FactoryTalk® Remote Access™ Release Notes
November 2025
Feature Release of
FactoryTalk®
Remote Access™
Tools andFactoryTalk®
Remote Access™
Runtime 14.03.00Features
In this release:
- InExplorer, it is possible to manage files uploaded via an SD card or an USB memory stick connected to a device. A device System Manager automatically applies predefined mounting options, allowing the contents of the SD card or USB memory stick to appear in theExplorersection. From there, it is possible to read, write, and exchange data directly with a device.
- The phone number field in theUser Account Informationsection is now editable.
- TheUser inviteto device feature was implemented by extending the invitation to device for users without anFactoryTalk® Hub™account and not belonging to the domain. A user identity is automatically created in bothFactoryTalk® Hub™andFactoryTalk® Remote Access™when the invitation is sent.
- Buttons for quicker actions are added at the top right of the UI. They are shortcuts to: add a folder, add a device, add a group, add a user, add and import a firewall policy. All quick-action buttons appearing in theDomain viewwhen hovering the mouse over a device or folder and the contextual menus appearing when right-clicking on folders and devices have been reviewed.
- LAN and WAN words are now mentioned underDevice IP addresses, in the device information panel.
- The VNC protocol allows direct remote desktop access to subdevices with VNC servers viaFactoryTalk® Remote Access™Manager, removing the need for external tools or manual setup. Access is provided through the integrated VNC client in the Manager Tools.
- TheSecurityfeature was added to theSettingssection in the Runtime UI to address the Runtime security vulnerability arising from priviledge escalation. It enforces the Runtime strict adherence to the access controls defined by the system administrator, ensuring that Runtime operates within the boundaries of assigned privileges. The Runtime operates as a service using an agent that impacts the security restrictions set for files transferring and processes termination.To activate this safeguard, enable one or both of the following restrictions:
- File transfers security restriction
- Processes security restriction
- TheMember ofandShow permissionssections have been implemented. This enhancement improves visibility especially into external authentication setups.
- Subdevice copy/paste functionality has been added, allowing users to duplicate subdevices between runtime devices while preserving configuration. This feature allows quick and consistent subdevice configuration across multiple devices.
- The manual is now also available in French and Portuguese, in addition to the other languages it was previously localized into.
- To upgrade a Basic entitlement, you can purchase a Runtime Upgrade entitlement, which transitions the entitlement from Basic to Pro. If you already possess a Pro entitlement, you can elevate your Basic entitlement by selecting the existing Pro entitlement during the upgrade process.
- The navigation of theDomain viewsection has been improved for greater responsiveness, along with enhancements to the search field for better usability especially in domains with many devices.
Corrected Anomalies
The following anomalies have been corrected in this release of FactoryTalk® Remote
Access™:
ID Number | Title | Description |
|---|---|---|
4085435 | Local connection bug fixed. | Fixed a bug that caused the Local connection to stop running on Ubuntu when
the port was accessed via browser. |
N/A | RuntimeCli file name fixed. | The name of the Runtime file mentioned in the Help has been fixed and
replaced with FactoryTalkRemoteAccessRuntimeCli. |
4100874 | Identity is no longer lost in Runtime. | The identity is no longer lost when upgrading the Runtime version from
earlier than 8 to any version older than 13.6. |
Previous Releases
March 2025
These release notes describe version information for FactoryTalk Remote Access,
version 14.02.00
Features
In this release:
- Runtime container support: The FactoryTalk Remote Access Runtime is now available as a Docker Image for x86 architectures, OS Debian 11.9, and Ubuntu 22.04. This container support allows the FactoryTalk Remote Access Runtime to be integrated and deployed on ASEM 6300 or third-party systems.
- Additional language support: Spanish, Italian, and German languages are now available in the FactoryTalk Remote Access manager, the FactoryTalk Remote Access Runtime software, and the FactoryTalk Remote Access Tools.
- New runtime Upgrade Part numbers are available in the recommended products section of the commerce portal for FactoryTalk Remote Access:Part NumberDescription9545M-RA6300BS2PRT31ASEM 6300 FactoryTalk Remote Access Runtime UpgradeBasic to Pro, Perpetual9545M-FTRARTBS2PRT41FactoryTalk Remote Access Runtime Upgrade Basic to Pro,Perpetual, 8x59545M-FTRARTBS2PRT42FactoryTalk Remote Access Runtime Upgrade Basic to Pro,Perpetual, 24x7
- Added new FactoryTalk Hub Trials.
- Improved VPN Connection visibility with a visual status bar of the VPN connectivity added to the interactive access tools connection tab.
- Enhanced the user interface for Local Connections. You can now remember passwords for a device. A "Managed Devices" dialog box has been added to manage, name, and save multiple devices.
