Atellica® Connectivity Manager Operator's Guide 11353453 Rev. 03, 2023-06 © 2021–2023 Siemens Healthineers. All rights reserved No part of this manual or the products it describes may be reproduced by any means or in any form without prior consent in writing from Siemens Healthineers. ADVIA, ADVIA Centaur, Aptio, Atellica, BN ProSpec, CentraLink, Dimension, Dimension EXL, Dimension Vista, IMMULITE, RxL Max, Smart Remote Services, StreamLab, syngo, and Xpand are trademarks of Siemens Healthineers. All other trademarks and brands are the property of their respective owners. The information in the printed customer documentation was correct at the time of issue. Access the Document Library for current information (Accessing Product Information in the Document Library, page 6). Siemens Healthineers continues to improve products and reserves the right to change specifications, equipment, and maintenance procedures at any time without notice. THE CUSTOMER DOCUMENTATION INCLUDES INFORMATION ON THE SAFETY HAZARDS ASSOCIATED WITH USE OF THE SYSTEM AND PRECAUTIONS TO BE TAKEN TO AVOID SUCH HAZARDS. FAILURE TO OBSERVE WARNINGS OR USE OF THE SYSTEM IN A MANNER DIFFERENT FROM THAT SPECIFIED BY SIEMENS HEALTHINEERS MAY RESULT IN INJURY TO THE OPERATOR OR OTHER PERSONS. SEE WARNING AND HAZARD STATEMENTS. 11353453 Rev. 03 2 1 System Overview Intended Use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Accessing Product Information in the Document Library . . . . . . . . 6 Data Backup Recommendations . . . . . . . . . . . . . . . . . . . . . . .6 System Image. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Siemens Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7 2 Using Smart Remote Services About Smart Remote Services . . . . . . . . . . . . . . . . . . . . . . . . .9 Enabling and Disabling an SRS Service. . . . . . . . . . . . . . . . . . . . . . . . . . 9 About the Audit Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10 Viewing the Audit Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Exporting the Audit Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Exporting as a Tab Separated File (TSV). . . . . . . . . . . . . . . . . . . . . . . . 11 Remote Control Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11 Accepting a Smart Remote Services Request . . . . . . . . . . . . . . . . 11 About Remote Control Auto-Accept . . . . . . . . . . . . . . . . . . . . . . . 12 Enabling and Disabling Auto-Accept . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Disconnecting an SRS Remote Connection . . . . . . . . . . . . . . . . . . 12 3 Supplemental Information Exporting the Audit Log using the Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . .13 11353453 Rev. 03 3 4 11353456 Rev. 03 1 System Overview The Atellica® Connectivity Manager (Atellica CM) facilitates the delivery of Smart Remote Services (SRS). Siemens Healthineers uses SRS to remotely diagnose, troubleshoot, and support Siemens systems and middleware products. Additional information about SRS is available on the Siemens Healthineers website at: www.siemens-healthineers.com/diagnostics-it/remote-monitoring/realtime-solutions. Atellica CM is a software-only product. Atellica CM is a software solution hosted on a customer’s physical or virtual system. The host must be dedicated to only running Atellica CM. The host can be stand-alone or joined to a domain. The host requires a fire walled high-speed (25 MBs or higher) Internet access. Modems are not supported. For more information on the system requirements, see the Atellica Connectivity Manager Release Notes, available on the Document Library. Additional information about software, hardware, network characteristics, and security controls is available in the Atellica Connectivity Manager Security Whitepaper. To effectively perform remote monitoring, Atellica CM must maintain a connection to the Internet. The operator must configure the power settings profile of the host computer to prevent the system from entering sleep mode during inactivity. Installing and configuring Atellica CM requires local access, either direct access or using a remote desktop. Siemens Service also uses this access for on-site troubleshooting. A feature of the Atellica CM is the Data Router (DR), a web-based Application Programming Interface feature that helps integrate laboratory diagnostic systems. The DR provides access to data from diagnostic, automation, and informatics systems for real-time monitoring, business intelligence, and data analytics. For more information about the Data Router, see the Atellica Connectivity Manager Data Router Interface Guide, available on the Document Library. Intended Use The intended use of Atellica CM is to facilitate the delivery of Smart Remote Services (SRS). Atellica CM is not classified as a medical device. Atellica CM is for professional use only. 11353453 Rev. 03 5 Atellica Connectivity Manager Operator’s Guide System Overview Accessing Product Information in the Document Library 1. From a browser on a standalone computer or tablet, enter doclib.siemens-healthineers.com/home. 2. In the top-right corner, select Log in/Register > Login. 3. To filter documents by language, ensure a Country/Language preference is selected. 4. In the search bar, enter 1 or more words and select Enter. NOTE: Suggested keywords include Atellica Connectivity Manager, operator, release notes, installation, or upgrade. 