MindSphere FAQs

    General

      Are there some limits for IoT Time Series Service?

      Renewal of secrets of Service Credentials

        Dear customer,

        Here at MindSphere, we value your business as we work hard to improve and enhance your digitalization experience. As a MindAccess DevOps Plan subscriber, we wish to inform you about security related changes.

        As a preventive measure, we have decided to disable service credentials that are older than 365 days. With the latest release of MindSphere, you can now switch to the newly released Token Manager Service that provides a comparable functionality. In case this functionality does not cover your requirements, please contact us via the MindSphere Support and request to change your service credentials. Please ensure that your request contains the required information as described here https://developer.mindsphere.io/howto/howto-selfhosted-api-access.html#creating-service-credentials.

        If we do not receive a request to change the secret we will proceed with disabling the issued service credentials. In case that service credentials are not required anymore, please request the deletion of the service credentials.

        You will be able to use the issued service credentials with the old secret until March 31, 2019.

        We would also like to inform you that as a subscriber to the MindAccess DevOps Plans, you will be able to rotate your secrets via a new API in near future.

        Best regards

        SIEMENS AG
        MindSphere

      How can I download the MindSphere certificates?

        1. Use chrome to go your MindSphere tenant.
        2. Press Key "F12"
        3. Click on the tab "Security".
        4. Click on "View certificate".
        5. Click on tab "Certification path".
        5a. Click on "QouVadis Root CA 2 G3" and "View certificate".
        5b. Click on tab "Details" and "copy to file".
        6. Repeat 5a and 5b for the "QouVadis Enterprise Trust CA 2 G3" and "Siemens Issuing CA Internet Server 2017" certificate.

    MindConnect

      Onboarding an IoT Nano

        The following steps describe how to onboard a MindConnect Nano and how to configure the Data Mapping in the Asset Manager. By doing so, we basically connect the Datasource (Plant) with the Aspects (MindSphere). For this example we use the S7 protocoll and read out an Integer variable from a SIMATIC S7-1500.

        Create new Asset and configure MindConnect Agent (Menu “Asset” on the left)
        Create new asset based on “core.mcnano” and give a name (e.g. Asset_NanoAgent)
        Insert unique box ID and configure Web- and Plant-Interfaces (as shown in the image)
        Optional: update Firmware if necessary
        2. Download config file and onboard Nano Box
        See Screenshot

      Factory Reset of MindConnect Device

        A factory reset is only necessary for MindConnect Elements that were already connected to MindSphere V2 (SAP). V1 cannot be upgraded.

        You will find the necessary steps in the „Getting Connected to MindSphere“ documentation in the chapter "Manual firmware update of MindConnect Element":
        https://documentation.mindsphere.io/resources/html/getting-connected/en-US/119926080651.html

        Prerequisites:
        • USB stick (fat32 formatted)
        • ConBox_Commands.json file with a special content and
        • the newest firmware version of your MindConnect Device

        All required things can be found under the documentation link.

      How to get the latest Firmware for your MindConnect device

      How to get (extended) Logfiles from your MindConnect device

        You can run diagnostic and maintenance USB commands on your MindConnect Elements.

        All necessary steps can be found in the „Getting Connected to MindSphere“ documentation in the chapter "Mounting and installing MindConnect Elements" -> "USB commandos":
        https://documentation.mindsphere.io/resources/html/getting-connected/en-US/index.html

        Prerequisites:
        • USB stick (fat32 formatted)
        • ConBox_Commands.json file with a special content

      Step by step manual to configure MindConnect Nano Asset in MindSphere V3

        Screenshots are not useable! If you want to share Screenshots, please have a cvloser look if these have specific information which should not be published.
        [[Optional]] = marked sentences with optional can be posted, but must not be publish. this is in the decission of the publisher

        [[Optional]] In contrast to MindSphere V2, more manual steps to configure the data mapping have to be accomplished in order to see data in your fleet manager.

        The following steps describe how to onboard a MindConnect Nano and how to configure the Data Mapping in the Asset Manager. By doing so, we basically connect the Datasource (Plant) with the Aspects (MindSphere). For this example we use the S7 protocoll and read out an Integer variable from a SIMATIC S7-1500.