- Export Log Files for Windows runtime Web User Interface
- Added Windows 10 Internet of Things Operating System support for Runtime
- Ubuntu 22 Runtime now runs without privileges and keeps its existing functionalities
- Added new relay servers to reduce latency for connections
Corrected Anomalies
The following anomalies have been corrected in this release of FactoryTalk® Remote
Access™:
ID Number | Title | Description |
|---|---|---|
3173898 | When you connect and mount two or more wireless HD-type USB devices
simultaneously through the FactoryTalk Remote Access Tools, some embedded devices
where the Tools are installed may go to a blue screen. These devices can include
the Stratix 4300, Optix Panels, and EEC modules. | Limit the number of USB Receivers to a maximum of one to avoid this
problem. |
3988302 | The Operating System and CPU Architecture for Router device were hidden from
view. | The Operating System and CPU Architecture for the Router device are now
visible in the device Information pane. |
4107842 | Monitor open/close and remote desktop. | “Interactive Access - Remote Desktop” might not work properly or become
unresponsive if a screen is not active on the PC running the Runtime. For example,
on a laptop configured to work even if the lid is closed. To work around this
behavior, you can install third-party software that acts as a virtual monitor.
Examples of third-party software that creates virtual monitors are: DisplayFusion,
VirtualDisplay, Spacedesk, and XDisplay. |
4162836 | When the Location Connection checkbox is unchecked, active connections are
not dropped. | When the Local Connection checkbox in the Runtime is unchecked, the Local
Connection is now dropped. |
4786019 | The Tools window has a large empty space on the Connection page. | The Connection page now behaves like the other pages, the Processes page for
example. The content of the table now resizes correctly when resizing the
windows. |
4789409 | Refreshing the WebRuntimeUI home page does not open the sign in page if the
session times out. | When your session times out and you refresh the page, it now goes to the sign
in page. |
February 2025
Maintenance Release of FactoryTalk® Remote Access™ Tools and FactoryTalk® Remote
Access™ Runtime 14.1.1
Features
In this release:
- FactoryTalk Remote Access relay servers have been expanded to include five additional servers located across the globe, increasing bandwidth and reducing latency for connections.
- This release updates some Common Services APIs, which are now deprecated. Previous versions of common service calls are replaced with new calls for continued operation.
- Several anomalies are also corrected in this release.
Corrected Anomalies
The following anomalies have been corrected in this release of FactoryTalk Remote
Access.
ID Number | Title | Description |
|---|---|---|
4085435 | Error starting Runtime service after an upgrade. | An issue that was preventing the correct generation of the certificate
for the new web UI on older Windows systems during Runtime startup has been
resolved. Certificates are now generated correctly. |
N/A | Compatibility issues with OpenVPN TAP driver. | The TAP driver has been updated to support new security features. |
4100874 | An issue prevented the Runtime from installing whenever the operating
system was installed in a language other than English. | The Runtime now installs correctly on operating systems in languages
other than English. |
December 2024
Feature Release of FactoryTalk® Remote Access™ Tools and FactoryTalk® Remote Access™
Runtime 14.1
Features
The following features are new or improved in this release of FactoryTalk Remote
Access:
- Device Updater - The device updater enables you to perform over-the-air updates for device firmware and runtime software directly from the FactoryTalk Remote Access Manager domain.
- The installable runtime application can be accessed through a new web-based UI. The web-based UI allows the user to set a password for restricted access on the runtime PC.
- An option to enable secure cloud-to-controller connectivity from FactoryTalk Design Studio version 2.0.
- The Chinese language is now available in the FactoryTalk Remote Access Manager, the FactoryTalk Remote Access Runtime software, and the FactoryTalk Remote Access Tools.
- The Local Connection which allows access to the Interactive Access features to a remote device on the same LAN (local area network) without internet access is now available for the Linux Ubuntu 22 Runtime software.
- The Runtime software is fully supported on the Windows 11 operating system.
- The Runtime and Tools include improvements in relay server selection, confirming that VPN connections consistently leverage the nearest and most responsive server, even under varying CPU load conditions. This enhancement provides faster connections with better reliability, optimizing performance across different usage scenarios.
Corrected Anomalies
The following anomalies have been corrected in this release of FactoryTalk Remote
Access.
