Central User Management Installation instructions

CENTRUM = Fronius Central User Management

CENTRUM is a server-based application that centrally manages the user settings of several connected welding systems in a database.
The hardware or VM configuration required for this depends on the number of devices to be managed.
The user is responsible for the operation of the hardware or VM, and for the configuration, licensing, and maintenance of the recommended operating system.

It is not intended for CENTRUM to be installed and operated on a single desktop computer or system PC, for example in a production hall.

To ensure smooth operation, the setup of the server (hardware or VM), the design of the network infrastructure, and administration should only be performed by the user's IT department.

1. General

CENTRUM = Fronius Central User Management

CENTRUM is a server-based application that centrally manages the user settings of several connected welding systems in a database.
The hardware or VM configuration required for this depends on the number of devices to be managed.
The user is responsible for the operation of the hardware or VM, and for the configuration, licensing, and maintenance of the recommended operating system.

It is not intended for CENTRUM to be installed and operated on a single desktop computer or system PC, for example in a production hall.

To ensure smooth operation, the setup of the server (hardware or VM), the design of the network infrastructure, and administration should only be performed by the user's IT department.

1. General

The license agreement must always be observed.

The license agreement can be found at:

• https://www.fronius.com/en/welding-technology/terms-conditions/centrum

1. General

These installation instructions relate to CENTRUM, version 1.5.

1. General

Physical hardware:

Virtual Machine (VM)

Storage:
The required memory size depends on the number of connected welding systems and the number of users. The table shows the respective recommended memory size for standard installations.

1. System requirements

Physical hardware:

Virtual Machine (VM)

Storage:
The required memory size depends on the number of connected welding systems and the number of users. The table shows the respective recommended memory size for standard installations.

1. System requirements

Supported operating systems:
Central User Management is distributed as a Docker image. The Docker image can be used with one of the following operating systems.

Linux servers
Distributions like: Debian, Ubuntu, Alpine Linux, Container Linux, RancherOS, Atomic Host, Boot2Docker, Ubuntu Core

In addition to the distributions listed above, other Linux distributions can be used if they meet the Docker requirements.

Microsoft Windows Server 2019
With Docker environment enabled to run the Docker container.

For more information, see:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/quick-start/set-up-environment?tabs=Windows-Server

Microsoft Windows Server 2022
With Docker environment enabled to run the Docker container.

For more information, see:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/quick-start/set-up-environment?tabs=Windows-Server

1. System requirements

• Microsoft Windows Server 2022

1. System requirements

• the connection to Central User Management
• the configuration and management of the welding systems

Ensure proper firewall and network configuration for incoming and outgoing data traffic.

Connection from the welding systems to CENTRUM:

Connection from the user PC to CENTRUM:

1. System requirements

IMPORTANT! For functional and security reasons, use the latest versions of the recommended browsers.

1. Installing and activating CENTRUM Docker

1. Installing and activating CENTRUM Docker

To start the Central User Management server, you must first create a container for Central User Management.

The container uses a defined Docker volume. The Docker volume is required in order to save the database independently of the container and thus enable server updates to be carried out without any loss of data.

The container uses an HTTPS connection in order to ensure the highest possible level of security during communication between the server and user.

In order to use HTTPS, copy the PFX or P12 certificate into the container as described below:

Run all of the following commands in the shell of the operating system.

Explanation of the command:

<https-port>
The port via which the website of Central User Management can be accessed—always select port 443, as this port is stored on the welding systems and cannot be changed from there

-p 4711:4711
Port mapping that is required for connecting to the welding systems

-v centrum-data:<Container-Data-Folder-Path>
The Docker volume where the data are stored.

<Container-Data-Folder-Path> is the path for the storage data folder of the Central User Management server.

Linux container: /data
Windows container: C:\data

In this example, the Docker volume is named "centrum-data".

If a Windows container is used, in addition to the volume specification, the user must be specified as the ContainerAdministrator in the "create" command:
--user ContainerAdministrator

<Certificate-Password>
The password for the PFX or P12 certificate

<Certificate-Path-In-Container>
The path for the certificate in the container.

Windows does not store certificates in a folder, which is why the path can be freely selected in Windows. For example:
C:\publish\Certificate.pfx

For Linux the following path is recommended:
/etc/ssl/private/Certificate.pfx

The browser can now be used to access Central User Management.

An administrator user is required for the installation.

Once the installation is complete, Central User Management can be accessed via the browser.

1. Installing and activating CENTRUM Windows

An administrator user is required for the installation.

Once the installation is complete, Central User Management can be accessed via the browser.

1. Installing and activating CENTRUM Windows

By default, Central User Management is configured via http on port 80 and via https on port 443. To reconfigure or expand the web server, a config.json file is available in the directory "C:\ProgramData\Fronius\Central User Management\".

