Managing gateways
You can use the AWS IoT SiteWise console, API operations, or the AWS OpsHub for AWS IoT SiteWise application to manage gateways.
We highly recommend that you use the AWS OpsHub for AWS IoT SiteWise application to monitor the disk usage on your gateway device. Make sure that your device has enough space for upcoming data. When you're about to run out of space on your gateway device, the service automatically deletes a small amount of data with the oldest timestamps to make room for upcoming data.
To check if the service deleted your data, do the following:
-
Sign in to the AWS OpsHub for AWS IoT SiteWise application.
-
Choose Settings.
-
For Logs, specify a time range, and then choose Download.
-
Unzip the log file.
-
If the log file contains the following message, the service deleted your data:
number
bytes of data have been deleted to prevent gateway storage from running out of space.
Managing gateways using AWS OpsHub for AWS IoT SiteWise
You use the AWS OpsHub for AWS IoT SiteWise application to manage and monitor your gateways. This application provides the following monitoring and management options:
-
Under Overview, you can do the following:
-
View gateway details that help you get insights into your gateway device data, identify issues, and improve the gateway's performance.
-
View SiteWise Monitor portals that monitor the data from local servers and equipment at the edge. For more information, see What is AWS IoT SiteWise Monitor in the AWS IoT SiteWise Monitor Application Guide.
-
-
Under Health, there's a dashboard that displays data from your gateway. Domain experts, such as process engineers, can use the dashboard to see an overview of gateway behavior.
-
Under Assets, view assets deployed to the gateway device and the last value collected or computed for asset properties.
-
Under Settings, you can do the following:
-
View the gateway configuration information and sync resources with the AWS Cloud.
-
Download the authentication files that you can use to access the gateway by using other tools.
-
Download logs that you can use to troubleshoot the gateway.
-
View the AWS IoT SiteWise components deployed to the gateway.
-
Your gateway device and the AWS OpsHub application must be connected to the same network.
To manage gateways using AWS OpsHub
-
Download and install the AWS OpsHub for AWS IoT SiteWise for Windows
application. -
Open the application.
-
You can sign in to your gateway with your Linux or Lightweight Directory Access Protocol (LDAP) credentials. To sign in to your gateway, do one of the following:
Managing your gateway with the AWS IoT SiteWise console
You can use the AWS IoT SiteWise console to configure, update, and monitor all gateways in your AWS account.
You can view your AWS IoT SiteWise gateways by navigating to the Gateways page in the AWS IoT SiteWise console. The AWS IoT SiteWise console provides the following monitoring and management options:
-
Update data source configuration and configure additional data sources
-
View the number of data points ingested per data source
-
Add data packs to your gateway
-
View the connectivity status of your gateways
-
View the gateway sync status of resources and configuration changes
Accessing your gateway using local operating system credentials
Besides Lightweight Directory Access Protocol (LDAP), you can use the Linux or Windows credentials to access your gateway.
To access your gateway with Linux credentials, you must activate the data processing pack for your gateway.
The following steps assume that you use a device with Ubuntu. If you use a different Linux distribution, consult the relevant documentation for your device.
To create a Linux user pool
-
To create an admin group, run the following command.
sudo groupadd --system SWE_ADMIN_GROUP
Users in the
SWE_ADMIN_GROUP
group can allow admin access for the gateway. -
To create a user group, run the following command.
sudo groupadd --system SWE_USER_GROUP
Users in the
SWE_USER_GROUP
group can allow read-only access for the gateway. -
To add a user to the admin group, run the following command. Replace
user-name
andpassword
with the user name and password that you want to add.sudo useradd -p $(openssl passwd -1
password
)user-name
-
To add a user to either
SWE_ADMIN_GROUP
orSWE_USER_GROUP
, replaceuser-name
with the the user name that you added in the previous step.sudo usermod -a -G SWE_ADMIN_GROUP
user-name
You can now use the user name and password to sign in to the gateway on the AWS OpsHub for AWS IoT SiteWise application.
The following steps assume that you use a device with Windows.
Security is a shared responsibility between AWS and you. Create a strong password policy with at least 12 characters and a combination of uppercase, lowercase, numbers, and symbols. Additionally, set the Windows Firewall rules to allow incoming traffic on port 443 and to block incoming traffic on all other ports.
To create a Windows Server user pool
-
Run PowerShell as the administrator.
-
On the Windows server where you want to install Sitewise Edge Gateway, log in as administrator.
-
Enter PowerShell in the Windows search bar.
-
In the search results, right click on the Windows PowerShell app. Choose Run as Administrator.
-
-
To create an admin group, run the following command.
net localgroup SWE_ADMIN_GROUP /add
You must be a user in the
SWE_ADMIN_GROUP
group to allow admin access for the gateway. -
To create a user group, run the following command.
net localgroup SWE_USER_GROUP /add
You must be a user in the
SWE_USER_GROUP
group to allow ready-only access for the gateway. -
To add user, run the following command. Replace
user-name
andpassword
with the user name and the password that you want to create.net user
user-name password
/add -
To add a user to the admin group, run the following command. Replace
user-name
with the user name that you want to add.net localgroup SWE_ADMIN_GROUP
user-name
/add
You can now use the user name and password to sign in to the gateway on the AWS OpsHub for AWS IoT SiteWise application.
Managing the gateway certificate
You can use SiteWise Monitor and third-party applications, such as Grafana, on your gateway devices. These applications require a TLS connection to the service. Gateways currently use a service-signed certificate. If you use a browser to open the applications, such as a SiteWise Monitor portal, you might receive a warning for untrusted certificate.
The following shows how to download the trusted certificate from the AWS OpsHub for AWS IoT SiteWise application.
-
Sign in to the application.
-
Choose Settings.
-
For Authentication, choose Download certificate.
The following assumes that you use Google Chrome or FireFox. If you use a different browser, consult the relevant documentation for your browser. To add the certificate that you downloaded in the previous step to a browser, do one of the following:
-
If you use Google Chrome, follow the Set up certificates
in the Google Chrome Enterprise Help documentation. -
If you use Firefox, follow the To Load the Certificate into the Mozilla or Firefox Browser
in the Oracle documentation.