C135 PCS 7 (PCS7)
6C
6 Cielo Ciencia y Tecnología
·Publicada en C135 PCS 7 (PCS7)

Resolving CPU 410-5H Error - System Expansion Card Not Inserted or Faulty

Resolving CPU 410-5H Error - System Expansion Card Not Inserted or Faulty

When a SIMATIC S7-400 CPU 410-5H reports 'System expansion card not inserted or faulty' and rejects program block downloads (allowing only HW Config downloads), the issue is caused by one of four root causes: 1) The System Expansion Card (SEC) is a blank 0-PO card that has not yet had Process Object capacity assigned via the CPU 410 PO Management tool in Automation License Manager; 2) The CPU 410-5H firmware is obsolete (e.g., FW V8.0/V8.1) and unable to recognize newer SEC cryptographic revisions; 3) The SEC was inserted while powered or without performing a mandatory memory reset (MRES); or 4) Physical contact contamination or bent connector pins in the rear SEC socket. Verifying SEC PO allocation in ALM and updating CPU firmware resolves the fault.

Table of Contents

Executive Summary

The SIMATIC PCS 7 CPU 410-5H features a unique hardware scaling architecture where physical hardware performance and Process Object (PO) capacity are defined by a proprietary cryptographic System Expansion Card (SEC) inserted into the rear of the CPU module. Without an operational and recognized SEC, the CPU 410-5H cannot enter full RUN mode with user program execution and blocks all CFC/S7 program downloads. Automation engineers frequently encounter the error 'System expansion card not inserted or faulty' on newly commissioned or long-stored CPUs—even immediately after replacing the SEC. This guide provides an in-depth diagnosis of SEC hardware token mechanics, PO allocation in ALM, firmware compatibility requirements, and recovery procedures.

Architecture and Fundamental Mechanics

CPU 410-5H and System Expansion Card (SEC) Architecture

Unlike classic S7-400 CPUs that utilize standard Flash or RAM memory cards for user program storage, the CPU 410-5H stores the compiled program in onboard non-volatile RAM. The SEC slot on the rear of the module does not hold user program code; rather, it houses a hardware security element containing cryptographic keys and licensed Process Object capacity.

+-------------------------------------------------------------------------+
|                        SIMATIC S7 CPU 410-5H                            |
|                                                                         |
|   +-----------------------------------------------------------------+   |
|   | Rear SEC Socket (Proprietary Interface)                         |   |
|   |                                                                 |   |
|   |   +---------------------------------------------------------+   |   |
|   |   | System Expansion Card (SEC)                             |   |   |
|   |   | - Cryptographic Serial Number                           |   |   |
|   |   | - Hardware Security Module (HSM) Token                  |   |   |
|   |   | - Licensed PO Capacity: [0 PO / 100 / 500 / 1000 / 2K+] |   |   |
|   |   +---------------------------------------------------------+   |   |
|   +-----------------------------------------------------------------+   |
|                                    |                                     |
|                                    v Internal Bus Check                 |
|   +-----------------------------------------------------------------+   |
|   | CPU 410 Firmware Boot Verification:                             |   |
|   | 1. Is SEC physically detected?                                  |   |
|   | 2. Is SEC firmware revision compatible with CPU FW?             |   |
|   | 3. Does SEC possess > 0 Licensed Process Objects?               |   |
|   |                                                                 |   |
|   | If ANY check fails:                                             |   |
|   | -> Diagnostic Buffer: 'System expansion card not inserted...'   |   |
|   | -> Blocks Download Rejected / CPU refuses RUN                  |   |
|   +-----------------------------------------------------------------+   |
+-------------------------------------------------------------------------+

Primary Root Causes for Persistent Faults

  1. The '0-PO' Replacement Card Trap: When replacement SECs are ordered under base order numbers (e.g., 6ES7653-2BA00-0XB5), Siemens delivers a hardware token configured with exactly 0 Process Objects. A 0-PO card is intended to receive transferred POs from an existing software license pool. If inserted directly into a CPU without loading POs via ALM, the CPU reports it as invalid or faulty because it cannot execute any user program blocks.
  2. Firmware Mismatch on Stored CPUs: CPUs kept in spare parts storage often carry firmware versions V8.0.0, V8.1.0, or V8.1.1. Modern replacement SECs manufactured after 2018 require CPU firmware V8.2.0 or higher (ideally V8.2.4) to recognize newer cryptographic certificates on the SEC chip.
  3. MRES and Power Cycling Latch: The CPU reads the SEC serial number and PO entitlement strictly during cold start boot. Swapping an SEC under power, or failing to perform an MRES followed by a power cycle, leaves the CPU in a fault state.

Step-by-Step Implementation Procedure

Step 1: Inspect Diagnostic Buffer and LED Indicators

  1. Connect the Engineering Station to the CPU 410-5H via Industrial Ethernet or MPI/DP.
  2. In SIMATIC Manager, select the CPU and press Ctrl+D to open Module Information.
  3. Navigate to the Diagnostic Buffer tab.
  4. Look for Event ID 16#4563 or messages stating: System expansion card not inserted or faulty or Evaluation of the System Expansion Card failed.
  5. Note the firmware version of the CPU displayed in the General tab (e.g., V8.1.2).

