Siemens SCALANCE X-300 Guide

Connect X300 Gateway (Sinteso)
Commissioning
A6V12153163_en--_e
Smart Infrastructure
2021-03-31

Imprint
2 | 52
A6V12153163_en--_e
Imprint
Technical specifications and availability subject to change without notice.
Transmittal, reproduction, dissemination and/or editing of this document as well as
utilization of its contents and communication thereof to others without express
authorization are prohibited. Offenders will be held liable for payment of damages.
All rights created by patent grant or registration of a utility model or design patent
are reserved.
Issued by:
Siemens Switzerland Ltd.
Smart Infrastructure
Global Headquarters
Theilerstrasse 1a
CH-6300 Zug
Tel. [phone]
www.siemens.com/buildingtechnologies
Edition: 2021-03-31
Document ID: A6V12153163_en--_e
© Siemens Switzerland Ltd, 2019 - 2021

A6V12153163_en--_e
3 | 52
Table of contents
1 About this document ....................................................................................5
1.1 Applicable documents.....................................................................................6
1.2 Revision history...............................................................................................7
2 Safety..............................................................................................................8
2.1 Cyber security disclaimer................................................................................8
2.2 Safety notes ....................................................................................................8
2.3 Safety regulations for the method of operation...............................................9
2.4 Standards and directives complied with........................................................11
2.5 Hardening......................................................................................................11
2.6 Release Notes...............................................................................................12
3 Overview ......................................................................................................14
3.1 Sinteso Portal................................................................................................14
3.2 Sinteso Tunnel ..............................................................................................14
3.3 Sinteso Cloud Apps architecture...................................................................15
4 Before you start...........................................................................................16
4.1 Legal requirements........................................................................................16
4.2 Ordering and contractual documents............................................................16
4.3 Data use determines subscription choice .....................................................16
4.4 Hardware installation and secure use of Cloud apps....................................16
4.5 Workflow........................................................................................................18
5 Order account and subscription................................................................19
5.1 Create a Siemens-ID.....................................................................................19
5.2 Order process with the License Management System (LMS) ......................21
6 Setup ............................................................................................................22
6.1 Connect X300 Gateway ................................................................................22
7 Commissioning ...........................................................................................23
7.1 Prerequisites .................................................................................................23
7.2 Register the Connect X300 Gateway............................................................23
7.2.1 Setup the Connect X300 Gateway ................................................23
7.2.2 Register the Connect X300 Gateway ............................................24
7.2.3 Setup IP and proxy address ..........................................................25
7.3 Create and activate a new company in the Cloud ........................................26
7.3.1 Order product activation from License Management System (LMS)
.......................................................................................................26
7.4 Register with Asset Manager ........................................................................30
7.4.1 Create a new site...........................................................................30
7.4.2 Register the Connect X300 Gateway ............................................31
7.4.3 Assign distribution..........................................................................33
7.5 Connect fire detection system to the portal...................................................34
7.6 Configuring a Gateway..................................................................................35
7.6.1 SintesoWorks.................................................................................35
7.7 Initializing the Gateway .................................................................................39
7.8 Transferring the configuration to the fire detection system...........................40

4 | 52
A6V12153163_en--_e
7.9 Connect tunnel ..............................................................................................41
7.9.1 Requirements.................................................................................41
7.9.2 Install Tunnel Connection for the Cloud.........................................42
7.9.3 Connect tunnel...............................................................................43
7.9.4 Disconnect tunnel connection........................................................44
7.9.5 Check tunnel connection ...............................................................44
7.10 Connecting SintesoView ...............................................................................45
7.11 SintesoWorks Remote...................................................................................46
8 Maintenance.................................................................................................48
8.1 Update the Connect X300 Gateway..............................................................48
9 Troubleshooting..........................................................................................49
9.1 Reset settings................................................................................................49
9.1.1 Connect X300 ................................................................................49
Glossary .................................................................................................................51