• Urls: This setting can be used to configure which protocols (http, https) are to be supported. A port can be specified for each protocol.
  • Default value: https://0.0.0.0:443; http://0.0.0.0:80
• Certificates: The https certificate is managed in this section. A self-signed certificate is stored and configured during installation. To use your own certificate, you can either store and load the certificate in the file system or load it from the Windows certificate store. Only one section can have "Default" in the file. To use the Windows certificate store, rename the following sections:
  • "Default" section with the path variable as "_Default"
  • "_Default" section as "Default"
  The variables for the storage location in the certificate store can then be filled out.
• Location: Specifies the certificate store. Possible values:
  • CurrentUser
  • LocalMachine
• Store: Describes the name of the certificate store. Possible values:

After the configuration has been completed, the "Central User Management" Windows service must be restarted.

Note: If the certificate is stored in the Windows store, the private key may need to be released for the "LOCAL_SERVICE" user.

1. Initial Steps

1Enter the IP address and the port of the Central User Management-Server into the browser:

• Central User Management opens.

2Log in using the default login details:

• User: admin
• Password: Admin123!!

1. Initial Steps

For security reasons, a new password needs to be assigned for the "admin" user when logging in for the first time.

1. Initial Steps

1Select the "Users" tab in Central User Management

2Select the admin user (automatically created during installation)

3Edit the admin user

4In the "NFC Card" field, enter the number of the appropriate NFC key (NFC card, NFC key fob, etc.) and save this information

IMPORTANT! Protect this NFC key against unauthorized access as this NFC key can be used to access all of the welding systems.

1. Connecting welding systems to the CENTRUM server

1. Connecting welding systems to the CENTRUM server

Prerequisite:
The welding system must be connected to a computer via network cable or integrated in a network.

1Enter the IP address of the desired welding system into the browser, open SmartManager and log in

2Select the User management tab

3Select the CENTRUM server tab

4In the input field highlighted, enter the domain name or the IP address of the server on which Central User Management has been installed (if using a domain name, a valid DNS server must be configured in the network settings of the welding system)

5Check the box highlighted

6Click on the highlighted button
The availability of the specified server is checked.
If the specified server is available, "Server verified" appears.

7Save changes
The welding system is displayed in Central User Management.

8Integrate all subsequent welding systems into Central User Management in the same way

1. Connecting welding systems to the CENTRUM server

A welding system can also be connected to the CENTRUM server via the control panel.

1 Select "Defaults"

2Select "Administration"

3Select CENTRUM Server

4Enable CENTRUM Server

5Enter the CENTRUM Server

6Verify CENTRUM

7Save

1. Connecting WeldCube Premium to the CENTRUM server

1Open WeldCube Premium in the browser

2Select the "Administration" tab

3Expand the "User" menu and select CENTRUM

4Enable Central User Management

5Enter the URL of Central User Management

6Open Central User Management in a separate browser window

7Select the "Configuration" tab

8Select "API"

9Copy the API key from Central User Management

10Reopen WeldCube Premium in the current browser window

11Enter the API key from Central User Management

12Save the entries
WeldCube Premium is displayed in Central User Management.

13Add all subsequent WeldCube Premium accounts to Central User Management in the same way

• Option 1 = Stop the server and copy the data (available for Windows and Linux)
• Option 2 = Copy data during operation (available for Linux)

The precise procedure is described below.

1. Creating a Docker backup

• Option 1 = Stop the server and copy the data (available for Windows and Linux)
• Option 2 = Copy data during operation (available for Linux)

The precise procedure is described below.

1. Creating a Docker backup

The procedure described below applies to Windows and Linux.

1. Creating a Docker backup

The procedure described below only applies to Linux.

1. Creating a Docker backup

1. Creating a Docker backup

1. Creating a Docker backup

1. Installing the Update

1. Installing the Update

Depending on the user's requirements, Central User Management can be started in any available version. In order to do this, adapt the command used to create the Central User Management container as described below.

Command used to create the Central User Management container

docker create --name centrum -p <https-port>:443 -p 4711:4711 -v
centrum-data:/<Container-Data-Folder-Path> -e ASPNETCORE_
URLS="https://+;http://+" -e ASPNETCORE_HTTPS_PORT=<https-
port> -e ASPNETCORE_Kestrel__Certificates__Default__Password=
<Certificate-Password> -e ASPNETCORE_Kestrel__Certificates__
Default__Path=<Certificate-Path-In-Container> --restart=always
registry.pw.fronius.com/centrum

1. Using Specific Versions

Depending on the user's requirements, Central User Management can be started in any available version. In order to do this, adapt the command used to create the Central User Management container as described below.

Command used to create the Central User Management container

docker create --name centrum -p <https-port>:443 -p 4711:4711 -v
centrum-data:/<Container-Data-Folder-Path> -e ASPNETCORE_
URLS="https://+;http://+" -e ASPNETCORE_HTTPS_PORT=<https-
port> -e ASPNETCORE_Kestrel__Certificates__Default__Password=
<Certificate-Password> -e ASPNETCORE_Kestrel__Certificates__
Default__Path=<Certificate-Path-In-Container> --restart=always
registry.pw.fronius.com/centrum