Siemens Simatic S7-1500 / ET 200MP - Using the Display to Set Additional Password Protection; Using the User Program to Set Additional Access Protection

Protection
10.4 Using the display to set additional password protection
Automation system
System Manual, 01/2023, A5E03461182-AK
229
10.4 Using the display to set additional password protection
Blocking access to a password-protected CPU
On the display of an S7-1500 CPU, you can block access to a password-protected CPU (local
block of the password). If the mode selector is set to RUN, the block is effective.
The access block requires a configured protection level in STEP 7 and works independently of
the password protection. This means that even if someone accesses the CPU via a connected
programming device and has entered the correct password, access to the CPU remains
disabled.
The access block can be set separately for each access level on the display. Then, for example,
the read access is allowed locally, but the writing access is not allowed locally.
Procedure
If you want to block access to the CPU via the display, you need to configure an access level
with a password in STEP 7.
When you set the local access protection for an S7-1500 CPU on the display, proceed as
follows:
1. On the display, select Settings > Protection menu.
2. Confirm the selection using "OK", and configure for each access level, whether access at the
RUN mode selector switch is allowed or not:
– Allow: Access to the CPU is possible with the corresponding password in STEP 7.
– Deactivated in RUN: If the mode selector is set to RUN, no additional logon to the CPU
is possible with the rights of this access level. Access is denied despite the fact that the
user knows the password. Access with the password is enabled again in the STOP
operating state.
Access protection for the display
Configure a password for the display in STEP 7 in the properties of the CPU. This protects local
access protection with a local password.
10.5 Using the user program to set additional access protection
Access protection by means of the user program
In addition to access protection via the display, you have another option. You can also restrict
access to a password-protected CPU using the ENDIS_PW instruction in STEP 7.
You can find more information on this instruction in the STEP 7 online help under "ENDIS_PW:
Limit and enable password legitimation ".