Using The Display To Configure Additional Access Protection - Siemens SIMATIC S7-1500 Getting Started

Security

4.2 Using the display to configure additional access protection

4.2 Using the display to configure additional access protection
Introduction
On the display of an S7-1500, you can block access to a password-protected CPU (local
lock). The access lock is only in effect, when the operating mode switch is in the RUN
position.
The access lock applies independently of password protection, i.e. if someone accesses the
CPU via a connected programming device and has entered the correct password, access to
the CPU is still blocked.
The access block can be set separately for each access level on the display, so that, for
example, read access is allowed locally, but write access is not allowed locally.
Procedure
If an access level with a password is configured in STEP 7, access can be blocked using the
display.
Proceed as follows to set the local access protection for an S7-1500 CPU on the display:
1. On the display, select Settings > Protection menu.
2. Confirm the selection using "OK", and configure for each access level, whether access at
the RUN mode selector is allowed or not:
Allow: Access to the CPU is possible, provided the corresponding password in STEP 7 is
entered.
Deactivated in RUN: When the operating mode switch is in the RUN position, no more
users with privileges for this access level can log in to the CPU, even if they know the
password. In STOP mode, access is possible with password entry.
Access protection for the display
A password can be configured for the display in STEP 7 in the properties of the CPU so that
the local access protection is protected by a local password.
118
Getting Started, 05/2014, A5E03981761-AC
S7-1500