×
Siemens Industry Online Support
Siemens AG
Entry type: Product note Entry ID: 109764666, Entry date: 05/31/2019
(13)
Rate

Important updates are available for SIMATIC S7-1500 Software Controllers for all versions beginning with V2.0

  • Entry
  • Associated product(s)
Urgently required updates are available for the SIMATIC S7-1500 Software Controllers CPU 1505SP (F/T/TF), CPU 1507S (F) and CPU 1508S (F). We recommend performing these updates by June 10, 2019 at the latest.


Description

The certificates used since Version V2.0 to sign the Windows files of the SIMATIC S7-1500 Software Controller mean that these files cannot be started after June 10, 2019. Among other things, this can lead to a shutdown of your plant or failure of a machine. This can be the case, for example, after a Windows restart or a restart of the IPC. 

After the installation of the updates for the respective version, these files will continue to work without restrictions after June 10, 2019.


Required measure:
We strongly recommend performing the updates by June 10, 2019. At the latest, however, before the 1st restart after June 10, 2019. A software controller that is operated uninterruptedly beyond June 10, 2019 functions until a Windows restart.

We also strongly recommend upgrading custom created security images for IPCs and Open Controller with the respective update.



Installation of the updates

Requirements for installation:

  • Write filters under Windows such as EWF, FBWF or UWF are disabled
  • You are logged on to the target system with administrator rights.
  • You have downloaded the appropriate setup file for the installed version.

Proceed as follows for installation:

  1. Only for version V2.1: before the update installation, set the storage path of the PC station configuration back to the default paths:
        "C:\ProgramData\Siemens\Automation\PCStation\Config" for configuration data and
        "C:\ProgramData\Siemens\Automation\PCStation\Runtime" for diagnostic data
  2. Start the installation of the update on the target system by running the setup file, for example "SIMATIC_CPU_1507S_V2_6_Upd2.exe" and follow the setup instructions.
    Note that during the installation, a complete restart of the system including CPU is performed.
  3. If required (see item 1): Set the storage paths for the PC station configuration back to the original
  4. Start the SIMATIC S7-1500 Software Controller via the display or with the command "CPU_Control / PowerOnCPU / Auto"
  5. Restore the system to its state before the installation: Activate the EWF/FBWF or UWF if needed and restore the logon rights for normal users.

Note:
The update setups cannot check the state of the Windows write filter EWF, FBWF (Windows 7, WES7), or UWF (Windows 10). Ensure that the write filter has been disabled and that the desired version has been installed after restarting Windows.
If the update installation was performed with an enabled write filter, the changes of the update installation are lost the next time Windows reboots. The setup procedure must then be performed again with the write filter disabled.


Availability of the updates

Use the new version V2.7 of the SIMATIC S7-1500 Software Controller for new installations: 109767943 

Use the following update downloads for updating existing installations:

Software Controller versionsAffected versions Update installation files
CPU 1505SPV2.0.0, V2.0.3, V2.0.5

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SP_V2_Upd6.exe (34.2 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SP_V2_Upd6.txt (1 KB) 

V2.1.0, V2.1.3, V2.1.6

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SP_V2_1_Upd7.exe (235.8 MB)

SHA-256 checksum.
 Registrierung notwendig  SIMATIC_CPU_1505SP_V2_1_Upd7.txt (1 KB)

V2.5.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SP_V2_5_Upd4.exe (238.3 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SP_V2_5_Upd4.txt (1 KB)

V2.6.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SP_V2_6_Upd2.exe (48.4 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SP_V2_6_Upd2.txt (1 KB)

CPU 1505SP FV2.0.0, V2.0.3, V2.0.5

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SPF_V2_Upd6.exe (34.2 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SPF_V2_Upd6.txt (1 KB)

V2.1.0, V2.1.3, V2.1.6

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SPF_V2_1_Upd7.exe (235.8 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SPF_V2_1_Upd7.txt (1 KB)

V2.5.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SPF_V2_5_Upd4.exe (238.3 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SPF_V2_5_Upd4.txt (1 KB)

V2.6.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SPF_V2_6_Upd2.exe (48.4 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SPF_V2_6_Upd2.txt (1 KB) 

CPU 1505SP TV2.5.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SPT_V2_5_Upd4.exe (238.3 MB) 

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SPT_V2_5_Upd4.txt (1 KB)

V2.6.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SPT_V2_6_Upd2.exe (48.4 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SPT_V2_6_Upd2.txt (1 KB) 

CPU 1505SP TFV2.5.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SPTF_V2_5_Upd4.exe (238.3 MB) 

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SPTF_V2_5_Upd4.txt (1 KB)

V2.6.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1505SPTF_V2_6_Upd2.exe (48.4 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1505SPTF_V2_6_Upd2.txt (1 KB)

CPU 1507SV2.0.0, V2.0.3, V2.0.5

Software:
 Registrierung notwendig  SIMATIC_CPU_1507S_V2_Upd6.exe (34.0 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1507S_V2_Upd6.txt (1 KB)

V2.1.0, V2.1.3Software:
 Registrierung notwendig  SIMATIC_CPU_1507S_V2_1_Upd7.exe (235.6 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1507S_V2_1_Upd7.txt (1 KB) 

V2.5.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1507S_V2_5_Upd4.exe (43.0 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1507S_V2_5_Upd4.txt (1 KB)