ID Number | Title | Description |
|---|---|---|
4011393 | RAM information is wrong for Windows Runtime. | The memory data for Windows Runtime devices was displayed with the wrong unit
of measure on the Information tab of a connection. |
4007747 | Runtime Service exception when trying to reach the runtime device via local
connection port 5936 | The Runtime web server can now be accessed via port 5936, without crashing.
|
3997111 | An error occurs the first time that you connect to a subdevice using HTTP or
Remote Desktop. | A five-second delay before opening the services has been added to allow the
connections to be established. A message is displayed to let you know the service
is about to start. |
*3979195 | When you start a second VPN tunnel from the same PC, the previously active
VPN stops working. | FactoryTalk Remote Access only allows one VPN instance to a device from the
same PC. Activating a second VPN no longer stops the other one from working if
selected. |
*3962870 | A firewall rule protocol had an incorrect name. | The protocol name has been corrected. |
*3962706 | You could see Interactive access (Web Only) in the device view even if the
device can not do so, for example, it does not have a display. | Users are not presented capabilities their device does not support. |
3745591 | Local connection users list when connecting to Win32 Runtime was showing the
local connection instead of the username. | The Connected users panel displays correctly when Approve Remote Access for
the device is enabled. |
3730553 | Field values do not match current values when you import the firewall policy
or edit the firewall rules. | Importing firewall policies with rules for Ethernet type IPv4 and
visualization when editing firewall rules issues are corrected in this release.
|
3720271 | The Device Setup menu can be selected when the Domain entitlement is
expired. | The dialog for Device Setup no longer appears when the domain is expired.
|
3711508 | An inconsistent message was displayed in the VPN tab when no entitlement
runtime was assigned | A more detailed message now appears so you can understand what you must do in
the runtime. |
3549579 | Tools did not work after disabling and re-enabling the VPN on a device | Tools now works as expected after disabling and re-enabling the VPN on a
device. |
*3521627 | Local Connection with 1756 Embedded Edge Compute Module (CMEE) did not work
if no network interfaces were enabled for VPN in System Manager. | Local Connection now works with CMEE even without network interfaces enabled
for VPN. |
*3353662 | If a user name was too long, it was not fully displayed in the profile
section. | Long user names are now displayed as a tool tip when you hover your mouse
cursor over the name. |
3303396 | The search field for audit connection details was case-sensitive | Search results for audit connections are now returned for the term entered
regardless of whether the letters are upper or lower case. |
3213660 | Data were not sorted correctly in the columns of the Devices View table. | The columns now sort as expected when selected. |
3158325 | You could see Interactive Access(Web Only) in the
device view even if you did not have the correct permission. | You no longer see Interactive Access(Web Only) unless
you have View & Interactive with Desktop
permission |
3086202 | "Routing Rule" in Target type has no filter result. | Searching for Routing Rule in the Target Type field now returns the correct
audits for this filter. |
July 2024
Feature Release of FactoryTalk® Remote Access™ Tools and FactoryTalk® Remote Access™
Runtime 14.0
Features
Added a new Invitation to Device Wizard. You can now invite a user to access and use a
device for a specified period. For this first release of the Invitation to Device Wizard,
the user must have an existing
FactoryTalk®
Hub™
account. The invitation creates a FactoryTalk Remote Access
identity and grants the user the proper permissions that they are entitled to on that
device.Improved subdevice support. The domain now supports the definition of subdevices, for
example PLCs, drives, iPCs, and similar devices that are connected to the subnetwork behind
the remote devices and their related services. Defining the subdevices lets you connect to
subdevice services more easily. The VPN with the remote device is automatically established,
and the proper application opens based on the subdevice IP address.
UI Updates:
- New and improved feedback pop-up dialogs
- Improved the contextual menu for devices
- Improved the search bar. It is now possible to filter devices not only by resource name but also by resource properties.
FactoryTalk Remote Access Manager Tools and Runtime have been upgraded to .NET8 software
framework, which provides enhancements in performance, stability, and security.
NOTE:
We strongly recommend that you keep the runtime version on all devices
up to date.
Corrected Anomalies
The following anomalies have been corrected in this release of FactoryTalk Remote
Access.
ID Number | Title | Description |
|---|---|---|
3607731 | There was not enough VPN bandwidth for local connections. | Corrected and improved VPN performance for local connections. |
3151508 | FactoryTalk® Optix™ was not able to open some files uploaded to the device
through file transfer. | Files now open correctly after they are uploaded to a device through file
transfer. |
3497499 | The Interactive Access Tool may close unexpectedly when you press the Enter
key in Explorer View. | The Interactive Access Tool no longer closes when you press the Enter
key. |
3284436 | If a user is given permission to manage accounts, they can see a list of
groups and user accounts associated with a device. However, the user was not able
to add or remove accounts or groups from this list. | Users with permission to manage accounts can now add or remove accounts or
groups from the list. |
March 2024
Feature release of FactoryTalk Remote Access Tools and FactoryTalk Remote Access
Runtime 13.6.
Feature Enhancements
Public IP for geolocation is supported on FTRA, in the Explorer > Map view
section.Devices and runtimes are now automatically positioned on the
Map view based on their Public IP address.
FactoryTalk®
Hub™
Groups Inheritance rules are updated. In new domains, only
the "Admin" group inherits settings from the Hub. These settings cannot be edited.
