Siemens Industry Online Support
Siemens AG
Entry type: FAQ Entry ID: 37940461, Entry date: 04/10/2017

What support does Siemens AG offer to make use of WinCC Runtime Advanced, WinCC Runtime Professional and panels that can be configured with WinCC (TIA Portal) comply with FDA regulations?

  • Entry
  • Associated product(s)
This FAQ response gives an overview of the options for configuring WinCC Runtime and HMI operator panels in compliance with FDA regulations.

A general description on the subject of the Food and Drug Administration is available in Entry ID: 37939948.

WinCC (TIA Portal) provides the following options and solutions to fulfill the FDA regulations:

  • Access protection
  • Audit Trail
  • Electronic signature
  • Possibility to identify tags as "GMP-relevant"
  • Possibility to identify recipes as "GMP-relevant"
  • NotifyUserAction system function
  • Archiving tags with checksum
  • Archiving messages with checksum
  • Audit Trail protocol for printing out archived changes

Stainless steel fronts (panels)
Devices with stainless steel fronts have the following special features:

  • Front (stainless steel 1.4301, polyester foil)
  • Surface (brushed finish, 240 grit, EPDM gasket)
  • Optimized frame profile
  • Sloping surfaces without front-mounted USB interface
  • Rear-mounted tensioning frame

Access protection (Runtime Advanced and Panels)
Access protection is ensured by the software package SIMATIC Logon (central user administration) and the local user administration.

The local user administration includes the following function:

  • The individual users and their assignment to user groups are defined in the WinCC Advanced configuration.
  • Authorizations with authorization levels based on the user groups are defined in the user administration of WinCC Advanced.
  • Password aging is supported; you can configure the length of password validity and the number of generations.
  • The user logged on is automatically logged off by the system after a configurable period of time if there is no activity during that time.

Access protection with SIMATIC Logon (Runtime Professional, Runtime Advanced and Panels)
Functions of user administration with SIMATIC Logon:

  • The administrator ensures central user administration (enabling, disabling, locking, unlocking, assigning to user groups).
  • Unique combination of user ID and password.
  • Definition of access rights for groups and users.
  • Password aging
  • Initial password
  • The user is blocked automatically after a configurable number of failed log-on attempts and can then only be unblocked by the administrator.
  • Automatic log-off
  • Log functions

More information on the topic of SIMATIC Logon is available in the manual WinCC Advanced V14 in this section: "Visualize processes > Configure user administration > Creating a User Administrator > Administrating users on the server"

Audit Trail (Runtime Advanced and Panels)
Runtime user actions and system procedures relevant for FDA compliance are stored in the Audit Trail.

User actions like changing of GMP-relevant tags are stored in the Audit Trail.
System actions (system procedures) like starting and stopping Runtime are stored in the Audit Trail.

Further information on the topic of "Audit Trail" is available in the system manual "WinCC Advanced V14 - Options". Refer here also to the note at the end of the page.

Electronic signature (Runtime Advanced and Panels)
In the WinCC Advanced Runtime you can make important user actions subject to signature, like the changing of recipe data, for example.
The electronic signature may consist of entering a password and a comment. The changes are recorded in the Audit Trail.

Further information on the topic of "Electronic Signature" is available in the system manual "WinCC Advanced V14 - Options". Refer here also to the note at the end of the page.

Electronic Signature (Runtime Professional)
SIMATIC Logon provides an interface (API) for configuring the electronic signature in WinCC. The electronic signature is ensured by SIMATIC Logon. The password and user ID are asked for.

Further Information
Further information on the topic of GMP (Good Manufacturing Practice) is available in the system manual "WinCC Advanced V14 - Options" (refer here also to the note at the end of the page) and at the following link:

The system manual "WinCC Advanced V14 - Options" with further information about Option Audit, the electronic signature and GMP conformity with WinCC Advanced is available on the entry page of the system manual WinCC Advanced V14 in Entry ID 109742297. Download the ZIP archive "Appendix" from this page and unpack the file contained in it: "WinCC Advanced V14 - Options.pdf".

Additional Keywords
Certificate, Directives, Laws

Security information
In order to protect technical infrastructures, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art IT security concept. Siemens’ products and solutions constitute one element of such a concept. For more information about cyber security, please visit