About this document
Applicable documents
1
A6V12153163_en--_e
5 | 52
1 About this document
Goal and purpose
This document describes the commissioning process for the Connect X300
Gateway, Sinteso Portal, and SintesoView.
Target group
Activity
Qualification
IT security officers
●Support companies when it comes
to assessing the security of
products, solutions, and services,
and defining and implementing
improvements.
●Are technical experts in all aspects
of IT security.
Commissioning personnel
●Configures the product at the place
of installation according to
customer-specific requirements.
●Checks the product operability and
releases the product for use by the
operator.
●Searches for and corrects
malfunctions.
●Has obtained suitable specialist
training for the function and for the
products.
●Has attended the training courses
for commissioning personnel.
Installation personnel
●Assembles and installs the product
components at the place of
installation.
●Carries out a function check
following installation.
●Has received specialist training in
the area of building installation
technology or electrical installations.
Source language and reference document
●The source/original language of this document is German (de).
●The reference version of this document is the international version in English.
The international version is not localized.
Document identification
The document ID is structured as follows:
ID code
Examples
ID_languageCOUNTRY_ modification index
-- = multilingual or international
A6V10215123_deDE_a
A6V10215123_en--_a
A6V10315123_----_a
Date format
The date format in the document corresponds to the recommendation of
international standard ISO 8601 (format YYYY-MM-DD).
Presentation conventions
Text markups
Special text markups are used as follows in this document:

About this document
Applicable documents
1
6 | 52
A6V12153163_en--_e
⊳
Prerequisite for an instruction telling you what to do
1.
2.
Instruction with at least two steps
◈
Instruction with one step
–
Variant, option, or detailed information on an instruction
⇒
Interim result of an instruction
⇒
Final result of an instruction
●
Lists
[➙X]
Reference to a page number
'Text'
Quote, exact match
<Button>
Identification of buttons
>
Indicates a link and identifies steps in a sequence, e.g., 'Menu bar' >
'Help' > 'Help topics'
↑Text
Identifies a glossary entry
Additional information and tips
The 'i' symbol identifies additional information and tips to simplify the procedure.
1.1 Applicable documents
Document ID
Title
008843
Planning
009078
Configuration
A6V12050070
Account Manager
A6V12060067
Asset Manager
A6V12167018
Sinteso Cloud Apps (Type 1: Manual subscription renewal)
A6V12131429
Cyber security policy
A6V11508811
Installation instructions CXG3.X300
A6V11473182
Data sheet Connect X300

About this document
Revision history
1
A6V12153163_en--_e
7 | 52
Document overview
1.2 Revision history
The reference document's version applies to all languages into which the reference
document is translated.
The first edition of a language version or a country variant may, for example, be
version 'd' instead of 'a' if the reference document is already this version.
Version
Edition date
Brief description
a
2019-03-12
First edition
b
2020-11-20
Added Asset Manager and Account Manager
c
2021-01-25
Index synchronized with all portals
d
2021-03-25
User interface changed for Asset Manager and Account Manager
e
2021-07-31
New documentation reference A6V12060067 to Asset Manager