The Owner user is assigned to the "Admin" group. Users designated as "Billing
Admin" and "Contributors" are placed in the root folder. In existing domains,
the groups "Contributors," "Owner," and "Billing Admin" remain
intact but become editable. The Owner is transferred to the "Admin" group.The VPN throughput for Linux devices has been improved on Stratix 4300
devices.
A config.template.xml template configuration file has been added into the FTRA installation
folder for open Linux systems (Ubuntu22) to allow FTRA configuration.
A new dialog titled
Add device
replaces both the "Add device remotely" and
"Add device locally" dialogs, and allows you to add a device to the domain. The
Add device
dialog prompts you to enter the device ID and a password.A VPN connection is established by double-clicking a router without the Interactive Access
remote desktop.
All ASEM 6300 iPCs are provided with a free FactoryTalk Remote Access Runtime Basic
entitlement. Navigate to the Product Compatibility & Download Center to download version
13.6 or later of the runtime software to your ASEM 6300. FactoryTalk Remote Access Manager
will recognize the ASEM 6300 hardware and assign a free runtime basic entitlement in the
entitlements dropdown menu for the device. If the runtime pro functionality is needed, a
runtime pro entitlement can be purchased.
A Trial entitlement for a domain is not displayed if it is expired and the domain is
associated with another entitlement. If a Domain demo or trial period expires, the Stratix
4300 and other devices can now be associated to a new domain.
When selecting Tools > Device Setup, a dialog titled Device Setup appears. The dialog
prompts you to select the category of the device that you want to configure to launch the
correct application for device configuration.
Contributors, Owner and Billing Admin groups are no longer part of the domain organization.
Owner users now belong to the Admin group.
User Interface Improvements
- The Connection Settings Tool has been redesigned.
- The navigation menu is now provided with a new icon that allows users to maximize the menu width.
- Paddings have been reduced on the Permissions tab.
- The Tools Datagrid has been redesigned.
- On the device information pane, a copy icon appears when hovering on each IP address. This icon allows you to copy IP addresses easily .
- A Details button has been added to the Audit > Connections section of theFactoryTalk Remote Access Manager. The Details button includes information about each single connection.
- The Interactive Access tool opens by Double-clicking on a device.
- Routing Rules are visible only if applied to a device to which the user is connected, and if a VPN connection is established. Routing rules are visible in the Interactive Access > Connection other than in the related section of the right pane of the web client.
- If the Tools lose the connection with the Runtime and the Runtime device is online, a blank page appears that saysDevice disconnected. If the Tools lose the connection with the Runtime and the runtime device is offline, the message saysDevice offline. A Reconnect button has been added below the Device disconnected message.
- Whenever using the web client mobile version, you can rename a resource by clicking Rename on the kebab menu (three dots) on the right.
Corrected Anomalies
The following anomalies have been corrected in this release of FactoryTalk Remote
Access.
ID Number | Title | Description |
|---|---|---|
1544564 | Size columns in the Tool Explorer cut off information to the left instead of
the right | In the Explorer section of the Interactive Access Tool, the size column is
now aligned on the right and any information included therein is cut off from the
right side whenever exceeding the column width. |
1702398 | Non-alphabetical order when a firewall policy is associated on a
resource | The firewall policies along with their respectively associated users or
groups included in the Associate firewall policies window in the Firewall section,
are now displayed in alphabetical order. |
1720938 | Assigning the wrong address IP (local network) to the first connection when
the network interface is changed on the runtime | The IP address of the local network selected for VPN connection is set
correctly when a VPN connection establishes after choosing the network interface
type on the Windows Runtime, under the VPN tab. |
1801860 | Incorrect log 'ERROR;Error starting Internet sharing: incorrect license
type: Undefined' | Two warning messages now appear to inform the user whenever Internet sharing
is established from a Runtime without any entitlements or featuring a basic
entitlement . The two warning messages in both cases now replace an
incorrect error message that logged previously. |
1939045 | Device information panel disappears after locating in domain from device
view | When selecting a device in the Devices View section, and then selecting
Locate in Domain from the context menu, the related device details pane on the
right shows details whenever toggling from a device to another and after
refreshing the webpage. |
1979624 | Blank FTRA Runtime information at first connection on 6300P | FTRA Runtime information now displays correctly on the Windows Runtime at the
first connection on the ASEM 6300P panel. When the name of the device is changed
through the web client, the name is displayed on the Windows Runtime, though it
might require some time. |
2044565 | Wrong copyright year in several items | The FTRA copyright year has been updated in all of the FTRA
components. |
2189780 | In Running RT tools in the Windows environment, the names of connected users
that are shown are truncated | The names of any connected users appear in full in Runtime Tools. |
