Using The Display To Set Additional Password Protection; Using The User Program To Set Additional Access Protection - Siemens SIMATIC S7-1500 System Manual

Protection

11.5 Using the display to set additional password protection

11.5 Using the display to set additional password protection
Blocking access to a password-protected CPU
You can block access to password-protected CPUs (local password block) on the CPU display.
The block is effective if the mode selector is set to RUN.
The access block requires a configured protection level in STEP 7 and applies regardless of
password protection. Even if someone accesses the CPUs via a connected PG/PC and has
entered the correct password, access to the CPUs is denied.
Set the access block separately for each access level on the display.
The backup CPU takes over the settings during SYNCUP. Changes to the access block for
primary CPU or backup CPU in RUN-Redundant system state are also applied to the other CPU.
Procedure
If you want to block access to the CPUs via the display, you need to configure an access level
with a password in STEP 7.
If you set local access protection for the CPUs on the display, the block applies to both CPUs in
the RUN-Redundant system state. Proceed as follows:
1. On the display, select the Settings > Protection menu.
2. Confirm your selection with "OK". For each access level, specify whether or not access in the
RUN operating state is allowed:
– Allow: Access to the CPUs is possible with the right password in STEP 7.
– Deactivated in RUN: If the mode selector is set to RUN, no additional logon to the CPUs
Access protection for the display
Configure a password for the display in STEP 7 in the properties of the CPU. This protects local
access protection with a local password. Each R/H-CPU allows individual settings for the
access protection of the display.
11.6

Using the user program to set additional access protection

Access protection with the user program
In addition to access protection via the display, you have another option. You can also restrict
access to a password-protected CPU using the ENDIS_PW instruction in STEP 7.
You can find more information on this instruction in the STEP 7 online help under "ENDIS_PW:
Limit and enable password legitimation".
354
is possible with the rights of this access level. Access is denied despite the fact that the
user knows the password. If the operating mode switch is in the STOP position, then
access with the password is enabled again.
S7-1500R/H redundant system
System Manual, 01/2024, A5E41814787-AF