Safety
Cyber security disclaimer
2
8 | 52
A6V12153163_en--_e
2 Safety
2.1 Cyber security disclaimer
Siemens provides a portfolio of products, solutions, systems and services that
includes security functions that support the secure operation of plants, systems,
machines and networks. In the field of Building Technologies, this includes building
automation and control, fire safety, security management as well as physical
security systems.
In order to protect plants, systems, machines and networks against cyber threats, it
is necessary to implement –and continuously maintain –a holistic, state-of-the-art
security concept. Siemens’ portfolio only forms one element of such a concept.
You are responsible for preventing unauthorized access to your plants, systems,
machines and networks which should only be connected to an enterprise network
or the internet if and to the extent such a connection is necessary and only when
appropriate security measures (e.g. firewalls and/or network segmentation) are in
place. Additionally, Siemens’ guidance on appropriate security measures should be
taken into account. For additional information, please contact your Siemens sales
representative or visit https://www.siemens.com/global/en/home/company/topic-
areas/future-of-manufacturing/industrial-security.html.
Siemens’ portfolio undergoes continuous development to make it more secure.
Siemens strongly recommends that updates are applied as soon as they are
available and that the latest versions are used. Use of versions that are no longer
supported, and failure to apply the latest updates may increase your exposure to
cyber threats. Siemens strongly recommends to comply with security advisories on
the latest security threats, patches and other related measures, published, among
others, under https://www.siemens.com/cert/en/cert-security-advisories.htm.
2.2 Safety notes
The safety notices must be observed in order to protect people and property.
The safety notices in this document contain the following elements:
●Symbol for danger
●Signal word
●Nature and origin of the danger
●Consequences if the danger occurs
●Measures or prohibitions for danger avoidance
Symbol for danger
This is the symbol for danger. It warns of risks of injury.
Follow all measures identified by this symbol to avoid injury or death.
Additional danger symbols
These symbols indicate general dangers, the type of danger or possible
consequences, measures and prohibitions, examples of which are shown in the
following table:
General danger
Explosive atmosphere
Voltage/electric shock
Laser light
Battery
Heat

Safety
Safety regulations for the method of operation
2
A6V12153163_en--_e
9 | 52
Signal word
The signal word classifies the danger as defined in the following table:
Signal word
Danger level
DANGER
'DANGER' identifies a dangerous situation, which will result directly in death or
serious injury if you do not avoid this situation.
WARNING
'WARNING' identifies a dangerous situation, which may result in death or
serious injury if you do not avoid this situation.
CAUTION
'CAUTION' identifies a dangerous situation, which could result in slight to
moderately serious injury if you do not avoid this situation.
NOTICE
'NOTICE' identifies a possibly harmful situation or possible damage to property
that may result from non-observance.
'NOTICE' does not relate to possible bodily injury.
How risk of injury is presented
Information about the risk of injury is shown as follows:
WARNING
Nature and origin of the danger
Consequences if the danger occurs
●Measures / prohibitions for danger avoidance
How possible damage to property is presented
Information about possible damage to property is shown as follows:
NOTICE
Nature and origin of the danger
Consequences if the danger occurs
●Measures / prohibitions for danger avoidance
2.3 Safety regulations for the method of operation
National standards, regulations and legislation
Siemens products are developed and produced in compliance with the relevant
European and international safety standards. Should additional national or local
safety standards or legislation concerning the planning, mounting, installation,
operation or disposal of the product apply at the place of operation, then these
must also be taken into account together with the safety regulations in the product
documentation.

Safety
Safety regulations for the method of operation
2
10 | 52
A6V12153163_en--_e
Electrical installations
WARNING
Electrical voltage
Electric shock
●Work on electrical installations may only be carried out by qualified
electricians or by instructed persons working under the guidance and
supervision of a qualified electrician, in accordance with the electrotechnical
regulations.
●Wherever possible disconnect products from the power supply when carrying
out commissioning, maintenance or repair work on them.
●Lock volt-free areas to prevent them being switched back on again by mistake.
●Label the connection terminals with external voltage using a
'DANGER External voltage' sign.
●Route mains connections to products separately and fuse them with their own,
clearly marked fuse.
●Use an easily accessible disconnecting device in accordance with EN IEC
62368-1 outside the installation.
●Produce earthing as stated in local safety regulations.
CAUTION
Noncompliance with the following safety regulations
Risk of injury to persons and damage to property
●Compliance with the following regulations is required.
●Specialist electrical engineering knowledge is required for installation.
●Only an expert is permitted to carry out installation work.
Incorrect installation can take safety devices out of operation unbeknown to a
layperson.
Mounting, installation, commissioning and maintenance
●Any tools such as ladders must be safe and designed for the task in question.
●When starting up the fire control panel, check that no unstable states can
occur.
●Ensure that all the points listed under 'Testing and checking the product
functions' are observed.
●Do not set controls to normal operation until you have tested and check all the
product functions and handed over the system to the customer.
Testing and checking the product functions
●Prevent false triggers remote transmission triggers.
●If you check building equipment or control devices from external companies,
cooperate with the responsible contact persons.
●Neither personal injury nor damage to building equipment should occur when
activating fire controls for test purposes. The following instructions must be
followed:
–Use the correct potential (usually that of the building equipment).
–Check the controls only as far as the interface (relay with blocking option).
–Make sure that only the controls to be tested are activated.

