Protection
8.3 Using the display to set additional password protection
S7-1500R/H redundant system
172
System Manual, 10/2018, A5E41814787-AA
8.3
Using the display to set additional password protection
Blocking access to a password-protected CPU
You can block access to password-protected CPUs (local password block) on the CPU
display. The block is effective if the mode selector is set to RUN.
The access block requires a configured protection level in STEP 7 and applies regardless of
password protection. Even if someone accesses the CPUs via a connected PG/PC and has
entered the correct password, access to the CPUs is denied.
Set the access block separately for each access level on the display.
The backup CPU takes over the settings during SYNCUP. Changes to the access block for
primary CPU or backup CPU in RUN-Redundant system state are handled by the other
CPU.
Procedure
If you want to block access to the CPUs via the display, you need to configure an access
level with a password in STEP 7.
If you set local access protection for the CPUs on the display, the block applies to both
CPUs in the RUN-Redundant system state. Proceed as follows:
1.
On the display, select the Settings > Protection menu.
2.
Confirm your selection with "OK". For each access level, specify whether or not access in
the RUN operating state is allowed:
–
Allow: Access to the CPUs is possible with the right password in STEP 7.
–
Disabled in RUN: If the mode selector is set to RUN, no additional logon to the CPUs
is possible with the rights of this access level. Access is denied despite the fact that
the user knows the password. Access with the password is enabled again in the
STOP operating state.
Access protection for the display
Configure a password for the display in STEP 7 in the properties of the CPU. This protects
local access protection with a local password.
8.4
Using the user program to set additional access protection
Access protection with the user program
There is another option in addition to access protection via the display. You can also restrict
access to a password-protected CPU using the ENDIS_PW instruction in STEP 7.
You can find more information on this instruction in the STEP 7 online help under
"ENDIS_PW: Limit and enable password legitimation".
Summary of Contents for Simatic S7-1500H
Page 1: ......