Siemens SIMATIC PCS 7 CPU 410-5H System Manual page 138

Special functions of the CPU 410-5H
9.1 Security levels
Note
Any set up access right is not canceled until you stop the SIMATIC Manager. You should
reset the access right once again to prevent unauthorized access. You reset the access right
in the SIMATIC Manager with the menu command PLC > Access Rights > Cancel.
Setting the protection level with SFC 109 "PROTECT"
You can set the following protection levels on your CPU with SFC 109:
● SFC 109 call with MODE=0: Setting of protection level 1. The SFC 109 call with MODE=0
overrides any existing lock of password legitimization.
● SFC 109 call with MODE=1: Setting of protection level 2 with password legitimization.
This means you can cancel the write protection set with SFC 109 if you know the valid
password. The SFC 109 call with MODE=1 overrides any existing lock of password
legitimization.
● SFC 109 call with MODE=12: Setting of protection level 3 without password
legitimization. This means you cannot cancel the write and read protection set with SFC
109 even if you know the valid password. If a legitimate connection exists when you call
SFC-109 with MODE=12, the SFC-109 call has no effect on this connection.
Note
Setting a lower protection level
You can use SFC 109 "PROTECT" to set a lower protection level than the one you
configured with HW Config.
NOTICE
Use SFC 109 only with existing protection level
Only use SFC 109 if you have configured protection levels in HW Config.
138
CPU 410-5H Process Automation
System Manual, 09/2014, A5E31622160-AB