What You'll Deploy

A typical enterprise deployment has three layers:

• Runtime server — one Windows Server machine that runs the solution (tags, alarms, historian, scripts) as a Windows Service. This is the core of any deployment.
• Client stations — operator workstations running the Rich Client (WPF), or users accessing the solution through web browsers (HTML5/WebAssembly).
• Integration points — PLCs, databases (SQL Server, Oracle, PostgreSQL), historian storage, and optionally MQTT brokers, OPC UA servers, or cloud endpoints.

For architecture context and sizing, see Platform Architecture Reference and Deployment Scenarios.

Other deployment modes (Linux, Docker/Kubernetes, edge devices, mobile clients) are supported but outside the scope of this runbook. See the links in section 10 below.

1. Plan

Before installing, decide:

• Runtime placement — dedicated server (recommended) or shared application server. The runtime is a single executable plus supporting services.
• Service account — a domain service account (preferred) or Local System. Domain accounts allow auditing and controlled access to network resources, databases, and file shares.
• Historian database — built-in SQLite (small deployments), external SQL Server / PostgreSQL / Oracle (typical), or time-series databases (InfluxDB, TimescaleDB).
• Ports and firewall — see the Network Ports section below. Open only what you need, inbound only where required.
• License model — per-server licensing with online or offline activation. See Licensing Procedures Reference.
• High availability — optional runtime redundancy (primary/secondary). See Redundancy Reference.

2. Install

Prerequisites

• Windows Server 2019 or later (Windows 10 / 11 for small deployments)
• .NET Framework 4.8 (included in Windows 10+)
• .NET 8 runtime (required for cross-platform runtime, AI integration, and DataHub)
• Visual C++ 2015-2022 Redistributable (bundled with the installer)
• Administrator rights on the target machine

Interactive install

Run the signed installer and follow the wizard. Default install location is C:\Program Files\Tatsoft\FrameworX\. Full step-by-step reference: Installation and Licensing Reference.

Silent / unattended install

The installer is an Inno Setup package and supports standard silent switches for SCCM, Intune, PowerShell DSC, Ansible, or any deployment pipeline:

Start-Process -FilePath "FrameworX-10.1.5-Setup.exe" `
  -ArgumentList "/VERYSILENT", "/SUPPRESSMSGBOXES", "/NORESTART", `
                "/LOG=C:\Logs\frameworx-install.log", `
                "/DIR=C:\Program Files\Tatsoft\FrameworX" `
  -Wait -PassThru

Common switches:

Install exit codes:

File-copy install (.NET 8 runtime only)

The .NET 8 runtime can also be deployed by copying the installation folder. Useful for portable deployments, custom update pipelines, and locked-down environments where MSI-style installs are blocked. See Runtime Installation Reference.

3. Configure

Install folders

Standard install layout:

Full layout reference: Installation Folders and Utilities Reference.

Run the runtime as a Windows Service

For production, the runtime should run as a Windows Service so it starts automatically with the machine, survives user logouts, and is managed through standard Windows tooling (sc.exe, Services.msc, Get-Service).

Service install options:

• Designer UI — Solution Center has a button to install the runtime as a service
• Command-line — scripted install with elevated PowerShell (see Runtime Startup Reference)

Run the service under a dedicated domain account where possible. The account needs:

• Log on as a service
• Read access to the solution folder
• Write access to log and data directories
• Network access to PLCs, databases, MQTT brokers, and OPC UA servers as required by the solution

Web server configuration

Web client, REST endpoints, and runtime HTTP services are hosted by the built-in web server. Configure ports, TLS certificates, and optional reverse-proxy routing as described in Web Server Configuration Reference.

Licensing

Online activation is used for internet-connected servers. Offline activation (license file transfer) is supported for air-gapped networks. See Licensing Procedures Reference.

Network ports

Typical enterprise deployment ports:

Default runtime and web ports are configurable. Exact values depend on solution configuration — see Runtime Startup Reference and Server Configuration Reference.

4. Monitor

Log locations

The runtime writes trace logs by default to C:\Users\Public\Documents\FrameworX\TraceLogs\. New installs can use C:\ProgramData\Tatsoft\FrameworX\Logs\ instead — recommended for enterprise deployments because it matches Windows conventions for operational data and is automatically scanned by most log-collection agents (Splunk forwarder, Datadog agent, Azure Monitor, ELK).

Install logs are written to the path specified by /LOG= during silent install, or to %TEMP%\Setup Log YYYY-MM-DD.txt for interactive installs.

Windows Event Log

Service lifecycle events (start, stop, unexpected shutdown, license failure) are written to the Windows Application event log under source FrameworX. Use this channel for integration with SCOM, Azure Monitor, Datadog, or any Windows-native monitoring tool.

Runtime System Monitor

The built-in System Monitor exposes live metrics on tags, modules, memory, and client sessions. See Runtime System Monitor Reference and Runtime Diagnostics Reference.

5. Update & Rollback

Updates within the same major version (e.g. 10.1.5 to 10.1.6) can be applied by running the newer installer over an existing installation. The installer supports side-by-side versioning with rotation, so a minor update can be rolled back by re-running the previous installer. Full semantics: Managing Updates and Multiple Versions Reference.

Before updating a production server:

• Back up the solution folder (C:\Users\Public\Documents\FrameworX\Solutions\)
• Back up the historian database (if external)
• Stop the runtime service gracefully
• Run the installer with silent switches
• Start the service and verify via System Monitor and Event Log

6. Uninstall

Uninstall from Programs & Features or silently:

"C:\Program Files\Tatsoft\FrameworX\unins000.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART

The uninstaller removes the installed executables, the Windows Service registration, and the registry entries. User content under C:\Users\Public\Documents\FrameworX\ is preserved — remove manually if you want a fully clean uninstall.

7. Secure

Production deployments should follow the hardening checklist. Topics include TLS configuration, authentication (local users, Windows authentication, Active Directory), role-based access control, secrets storage, audit logging, and network segmentation.

• Security Hardening Reference — detailed procedures
• Security Hardening Compliance How-to — step-by-step hardening guide
• IEC 62443 Compliance How-to — industrial cybersecurity standard
• NERC-CIP Compliance How-to — critical infrastructure
• FDA 21 CFR 11 Compliance How-to — regulated industries

8. Automate

Typical automation patterns:

• SCCM / Intune — package the silent installer as an application deployment with the switches shown in section 2. Use exit code 3010 as a soft-reboot signal.
• PowerShell DSC / Ansible / Chef — wrap Start-Process with the silent switches and check exit codes.
• Solution deployment — copy the .dbsln solution file to the target server's Solutions folder, then start the runtime service. Solutions are self-contained.
• Bulk uninstall — call unins000.exe with silent switches across a fleet.

9. Troubleshoot

Deep reference: Runtime Troubleshooting Reference.

When opening a support ticket, collect: Event Log entries (Application log, source FrameworX), the most recent TraceLog file, the install log, the output of Get-Service for the runtime service, and the solution build number.

10. Other Deployment Modes

This runbook focuses on typical enterprise Windows Server deployments. Other modes are supported — see the dedicated references:

• Container Deployment Reference — Docker and Kubernetes
• Linux Deployment Reference — .NET 8 on Linux servers and edge devices
• Redundancy Reference — primary/secondary runtime pairs
• SecureGateway Services Reference — multi-site communication routing
• Mobile App — mobile client deployment