Help Needed

Hi There!!!!!!

I am Tryn to remove CPU password from S7 300 PLC which is having 313C CPU. I tried to reset the PLC several times but with no results. Pl. help me in removing the password.


Raghavendra_M

Hello raghavendre_M ;

Look at the following trend:
http://www.plctalk.net/qanda/showthread.php?t=11446&page=4&pp=15&highlight=password
One solution to your problem is on the 3rd page of the thread. You might not like the answer: it is not free. You have to decide if it solves your problem.

Hope this helps,

Daniel Chartier

Unlocking Password Protected S7 CPU

Hello raghavendre_M,
I learned about Andi Rothenbacker on this forum.
I arranged for the company in Australia who had an
S7-300 series PLC "unlocked" by using Andi's services.
However it is quite expensive.
I suggest you contact Andi and let him know that you
are in India and ask for a lower cost service for India.

If you have the Step7 source program for your PLC you
do not need to know the password. Rather starting with a
blank Step7 project copy to it all the user program (blocks)
and by observation of the Hardware configuration in the
original project set up your new project Hardware Config
but with no password protection. You should be able to
download your new project to the PLC after first clearing
its Micro Memory Card (MMC). Do this offline with a PC
and a multi memory card reader / writer or much better
get a new MMC card.

I have commissioned many S7 PLC systems in Asia including
about 10 in India. At the end of last week I returned
home to Australia after commissioning 2 S7-400 PLC's
together with Citect SCADA / HMI in Bahadurgarh (near
Delhi) This latest took just 15 days, a record for me.
Previously I have taken up to 7 weeks to complete similar
projects in India.
Regards...............John Gaunt

Utilities for Read Write Siemens MMC's

Some time ago somebody asked how to view the contents of a
Siemens MMC using a PC and multi card reader writer.
Attached are a couple of useful utilities that can be used
to Read and Write MMC's.
Apart from using these to try to find the password they
provide a convenient means to duplicate your MMC to provide
a backup. You can purchase "Multi Media Cards" and write them.
You don't have to purchase "Micro Memory Cards" from Siemens.
Regards.............John Gaunt

The Write file is too big for PLCS

Hi,
Sorry but I am unable to attach the Write file.
It is 301 point something kbytes long and PLCS.net
has a 300 kbyte limit for files of this type.
If members like to contact me I can email a copy.
Better if Phil could increase the limit slightly?
Regards...........John Gaunt

John Gaunt said:

Better if Phil could increase the limit slightly?

Click to expand...

OK. Maximum ZIP file attachment size has been bumped up to 400Kb.

Enjoy,

Siemens MMC Read Write Utilities

Thanks Phil,
I will attach the Write utility now.
Regards...........John Gaunt

Locked CPU - Clearing the MMC

Additional information that may be useful.
With the MMC installed in a CPU with password protection
where the password is unknown. I had thought there was no
way to clear the MMC prior to downloading a fresh copy of
the project. I have just been informed that the MMC can be
cleared by repeated Memory Resets using the switch on the front
of the CPU. A single Memory Reset certainly only clears the
CPU memory which is then automatically reloaded from the MMC.
Apparently if you repeat the Memory Reset about 5 times
(hold the switch down for about 10 seconds each time) then the
MMC will be cleared and hence the CPU's requirement for a
Password.
Could sombody who has a test S7-300 try the above and let me know
if it works.
Regards.................John Gaunt

Copying Siemens MMC

John Gaunt said:

Apart from using these to try to find the password they
provide a convenient means to duplicate your MMC to provide
a backup. You can purchase "Multi Media Cards" and write them.
You don't have to purchase "Micro Memory Cards" from Siemens.
Regards.............John Gaunt

Click to expand...

Sorry to bring up an old thread but I was wondering if anyone has been able to use off the shelf MMC cards in a Siemens PLC. I tried, with the posted tools, reading an 512K Siemens MMC and coping it file back to a 64MB MMC and it did not work.

Thanks
Mark

I don't know what CPU you tried it on, but for a 317 the maximum MMC size is 8 MB, which I would imagine applies to all the 300 Series as well.

I don't think you can write to a standard MMC format - well you can but the processor won't read it - the guy that supplies the read-write utilities is wuite specific about "Do NOT select the 'Format' option when you first insert the card" . I have no doubt that you can reformat to siemens spec - if you can get hold of the utility , and for now , siemens are keeping that one close to their chest , even colleagues working for siemens don't have access to it at the moment .

Is the procedure same for S7-400? does the s7-400 even have an mmc?

I'm able to take out password protection from S7-300 and S7-200.
Cost for this operation is about 600 Euro. My company can give You invoice.

For S7-300 you need is the USB Memory reader recognise by your Windows.

For take out password from S7-200 is necessary to have binary image EEPROM AT24C64 from PLC.
Is possible use PoniProg to take immage without desoldering this EEPROM

More details by mail: [email protected]