Siemens SIMATIC S7-400H System Manual page 78

Special functions of a CPU 41x-H
6.1 Security levels
CPU function
Forcing
Updating the firmware without a
memory card
Setting the security level with SFC 109 "PROTECT"
You can set the following security levels on your CPU with SFC 109:
● SFC 109 call with MODE=0: Setting of security level 1. The SFC 109 call with MODE=0
● SFC 109 call with MODE=1: Setting of security level 2 with password legitimization. This
● SFC 109 call with MODE=12: Setting of security level 3 without password legitimization.
Note
Setting a lower security level
You can use SFC 109 "PROTECT" to set a lower security level than the one you
configured with STEP 7 "Configure hardware".
Additional aspects
● Both fault-tolerant CPUs of a fault-tolerant system can have different security levels in
● The security level is transferred from the master to the standby during link-up/update
● The set security levels of both fault-tolerant CPUs are retained if you make modifications
● The security level is transferred to the target CPU in the following cases:
78
overrides any existing lock of password legitimization.
means you can cancel the write protection set with SFC 109 if you know the valid
password. The SFC 109 call with MODE=1 overrides any existing lock of password
legitimization.
This means you cannot cancel the write and read protection set with SFC 109 even if you
know the valid password. If a legitimate connection exists when you call SFC-109 with
MODE=12, the SFC-109 call has no effect on this connection.
STOP.
operations.
to the plant during operation.
– Switching to CPU with modified configuration
– Switching to a CPU with expanded memory configuration
– Switching to a CPU with modified operating system
– Switching to a CPU using only one intact redundant link
Security level 1 Security level 2
Access granted Password required
Access granted Password required
Security level 3
Password required
Password required
System Manual, 03/2012, A5E00267695-11
S7-400H