Safety
Standards and directives complied with
2
A6V12153163_en--_e
11 | 52
●Inform others before testing alarm devices and anticipate that people might
react in panic.
●Inform people about possible noise or fog that might occur.
●Inform the corresponding alarm and fault receiving stations before testing the
remote transmission.
Modifications to the system design and the products
Modifications to the system and to individual products may lead to faults,
malfunctioning and safety risks. Written confirmation must be obtained from
Siemens and the corresponding safety bodies for modifications or additions.
Modules and spare parts
●Components and spare parts must comply with the technical specifications
defined by Siemens. Only use products specified or recommended by
Siemens.
●Only use fuses with the specified fuse characteristics.
●Wrong battery types and improper battery changing lead to a risk of explosion.
Only use the same battery type or an equivalent battery type recommended by
Siemens.
●Batteries must be disposed of in an environmentally friendly manner. Observe
national guidelines and regulations.
Disregard of the safety regulations
Before they are delivered, Siemens products are tested to ensure they function
correctly when used properly. Siemens disclaims all liability for damage or injuries
caused by the incorrect application of the instructions or the disregard of danger
warnings contained in the documentation. This applies in particular to the following
damage:
●Personal injuries or damage to property caused by improper use and incorrect
application
●Personal injuries or damage to property caused by disregarding safety
instructions in the documentation or on the product
●Personal injury or damage to property caused by poor maintenance or lack of
maintenance
2.4 Standards and directives complied with
A list of the standards and directives complied with is available from your Siemens
contact.
2.5 Hardening
Communication
The external DSL router connects the customer network to the Internet/cloud
server via the WAN port (X2P1) of the Connect X300 Gateway.
A physical cable is required to connect the WAN port to the DSL router. A WLAN
connection is not permitted.
The Connect X300 Gateway is connected directly to the Ethernet switch FN2012
via the LAN port (X1P1).
The Gateway contains an internal firewall to protect the FS zone. The FS
application configures the firewall. Only certified services can communicate with
the Gateway.
Communication is only possible from LAN to WAN. The firewall blocks incoming
communication from the WAN.
Only IPv4 is supported.

Safety
Release Notes
2
12 | 52
A6V12153163_en--_e
SSL communication: Version 1.2 is currently used. An upgrade to version 1.3 is
planned and will be installed via a remote software update
Ports
DisplayPort: Issues status messages from the Gateway to the cloud
The firewall closes all ports on WAN by default.
Following successful authorization, the admin (user) can temporarily open the SSH
port for the LAN port for diagnostic purposes.
●The SSH port is closed again in the event of a restart or if a local browser
(LAN) is used.
●The SSH port is closed automatically after a timeout of 12 hours or if the
network is switched off/on.
●A separate SSH key must be requested from Siemens HQ Support for SSH
access.
The USB ports are closed except for the following:
●Keyboard
●Memory stick: Must be enabled beforehand via the BIOS (password-protected).
●4G Internet dongle, type Huawei E3372 LTE
Configuration and password
During commissioning, the user must replace the default password with a user-
defined password. The new password must fulfill the following:
●At least 8 characters
●Upper-case and lower-case letters
●Numbers
●Special characters
BIOS settings are locked with a separate BIOS password. The password is known
only to Siemens HQ Support.
To make changes to the local IT network structure, the admin can enable individual
ports within a narrow port range via the Internet browser.
The Gateway can only be registered using the 'Chrome' Internet browser with IP
address 169.254.169.254.
The password set by the user can only be reset by an authorized person via
remote access using the Sinteso Portal.
Network topology A fixed IP address should be assigned on the WAN side to
ensure that no attacks can take place between the DSL router and the Gateway.
The Gateway cannot be binged for security reasons.
Required endpoints
To access the cloud applications, the following endpoints must be reachable via
the Gateway and not blocked in the network
●https://sb-hedge-mgmt.horizoncloud.io
●https://sb-auth-proxy.horizoncloud.io
●https://proxy-hawkbit.horizoncloud.io
●https://registry.horizoncloud.io
●https://s3-eu-west-1.amazonaws.com
The following endpoint must also be reachable via the Gateway for Sinteso Tunnel:
●https://horizon-tunnel-service-relay-west-eu.servicebus.windows.net
2.6 Release Notes
Limitations to the configuration or use of devices in a fire detection installation with
a particular firmware version are possible.

