Security - Siemens SIMATIC S7-1500 System Manual

System overview
4.3 S7-1500 R/H-CPUs
Advantages
Safety Integrated provides the following advantages:
• Engineering with SIMATIC STEP 7 Safety Advanced in the TIA Portal
• Simple connection of PROFIsafe devices over PROFINET
• Integration in integrated system diagnostics
Reference
You can find a detailed description of F-CPU configuration and programming in the SIMAT­
IC Safety – Configuring and Programming
(https://support.industry.siemens.com/cs/ww/en/view/54110126) programming and
operating manual.
4.3.4

Security

Security means the protection of technical systems against sabotage, espionage and human
error.
Protection functions
For the setup of secure networks, the S7-1500R/H redundant system has an integrated
security concept from authorization levels up to block protection:
Table 4-5 Overview of protection functions
Protection function
Protection of confidential con­
figuration data
Integrity protection
Access protection
Know-how protection
CPU lock
You can find additional information about security mechanisms of the SIMATIC automation
systems in the Security with SIMATIC S7 controllers
(https://support.industry.siemens.com/cs/ww/en/view/77431846) document and in the Com­
munication (https://support.industry.siemens.com/cs/ww/en/view/59192925) function
manual.
58
Description
Protection of confidential CPU configuration data
The CPUs feature an integrity protection function by default. This helps detect any manipula­
tions:
• To the engineering data on the SIMATIC memory card
• To the engineering data during data transfer between TIA Portal and CPU
• To the engineering data during data transfer between HMI system and CPU
• To the synchronization data during data transfer between primary and backup CPU
• To the encrypted firmware
Protection against unauthorized configuration changes via four or five (for HF-CPU) authoriz­
ation levels
Protection against unauthorized access and modifications to algorithms with password pro­
tection
Protection against unauthorized access by locking the front cover with a seal or a lock
S7-1500R/H redundant system
System Manual, 11/2022, A5E41814787-AD