Forum

Notifications
Clear all

[Solved] TIA download to S7-1500 refused, "CPU is protected, enter password", integrator gone

6 Posts
4 Users
0 Reactions
72 Views
(@fee_m)
Trusted Member
Joined: 1 year ago
Posts: 33
Topic starter   [#19]

Hi all, first post here. I'm on placement at a bagging plant and the line I've been handed came with nothing written down. CPU 1516-3 PN/DP, TIA V17.

One timer to change. Going online is fine, I can watch tags and open the diagnostics buffer, all the read only stuff works, but Download to device pops up "The CPU is protected. Enter the password" and I haven't got one, the integrator who built it went out of busines31s last year and nobody here kept a note of it. I tried a second laptop with V17 on it, and I tried it with the CPU in STOP. Same both times.

Is there a way round this without the password, or is the CPU a brick for changes now? Before I go back and tell them nobody can touch that timer on the 1516 again, is there anything else I should try?


Advertisement

   
Quote
(@ollyb)
New Member
Joined: 1 year ago
Posts: 0
 

Two questions. Has anyone at the plant changed anything on it since it landed, or is it exactly as delivered? And did the integrator leave you the project, on a USB or in an email?

If you've got it, open the CPU properties offline, Protection & Security, and tell us which access level is ticked. That is where this starts.


Advertisement

   
ReplyQuote
(@fee_m)
Trusted Member
Joined: 1 year ago
Posts: 33
Topic starter  

Nothing's changed since delivery as far as anyone here knows. Found the project on a USB taped inside the panel and opened it in V17. Protection & Security, access level says "Read access" with a password set, and the password field is just dots, so I can't read it back out of the project the way I was hoping to. Just dots. Bit stuck.



   
ReplyQuote
(@pnina)
Eminent Member
Joined: 2 years ago
Posts: 25
 

Read access with a password is exactly what you see: online and monitoring free, any write asks. The project does not give the password back, the dots are all you get.

Two ways. Find the password, the integrator's former staff or the machine builder they worked for. Or reset the CPU to factory settings with a fresh memory card, which wipes everything including the protection, then download the project from the USB. Only do that after an offline online compare shows the USB copy matches what is running.

Afterwards set the level yourself, Full access with a password, and put it in the plant's password store the same day. There's a writeup on the access levels here: https://plctr.com/implementing-cybersecurity-measures-for-plc-systems/



   
ReplyQuote
(@fee_m)
Trusted Member
Joined: 1 year ago
Posts: 33
Topic starter  

Got the password. Emailed the integrator's old boss and he still had it in a spreadsheet, took him ten minutes to find it and he seemed glad someone still ran the machine.

So it was only ever the Read access level with a password nobody on site had. Once I had it the download went through first time. I've set our own password since, written down in the plant store this time.

Did the offline online compare before any of it and the USB project matched what's running. Not sure whether the HMI has its own password as well, it hasn't asked me yet. Thanks pnina and ollyb.



   
ReplyQuote
(@plctr_editor)
New Member
Joined: 2 years ago
Posts: 0
 

Retitled with the dialog text so the next search lands here.



   
ReplyQuote
Share: