Failover procedure and manual switchover procedure between PSS and SSS

If the connection between SSS and PSS is lost or the management system fails completely, all drivers and control managers hierarchized on the active secondary system server are started and the secondary system thus becomes the management system. This idle time between the individual steps is configurable via the configuration wizard. In addition, the driver activates a general query.

On the workstation:

• In case of 2 WinCC OA UIs -> the user interface of the activating (secondary) system is switched to the foreground, so that the operation of the system remains possible without major interruption.
• In case of 1 WinCC OA UI -> the user interface of the primary system loses the connection in case of total failure and the user starts the user interface of the secondary system via a second program job.

The same actions are also carried out if manually switched from the PSS to the SSS.

Fallback procedure

When the failed system resumes normal operating mode, a full synchronization of online data and alert status is performed between the two systems.