        Create new Asset and configure MindConnect Agent (Menu “Asset” on the left)
        Create new asset based on “core.mcnano” and give a name (e.g. Asset_NanoAgent)
        Insert unique box ID and configure Web- and Plant-Interfaces
        Optional: update Firmware if necessary. Download the config file and onboard Nano Box (equal to MindSphere V2)

        Create Datasource and Datapoints
        Create new Datasource and specify them
        Create Data-points (click on table icon at newDatasource) and specify them
        Create Datamapping (click on chain icon at newIntVariable)
        Create Aspect and add Variables (Menu “Aspects” on the left)
        Create new Aspect and specify the following
        Add Variables by specifying the following

        • Protocol (S7 or OPCUA)
        • Name (e.g. newDatasource)
        • Reading cycle
        • IP address of Datasource Endpoint (e.g. S7-1500 for S7 protocol)
        • Name (e.g. NewIntVariable
        • Unit (e.g. val)
        • Datatype (e.g. int)
        • Data point address (e.g. DB1.DBW2)

        !Please note:
        Unit and Datatype is important for the data mapping later. These have to match exactly (case sensitive)!
        Here the datamapping is made, but at first the counterpart for the MindSphere Aspect has to be configured.

        • ID which is <your-tenant-name>.<own-id> (e.g. xxxxxxx.newAspect)
        • Name (e.g. newAspect)
        • Name (e.g. Integer) à ! will be shown in MindSphere
        • Unit (e.g. val)
        • Datatype (e.g. int)

        !Please note:
        Unit and Datatype is important for the data mapping later. These have to match exactly (case sensitive)!

        Create Type and select Aspect (Menu “Types” on the left)
        Create new Type and specify the following
        Parent Asset Type Has to be BasicDevice
        Select Aspect by specifying the following

        • ID which is <your-tenant-name>.<own-id> (e.g. xxxxxxx.newType)
        • Name (e.g. newType)
        • Aspect Name (e.g. MindSphereAspect) will be shown in MindSphere
        • Aspect that has been created before (here: newAspect)

        Create new Asset and configure (Menu “Asset” on the left)
        Create new asset based on the type created before (e.g. nbgmsiot.newType) and give a name (e.g. Asset_MindSphere)

        Create Datamapping
        Browse to the Nano Agent and navigate to Datapoints of Datasource from step 3 (here newDatasource)
        Click on chain icon behind datapoint (here newIntVariable) and create new datamapping
        Select Asset from step 6 (here: Asset_MindSphere)
        Select Aspect from step 5 (here: MindSphereAspect)
        Select Variable from step 4 (here: Integer)

      Which Error-Codes/Quality-Codes can occure?

      Cloud Fieldbus / OPC UA Server for  MC IoT Extension

      How can activate MC IOT Extension App on my tenant?

        Requirements to be able to activate MC IOT Extension App on your tenant:

        1. You have a MindAccess IOT Value Plan or MindAccess Developer Plan
        2. You are TenantAdmin on the tenant.

        Hint: MC IOT Extension is not available for TRIAL Tenants and MindAccess Operator Plans.

         

        There are three ways to activate MC IOT Extension on your tenant.

        1. You have the Welcome email of your tenant. There is MC IOT Extension Activation mentioned and you can use the provided link to get MC IOT Extension App activated.
        2. You write an email to provisioning@mindsphere.io.
        3. You write a support ticket from your tenant in the top right corner with click on Mindsphere > Support.

        With option 2 and 3 please use the follwing template to provide the necessary information:

        Subject: Activate MindConnect IoT Extension - Tenant: <Tenant Name>

        Email Body:

        Dear MindSphere User

        MindConnect IoT Extension is a connectivity layer that expands the number of protocols that can communicate with MindSphere. Various field protocols are supported along with an increased range of hardware connectivity agents that create direct connection to assets in the production environment. Use the complete environment to create and manage agents and devices. MindConnect IoT Extension is included in the MindAccess offerings with upgrades available for increases in data ingestion based on solution requirements.

        First Name:

        Last Name:

        Email (User Name):

        Instructions: Please provide the following information to request activation of MindConnect IoT Extension for your tenant <Tenant Name> and send the email.

        Company:

        Phone:

        Country:

    MindConnect Library

      What data types and ranges are available?

      How to refresh the MCLib Key/Token?

        There are two functions an agent must call at some specific periods to be able to send data for long periods.

        • mcl_communication_get_access_token – 30 minutes
        • mcl_communication_rotate_key – 7 days

        And here is an example code:

        // If everything is successful so far, exchange the store whichcontainstimeseries.

        if (MCL_OK == code)

        {

        printf("Uploading timeseries: ");

        code = mcl_communication_exchange(communication, store, NULL);

        // If exchange returns unauthorized, then get new access token.

        if (MCL_UNAUTHORIZED == code)

        {

        printf("Getting new access token: ");

        code = mcl_communication_get_access_token(communication);

        // If getting new access token is successful, then try exchange again.

        if (MCL_OK == code)

        { printf("Retrying exchange: "); code = mcl_communication_exchange(communication, store, NULL); }

        else if (MCL_BAD_REQUEST == code)

        {

        // If get access token call returns bad request error then rotate key and try exchanging again.

        printf("Calling rotate key: ");

        code = mcl_communication_rotate_key(communication);

        // If key rotation is successful, then retry exchange.

        if (MCL_OK == code)

        { printf("Retrying exchange: "); code = mcl_communication_exchange(communication, store, NULL); }

        }

        }

        }

        If the agent does not call these functions it will fail to send data after some time.