2198531 | Proxy not working with devices with only one Ethernet port | The proxy configuration (HTTP and SOCKS5) is now working when applied on a
panel fitted with one Ethernet port, such as the OptixPanel™ Compact device. |
2220165 | Assistance Request cannot be deleted on a domain other than the one in which
it was requested | Any active Request assistance for a device registered in another domain can
now be canceled. |
2270654 | Import firewall policy list must be reviewed for Rockwell | The Firewall Policies that can be imported from the server have been revised
for the Rockwell environment. |
2311739 | Users were not required you to leave comments when the Sign Out and Close
device connection tool is used. | If the Require a comment when a device connections end setting is selected,
the user is prompted to enter a comment whenever closing the Device connection
Tool. |
2316346 | Authentication error on FTRA Tools with user not belonging to the
domain | Whenever accessing FTRA Tools through a user not belonging to a specific
domain, authentication is required. |
2351739 | Incorrect text "Default action" in action applied on firewall
rule | The Default Action text has been replaced with Action on the Associate
firewall policy window. |
2359269 | The permission rule about how to manage and access user accounts for folders
and devices are different. | Permission rules for managing and accessing user accounts for both folder and
device are now matched. |
2374887 | (Web Client) Resizing the remote desktop by maximizing the entire window does
not occur | The remote desktop connection through Interactive Access now resizes
correctly when the window is maximized. |
3053293 | The runtime info screen cannot display entitlement status correctly after
registered to another domain | Windows Runtime information displays the entitlement status if the user
deletes a licensed device from a domain. |
3054476 | [Web Client] Typing the "Enter" key instead of clicking the
"Save" button, the resource is not created | Any newly created resource is now saved correctly by clicking Save. |
3061620 | [Tools] Creating/naming a file/folder pressing the Enter key cancels the
operation | Operations in the Interactive Access > Explorer such as renaming and
creating a folder or a file, are now confirmed by clicking OK. |
3235739 | The device connection drops in web only mode if the user is working on
another tab | If a user establishes a remote desktop connection through the Interactive
Access (Web only) while working on another section of the same Tool and the
connection is lost, the user can re-establish a connection by clicking on a
reconnection button. |
November 2023
Feature release of FactoryTalk Remote Access Tools and FactoryTalk Remote Access
Runtime 13.5.
Feature Enhancements
A Local Connection mode has been implemented to the Tools applets to allow for an on-site
device connection to Runtime through a local network without logging on to the FactoryTalk
Remote Access. The on-site device can be connected to the device where Runtime is
installed by means of an Ethernet cable and the local connection can be established and
managed through the Interactive access Tool applet.
The UBUNTU 22 stable release is now available. It features file transfer and allows
connections through VPN and RDP.
Added management of new 25 and 50 concurrent connections entitlements. The management of
25 and 50 concurrent connection entitlements has been implemented.
FTRA Manager now supports the OptixPanel Compact entitlements upgrade that allows to
upgrade the FTRA Runtime from the BASIC to PRO version, by purchasing just the services
that are not already included in the Basic entitlement. An Upgrade button has been
implemented next to the Basic entitlement type, in the right pane of the Domain view, in
the Entitlements section.
In the Log section of Tools, an "Export Device's Logs" button has been
added. This button allows you to export a device's logs when connecting to an Optix
Panel, a Stratix 4300 Router, or a 1756 CMEE (Embedded Edge Compute Module).
Corrected Anomalies
ID Number | Title | Description |
2364196 | The copy/paste feature was not supported in the remote desktop connection
through Interactive Access (Web). | Text elements copy/paste during Remote desktop sessions between local
and remote devices is now possible. |
2323709 | Remote Desktop Session start was not always correctly logged | The Remote Desktop session is now recorded in the Log section,
when connecting the Runtime device through the Interactive Access (Web
Only) and Interactive Access (Tools) simultaneously. |
2296074 | It was not possible to copy/paste the texts in the remote desktop
connection | Text elements copy/paste during Remote desktop sessions between local
and remote devices is now possible. |
2288983 | Fixed an issue in which many mounted remote USB devices could make the runtime
machine crash by adding a max limit of four mounted devices. | The maximum quantity of remote devices connected via a USB port is four, as a
higher quantity made the Runtime crash. |
2254420 | Fixed the text overflow in the Assistance requested pane. | The bottom horizontal scroll bar in the Assistance requested area of the
right pane of the Domain view section has been fixed. Whenever text
exceeds the pane length, the scroll bar can be moved to show any text
overflow. |
2250706 | The number indicating the active concurrent connections in a domain didn't
decrease after switching to another domain. | The displayed quantity of concurrent connections showing up at the top right of
the Domain view section now gets updated when switching to another
domain. |
2212233 | The Progress Bar Title might confuse the user. | The text contained in the progress bar related to the connection between
Interactive Access and a device was misleading and it has been amended.
