:00Thu 24 Sep

System

Later · not in R1Neo 0018 · 0032 §16

Host settings edited in Janus: its name, certificate, time source, rack subnet and the networks phones reach it on.

Not in R1
In Neo the host belongs to the Janus Service CLI: Janus Core never changes the host’s networking, name or time.
R1 instead
A read-only mirror of the host on This server, with the Service CLI step beside it. Open System

About Health & snapshots

Health & snapshots shows this server, the site it serves, where each snapshot goes and who each health alert reaches.

The host

The server's name, certificate, time source, ports and addresses belong to the host. Plant IT changes them on this computer with the Janus Service CLI; this page shows what the host has.

Snapshots

Janus takes a snapshot every 15 minutes while the site is in use, reads it back on this host and copies it off the host. The newest verified snapshot and the pre-update snapshots of the last two updates are never pruned. Licence files are never in a snapshot.

A restore

Restoring a snapshot is a Janus Service CLI step a maintenance-group member runs. Janus then starts in recovery mode, and Recovery lists what to finish.

This server

Owner Gábor Szabó · plant IT

  • Name
    janus-smt-line2.local on the office network · DNS name not setIf this is wrong: .local names don’t cross networks. Set a DNS name before phones or handhelds use another network.
  • Certificate
    Trusted · the site’s own certificate, Danutek plant CAFor janus-smt-line2.local, 192.168.10.24 · valid to Fri 17 Sep 2027If it expires: phones can’t scan and stations show “Not a secure link”.
  • Time
    In sync · Europe/Budapest (CEST, UTC+02:00) · from ntp.danutek.local · off by 0.2 s · checked 14:31If this is wrong: receipts, shifts and the licence carry the wrong time.
  • Addresses
    Office en0 · 192.168.10.24/24 · fixed, set by Gábor Szabó Rack en5 · 192.168.0.253 · rack subnet 192.168.0.0/24 · no DHCP, no routing If they overlap: the rack subnet must not be used anywhere else in the plant.

Phone access

Phones need a secure link on a network the host serves Janus on. Who may scan with a phone is set per person in People.

This computerjanus-smt-line2
  • Office network en0 · 192.168.10.24OnPrivate network · stations, handhelds, phones and office PCs
  • Wi-Fi not connectedOffPublic network when connected
  • Rack network en5 · 192.168.0.253Racks onlyControllers only. Phones are never allowed here.
On a phone on the office network, open https://janus-smt-line2.local:8443 or https://192.168.10.24:8443 if the name does not work
2 phones paired
Change allowed networks
Allow phones on

Letters, numbers and hyphens. Phones reach it as janus-smt-line2.local.

Tick a network to change it.

Alerts

Faults and blocked work stay here until fixed. Notices can be cleared.

SR-02 is limited

Bence Tóth is on itsince 09:41 · 4 h 51 min14:30 installation map v4 drafted by Dávid Horváth under permit · waiting to be applied

Tier 3, bays 1–16 are Unknown. Blocks 2 take-outs for WO-260714-09 and hides 310 pcs of PN-QFN32-MCU7. The rest of SR-02 works.

Troubleshoot SR-02Stays until fixed

Label not recognised

A Würth Elektronik label matched no code rule.

Add label rule

Put-in not finished

Reel R-2026-0109 is waiting for the sensor at SR-01-T4-L31: finish putting it in, or cancel.

Continue put-in

Counter ReelSave is failing

Owner: line counter vendorsince 13:48

12 messages waiting. SMT Line 2 counters don't know about reels taken out since 13:48.

Open Integrations

Snapshot taken · 14:30

Verified · off-host copy 14:30. Snapshots every 15 min while Janus is busy.

Choose working rack

Scans and bay lights on this station use the working rack. Opening another rack never switches it.

Racks

Help

What the words mean

Language

Applies to this station only. Records keep the words they were written in.

Create diagnostics bundle

Preview every part first. Saved under exports\diagnostics; sending is a separate step.

What goes in the file

Exact contents · 6 files · 70 KB

Support file contents
FileSizeSHA-256
health/health.json4.1 KB9f2c…a41e
health/jobs.json7.9 KB1b07…c3d2
racks/controllers.json18.4 KBe6aa…0917
racks/self-test.json22.0 KB74d1…5bb8
racks/sensor-gaps.json16.2 KB cut at 64 KB30fe…d6c1
manifest.json1.4 KBc8e0…2f7a

Left out: secrets (passcodes, badge codes, API keys, the recovery code), barcode contents and claimed-operator values. People appear as stable pseudonyms (P-07).