      What Error Codes does the MCLib have?

    Developer

      Why does the upload of an app take so long?

        By uploading your application via Developer Cockpit, you confirm having evaluated and tested the application with respect to its technology, functionality, performance, security, and user interface. You agree that your application complies with the documentation and any other requirements set out in the MMA or the respective order form.

        Please also check the documentation "Get your Application Ready for Productive Use":
        https://developer.mindsphere.io/howto/howto-app-publication.html

        After uploading the application the preparations and verifications of the productive release will be started. Usually this takes only a few days and should not exceed 14 days. Developers should consider this period in their planning. This process cannot be accelerated. Therefore, please do not send any requests to the MindSphere Support. An email notification is sent to the primary and secondary e-mail address as soon as the application is available for productive use.

      Which MindSphere Plans can order Service Credentials (Technical Users)?

        This information can be found in Prerequisites chapter of the "Self-Hosted Application" documentation:
        https://developer.mindsphere.io/howto/howto-selfhosted-api-access.html

        • MindAccess DevOps Plan
        • Service Credentials for IoT Value Plan Tenants cannot be created, because a DevOps Plan is needed for developing purposes

        With the release in January the Token Manager API will be released which allows customers to issue application (version) specific service credentials in the Developer Cockpit. For more information's, please check the MindSphere Release Notes and the Developer Cockpit documentation after the release.

      How to get Service Credentials for a Self-Hosted Application?

        Please note the "Creating Service Credentials" description in the MindSphere Developer Documentation under the chapter "How Tos":
        https://developer.mindsphere.io/howto/howto-selfhosted-api-access.html

        Prerequisites:
        • MindAccess DevOps Plan - this is your MindSphere account (tenant)
        • Service Credentials for IoT Value Plan Tenants cannot be created, because a DevOps Plan is needed for developing purposes
        • mdsp:core:TenantAdmin role
        • Outbound Traffic Upgrade - this includes a data volume for consuming MindSphere services from outside of the MindSphere platform

        Creating Service Credentials:
        In order to create new or update existing service credentials, you have to make a service request to the MindSphere Support using a special template which can be found under:
        https://developer.mindsphere.io/howto/howto-selfhosted-api-access.html#creating-service-credentials

        With the release in January the Token Manager API will be released which allows customers to issue application (version) specific service credentials in the Developer Cockpit. For more information's, please check the MindSphere Release Notes and the Developer Cockpit documentation after the release.

      What are the most important Cloud Foundry CLI commands?

      How can I log into Cloud Foundry?

        Open a command line (CLI) and use the following command:

        cf login -a https://api.cf.eu1.mindsphere.io --sso

        To get the Temporary Authentication Code open the following URL in your browser and klick "Log in with WebKey":
        https://login.cf.eu1.mindsphere.io/passcode

        Login with your WebKey credentials (like you do for the Tenant login) and then paste the Temporary Authentication Code into the command line.

      How do I get access to my Cloud Foundry Org?

        When the Tenant is created, only the Tenant Owner will be assigned a role in the tenant and in the cloud foundry Org.
        The Tenant Owner will be the person that is officially named in the MindSphere contract as TenantAdmin.

        The Tenant Admin role and the cloud foundry role refer to two different accounts.

        The Tenant Owner is able to assign tenant admin role in the tenant to other users. In Cloud Foundry, like in the tenant, the Tenant Owner has to invite users and create Spaces and assign roles to the Org/Spaces.

        In order to get your role in cloud foundry, you need to contact the Tenant Owner.

        Please find here the documentation of how your Tenant Owner can add a new user to Cloud Foundry https://developer.mindsphere.io/paas/paas-cloudfoundry-howtos.html

      Why the invitation to Cloud Foundry failed with message: User could not be found?

        Prerequisites:
        You want to invite a new user to your MindSphere Cloud Foundry Organization (Org) with the command cf set-org-role and see the following error:

        FAILED:
        Server error, status code: 404, error code: 20003, message: The user could not be found: <Email address of the user>

        Solution:
        Please note the "Add a New User" description in the MindSphere "Cloud Foundry How Tos" documentation:
        https://developer.mindsphere.io/paas/paas-cloudfoundry-howtos.html#add-a-new-user

        Prerequisites for adding a new user:
        • The new user has access to a DevOps Plan.
        • The new user has logged into the Cloud Foundry once before (see Connecting to Cloud Foundry via CF CLI).

      Which IP addresses are there to access application server/firewall settings?

