Know-how protection / Protection against access SIMATIC S7-1200/S7-1500

Hello SIOS Forum Community,

this post will illustrate how to protect data on the SIMATIC S7-1200/S7-1500.

It should be noted that there are different possibilities that cover different use scenarios. These possibilities can be combined to cover the desired use cases.

Protection of devices

There are 3 options for protecting building blocks:

• Know-how protection: Blocks of type OB, FB, FC and global DBs can be protected against unauthorized access with a password. Set up know-how protection for blocks
• Copy protection: The code blocks can be bound to a serial number of the CPU or to the memory card. Setting up and removing copy protection for blocks
• Write protection: This prevents unintentional modification of the block. Setting up and removing write protection for blocks

Further information can be found in the TIA Portal manual.
SIMATIC STEP 7 Basic/Professional V16 and SIMATIC WinCC V16 Protecting function blocks

Protection against access to the CPU

To restrict access to the CPU, the access level can be set during configuration. The following access levels are available:

• Full access: This access type is preset up to TIA Portal V16. In this case, the hardware and software configuration can be read and changed by anyone.
• Read access for F devices (only F-CPU): The F devices cannot be changed without a password.
• Read access: The hardware and software cannot be changed without entering a password. Reading of the information is possible without a password.
• No access: Neither read nor write access to the hardware and software is possible. Access from the HMI is not possible without a password.

Further information can be found under the following link:
SIMATIC STEP 7 Basic/Professional V16 and SIMATIC WinCC V16 Setting options for protection.

Notes:

The parameterised access levels do not provide high-quality protection against changes to the programme. It is possible to change the programme via the memory card. To prevent this, the access protection must be combined with the know-how protection.

In a protection concept, the OPC UA server and the web server of the control system should be taken into account. Further information can be found in the following links:

TIA Portal V16 OPC UA Security Settings
TIA Portal V16 Requirements for web access

Industrial Security

The information described in this article refers to the time of writing this article (status: June 2021).

Your sincerelly

SIMATIC International Technical Support Hub