DeltaV FlexLock

FlexLock options

FlexLock has a number of options available from the System menu. Open the System menu by clicking the icon in the upper left corner of the FlexLock window.

Autorun DeltaV Operate

The Autorun DeltaV Operate option runs DeltaV Operate automatically when a user logs on. Use this option with the Autoswitch Desktop option.

Autorun DeltaV Live

The Autorun DeltaV Live option runs DeltaV Live automatically when a user logs on. Use this option with the Autoswitch Desktop option.

Autoswitch Desktop

The Autoswitch Desktop feature checks the DeltaV user account whenever the DeltaV Logon or DeltaV Logoff options are used. Autoswitch Desktop behaves as follows when enabled
  • If the DeltaV user account does have Windows Desktop Access (an option available in DeltaV User Manager), the user can switch to the Windows desktop by clicking the Windows Desktop button in FlexLock.
  • If the DeltaV user account does not have Windows Desktop Access (an option available in DeltaV User Manager), the system allows only that user to view the DeltaV desktop. This user cannot switch to the Windows desktop and can run only DeltaV Operate or DeltaV Live.

Only the DeltaV user account is verified. Therefore, if another user is logged into the Windows Desktop and the DeltaV Logon is selected, FlexLock verifies the privileges for the DeltaV account entered in the DeltaV Logon dialog. This also applies to using the Logoff function. When the user selects the Logoff function, FlexLock verifies the DeltaV user account being logged off. If that DeltaV user has Windows Desktop Access, then FlexLock allows the Windows Desktop to appear. Otherwise, the user is logged off and the DeltaV desktop (with FlexLock) is displayed.

Important

Emerson recommends that you leave Autoswitch Desktop enabled to keep unauthorized users from accessing the Windows desktop.

Smart Card Required

The DeltaV system supports the use of smart cards for logging on to the DeltaV system. You can enforce the use of smart cards by selecting the Smart Card Required option in FlexLock (found on the FlexLock drop down menu). Smart Card Required option behaves as follows:
  • When the Smart Card Required option is selected, users must log on to the DeltaV system using a smart card and PIN on this workstation.
  • When the Smart Card Required option is not selected, the user can either enter a user name and password; or, if the smart card reader and card are detected, the user can enter a PIN

Using Smart Cards

To log onto DeltaV when using a smart card, the user inserts the card into the card reader and enters the PIN associated with the card on the DeltaV logon screen. The PIN is not the same as the DeltaV password and should not be configured to match a DeltaV password.

To use any applications that interface with the DeltaV Database (for example, Control Studio, DeltaV Explorer and Recipe Studio), you must leave the card in the reader. If you remove the card from the reader you lose user privileges for certain functions on these applications.

DeltaV Autologon

The DeltaV Autologon option, when enabled, automatically logs the Windows user onto DeltaV whenever the following occurs
  • The user first logs onto the system (that is, the user logs onto Windows after a logoff or reboot).
  • The user is logged off of DeltaV.
  • A Remote Desktop session is temporarily disconnected while the Windows Remote Desktop session has not timed-out or closed. When the connection is re-established, these users' sessions are resumed and they are still logged on to DeltaV software. If the DeltaV session is terminated, no user is logged onto DeltaV for that session.
Note

The Windows user must be a valid DeltaV user to be logged into the DeltaV system. If the Windows user logging onto the system is not a valid DeltaV user, the DeltaV Autologon attempt fails and the user is not logged onto DeltaV. An error message is recorded in the Events Application log and the DeltaV Event Chronicle.

When enabled, DeltaV Autologon applies to all user environments (console, remote session, terminal session) on that node and also applies to smart card logons in all of these environments; therefore, DeltaV Autologon cannot be set individually for each environment. However, each workstation in a DeltaV system does have its own individual setting that applies to that workstation.

Logoff Windows

Logs the current user off of DeltaV and Windows software.

Shutdown

Logs the current user off of DeltaV and Windows software, then turns off the computer.

Smart Card Required and DeltaV AutoLogon options

The following table shows the interaction between th e Smart Card Required and DeltaV Autologon options. These two features are often used together.
Table: Smart Card Required and DeltaV AutoLogon options
Smart Card Required enabled Autologon enabled Windows logon options DeltaV logon options
Yes No
  • smart card with PIN
  • Username with password
  • smart card with PIN
Yes Yes
  • smart card with PIN
Not applicable - DeltaV AutoLogon