V2.6.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1507S_V2_6_Upd2.exe (48.7 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1507S_V2_6_Upd2.txt (1 KB) 

 CPU 1507S FV2.0.0, V2.0.3, V2.0.5

Software:
 Registrierung notwendig  SIMATIC_CPU_1507SF_V2_Upd6.exe (34.0 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1507SF_V2_Upd6.txt (1 KB)

V2.1.0, V2.1.3

Software:
 Registrierung notwendig  SIMATIC_CPU_1507SF_V2_1_Upd7.exe (235.6 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1507SF_V2_1_Upd7.txt (1 KB) 

V2.5.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1507SF_V2_5_Upd4.exe (43.0 MB) 

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1507SF_V2_5_Upd4.txt (1 KB)

V2.6.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1507SF_V2_6_Upd2.exe (48.7 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1507SF_V2_6_Upd2.txt (1 KB)

CPU 1508S V2.6.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1508S_V2_6_Upd2.exe (48.7 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1508S_V2_6_Upd2.txt (1 KB) 

CPU 1508S F V2.6.0

Software:
 Registrierung notwendig  SIMATIC_CPU_1508SF_V2_6_Upd2.exe (48.7 MB)

SHA-256 checksum:
 Registrierung notwendig  SIMATIC_CPU_1508SF_V2_6_Upd2.txt (1 KB) 

Note:
The updates always contain all improvements of the previous updates to a software controller version. The installation of the respectively latest update to a version is therefore sufficient.

Checking the download via SHA-256 checksum
An SHA-256 checksum is offered for the current downloads. It can be used to check the consistency of the download. 
Instructions for consistency check:

 109483101

The installation files are also available in the following download entries:

 109759122 SIMATIC ET 200SP Open Controller (CPU 1515SP PC) - Current Software Controller versions

 109478528 Current revision levels of SIMATIC S7-1500 Software Controller


Frequently Asked Questions

Question: Does the behavior occur exactly on June 10, 2019?
Answer: The certificates of the Windows files are always checked when they are started. They will continue running on June 10, 2019, as long as they are not stopped. The behavior only occurs if Windows, the PC or the affected software components are restarted. Depending on when the plant/machine is shut down and rebooted, the behavior can also have an effect long after June 10, 2019.

How long does the CPU keep running after June 10?
Answer:
As already mentioned before, the Windows-specific files of the software controller keep running as long as they are not stopped and restarted. The following actions can result in the Windows-specific files being restarted and should therefore not be carried out as long as the software controller is to continue running without installed updates:

  • Restart of the PC
  • Restart of Windows
  • Restart of the software controller services, for example by operation via the PC station
  • Download of a configuration with TIA Portal or loading a configuration file (*.psc file)
  • Loading and removing of ODK applications for Windows ("CPU function library (Windows)") during runtime. The execution of functions in an existing library is possible without any problems.

Question: How will I know that the behavior has occurred?
Answer: 
No communication from the Windows end with the SIMATIC S7-1500 Software Controller is possible, for example, display of the operating modes in the display, HMI connections, online functions with TIA Portal via Windows.

Question: Is the fail-safe behavior of the software controller affected?
Answer: 
No, the fail-safety is still ensured.

Question:  How can I recognize which version of the software controller is installed in may machine/plant?
Answer: 
There are various possibilities of recognizing the installed version. For this, you can use the Display application, for example, the web server or the Windows Control Panel. Details are provided in the next section.

Question: Can I install an update remotely?
Answer: 
Yes, you can use Remote Desktop for the installation, for example. Note in this case that the setup and perhaps the handling of the write filter require a restart.

Question: Can a firmware update be carried out using the Siemens Automation Tool or TIA Portal?
Answer: 
No, this is not possible because this is not supported by the SIMATIC S7-1500 Software Controller. In addition, the software components on the Windows end are affected and these cannot be updated by using this process.

Question: After the installation, do I need to reload the project and set up the machine again?
Answer:
 No. During the update installation, both the project as well as the retentive data are retained if the installation instructions described above are observed. However, it is advisable to store a version of the project for possible special cases. To achieve this, there is, for example, as of version V2.5, the possibility to load the SIMATIC S7-1500 Software Controller via the PSC file.

Question:  What happens if I only install this update after June 10?
Answer: 
Installation of the update after June 10, 2019 is possible.

Question: Do I have to take anything else into account after the updates have been installed after June 10, 2019?
Answer: 
After successful installation continued operation without restrictions is possible.


Setting the storage paths for the PC station configuration






Recognition of the version

The version of the used SIMATIC S7-1500 Software Controller can be recognized by various means, which are listed below:

Version on the data storage medium or booklet:



Version in the file name of the installation file

Examples:

 SIMATIC_CPU_1507S_V2_Upd3.exeDescribes  the CPU 1507S V2.0 with Update 3
 SIMATIC_CPU_1507S_V2_1_Upd3.exeDescribes  the CPU 1507S V2.1 with Update 3

Note:
Note that an upgrade is possible through downloads from the Industry Online Support Portal.
Check the version of the Software Controller actually installed by using the Display application, the web server, online functions or the Control Panel (see below).


Version via the "Programs" function in the Control Panel



Version via the Display application


Version via the web server




Version via online functions with TIA Portal








Security information
In order to protect technical infrastructures, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art IT security concept. Siemens’ products and solutions constitute one element of such a concept. For more information about cyber security, please visit
https://www.siemens.com/cybersecurity#Ouraspiration.