Safety
Release Notes
2
A6V12153163_en--_e
13 | 52
WARNING
Limited or non-existent fire detection
Personal injury and damage to property in the event of a fire.
●Read the 'Release Notes' before you plan and/or configure a fire detection
installation.
●Read the 'Release Notes' before you carry out a firmware update to a fire
detection installation.
NOTICE
Incorrect planning and/or configuration
Important standards and specifications are not satisfied.
Fire detection installation is not accepted for commissioning.
Additional expense resulting from necessary new planning and/or configuration.
●Read the 'Release Notes' before you plan and/or configure a fire detection
installation.
●Read the 'Release Notes' before you carry out a firmware update to a fire
detection installation.

Overview
Sinteso Portal
3
14 | 52
A6V12153163_en--_e
3 Overview
The Sinteso Cloud Apps is an innovative portfolio of Cloud software products for
Siemens fire protection systems. It is a collection of Apps that use Cloud
technology to connect to the fire protection systems and is designed to assist fire
protection companies in digitizing their service and maintenance offering and to
increase efficiency while reducing time and travel costs.
The Sinteso Cloud Apps consists of:
●Sinteso Portal: Online web portal for real-time overview and status of all sites
●Sinteso Tunnel: 1-to-1 connection to a specific site for remote troubleshooting
Information overview in Sinteso Portal
3.1 Sinteso Portal
With Sinteso Portal, fire protection companies have all their sites for fire protection
systems in one view. They no longer need to drive to the site. By selecting the
desired site, you can:
●Display the status of your site;
●Receive detailed information on incidents;
●Check the station firmware and reload as needed;
●Display and analyze the progress of events;
●Receive additional details.
Numerous functions are available to remotely access the site.
3.2 Sinteso Tunnel
Sinteso Tunnel is a secure cloud-based tunnel solution that allows, together with
the Service, a 1-to-1 connection to the station on your laptop. Take advantage of
the engineering tool to communicate directly with the station, extract logs and
sensitivity reports, update the default configuration, etc. to increase service
efficiency and optimize resources.

Overview
Sinteso Cloud Apps architecture
3
A6V12153163_en--_e
15 | 52
3.3 Sinteso Cloud Apps architecture

