When your machine runs a VNC server, you can access its screen without you first needing to establish a VPN connection to your device using VNC EasyControl (previously called VNC WebAccess). If you're unsure if your machine runs or can run an VNC server, please contact the manufacturer.

• Prepare the machine
• Add a VNC service
• Use a VNC service

• Remove a VNC service

Prepare the machine

Machines often do not have a VNC server running by default or may need to have its settings adjusted.

1. Make sure that your machine is running a VNC server and that it is configured correctly. Below you'll find specifics to take into account for certain hardware.
   • Using Siemens hardware? First, go to "Runtime Settings" for your HMI in your TIA Portal project, ensure that "Start Sm@rtServer" is checked and apply it by downloading the hardware configuration to the HMI. Then open the Sm@rtServer settings on the HMI by stopping the runtime, opening "Settings", then open "WinCC Internet Settings", go to the "Remote" tab, click on "Change settings", and go to the "Server" tab. There, set a password and uncheck "Encrypt communication" ⁽¹⁾. Click here for a demo.
   • Using PC hardware? Make sure that your VNC server is set to accept unencrypted connections ⁽¹⁾.
   • Using RaspBerry Pi hardware? Make sure that your VNC server is set to accept unencrypted connections ⁽¹⁾.
   • Using Universal Robots hardware? Make sure you have installed the IXON URcap, enabled its VNC server, set a password, and removed restrictions on inbound connections.
     
     Supported Universal Robots hardware

     Latest version	Supported devices
     0.3.2 (jan 2020)	e-Series running Polyscope 5.2.0 up to and including 5.16.1 CB-series running Polyscope 3.8.0 up to and including 3.15.8 Higher versions are not supported.

     Deprecated

     The IXON connector URcap is no longer being maintained and may therefore not be compatible with your UR robot. Make sure that your UR robot meets the supported hardware.

     (1) The communication between your computer and the edge gateway will always be secure, regardless of the selected settings. For more information, see Is using Web Access (HTTP, VNC, RDP, SSH, RTSP) as secure as using VPN?.

Add a VNC service

A VNC service can be added in the Fleet Manager and used in the Portal.

2. Go to Fleet Manager > Devices and click on your device name.
3. In the left menu, go to Services.
   • Tip: You can switch between the Card view , with useful service information at a glance, and the List view . For more information, see Services overview FAQ.
4. Click onAdd service and select VNC server.
5. Enter the requested information (details below) and click on Add.

   Field	Description
   Name	Enter a name for the VNC service.
   Service group	Services with the same Service group (case sensitive) will be visually grouped together in the Fleet Manager (services overview) and in the Portal (the Device Card Actions component on Device cards and the Web Access component on Device pages). This feature can be turned off in the respective components in the Studio.
   IP address	Enter the IP address of your machine. Leave empty if you're using an IXagent.
   Port	The port number where the VNC server can be reached. Default port for VNC is 5900.
   Authentication	Select the authentication method (details below). Option Description None No authentication. Select this option if the VNC server has no authentication (no password) configured. Use the values below Password (and username*) authentication. When opening the VNC service, it will automatically use the credentials you enter here. Enter the credentials of the VNC server. * (optional) Some VNC servers also require a username. VNC supports passwords up to 8 characters. If the password on the VNC server is longer, shorten it to max 8 characters. Certain special characters are not supported (e.g. ë, á, ì). Ask every time Password (and username*) authentication. When opening the VNC service, the user will always be prompted for credentials of the VNC server. * (optional) Some VNC servers also require a username. VNC supports passwords up to 8 characters. If the password on the VNC server is longer, shorten it to max 8 characters. Certain special characters are not supported (e.g. ë, á, ì).
   Read-only mode	Enabling read-only mode will ignore any user input for this VNC service.
   Record sessions for audit purposes	Enables session recording for this VNC service.
   Long press triggers right-mouse click on mobile	On some HMI's you may need to do a right-mouse click every once in a while, often to open a context menu. On mobile, however, you can't do a right-mouse click. With this setting enabled, the gesture "long press" (also called tap and hold) will become the equivalent of a right-mouse click. In most situations you will want to leave this setting disabled. It changes the behavior of the "long press" gesture on mobile, meaning you can no longer do a regular "long press" (i.e. keep a button pressed).
   Encoding	Leave "automatic" for compatibility with most systems. Using Lenze hardware? Set the encoding to Hextile instead.
   Color depth	Leave "automatic" for compatibility with most systems. Using B&R hardware? Set the color depth to what is set on your B&R device instead (default is 8-bit). Using VIPA hardware? Set the color depth to what is set on your VIPA device instead (either 8 or 32-bit).
   Access category	The access category determines who can use this VNC service. More information: How to use access categories?. Users with the permission "Manage devices" will be able to see and use all services (full VPN access, VNC EasyControl, HTTP EasyControl, etc.) and pages, regardless of their access categories.
   Show in device overview on mobile / web	Show or hide this VNC service button in the Portal's device overview in the IXON Portal mobile app or in web browsers. Only showing the relevant service buttons makes it easier to use the service you need. This also enables you to hide the VNC services that only need to be accessible via the API. Note that users can still use this VNC service in the Web Access component on a Device page, if they have permission.

You have now made the changes in the IXON Cloud, but these are not yet active in your device. You will need to push your changes to your device for them to take effect.

6. Click on Push device config in the top right corner.

Use a VNC service

The added VNC service can be accessed from the Portal.

1. Go to Portal > Devices and find your device.
2.  If you're using the List view in the Portal, click on the arrowand select the VNC service.
   • If you don't see the button, make sure that the service's setting Show in device overview on mobile / web is enabled, and that you have access to the VNC service. More information: How to use access categories?.
3. If you're using the Card view in the Portal, click on the VNC service button.
   • If you don't see the button, make sure that the service's setting Show in device overview on mobile / web is enabled, that the Device Card Actions component is added to the Device card, and that this component is large enough to fit all buttons.
4. Alternatively, click on the device, find the Web Access component, and click on the VNC service button.
   • If you don't see the button, make sure that the Web Access component is added to the Device page.

Remove a VNC service

Deleting a VNC service cannot be undone.

1. Go to Fleet Manager > Devices and click on your device name.
2. In the left menu, go to Services.
3. Click on the service you wish to remove.
4. In the top right, open More optionsand select Remove service.