/01 09:46:39 Start PrepareTransportParam\n","stream":"stderr","time":"2023-06-01T09:46:39.354584336Z"}
{"log":"2023/06/01 09:46:39 End PrepareTransportParam\n","stream":"stderr","time":"2023-06-01T09:46:39.355739898Z"}
{"log":"2023/06/01 09:46:39 Start GetIpAndPrepareQueryPath\n","stream":"stderr","time":"2023-06-01T09:46:39.355809763Z"}
{"log":"2023/06/01 09:46:39 End GetIpAndPrepareQueryPath\n","stream":"stderr","time":"2023-06-01T09:46:39.355833703Z"}
{"log":"2023/06/01 09:46:39 EdgeIp is edge003.ad001.siemens.net\n","stream":"stderr","time":"2023-06-01T09:46:39.355857463Z"}
{"log":"2023/06/01 09:46:39 Start pingIP\n","stream":"stderr","time":"2023-06-01T09:46:39.355920536Z"}
{"log":"2023/06/01 09:46:39 End IsIPError - false\n","stream":"stderr","time":"2023-06-01T09:46:39.365380297Z"}
{"log":"2023/06/01 09:46:39 No Change in Edge IP\n","stream":"stderr","time":"2023-06-01T09:46:39.365450078Z"}
{"log":"2023/06/01 09:46:44 Start IsCertificateError\n","stream":"stderr","time":"2023-06-01T09:46:44.366607613Z"}
{"log":"2023/06/01 09:46:44 Error string:  Get \"https://edge003.ad001.siemens.net/device/edge/a.service/api/v1/auth/token\": dial tcp 10.3.54.21:443: i/o timeout (Client.Timeout exceeded while awaiting headers)\n","stream":"stderr","time":"2023-06-01T09:46:44.366711042Z"}
{"log":"2023/06/01 09:46:44 End IsCertificateError - false\n","stream":"stderr","time":"2023-06-01T09:46:44.366757603Z"}
{"log":"2023/06/01 09:46:44 End generateToken - Error is not related to certificate.\n","stream":"stderr","time":"2023-06-01T09:46:44.366796627Z"}
{"log":"2023/06/01 09:46:44 End Login\n","stream":"stderr","time":"2023-06-01T09:46:44.366834871Z"}