Provisioning in a mixed AX/N4 or N4.x network

For a number of reasons, including the increased emphasis on security in Niagara 4, limitations apply in installations where hosts running AX-3.8 and others running Niagara 4 share the same network. Provisioning job steps continue to be added to Niagara 4, and may not always be backward-compatible with previous versions.

Be aware that:

  • The Niagara 4.7 Supervisor can provision the AX-3.8 station using these steps: Backup Stations, Copy Supervisor File, Install Software, Update Licenses, Set Time, and Reboot.

  • The AX-3.8 Supervisor cannot provision Niagara 4 stations.

  • Niagara 4 provisioning robots do not run on AX-3.8 stations.

  • Component and device templates can be provisioned to stations running Niagara 4.6 and later

  • Application templates can be provisioned to stations running Niagara 4.7 and later

  • In Niagara 4.7 and later, provisioning no longer runs most job steps against a remote station if default platform credentials or default system passphrase are detected on the station. In that situation, only those steps that set platform credentials or set system passphrase will run.

The table below shows the general backwards compatibility of provisioning steps run on a Niagara 4.9 Supervisor against stations running prior Niagara versions. Certain steps have some restrictions listed in the numbered notes following the table.

Job Step NiagaraVers. Available AX Support Legacy Niagara 4 Support Fox/Plat
Enable Bootstrap Mode 4.7 Yes Yes Both
Update Connections Using Niagara Network Discovery 4.7 N/A Yes 4.7 (9) Both
Update Connections Using Provisioning Station's DHCP Server 4.7 N/A Yes 4.7 (9) Both
Update Licenses AX/4.0 No (1) No 4.4 (1) Plat
Add Station User 4.8 No Yes Both
Backup Stations AX/4.0 Yes Yes Both
Configure Niagara IdP and SAML Scheme 4.9 N/A Yes 4.4 (6) Both
Copy Local File AX/4.0 Yes Yes Both
Copy Supervisor File AX/4.0 Yes Yes Both
Deploy Template 4.6 N/A Yes 4.6 Both
Export Certificate Signing Request 4.7 No Yes Both
Generate Certificate 4.6 No Yes Plat
Import Signed Certificate 4.6 No Yes Both
Install Application Template 4.7 N/A Yes 4.7 Plat
Install Software AX/4.0 Yes (2) Yes (5) Both
Reboot AX/4.0 Yes Yes Plat
Remove Station User 4.8 Yes Yes Both
Rename Device Station 4.7 Yes (4) Yes Plat
Run Robot AX/4.0 No Yes Both
Security Job Steps 4.7 N/A Yes Both
Set Certificate Alias 4.6 No Yes Both
Set Platform Credentials 4.6 N/A Yes Plat
Set Platform User Password 4.12 No Yes Plat
Set Property 4.8/4.9 Yes Yes Both
Set Station Connection Credentials 4.8 Yes Yes N/A
Set Station User Password 4.7 No Yes (8) Both
Set System Passphrase 4.6 N/A Yes Plat
Set TLS Level 4.6 No Yes Both
Set Time 4.7 Yes (3) Yes Both
Setup Reciprocal Connection 4.6 No Yes Both
Sign Certificate 4.6 No Yes Plat
Update Template or Application Configuration 4.9 N/A Yes 4.6 (7) Both
Upgrade Application Template 4.9 N/A Yes 4.7 Both
Upgrade Out-of-date Software AX/4.0 Yes (2) Yes Both
Upgrade Template 4.6 N/A Yes 4.6 Both

  1. This is prevented from running as expected. This is being addressed.

  2. Yes, provided the AX software modules are available under the !sw folder of the Supervisor and a reboot of the remote AX host is required.

  3. NTP Host Mode is not a supported property in AX and is ignored.

  4. An AX station cannot be restarted after being stopped without a host reboot step or manual reboot.

  5. Yes, provided the legacy Niagara 4 software modules are available under the !sw folder of the Supervisor.

  6. Requires the saml and samlEncryption modules installed on the remote host. You must add the station to desired the circle of trust under the SAMLIdPService.

  7. Update Template Configuration is available for Niagara 4.6 and later. Application Templates are available from version Niagara 4.7 and later.

  8. A Niagara 4.8 Supervisor works against Niagara 4.6 and later. A Niagara 4.9 Supervisor only works against Niagara 4.6.

  9. Intended for use on aJACE-9000 acting as a Supervisor for connected Edge devices.