Using The Display To Set Additional Access Protection; Using The User Program To Set Additional Access Protection - Siemens SIMATIC S7-1500 System Manual

15.3

Using the display to set additional access protection

Introduction
On the display of an S7-1500, you can block access to a password-protected CPU (local
lock). The access lock is only in effect, when the operating mode switch is in the RUN
position.
The access block requires a configured protection level in STEP 7. The access block is
effective regardless of the password protection. This means that even if someone accesses
the CPU via a connected programming device and has entered the correct password,
access to the CPU remains disabled.
The access block can be set separately for each access level on the display, so that, for
example, read access is allowed locally, but write access is not allowed locally.
Procedure
If an access level with a password is configured in STEP 7, access can be blocked using the
display.
Proceed as follows to set the local access protection for an S7-1500 CPU on the display:
1. On the display, select Settings > Protection menu.
2. Confirm the selection using "OK", and configure for each access level, whether access at
Access protection for the display
A password can be configured for the display in STEP 7 in the properties of the CPU so that
the local access protection is protected by a local password.
15.4

Using the user program to set additional access protection

Access protection by means of the user program
In addition to restricting access to the display you can also restrict access to a password-
protected CPU in STEP 7 using the block SFC 110. You can find a description of this block
in the online help under the keyword "ENDIS_PW: Limit and enable password legitimation".
S7-1500 Automation System
System Manual, 02/2014, A5E03461182-AB
the RUN operating mode switch is allowed or not:
Allow: Access to the CPU is possible, provided the corresponding password is entered in
STEP 7.
Disabled in RUN: When the operating mode switch is in the RUN position, no more users
with privileges for this access level can log in to the CPU, even if they know the
password. In STOP mode, access is possible with password entry.
15.3 Using the display to set additional access protection
Protection
175