Skip to content

Use of SD FLASH PLCNEXT MEMORY LIC with PLCnext Control AXC F1152 and security profile enabled

Hello community,

I have a PLCnext Control AXC F1152 and would like to operate it with activated security profile and using the inserted SD FLASH 8GB PLCNEXT MEMORY LIC. Is this possible or can the SD FLASH 8GB PLCNEXT MEMORY LIC only be used if the security profile is deactivated?

Comments

  • After activating the security profile, you should be able to activate the SD card slot by logging in to the WBM using the SecurityAdmin user account. If there are any problems using the SD card after the slot is enabled, please let us know.

  • Thank you for your quick response.

    I will try to tell you my situation.

    I log in via WBM with Security Admin and the corresponding password. At this point, the internal SD card of the controller is used. In the WBM, I go to Security->SD card and then activate the external SD card. I then perform a reboot. After the reboot, however, I can no longer log in with Security Admin, but only with Admin. What I have to do to ensure that the PLCnext uses the external SD card with activated security profile?

  • Sorry for the delay - I needed to consult with one of our security experts, who is in high demand these days.

    I assume that you are using one of the recent firmware releases, either version 2024.0.x LTS or 2024.6.x.

    • In order to use an external SD Card in a device with an activate Security Profile, the external SD card must be encrypted in order to comply with the IEC 62443 standard.
    • It is possible to use an unencrypted external SD card in a device with an active Security Profile, but in that case the device will not be compliant with the standard, and the behaviour of the device will be undefined.

    In the next week or so the Security Info Center will be updated to make the SD card encryption process clearer but, in summary, all the following steps should be performed:

    • Boot the PLCnext Control device with a compatible SD card in the SD card slot.
    • On the Web Based Management site:
    1. Activate the security profile.
    2. Activate the external SD card slot.
    3. Select the option "Reactivation after Factory Reset"
    4. Activate SD card encryption.
    5. Select an encryption password.
    6. With the external SD card still in the device, reboot the PLCnext Control device from the Cockpit page.

    => The security profile is now active.

    Please let us know if you have any problems with this procedure.

  • Thank you for your prompt and detailed reply. Unfortunately the instructions did not work for us. However, we currently have firmware version 2023.0.0 LTS installed. As you can see in the screenshot below, the hardware is hardware version 06, but according to your website, the new firmware versions are only available for hardware versions 02, 03 and 04. Is it possible to install firmware 2024.0.x LTS or 2024.6.x on hardware version 06? Thanks in advance.


  • Yes, the latest firmware supports all HW versions. I will ask for the website to be updated.

  • Update: The website has been updated to show all the supported HW versions.

Sign In or Register to comment.