Important updates are available for SIMATIC S7-1500 Software Controllers for all versions beginning with V2.0
The certificates used since Version V2.0 to sign the Windows files of the SIMATIC S7-1500 Software Controller mean that these files cannot be started after June 10, 2019. Among other things, this can lead to a shutdown of your plant or failure of a machine. This can be the case, for example, after a Windows restart or a restart of the IPC.
After the installation of the updates for the respective version, these files will continue to work without restrictions after June 10, 2019.
We also strongly recommend upgrading custom created security images for IPCs and Open Controller with the respective update.
Installation of the updates
Requirements for installation:
- Write filters under Windows such as EWF, FBWF or UWF are disabled
- You are logged on to the target system with administrator rights.
- You have downloaded the appropriate setup file for the installed version.
Proceed as follows for installation:
- Only for version V2.1: before the update installation, set the storage path of the PC station configuration back to the default paths:
"C:\ProgramData\Siemens\Automation\PCStation\Config" for configuration data and
"C:\ProgramData\Siemens\Automation\PCStation\Runtime" for diagnostic data
- Start the installation of the update on the target system by running the setup file, for example "SIMATIC_CPU_1507S_V2_6_Upd2.exe" and follow the setup instructions.
Note that during the installation, a complete restart of the system including CPU is performed.
- If required (see item 1): Set the storage paths for the PC station configuration back to the original
- Start the SIMATIC S7-1500 Software Controller via the display or with the command "CPU_Control / PowerOnCPU / Auto"
- Restore the system to its state before the installation: Activate the EWF/FBWF or UWF if needed and restore the logon rights for normal users.
The update setups cannot check the state of the Windows write filter EWF, FBWF (Windows 7, WES7), or UWF (Windows 10). Ensure that the write filter has been disabled and that the desired version has been installed after restarting Windows.
If the update installation was performed with an enabled write filter, the changes of the update installation are lost the next time Windows reboots. The setup procedure must then be performed again with the write filter disabled.
Availability of the updates
Use the new version V2.7 of the SIMATIC S7-1500 Software Controller for new installations: 109767943
Use the following update downloads for updating existing installations:
The updates always contain all improvements of the previous updates to a software controller version. The installation of the respectively latest update to a version is therefore sufficient.
Checking the download via SHA-256 checksum
An SHA-256 checksum is offered for the current downloads. It can be used to check the consistency of the download.
Instructions for consistency check:
The installation files are also available in the following download entries:
109759122 SIMATIC ET 200SP Open Controller (CPU 1515SP PC) - Current Software Controller versions
109478528 Current revision levels of SIMATIC S7-1500 Software Controller
Frequently Asked Questions
Question: Does the behavior occur exactly on June 10, 2019?
Answer: The certificates of the Windows files are always checked when they are started. They will continue running on June 10, 2019, as long as they are not stopped. The behavior only occurs if Windows, the PC or the affected software components are restarted. Depending on when the plant/machine is shut down and rebooted, the behavior can also have an effect long after June 10, 2019.
How long does the CPU keep running after June 10?
Answer: As already mentioned before, the Windows-specific files of the software controller keep running as long as they are not stopped and restarted. The following actions can result in the Windows-specific files being restarted and should therefore not be carried out as long as the software controller is to continue running without installed updates:
- Restart of the PC
- Restart of Windows
- Restart of the software controller services, for example by operation via the PC station
- Download of a configuration with TIA Portal or loading a configuration file (*.psc file)
- Loading and removing of ODK applications for Windows ("CPU function library (Windows)") during runtime. The execution of functions in an existing library is possible without any problems.
Question: How will I know that the behavior has occurred?
Answer: No communication from the Windows end with the SIMATIC S7-1500 Software Controller is possible, for example, display of the operating modes in the display, HMI connections, online functions with TIA Portal via Windows.
Question: Is the fail-safe behavior of the software controller affected?
Answer: No, the fail-safety is still ensured.
Question: How can I recognize which version of the software controller is installed in may machine/plant?
Answer: There are various possibilities of recognizing the installed version. For this, you can use the Display application, for example, the web server or the Windows Control Panel. Details are provided in the next section.
Question: Can I install an update remotely?
Answer: Yes, you can use Remote Desktop for the installation, for example. Note in this case that the setup and perhaps the handling of the write filter require a restart.
Question: Can a firmware update be carried out using the Siemens Automation Tool or TIA Portal?
Answer: No, this is not possible because this is not supported by the SIMATIC S7-1500 Software Controller. In addition, the software components on the Windows end are affected and these cannot be updated by using this process.
Question: After the installation, do I need to reload the project and set up the machine again?
Answer: No. During the update installation, both the project as well as the retentive data are retained if the installation instructions described above are observed. However, it is advisable to store a version of the project for possible special cases. To achieve this, there is, for example, as of version V2.5, the possibility to load the SIMATIC S7-1500 Software Controller via the PSC file.
Question: What happens if I only install this update after June 10?
Answer: Installation of the update after June 10, 2019 is possible.
Question: Do I have to take anything else into account after the updates have been installed after June 10, 2019?
Answer: After successful installation continued operation without restrictions is possible.
Setting the storage paths for the PC station configuration
Recognition of the version
The version of the used SIMATIC S7-1500 Software Controller can be recognized by various means, which are listed below:
Version on the data storage medium or booklet:
Version in the file name of the installation file
|SIMATIC_CPU_1507S_V2_Upd3.exe||Describes the CPU 1507S V2.0 with Update 3|
|SIMATIC_CPU_1507S_V2_1_Upd3.exe||Describes the CPU 1507S V2.1 with Update 3|
Note that an upgrade is possible through downloads from the Industry Online Support Portal.
Check the version of the Software Controller actually installed by using the Display application, the web server, online functions or the Control Panel (see below).
Version via the "Programs" function in the Control Panel
Version via the Display application
Version via the web server
Version via online functions with TIA Portal