Using The Display To Set Additional Access Protection; Using The User Program To Set Additional Access Protection - Siemens SIMATIC S7-1500 System Manual

Protection

8.3 Using the display to set additional access protection

8.3 Using the display to set additional access protection
Blocking access to a password-protected CPU
On the display of an S7-1500, you can block access to a password-protected CPU (local
lock). The access lock is only in effect, when the mode selector is in the RUN position.
The access block requires a configured protection level in STEP 7. The access block is
effective regardless of the password protection. This means that even if someone accesses
the CPU via a connected programming device and has entered the correct password,
access to the CPU remains disabled.
The access block can be set separately for each access level on the display, so that, for
example, read access is allowed locally, but write access is not allowed locally.
Procedure
If an access level with a password is configured in STEP 7, access can be blocked using the
display.
Proceed as follows to set the local access protection for an S7-1500 CPU on the display:
1. On the display, select Settings > Protection menu.
2. Confirm the selection using "OK", and configure for each access level, whether access at
the RUN mode selector is allowed or not:
Allow: Access to the CPU is possible with the corresponding password in STEP 7.
Disabled in RUN: When the mode selector is in the RUN position, no more users with
privileges for this access level can log in to the CPU, even if they know the password. In
STOP mode, access is possible with password entry.
Access protection for the display
A password can be configured for the display in STEP 7 in the properties of the CPU so that
the local access protection is protected by a local password.
8.4

Using the user program to set additional access protection

Access protection by means of the user program
In addition to restricting access to the display you can also restrict access to a password-
protected CPU in STEP 7 using the block SFC 110. You can find a description of this block
in the online help under the keyword "ENDIS_PW: Limit and enable password legitimation".
116
Automation system
System Manual, 12/2014, A5E03461182-AC