Protecting The F-Cpu Against Unauthorized Access - Siemens SIMATIC S7-1200 Safety Programming Manualline

2 Configuring Fail-Safe Controllers
1)
You can define the allowed range for F-destination addresses of PROFIsafe
address type 1 in the CPU properties.
Figure 2-3: Defining the address range for F-destination addresses
Additional information
For more information about PPROFIsafe address types, visit Siemens Industry
Online Support:
What is the difference between the PROFIsafe address types 1 and 2 in relation to
the uniqueness of the PROFIsafe address?
https://support.industry.siemens.com/cs/ww/en/view/109479905
How do you assign PROFIsafe addresses so that they are unique network-wide
and CPU-wide?
https://support.industry.siemens.com/cs/ww/en/view/109740240
2.3

Protecting the F-CPU against unauthorized access

To prevent unauthorized modifications or tampering with a safety program, you
must implement appropriate access protection.
This can be done, for example, through organizational measures (such as locking
the control cabinet).
However, easier and more efficient access protection can be achieved by
assigning passwords.
You can set up separate access protection mechanisms for the safety program and
the F-CPU.
Access protection for the safety program
Access protection for the safety program makes sure that the F-program is not
modified by unauthorized persons.
You define the password for access protection for the safety program in Safety
Administration in TIA Portal.
Safety Programming Guideline
Entry ID: 109750255, V1.0, 10/2017
9