Before you start
Legal requirements
4
16 | 52
A6V12153163_en--_e
4 Before you start
4.1 Legal requirements
Your company must be authorized to conduct business transactions with Siemens
Digital Service. The Master Order Form and all required legal documents between
Siemens Ltd and your company are signed. The product and service data sheets
can be downloaded at the following link:
●German
https://new.siemens.com/global/de/produkte/gebaeude/digitalisierung/cloud-
applications.html
●English
https://new.siemens.com/global/en/products/buildings/digitalization/cloud-
applications.html
Under Additional information, select option Global and then:
●General terms and conditions;
●Sinteso Cloud Apps.
4.2 Ordering and contractual documents
Contractual documents
Your company must sign a Master Order Form for Digital Services with your local
Siemens entity to use the service. The Master Order Form forms, as the
specification for this service as well as any additional appendices to the same, an
integral part of the Digital Service Agreement (DSA) together with this Product and
Service Data Sheet (PSDS). The documents listed below together form the
contractual documents for the service.
4.3 Data use determines subscription choice
Data consumption depends on use as well as connected stations. The three
examples below provide a starting point for which subscription is best suited to
your plant.
Stations
Data use by month
Subscription
Less than 5
Less than 15 minutes for the Sinteso Tunnel connection
5 GByte/month
5-10
Or more than 1 hour Sinteso Tunnel connection
10 GByte/month
Greater than 10
Or very intense use of the Sinteso Tunnel connection
20 GByte/month
4.4 Hardware installation and secure use of Cloud
apps
Hardware installation requirements
●The Connect X300 Gateway may not be installed on a fire control panel.
●The gateway is not public (i.e. not accessible by building users). Install it
behind a locked (i.e. secured) door.
●Installation and cabling must be in a secured area (locked room). The cable to
the gateway cannot be publicly accessible and must be under 50 cm in length.
●Only (FC Net/C-Web) devices can be connected to the LAN2 port on the Cloud
gateway.

Before you start
Hardware installation and secure use of Cloud apps
4
A6V12153163_en--_e
17 | 52
Secure use of Sinteso Cloud Apps
Only properly trained personnel may use Sinteso Tunnel at the station. Personnel
must be able to troubleshoot problems that may occur when the remote
configuration fails.
Sinteso Cloud Apps are not a system for transmitting alarms and may not be sold
as such. An official system for transmitting alarms is required in addition to Sinteso
Cloud Apps.

Before you start
Workflow
4
18 | 52
A6V12153163_en--_e
4.5 Workflow
The following diagram outlines how to commission Sinteso Portal, Connect X300
Gateway, and the fire control panel. The various tasks may take place at different
times. There are, however, two dependencies that must be considered:
1. An Internet connection to Connect X300 Gateway is required to register the
Connect X300 Gateway.
2. The Site-ID for the fire detection system must be known to connect it to Asset
Manager. The Site-ID is available in the configuration file.
Create Siemens ID
Order account and
subscription
Industry Mall
(LMS)
Create site
Register Connect X300
Gateway
Create new company
Activate license
Register
Connect X300
Gateway
(Optional) Setting up
IP and proxy addresses
Account
Manager
Engineering
Tool
Connecting the fire
detection system with
the portal
Asset Manager
Transferring the
configuration to the
fire detection system
Online for operating
Initializing the
Gateway
Commissioning
(not part of this
document)
Fire detection system
Configuring a Gateway
Copy site ID
Online connection available
Assign distribution
Connecting the tunnel
Portal
X300 Device
Setting up

Order account and subscription
Create a Siemens-ID
5
A6V12153163_en--_e
19 | 52
5 Order account and subscription
5.1 Create a Siemens-ID
You must have a Siemens-ID to order the product using the subscription manager
and to use the Sinteso Portal. You can use all ordered Cloud products using a
Siemens-ID.
1. In a supported browser, enter the link:
https://sintesoportal.siemens.com
The landing page opens.
2. Select the user language from the drop-down list in the upper righthand corner.
3. Select 'Log In'.
The Log In dialog box displays.
4. Select 'Sign Up'.
The Sign Up dialog box displays.
5. Enter the following log-in data to register the Siemens-ID:
–E-mail
–Password
–First name
–Last name
6. Select the link and carefully read the 'Terms of use of Service'.
7. Select 'I consent to the terms of use of Service'.
8. Select 'Register'.

Order account and subscription
Create a Siemens-ID
5
20 | 52
A6V12153163_en--_e
9. The 'Action Required' dialog box displays.
10. Select 'Continue'.
Your query is reviewed. You receive a confirmation e-mail shortly.
Check the spam folder and Junk email inbox if you have not received a
confirmation email.
11. Go to your e-mail account and select 'Verify my email'.
You receive the verification information.
Siemens-ID login is now completed.
An error message displays if you select 'Verify my email' a second time:
The URL can only be used one time.