Step 2: Check Physical Installation and Clean Contacts

  1. Turn off power to the controller rack (PS module switched OFF).
  2. Remove the CPU 410-5H from the rack.
  3. Carefully remove the System Expansion Card from the rear slot.
  4. Inspect the gold contact pins inside the CPU slot for oxidation, dust, or bent pins. Use electrical contact cleaner and a lint-free swab if necessary.
  5. Reinsert the SEC firmly until it clicks completely into place.
  6. Reinstall the CPU in the rack and restore power.

Step 3: Upgrade CPU 410 Firmware (If Below V8.2.x)

  1. If the CPU firmware is older than V8.2, obtain the latest CPU 410-5H firmware update from Siemens Industry Online Support (SIOS).
  2. In HW Config, select the CPU and choose PLC > Update Firmware.
  3. Select the firmware update files and execute the update over Industrial Ethernet.
  4. Wait until the update completes and verify that the firmware displays V8.2.x.

Step 4: Verify and Load POs on the SEC via ALM (CPU 410 PO Management)

  1. On the Engineering Station, open Automation License Manager (ALM).
  2. In the menu, select Edit > Connect Target System > Connect CPU 410 (or use the CPU 410 PO Management wizard).
  3. Enter the controller's IP address and establish an online connection to the CPU.
  4. Inspect the SEC status:
    - Check the parameter Current PO Capacity.
    - If the capacity shows 0 PO, the card cannot run an S7 program.
  5. Select your purchased CPU 410 Expansion Pack license keys in ALM (e.g., 100, 500, or 1000 POs).
  6. Execute Transfer to SEC. ALM writes the cryptographic PO entitlement directly onto the physical SEC chip.
  7. Note: For purchasing SEC tokens or PO expansion packs, validate product part numbers with an authorized Siemens distributor or the Siemens Industry Mall.

Step 5: Perform Complete Memory Reset (MRES)

  1. On the front panel of the CPU 410-5H, locate the mode selector switch.
  2. Turn switch to STOP position.
  3. Hold switch in MRES position until the STOP LED flashes slowly (approx. 3 seconds), release, and immediately turn back to MRES.
  4. The STOP LED will flash rapidly, confirming memory formatting.
  5. Cycle power to the CPU rack to force a clean cold restart.
  6. Download HW Config followed by the user program.

Verification

  1. Diagnostic Buffer Clearance: Open Module Information (Ctrl+D) and verify that the diagnostic buffer records clean transition to STOP mode with zero SEC fault events.
  2. PO Verification in SIMATIC Manager: In SIMATIC Manager, select the CPU and choose PLC > CPU 410 > Process Objects. Confirm that licensed PO capacity matches the intended plant size.
  3. Program Download Test: Download the complete CFC charts (Chart > Compile and Download Objects). Confirm that block loading proceeds without being aborted.

Limitations and Operational Precautions

  1. Irreversible Card Binding: Once Process Objects are transferred to an SEC, they are physically locked to that specific SEC token serial number and cannot be used in a different CPU without moving the physical card.
  2. Hardware Slot Access: Accessing the SEC requires removing the CPU module from the S7-400 rack. Never remove or insert the SEC while the controller rack is energized.

Engineer FAQ

Why does a brand new SEC show 'card not inserted or faulty'?

Replacement SECs are often delivered with 0 Process Objects. A 0-PO card must have PO expansion packs assigned via ALM before it can load user programs.

Can a CPU 410-5H operate without an SEC?

No. The CPU 410-5H cannot enter RUN mode and cannot execute any user logic without an operational, licensed SEC.

Where is the SEC located on the CPU?

The SEC is inserted into a dedicated slot located on the rear backplane side of the CPU module.

Can I use an SEC from an S7-417H or standard S7-400 memory card?

No. Standard S7-400 Flash/RAM memory cards cannot fit into or operate in the CPU 410 SEC slot.

How do I check how many POs are on an SEC?

Use the CPU 410 PO Management feature in Automation License Manager or check Module Information in SIMATIC Manager.

What CPU firmware is required for modern SECs?

Firmware V8.2.0 or higher (recommended V8.2.4) is required to ensure compatibility with modern cryptographic SEC chips.

Can I upgrade the PO count of an SEC later?

Yes. Additive CPU 410 Expansion Packs (100 PO, 500 PO) can be transferred to the SEC online via ALM at any time without replacing the hardware.

Why did the CPU allow HW Config download but not CFC charts?

HW Config contains hardware definitions and does not require PO licensing, whereas CFC charts contain executable process blocks requiring licensed PO capacity.

Does MRES erase the PO capacity from the SEC?

No. The licensed PO capacity is permanently written to the secure chip on the SEC and survives MRES and long-term unpowered storage.

Can I hot-swap the SEC while the CPU is powered?

No. Removing or inserting the SEC while the CPU is powered can corrupt the card or damage internal interface electronics.

Technical References

Related Articles

Related Tags

  • CPU 410-5H
  • System Expansion Card
  • SEC
  • Process Objects
  • Hardware Fault
  • Automation License Manager
  • Firmware Update
20 respuestas