“Interactive Access with Desktop Tools” has been replaced with “Interactive
Access (Tools)". “VPN with Desktop Tools“ has been replaced with “VPN“. |
2202769 | The total available connections number in the top-right area of the domain view
didn't update after switching from a domain with a limited concurrent
connections entitlement to a domain with a UNL entitlement | The displayed quantity of concurrent connections showing up at the top right of
the Domain view section now gets updated when switching from a domain
linked to an entitlement with limited concurrent connections to a domain linked
to an entitlement with unlimited connections. |
2004036 | Permission disappeared when the domain was loaded | When logging on to an FTRA domain, the right pane now displays the permissions
related to the users or users groups included in the root folder. |
1998444 | The scroll bar was missing from the list of the group's users; There
wasn't a minimum limit for the window's vertical and horizontal size;
When the online filter was active, the first click did not close the dropdown
menu. | Layout issues have been fixed in the FTRA Manager. 1) A scroll bar was missing
in the right pane related to the Groups users to allow for scrolling through. 2)
The Remote Desktop window can be resized as needed, without any minimum width
and height restrictions. 3) Once the online toggle switch is activated, the
domain folder can now be opened or closed by clicking once on the expand arrow
located on the folder line. 4) The Edit domain parameter has been removed from
the Audit section filters. |
1916838 | The description of the operation audit for moving a permission operation from
"Allow" to "Deny" or vice versa was inaccurate | The operation descriptions in Audit > Operations now include both the
remove and add logs, matching the Allow and Deny
permissions. |
1687811 | When the online filter was active, the first click did not close the dropdown
menu. | Folders on the left pane now expand and collapse content correctly, whenever
the online toggle switch is activated. |
2337463 | The online filter didn't filter the online devices when switching to
another domain. | The online toggle switch now filters online devices also when switching to
another domain. |
2354329 | A user with Full Deny permissions was able to see users and create groups | Any user having all permissions denied is no longer able to see any folders or
devices and create any groups within the domain. |
3098637 | It was possible to add automatically a full 00 MAC address if no data was
entered and the user selected the Add button | A full 00 MAC address is no longer entered into the MAC address field in the
Settings > Sharing pane of the Windows Runtime when you select the
Add button. |
June 2023
Minor release of FactoryTalk Remote Access Tools and FactoryTalk Remote Access Runtime
13.4.013.
Feature Enhancements
- Updated the dialog window during Device Access connection.
- Updated the Device Access button with a dropdown menu.
- Handle default choice and Device Access button-selected options.
- Replaced bottom-right panel with loading bar.
- Removed the 'Actions' column on the device view.
- Added an option that specifies which VPN IP is reachable.
- Updated Tools to support two or more Device Access connections.
- Improve the usability on Mobile View.
- Updated the dialog window during Device Access connection.
- Updated the total connection available in the top-right counter.
- Updated the Tools log file management.
- Restyled the Buttons.
Corrected Anomalies
The following anomalies have been corrected with this release.
ID Number | Title | Description |
|---|---|---|
2164777 | The user name was not visible on runtime in a VPN connection with Optix
Studio Web. | The user name is now visible. |
220575 | Graphical Issues (Web Client) | Several graphical anomalies corrected. |
221410 | Inherited permissions are not displayed on a resource. | It was not possible to see the permissions of a user/group assigned to a
resource that were inherited from the higher folder. |
May 2023
Maintenance release of FactoryTalk Remote Access Tools and FactoryTalk Remote Access
Runtime 13.3.540.
Security Updates
This release includes background enhancements that improve the security of the product.
Corrected Anomalies
The following anomalies are corrected with this release.
ID Number | Title | Description |
|---|---|---|
Various | Handle permissions of a connection on the Runtime Side. | In previous releases, all user permissions were checked by the Access Server
after receiving the connection reply from Runtime. Now user permissions are
checked by the Access Server in the Connect1 step. They are then sent to Runtime
in order to allow it to check client (control center) requests, such as VPN,
Remote Desktop, and others. This allows each Runtime operation to verify if the
user is allowed to execute that operation. |
1989786 | A user is deleted from a created group when switching from Admin to
Contributor (or Contributor to Admin) in FactoryTalk Remote Access (Rockwell
only). | When users were moved between FactoryTalk®
Hub™ groups, they were removed from customized
FactoryTalk Remote Access groups. |
2103792 | The Device Access button is only enabled if the "View Desktop"
permission is enabled for a user. | The Device Access button was only visible with the "View Desktop"
permission. |
March 2023
Maintenance release of FactoryTalk Remote Access and FactoryTalk Remote Access Tools
13.3.412.
Security Update/Change in Functionality
This security update improves security by requiring additional authentication for
FactoryTalk Remote Access Tools when you are doing VPN or Advanced Device Access.
