CPU 410-5H System Expansion Card (SEC) Online Process Object Upgrades: PCS 7 V8.0 vs V8.1+ Compatibility

In SIMATIC PCS 7, performing an online Process Object (PO) capacity upgrade on a CPU 410-5H controller without halting production requires transferring PO volume licenses from an official license USB stick directly into the CPU's System Expansion Card (SEC) using Automation License Manager (ALM). While this online upgrade mechanism is native and seamless in PCS 7 V8.1 and higher, installations running PCS 7 V8.0 encounter compatibility roadblocks because older ALM versions lack the 'Connect Target System > Connect AS' menu function and cannot read newer license key containers. To upgrade an operating CPU 410 in a PCS 7 V8.0 plant without upgrading the entire engineering station, engineers can temporarily connect a commissioning laptop running PCS 7 V8.1 or V8.2 with ALM V5.3+ to the plant bus, establish an online link to the controller, and execute the SEC upgrade online.

Architecture of the CPU 410-5H System Expansion Card (SEC)

The SIMATIC S7 CPU 410-5H Process Automation controller (6ES7410-5HX08-0AB0) utilizes an innovative hardware licensing concept. Unlike legacy S7-400 CPUs whose memory is fixed by firmware and physical RAM cards, the CPU 410-5H features a single unified hardware platform whose usable process object capacity (from 100 PO up to 2,600+ PO) is governed dynamically by the System Expansion Card (SEC) plugged into the rear of the CPU.

When a plant expands its process units and exceeds its licensed PO limit, the engineer does not need to replace the physical CPU. Instead, they purchase an SEC PO Upgrade package (e.g., +100 PO or +500 PO) delivered on an official Siemens license USB stick, transferring the capacity into the SEC card.

Root Cause Analysis: Why PCS 7 V8.0 Fails to Execute Online SEC Upgrades

When site engineers attempt to perform this upgrade on a PCS 7 V8.0 Engineering Station, they frequently encounter two major failures:

Missing 'Connect Target System' in ALM: In PCS 7 V8.0, the bundled Automation License Manager (ALM V5.2) was designed prior to the full standardization of the online AS-SEC communication driver. The menu command Edit > Connect Target System > Connect AS is completely absent.
Unreadable USB License Container: Upgrades manufactured for newer releases utilize updated cryptographic license descriptors. When plugged into an outdated V8.0 ES, ALM reports that the USB drive is empty or unreadable.
Online SEC Prerequisite: Online PO expansion without CPU STOP was officially introduced and certified starting in SIMATIC PCS 7 V8.1.

Prerequisites for Online PO License Transfer via Automation License Manager

To transfer PO volume licenses into the SEC card:

Minimum ALM Version: The Engineering Station (or laptop) must run Automation License Manager V5.3 SP1 or higher.
Network Path: The machine running ALM must have a direct Industrial Ethernet connection to the CPU 410-5H onboard PROFINET/Ethernet ports over the Plant Bus.
Redundant H-System Handling: For a fault-tolerant S7-400H pair, both Master and Reserve CPUs must possess identical SEC cards. Upgrades must be loaded into each CPU's SEC card sequentially while the system remains in redundant RUN.

Executing SEC Upgrades Using an Auxiliary Modern Engineering Laptop

If the permanent plant Engineering Station is locked at PCS 7 V8.0 and cannot be updated immediately, use the proven Siemens field workaround:

Prepare Commissioning Laptop: Configure a field laptop running Windows 7 SP1 (or Windows 10) with PCS 7 V8.2 and ALM V5.3 SP4+.
Connect to Plant Bus: Connect the laptop's Ethernet port to the Industrial Ethernet plant bus switch where the CPU 410-5H resides. Assign an IP address in the same subnet.
Mount License Key: Insert the official SEC PO Upgrade USB stick into the laptop.
Establish Target Connection in ALM:
- Launch Automation License Manager as Administrator.
- Select menu Edit > Connect Target System > Connect AS.
- Enter the IP address of the target CPU 410-5H (e.g., 192.168.1.10). ALM queries the controller and displays the SEC serial number and current PO allocation.
Transfer License: Drag the PO upgrade license from the USB drive and drop it onto the connected AS target system.
ALM flashes the license directly into the SEC card. The CPU updates its internal PO capacity counter bumplessly without interrupting running process control loops.

Comparison of CPU 410-5H SEC PO Capacity Licensing Tiers

The following table outlines the hardware capacity tiers and official upgrade packages for the CPU 410-5H:

SEC Capacity PackageOfficial Siemens MLFBMaximum Licensed POsUpgrade ApplicabilitySEC PO 100 Base Card6ES7653-2CA00-0XB5100 Process ObjectsSmall plants / skid packagesSEC PO 500 Base Card6ES7653-2CC00-0XB5500 Process ObjectsMedium chemical unitsSEC PO 1000 Base Card6ES7653-2CE00-0XB51,000 Process ObjectsStandard plant automationSEC PO 2600+ Base Card6ES7653-2CF00-0XB52,600+ (Maximum HW limit)Enterprise continuous DCSSEC PO Upgrade +1006ES7653-2DC00-0XF5Adds +100 POs to current SECScalable online field expansionSEC PO Upgrade +5006ES7653-2DF00-0XF5Adds +500 POs to current SECScalable online field expansion

Commercial Accuracy Disclaimer: Software order numbers (MLFBs), package structures, and hardware capacity prerequisites vary across PCS 7 versions and hardware platforms. System integrators must confirm exact software entitlements and licensing requirements against the official Siemens Catalog CA 01 and obtain an authorized Siemens distributor quotation prior to purchasing.

Verification

Verify SEC PO upgrade completion:
1. In ALM, select the connected AS target; confirm that 'Total Process Objects' reflects the previous capacity plus the upgraded quantity (e.g., 500 + 100 = 600 PO).
2. In SIMATIC Manager, connect online to the CPU 410-5H and open Module Information (Ctrl+D).
3. Select the Performance Data tab; verify that licensed Process Objects match the upgraded SEC total and that PO utilization is within 100%.
4. Verify that the CPU RUN LED remains solid green and that no license shortage diagnostic alarms exist in the CPU diagnostic buffer.

Limitations and Operational Precautions

Once an SEC PO upgrade is transferred into a physical System Expansion Card, the license is permanently married to that specific SEC card's hardware serial number and cannot be transferred back to a USB stick. If an SEC card physically fails, replacement requires contacting Siemens Technical Support with the original Certificate of License (CoL) to generate an emergency license recovery. Never unplug the SEC card from the rear of the CPU while the subrack is powered on.

Engineer FAQ

Will transferring an SEC PO upgrade stop the controller?

No. The SEC PO upgrade is an online, bumpless transaction designed to execute while the CPU 410-5H is actively running in RUN mode.

What happens if a project exceeds the licensed SEC PO limit?

The CPU 410-5H will continue to run for a grace period, but the system logs severe diagnostic events, asserts maintenance LEDs, and eventually blocks subsequent delta downloads in CFC until the PO license is increased.

Can I upgrade ALM on my PCS 7 V8.0 ES without upgrading PCS 7?

Yes, you can install a standalone update of Automation License Manager (such as ALM V5.3 SP3) on Windows 7 running PCS 7 V8.0, which often enables the 'Connect Target System' menu without a full PCS 7 upgrade.