5. Select the check box next to the appropriate documentation. 6. Select Download to view, print, or save the document. Data Backup Recommendations Atellica CM does not require any specific imaging or backup software. Siemens Healthineers recommends regular archiving of system images, log file backups, and configuration file backups on a different computer for future use. System Image For disaster recovery purposes, Siemens Healthineers recommends regularly creating an image of the system where Atellica CM is installed. Creating an image of Atellica CM does not require any specific imaging software or the operator to stop the system. Log Files Siemens Healthineers recommends that these locations be backed up regularly and the files stored for at least 1 year: • C:\sysmgmt\Log • C:\sysmgmt\IBC\log • C:\sysmgmt\GEC\*.log • C:\sysmgmt\GEC\log • C:\sysmgmt\SDAgent\Log • C:\ProgramData\Siemens\i2i Device Server\Log • C:\ProgramData\Siemens\i2i Agent\Log • C:\ProgramData\Siemens\Gateway\Log • C:\Program Files (x86)\Siemens\i2i VNC Server\Logs • C:\ProgramData\Siemens\Data Router\Log You can view these logs using a log-file reader, such as Notepad++. 6 11353453 Rev. 03 System Overview Atellica Connectivity Manager Operator’s Guide Siemens Accounts There are 2 Atellica CM Siemens Service accounts: • Level2 • syngoLab Siemens Service maintains the passwords for these accounts. Do not change passwords or modify these accounts. These accounts are critical to the operation of Atellica CM. 11353453 Rev. 03 7 Atellica Connectivity Manager Operator’s Guide 8 System Overview 11353453 Rev. 03 2 Using Smart Remote Services Smart Remote Services (SRS) enables Siemens Healthineers Service Engineers to remotely access Atellica CM or connected devices to troubleshoot and resolve potential issues. All Siemens Healthineers representatives are committed to maintaining patient data confidentiality and are trained to comply with regional procedures for handling personally identifiable information (PII) and Electronic Protected Health Information (ePHI). About Smart Remote Services The SRS interface allows users to enable or disable services such as file transfer or Remote Control. A user must be a member of the Administrators and CMAdmin local group to access the SRS user interface. The operator can disable or enable the services listed in the following table for Atellica CM and connected devices. This feature provides additional security by controlling access to the services. Service Description Monitoring Enables Siemens Healthineers representatives to monitor properties and events. Software Enables software package deliveries to the device. File Transfer Enables Siemens Healthineers representatives to transfer files to and from the device to resolve remote service calls. Remote Control Enables Siemens Healthineers representatives to remotely connect to customer devices. The customer, or local operator, must accept the request at the time of the connection. Enabling and Disabling an SRS Service 1. Log on to Atellica CM using the Lab Administrator Account login. 2. Navigate to Start > Atellica Connectivity Manager. 3. Select Smart Remote Services. 11353453 Rev. 03 9 Atellica Connectivity Manager Operator’s Guide Using Smart Remote Services 4. After the browser loads, select Configuration. 5. On the Select Services area of the Configuration screen, select a service to enable or disable. 6. In the Devices area, select an instrument. • To prevent a service, select the check box in the Disabled column. • To allow a service, deselect the check box in the Disabled column. 7. Select Warning/Information. 8. Select Accept. NOTE: Disabling remote access to an instrument during an active VNC connection immediately terminates the VNC connection. About the Audit Log The Audit Log tracks various changes and actions performed using SRS. The changes include: • Enabling and disabling features like Software Delivery, File Transfer, and VNC in the configuration settings • VNC related events, such as VNC-Connection created and VNC-Connection closed • Software Delivery operations such as callInstallPackage, installPackageResponse • GECAgent startup • Errors related to I2I calls Viewing the Audit Log 1. Log on to Atellica CM using the Lab Administrator Account login. 2. Navigate to Start > Atellica Connectivity Manager. 3. Select Smart Remote Services. 4. After the browser loads, select Audit Log. 10 11353453 Rev. 03 Using Smart Remote Services Atellica Connectivity Manager Operator’s Guide 5. To set the date range for the Audit Log, select Time Span11353453 Rev. 03. 6. Select the calendar icon. 7. Select the Audit Log start and end dates. NOTE: The format is DD.MM.YYYY when entering a date range manually. 