Corrected Anomalies
ID Number | Title | Description |
|---|---|---|
1654636 | The details of a recent connection were displayed incorrectly in logs older
than 30 days. | Details of recent connections are now displayed correctly. |
1751780 | Add management to install, uninstall, and update previous versions of SEC
(runtime). | Added new SEC driver. |
1829365 | The Pro Trial FactoryTalk Remote Access entitlement was visible in the
entitlement selection window after it had expired. | Expired Runtime entitlements no longer appear in the selection window. |
1830557 | Confusing message if an admin/contributor tries to create an FTRA
domain | The error message for domain creation was confusing for a
contributor/administrator user and has been clarified. |
1830717 | Runtime entitlements were visible on the entitlements page when they could no
longer be associated with a device. | Runtime entitlements are now associated as Assigned instead of Available on the
Entitlements page when they have reached maximum detachment and are not associated
with any devices. |
1843043 | Graphics issues on Tools. | There were some graphics problems on Tools that have been corrected. |
1859256 | Connections Subnet Tab in Tools does not show netmasks | The Subnet tab of the connections in Tools now shows the Netmask. |
1893233 | Graphic issues on Web Client. | Some graphics issues on Web Client were fixed. |
1902970 | Updates of devices were visible on the FactoryTalk Remote Access Web Client
even when the update feature was not available. | Updates of devices are no longer shown if the feature is not available. |
1937587 | Anomaly in user creation in new folder | Corrected issue where resources disappeared when selecting a folder that did
not contain devices. |
1979763 | The ExpirationTime is set for basic or pro entitlements when allocated by
FactoryTalk®
Hub™ . | Basic and pro entitlements do not expire. Only trials can expire now. |
1982558 | When associating an entitlement, it is not checked at the back end whether the
entitlement has expired or not (pro trail) | The system now checks to make sure that licenses are not expired or disabled
before associating them to devices. |
2042328 | On FactoryTalk Remote Access an email is sent even if a valid license is
active. | If a valid entitlement is attached an email notification about an expiring
trial entitlement is no longer sent. |
2042991 | Security Milestone - Pass authentication without passing the Access
Token | Authentication is now required for FTRA Tools when doing VPN or Advanced Device
Access. |
2042994 | Security Milestone - General. | General security improvements. |
November 2022
Feature release of FactoryTalk Remote Access and FactoryTalk Remote Access Tools
13.3.235.
Features
- Enabled new FactoryTalk Remote Access BASIC and PRO runtime entitlements.
- You may now rehost a FactoryTalk Remote Access BASIC or PRO runtime entitlement.
- You can rehost runtime entitlements without any issues.
- After the third rehost, you may not rehost again for six months.
- Added a seven-day grace period for expiration of subscriptions.
- Added email notification to domain owner.
- FactoryTalk Remote Access Help is now located on the Rockwell Automation Tech Doc Center. To accessFactoryTalk® Hub™help go to FactoryTalk Hub Help Collection.
Corrected Anomalies
The following list identifies the anomalies corrected with this release.
ID Number | Title | Description |
|---|---|---|
1,794,707 | Dual IP setting error in FactoryTalk Remote Access tools. | All IP addresses are now set in the network interface of the local computer
from FactoryTalk Remote Access Tools. |
1,809,320 | VPN Routing rules not working after changes due to static analysis. | Routing Rules now work in a VPN connection with a device. |
1,558,525 | RSLinx Identifies FTRA Adapter as "Ubiquity Ethernet
Adapter." | The device has been renamed as FTRA Ethernet Adapter in the latest UEA
driver for RA (version 9.24.6) |
1,566,117 | Red outline when empty Allowed MAC address list in the Sharing section of the
Runtime. | Fixed the red box in the sharing tab when there are no mac addresses in the
Allow List. |
1,784,133 | Missing warning messages in the serial tab of the Tools. | The missing messages have been added. |
1,682,525 | The unnamed device is displayed with quotes in the message in the
tools. | Fixed empty quotes messages for unnamed devices. |
1,545,640 | Missing Display Information on Tools. | The Display Information is now shown for devices that have a display. |
1,544,546 | Maximizing the tools window does not fit the position of the Windows task
bar. | Fixed window maximization problems. |
June 2022
Feature release of FactoryTalk Remote Access and FactoryTalk Remote Access Tools
13.2.644.
Features
- FactoryTalk Remote Access Runtime - Introducing installable remote access runtime software that enables you to remotely connect through FactoryTalk Remote Access to any device running Windows. The runtime software is available in two versions:
- BASIC - once connected, you can start a remote desktop session, transfer files or establish a secure VPN connection with the remote device.
- PRO - you can establish a VPN connection to any device that is connected to your remote device via Ethernet, serial, or USB ports.
- FactoryTalk Remote Access Trial Period - This FactoryTalk Remote Access release introduces a trial period to let you try out remote access services in your environment. The trial period is 90 days. During that time you will have full access to FactoryTalk remote access and the maximum number of concurrent connections. During the trial, you can track your usage of the service so that you can choose the subscription that is right for your organization. During the trial period, in addition to unlimited concurrent connections, you will have access to two FactoryTalk Remote Access Runtime PRO entitlements. To continue using FactoryTalk Remote Access beyond the trial period, you must purchase a subscription for concurrent connections and entitlements for any FactoryTalk Remote Access Runtimes you wish to continue using. Any setup and configurations made in FactoryTalk Remote Access will be retained.
