Using The User Program To Set Additional Access Protection; Know-How Protection - Siemens SIMATIC S7-1500 System Manual

Protection

10.6 Know-how protection

Procedure
If you want to block access to the CPUs via the display, you need to configure an access level
with a password in STEP 7.
If you set local access protection for the CPUs on the display, the block applies to both CPUs in
the RUN-Redundant system state. Proceed as follows:
1. On the display, select the Settings > Protection menu.
2. Confirm your selection with "OK". For each access level, specify whether or not access in
the RUN operating state is allowed:
– Allow: Access to the CPUs is possible with the right password in STEP 7.
– Deactivated in RUN: If the mode selector is set to RUN, no additional logon to the CPUs
Access protection for the display
Configure a password for the display in STEP 7 in the properties of the CPU. This protects local
access protection with a local password.
10.5

Using the user program to set additional access protection

Access protection with the user program
In addition to access protection via the display, you have another option. You can also restrict
access to a password-protected CPU using the ENDIS_PW instruction in STEP 7.
You can find more information on this instruction in the STEP 7 online help under "ENDIS_PW:
Limit and enable password legitimation".
10.6 Know-how protection
Application
You can use know-how protection to protect one or more OB, FB or FC blocks as well as
global data blocks in your program from unauthorized access. To restrict access to a block,
assign a password. The password offers high-level protection against unauthorized reading
and manipulation of the block. Know-how protection does not involve the CPU (offline access
in STEP 7).
Password provider
As an alternative to manual password input, you can assign a password provider to STEP 7.
When using a password provider, you select a password from a list of available passwords.
240
is possible with the rights of this access level. Access is denied despite the fact that the
user knows the password. If the operating mode switch is in the STOP position, then
access with the password is enabled again.
S7-1500R/H redundant system
System Manual, 11/2022, A5E41814787-AD