3.21.6

Patches for WinCC OA are more than just bug fixes. 

Continuous feature integration makes it possible to implement enhancements in several different categories into our product. To keep your software up to date, make sure to download and install the newest patch. 

Security

  • Qt has been updated to version 6.8.8 to fix multiple vulnerabilities.
  • The bundled Node.js runtime has been updated to version 22.23.2 to address multiple vulnerabilities (July 2026 security releases).
  • OpenSSL has been updated to version 3.5.8 to fix a remote denial-of-service vulnerability.

UI

  • A new config entry useWindowsScaleFactor in the [ui] section allows the UI to use the exact Windows display scaling factor instead of the previous rounding behavior. See Scaling for details.
  • The Security Events configuration panels now show a warning after saving, indicating that the configuration file is stored locally on the client and must be copied manually to other projects of the same system (e.g. redundant server, remote UI projects).
  • The -fixedUiLicense manager option has been renamed to -useUUIDlabel to better reflect its purpose. For compatibility, -fixedUiLicense continues to work up to and including version 3.21.
  • The layer and the display order (z-order) of shapes can now be changed at runtime. For details, see The Layer window (layer settings).

Alarming

  • The AlertService now supports distributed systems (DIST). Alarm shelving, suppression, and out-of-service configuration are available for alerts originating from distributed systems, giving engineers a complete environment overview.

Web Server

  • The new config entry [webserverjs] httpPort allows webserver.js to additionally listen for unencrypted HTTP connections on a separate port. The plain HTTP listener runs simultaneously with the HTTPS listener and serves the same routes. With the default value 0 the entry is disabled. WSS connections (Node-RED and Dashboard) remain supported via httpsPort only. For details, see Port Configuration.

Virtualization

  • WinCC OA is architecturally hypervisor-agnostic and is now officially supported on Microsoft Hyper-V (Windows 11 Enterprise, Windows Server 2022/2025) as an additional reference-tested virtualization platform, alongside Proxmox VE, Nutanix AHV, and VMware ESXi/vSphere.
  • Other virtualization platforms (e.g. Red Hat KVM, OpenShift Virtualization) are supported as well, provided they offer equivalent virtual CPU, memory, network, and storage abstractions and comply with the documented WinCC OA system requirements. For details on supported platforms and issue handling, see Virtual Environment Support.

S7Plus Driver

  • The S7Plus driver now supports tags whose names contain a dot ("." ) or other special characters allowed by the TIA portal. Previously, a dot in a tag name caused an error when browsing or addressing the PLC because the dot was interpreted as a hierarchy separator in the reference string. For details, see Definition of peripheral addresses for the S7Plus driver.

GEDI

  • The bundled astyle code beautifier used by the Script Editor was upgraded to version 3.6.18. This introduces incompatible command-line changes compared to the previous version: the style aliases bsd, break, k&r, k/r, knf, run-in, otbs, and banner were removed, and the short option for --attach-extern-c changed from -xk to -xa. Custom "astyle.config" files using these aliases must be adapted. For all available options, see the astyle website linked above. For further details, see Reference of the Native GEDI.

Dashboard

  • The Dashboard component has been updated to version 2.0.1. This update includes functional improvements as well as security updates.

Miscellaneous

  • The vimaccOA plugin has been updated to version 2.2.14.17.

The patch is available for download on the SIMATIC WinCC Open Architecture World: https://www.winccoa.com/downloads/category/wincc-oa-321.html

Support & Services

Please refer to our support page for more details on Basic Support, Extended Services and Training.