- Device Access — Select a device in your domain and establish a remote desktop session to the device using either theWeb OnlyorDesktopversion of the Device Access Tools. Using theDesktopversion provide access to the entire suite of connectivity services: remote desktop, file transfer, remote process management, and chat. Using theWeb Onlyversion provides access to chat and provides the ability to view the desktop and send commands using the virtual keyboard.
- Improved Update Service - Available updates for the FactoryTalk Remote Access client tools are now easily visible from within the FactoryTalk Remote Access service.
- Improved Client Logging - The FactoryTalk Remote Access client log files now include the number of opened connections for the domain so that you can track usage over time.
Changes in functionality
- Unique device registration passwords - Each FactoryTalk Remote Access device is provided a unique eight-digit password to use to register the device with the domain. If a device is removed from the domain and attempts to rejoin the domain, a new password is generated by the remote access service that must be provided to re-register the device.
- Removed support for TLS 1.0 and 1.1 - Transport Layer Security protocols version 1.0 and 1.1 have reached end of life and are no longer supported for secure connections. Any client that attempts to negotiate a secure connection with FactoryTalk Remote Access service using these protocols will be denied.
Corrected anomalies
The following list identifies the anomalies corrected with this release.
ID Number | Title | Description |
|---|---|---|
Connection issues when using the Firefox browser. | The client experienced occasional drops in remote desktop connection when
using the Firefox browser. |
Security updates
The versions of the following open-source software components used by FactoryTalk Remote
Access have been updated to improve security:
- System.Net.Security updated to 4.3.2
- System.Text.RegularExpressions updated to 4.3.1
March 2022
Maintenance release of FactoryTalk Remote Access and FactoryTalk Remote Access Tools
13.0.028.
Visit the
Rockwell Automation Product Compatibility and Download Center
to download and update FactoryTalk Remote Access Tools to version
13.0.028.November 2021
Initial release of FactoryTalk Remote Access!
Features
- Domains — The domain represents the company account hosted by the FactoryTalk Remote Access Cloud Infrastructure. A domain consists of a group of devices, users, groups, firewall rules, and permissions.
- VPN — Establish a secure virtual private network between supervisors and operators of devices within your domain.
- Firewall — Configure firewall policies as needed to control access to your network.
- Permissions — Define permissions for devices, groups, and individual user accounts to control access to your resources.
Usage Notes
Router configuration
The 2-port Stratix 4300 Remote Access router includes two network ports, a LAN port and
a WAN port. Both ports support statically assigned IP addresses. However, if the LAN
port is disconnected, the statically assigned IP address will not be used for VPN
connections to the router. Instead a virtual IP address is created for use during the
VPN session. In this situation, the FactoryTalk Remote Access service device information
displays both the statically assigned IP address and the virtual IP address. However,
the Stratix device configuration only displays the virtual IP address because this is
the IP address that is active during the session. If the LAN port is later connected to
the network using a network cable inserted into the LAN port, the statically configured
IP address will be used.
NOTE:
The same behavior applies for the 4-port Stratix 4300 when the LAN port is
configured to take the IP address from a DHCP server and the DHCP server cannot be
contacted by the router, so the LAN has no IP.
Multi-factor Authentication
When you first sign in to FactoryTalk Remote Access, you will receive a message that
multi-factor authentication must be configured and activated before use. After clicking
the
Activation
link, a QR Code is displayed that can be scanned with any
application that supports the Google Authenticator standard. Use the following links
from your device to download an authenticator app:If your device cannot scan the QR Code click the link
Can’t read?
to view the
security code to be used with your authentication app as an alternative to scanning the
QR Code.After the first sign in, subsequent sign-ins will ask for your authenticator code. This
code is updated every 3 minutes. Open the authenticator app on your device and type in
the current code that is assigned to your account.
Known anomalies
The following list identifies the known anomalies at the time of release.
ID Number | Description | Work around | |
|---|---|---|---|
1320589 | Refresh view does not work after adding the router. | This issue occurs intermittently. Wait a few
minutes and try again. If refresh view does not work, close the browser and reopen
the session. | |
1320997 | The concurrent connections number is only lowered when the applet is
closed. | After disconnecting a session, close the
connection applet to remove the session from the active session list. | |
Issues
If you encounter issues using FactoryTalk Remote Access, please report them using the
feedback form accessible from the main menu under
Help > Provide Feedback
.Please use the documentation feedback form to let us know about improvements we
could make to the Help.
As issues are reported and fixed, they will be listed in the release notes.
Provide Feedback