        The IP addresses for your firewall settings in order to enable access to your application server can be found here:

        https://developer.mindsphere.io/howto/howto-selfhosted-integration.html#testing-the-application
        Note that there can be temporary situations where the IP addresses provided are not reachable (e.g. in case of a fallback). Any permanent change will be updated in the documentation as provided above.

        The ip address mention in document is not sufficient
        35.156.223.10
        18.194.162.141
        18.194.195.179

        To obtain the access they added two more IP addresses, found them by checking the calls our PC , try to send data to mindsphere.
        35.157.214.208
        35.157.92.15

        Customer need to know whether the ipaddress he is using is robust and secured?
        Because these IP address (35.157.214.208
        35.157.92.15) is not documented anywhere?

      What is the general procedure for publishing an application when it comes to assets?

        Q: Does the application run directly at the customer in the IoT Value Plan or in the Operator Tenant?
        A: The application itself uses the resources assigned to it by the Operator Tenant.
        If an IoT Value Plan Tenant purchases a MindApp, it must be provisioned from the Operator to the IoT Tenant.
        In the last step, an IoT-Tenant admin must confirm this and grant the necessary authorizations to the persons who are authorized for the MindApp.

        Q: If it is running at the customer, is the asset also stored there?
        A: The assets are stored in the IoT-Tenant (although MindApp runs on the operator).
        MindSphere's validation process ensures that the respective customer data are treated confidentially and are not passed on to third parties.

        Q: Is the asset copied from the developer/operator to the IoT-tenant? Will the DataSource configurations / DataMappings be copied?
        A: The required assets can either be generated by authorized users of the IoT-tenant or by certain calls of the MindSphere API via the previously provisioned MindApp.
        We are currently working on a feature that allows mass DataSource configurations. More information will be available in future release notes.

        Q: Since the asset IDs are different, how are they distinguished? Aren't static IDs used during development?
        A: All necessary data for the exact association of a certain asset can be retrieved via the MindSphere API. This includes Assets, Asset Types, Aspects and Aspect Types.
        When developing applications, it is not recommended to use static IDs. The developers of MindApps decide which criteria are used to differentiate between them.

        Q: As a developer, how do I differentiate between assets when they are retrieved via the API?
        A: Developers have the option of identifying the assets based on various criteria.
        One of the possibilities is to generate the required asset structure including Aspect and Aspect Types at the first start of MindApp.
        Once this is done, the MindApps can search the asset structure for the required properties using simple queries in the program code.

      How to solve Mendix error "The given CockpitApplicationName Change%20me was not found in the provided authorization information"?

        The constant (CockpitApplicationName) must be set to the "Internal Name" of the app under which the app was registered in the Developer Cockpit. This can either be done directly in the app by overwriting the value or better than Cf environment variable via manifest:

        env:
        MX_MindSphereSingleSignOn_CockpitApplicationName: NAME_OF_THE_APP

        Configure App Name

      How to get support for Mendix apps on MindSphere?

      How to check if CF buildpacks support a specific version of a programming language?

        1. Login to MindSphere Cloud Foundry
        2. Check with the command "cf marketplace" which buildpacks currently supported
        3. Go to https://github.com/cloudfoundry and search for the specific CF buildpack version
        4. Under the chapter “Packaged binaries” you can find the information which programming language versions are supported within this CF buildpack.
        5. You can use ^ ~ inside the package.json file to install a compatible or similar version.

      Which Backing Service Type should I use for productive environment?

        Mindsphere recommends to use Backing Service M to use for productive environments. You have the following advantages:

        • More Harddisk/ more Memory
        • Redundancy
        • No downtime during updates in CloudFoundry

    Order

      How can I order a MindSphere Tenant?


        Dear Customer,

        you can inform yourself about options and possible Apps to order in our MindSphere Store https://store.mindsphere.io.


        If you have questions or you know what you want to order, please get in contact with your regional Siemens sales department for further information. Or you press the "Contact Us" Button in the Store. Your sales contact will then reach out to you and assist you with the order.

      How can I terminate a contract?

        Dear Customer,

        in general all MindSphere contracts have a designated Enddate. Therefore you do not wish to further extend your contract, it will automatically expire. Your tenant, will be deactived after expiration. After a deactivation period it will then be deleted.

        If you have further questions, please get in contact with your regional Siemens sales department for further information.
        Or if you do not know your Siemens sales contact, you can contact sales via the MindSphere Store https://store.mindsphere.io

    TAC

      How do I reset my password?

      How do I get a new activation link?

      How to provide Logfiles or Screenshots to the MindSphere Support Team?

        Log files or screenshots can be provide to the MindSphere Support Team by replying to the welcome email (IR Has Been Created) of the previously created support ticket.