[05] - TwinCAT HMI Setup Guide

Overview

A TwinCAT HMI deployment has two distinct components: the Engineering side (where the HMI project is developed) and the Server/Runtime side (where the HMI is hosted and served to clients). Both require their own software installation and firewall configuration.

---

Engineering Setup

On the engineering PC, open the TwinCAT Package Manager and install:

This package provides the HMI development environment within Visual Studio, allowing you to design screens, configure symbols, and publish the project to a runtime server.

On the engineering side, in Package Manager, make sure that TE2000 | TwinCAT 3 HMI Engineering is installed

 

Runtime

---

Server (Runtime) Setup

On the machine that youwill wanthost and serve the serverHMI to(this may be hostedthe on,IPC/PLC initself or a separate server), open the TwinCAT Package Manager,Manager installand TF2000 | TwinCAT 3 HMI Serverinstall:

This is the runtime component that serves the HMI to connected clients via a browser or dedicated client application.

Firewall Setup

Configuration

Firewall changesrules maymust be necessaryconfigured in two places: on the engineering PC and on the IPC/server machine. Without the correct ports open, communication between the engineering tool, the HMI server, and clients will fail.

ADS Communication Ports

These ports are required for ADS (Automation Device Specification) communication between TwinCAT components. Ensure they are open on the relevant machines:

HMI Server Communication Ports

The following connections must be permitted through the firewall:

• 48898Engineering ADS→ TCPServer: The engineering PC must be able to reach the HMI server to publish projects and manage the runtime.
• 48899Client ADS→ UDP
Server:
• 8016Clients Secure(browsers ADSor TCP
HMI

client

Firewallapps) changedmust needbe able to allowreach communication withthe HMI Server

server on its listening port.

• EngineeringDefault toport Server
is 
• Client2010 to Server
  • 1010(HTTP) or 10202020 by default(HTTPS).

Important - IPC Whitelist: If the HMI server is hosted on a Beckhoff IPC, the IPC's built-in firewall must explicitly whitelist the HMI server's port (1010 or 1020). The IPC firewall is managed separately from the Windows firewall and will block incoming connections to the HMI server by default if the port is not added to its allowed list.