How to access a Password Protected S7-200 CPU

 !! Important Note !!  

It is always recommended to keep a copy of the program available on a data medium.

Moreover, the comments of the program are only available in the Offline-Project and are not loaded into the CPU.

  

There is NO possibility for the user, to read a program of a password-protected CPU with protection level 3 or to modify its program - without having the knowledge about the password.

Even if the CPU is furnished with a password protection, the followung  CPUFunctions can be executed  without any limitation :

•  Start, Stopp and Restart of the CPU 
• - Reading and setting the real-time
  
  

If the password entered in the CPU is unknown, a memory reset of the CPU has to be conducted and the program has to be reloaded into the CPU. During the memory reset, the net address, baudrate, realtime and - if existing - the program in the memory submodule are not modified.
To Execute CPU Memory Reset, please proceed as follows:

• Select "Target system > memory reset".
• Afterwards, select all three block types to be cleared and confirm it with "OK".

Fig. 1: Selecting blocks to be cleared

• Enter "CLEARPLC" in the dialog window.

Fig. 2: Entry of the password in order to clear

1. An additional possibility to reset the CPU is provided by the program "Wipeout.exe". This program is located on the Installation-CD of STEP7-Micro/WIN.
2. On the contrary to the reset via STEP7-Micro/WIN, the program "Wipeout.exe" does not only delete the user program, the data block and the configuration information, but also the baudrate is reset to 9,6 kbit/s and the netaddress is reset to address 2. The CPU is reset into the pristine status of supply.
3. Alternatively, the memory submodule can also be plugged with another unprotected program into the CPU. When reswitching the voltage, this program is loaded into the CPU and overwrites the program with the unknown password. Afterwards, the access to the CPU is possible.