8. Select get AuditLog to generate an Audit Log report. Exporting the Audit Log NOTE: The system only stores the past 30 days of audit log data. Exporting as a Tab Separated File (TSV) After creating an audit log, select Export to TSV. The Audit Log is output as TSV file that can be opened with Microsoft Excel or other programs that accept TSV format. Remote Control Service There are two types of remote assistance for devices that are connected using Atellica CM: Virtual Network Computing (VNC) and TeamViewer. Atellica CM uses VNC for remote access. When using VNC, a Siemens Healthineers service engineer logs in to the remote support enterprise system and requests a live connection to the instrument. Once the connection is made, a pop-up message displays that the local operator must acknowledge. Otherwise, the session terminates. When using SRS with a VNC session, the User Account Control (UAC) prompt can cause the VNC session to disconnect. Enable VNC auto-accept prior to accepting an SRS remote control session to reduce the number of connections a customer must accept. Auto-accept can be disabled when the remote-control connections are no longer needed. When using SRS with a TeamViewer session, the customer provides the Siemens Healthineers service personnel a TeamViewer passcode to access the instruments. (The TeamViewer application is provided by the connected instruments.) The TeamViewer connection between instruments and the support structures of Siemens Healthineers is established through a secure connection to the SRS infrastructure, and not through cloud-based technology. All generated data is encrypted twice: • At the application layer – between the two TeamViewer instances • At the transport layer – between customer network and SRS infrastructure 11353453 Rev. 03 11 Atellica Connectivity Manager Operator’s Guide Using Smart Remote Services Accepting a Smart Remote Services Request When remote service is required, Siemens Service engineer sends a message through SRS to Atellica CM, resulting in an Accept WinVNC Connection? pop-up window. Local operators must have access to Atellica CM to accept the remote connection or use the Auto-Accept feature. See About Remote Control Auto-Accept. 1. Make a selection within the Accept WinVNC Connection pop-up window: • To allow the remote access connection, select Accept. • To reject the remote access connection, select Reject. NOTE: When SRS is active, a yellow WinVNC icon displays in the Windows system tray. The following is the WinVNC icon: About Remote Control Auto-Accept The Auto-Accept features enables a Siemens Healthineers Service Engineer to remotely access Atellica CM without requiring the local operator to manually accept the access request. For example, during troubleshooting, the remote control session can be disconnected, or the Siemens Healthineers Service Engineer may need to open and close a remote session multiple times. If the local operator enables Auto-Accept, the remote connection can be made without local intervention. Auto-Accept remains active until one of these actions occur: • The local operator disables Auto-Accept. • A nightly scheduled task runs at midnight and disables Auto-Accept automatically. Enabling and Disabling Auto-Accept 1. Log on to Atellica CM using the Lab Administrator Account login. 2. Navigate to Start > Atellica Connectivity Manager > Gateway Management Console. 3. If a User Account Control (UAC) dialog displays, select Yes. NOTE: The Gateway Management Console can take a minute or more to launch. 4. Select Remote Control Auto-Accept in the menu bar to enable or disable Auto-Accept. 5. Select OK. 12 11353453 Rev. 03 Using Smart Remote Services Atellica Connectivity Manager Operator’s Guide Disconnecting an SRS Remote Connection 1. Log on to Atellica CM using the Lab Administrator Account login. 2. Right-select the WinVNC icon in the Windows system tray. 3. Select Close Connection. NOTE: The display of the UAC prompt causes remote VNC sessions to disconnect. To reduce the number of connections the local operator must accept, Siemens Healthineers recommends enabling VNC auto-accept prior to accepting an SRS remote control session. 11353453 Rev. 03 13 Atellica Connectivity Manager Operator’s Guide 14 Using Smart Remote Services 11353453 Rev. 03 3 Supplemental Operating Information Exporting the Audit Log using the Command Line Interface NOTE: Administrator level access is required to perform this task. The Audit Log tracks the changes and actions performed using SRS. Using the Command Line Interface (CLI), a command can be entered to export the Audit Log. his command can be captured in a script that can be scheduled by the Windows operating system (OS) to run on regular frequency. NOTE: The system only stores the past 30 days of audit log data. Enter the following command to export the audit log: java -jar GEC-CLI.jar --export-audit-log <out_file> --days-count <days_count> --device-id <global_device_id> --verbose Parameter Description --export-audit-log <out_file> Specifies the output file for the audit log export. --days-count <days_count> Number of days to export. Default value is 30. Optional parameter. --device-id <global_device_id> Global Device ID of the device to export the audit log. If this parameter is not specified, then the audit log is exported for all devices. The global device ID is the RTS ID that is displayed in the GMC application. Optional parameter. --verbose Exports all columns of the audit log database table. NOTE: There are some columns present which are not shown in the GEC-GUI. Optional parameter. The following is an example of an export string that creates the export.tsv file with 10 days of data: java -jar GEC-CLI.jar --export-audit-log export.tsv --days-count 10 11353453 Rev. 03 13 Atellica Connectivity Manager Operator’s Guide 14 Supplemental Operating Information 11353453 Rev. 03