Before installing Janus

Pre-flight sheet for plant IT · print it before install day

What Janus needs and what it is set to
ItemJanus needs
Server
ComputerWindows 11 or Windows Server 2019–2025, 4 cores, 8 GB memory, disk for snapshots, on a UPS
PortsTwo wired ports: office network and a rack switch (isolated is recommended)
Office addressA fixed address on the office network
Rack networkIts own subnet, used nowhere else · no DHCP, no routing · set with the Janus Service CLI
Name, certificate, time
NameA DNS name if phones or handhelds use another network
CertificateThe Janus site CA the Service CLI creates, or the site’s own certificate
TimeAn NTP server this computer can reach
Accounts and devices
Off-host snapshotsA network folder and a dedicated share credential (never the host’s computer account), or the host’s own tooling pulls the copy
MES loginRead-only SQL login
HandheldsWi-Fi that reaches the office network · MDM for the enrolment QR
StationsA kiosk browser opening Janus with the station’s pairing code
MonitoringOptional: poll the health address, receive syslog

Firewall

Firewall openings
DirectionHostPortFor
InFrom office networks8443/tcpStations, handhelds, phones
Outsmtp.danutek.local587/tcpAlert email
Outsms-gw.danutek.local443/tcpAlert SMS
Outfileserver445/tcpOff-host snapshots
Outntp.danutek.local123/udpTime
Outsap-gw.danutek.local443/tcpSAP goods receipt
Outmes-sql011433/tcpMES work orders
Out10.20.0.59443/tcpLine counter
Racken5 only502/tcpRack controllers, Modbus

IT handover sheet

Read from janus-smt-line2 at 14:32 · owner Gábor Szabó, plant IT

What Janus needs and what it is set to
ItemJanus needsSet to now
Server
ComputerWindows 11 or Windows Server 2019–2025, 4 cores, 8 GB memory, disk for snapshots, on a UPSWindows Server 2022 · 212 GB free · on UPS
PortsTwo wired ports: office network and a rack switch (isolated is recommended)en0 office · en5 rack, switch port P24
Office addressA fixed address on the office network192.168.10.24/24
Rack networkIts own subnet, used nowhere else · no DHCP, no routing · set with the Janus Service CLI192.168.0.0/24 · server 192.168.0.253
Name, certificate, time
NameA DNS name if phones or handhelds use another networkjanus-smt-line2.local · DNS name not set
CertificateThe Janus site CA the Service CLI creates, or the site’s own certificateDanutek plant CA · to Fri 17 Sep 2027
TimeAn NTP server this computer can reachntp.danutek.local · off by 0.2 s
Accounts and devices
Off-host snapshotsA network folder and a dedicated share credential (never the host’s computer account), or the host’s own tooling pulls the copy\\fileserver\smt\janus · dedicated share credential
MES loginRead-only SQL loginjanus_mes_read on mes-sql01
HandheldsWi-Fi that reaches the office network · MDM for the enrolment QRPDA-03, PDA-04 enrolled
StationsA kiosk browser opening Janus with the station’s pairing codeStation SMT-1, Station SMT-2
MonitoringOptional: poll the health address, receive syslog/health · syslog off

Firewall

Firewall openings
DirectionHostPortForNow
InFrom office networks8443/tcpStations, handhelds, phonesOpen
Outsmtp.danutek.local587/tcpAlert emailWorking
Outsms-gw.danutek.local443/tcpAlert SMSWorking
Outfileserver445/tcpOff-host snapshotsWorking
Outntp.danutek.local123/udpTimeWorking
Outsap-gw.danutek.local443/tcpSAP goods receiptWorking
Outmes-sql011433/tcpMES work ordersWorking
Out10.20.0.59443/tcpLine counterRefused since 13:48
Racken5 only502/tcpRack controllers, Modbus4 controllers

Handover: Gábor Szabó to Eszter Szabó. Owners, expiry dates and the open item above print with the sheet.

Set up a phone

For people allowed to scan with a phone. Handhelds enrol in Equipment.

  1. Join the office networkWired office network or the office Wi-Fi. Never the rack network.
  2. Open JanusScan the QR on this page, or type https://janus-smt-line2.local:8443.
  3. Trust the certificate, onceOnly on phones that don’t already trust the Danutek plant CA, such as personal phones. The trust profile installs the plant CA; it is valid to Fri 17 Sep 2027.
Download trust profile

Paired phones

  • Dávid Horváth’s phone
    Paired 14:19 · Danutek technician account
  • Bence Tóth’s phone
    Paired Mon 22 Sep · last used 14:05

Replace certificate

The current certificate stays in use until the new one is checked.

How

Add the DNS name here once it is set.

Then: stations and phones reconnect within 1 min. Phones without the plant CA need the new trust profile.

Set a DNS name

Ask IT for an A record pointing at 192.168.10.24 first.

Janus checks that the name resolves to this computer before saving.

Then: the phone QR, links and the certificate request use this name. .local keeps working on the office network.

Time source

Stations and handhelds take their time from this computer.

Then: receipts made from now use the new clock. Past receipts keep their time.

Change the rack subnet

4 controllers are in service on 192.168.0.0/24.

192.168.10.0/24 is the office network on en0. Choose another.

Then: a planned re-address. Janus moves one controller at a time, each rack is Limited for about 1 min, and Eszter Szabó approves each step as the second key.

Allow phones on a Public network?Turn off phone access?Change phone access?

Any device on Wi-Fi will be able to open the Janus sign-in page. Stations and phones still need a passcode.Only this computer will reach Janus. Stations and phones elsewhere disconnect.Phones follow the networks below from now on.

Office network · 192.168.10.24
On · unchangedwas On now Off
Wi-Fi · Public network
was Off now OnOff · unchanged
Name
janus-smt-line2.local

Prototype

Health & snapshots · System

Preview stateHost settings edited in Janus

Later · not in R1

View as

This page

Purpose
The site in miniature, snapshots and the off-host copy, the site transition.
Release
R1
First viewport
1 primary · 1 notice · 3 blocks