Verifying SIMATIC Logon Installation and Licensing on PCS 7 Operator Stations

Verifying SIMATIC Logon installation and licensing on a SIMATIC PCS 7 Operator Station (OS) involves checking the Windows Installed Software utility, Automation License Manager (ALM), and WinCC User Administrator. SIMATIC Logon installs from the PCS 7 or WinCC installation media and provisions a base master license. Its presence can be confirmed via the 'Installed SIMATIC Software' report (Start -> Siemens Automation -> SIMATIC -> Installed Software) and in ALM under the product name 'SIMATIC Logon'. In WinCC Explorer, enabling SIMATIC Logon in the User Administrator activates centralized Windows domain authentication, prompting an electronic signature dialog upon runtime login.

SIMATIC Logon Architecture and Licensing Overview

SIMATIC Logon provides centralized, FDA 21 CFR Part 11 compliant user administration for SIMATIC PCS 7, WinCC, and STEP 7. Rather than maintaining isolated local user databases inside each HMI station, SIMATIC Logon authenticates operators against local Windows user groups or corporate Active Directory domain controllers.

The software consists of three core components:

SIMATIC Logon Service: Core background service authenticating user credentials and evaluating group tokens.
SIMATIC Logon Role Management: Administrative interface mapping Windows groups to SIMATIC application roles.
Event Log Console: Tamper-proof audit trail logging all login, logout, and electronic signature actions.

Verification and Audit Workflow

To determine whether SIMATIC Logon is installed, licensed, and actively configured:

Verification LayerTool / LocationExpected Healthy OutputSoftware InventoryStart -> Siemens Automation -> Installed SoftwareEntry SIMATIC Logon listed with current version (e.g., V1.5 or V1.6).License AuthorizationAutomation License Manager (ALM)License Key SIMATIC Logon or SIMATIC Logon Service displayed with status OK.Windows Servicesservices.mscService SIMATIC Logon Service (SimaticLogonService.exe) status Running.WinCC ConfigurationWinCC Explorer -> User AdministratorCheckbox SIMATIC Logon enabled with mapped Windows groups.Runtime BehaviorWinCC OS Runtime Navigation BarClicking Logon button launches the official SIMATIC Logon modal dialog.

Installation and Deployment Options

If SIMATIC Logon is missing from an OS client or server station:

Step 1: Install from PCS 7 Installation Media

Insert or mount the SIMATIC PCS 7 DVD 1 (or standalone WinCC installation media).
Launch Setup.exe -> select Package Installation.
Under optional products, check the box for SIMATIC Logon.
Complete the wizard and restart the computer.

Step 2: License Installation

Open Automation License Manager (ALM).
Transfer the SIMATIC Logon license key from the License USB stick to the local drive (C:).

Step 3: Link WinCC User Administrator to SIMATIC Logon

Open the WinCC project in WinCC Explorer.
Open User Administrator -> check the box SIMATIC Logon.
Configure authorization levels for mapped Windows user groups (e.g., Operators, ShiftSupervisors).

Procurement Schedule for SIMATIC Logon

The following Equipment Schedule specifies the relevant order numbers for SIMATIC Logon packages:

Software Packages:
- SIMATIC Logon V1.6 Single License (Single Station / Client): 6ES7658-7BX61-0YA0
- SIMATIC Logon V1.6 Upgrade License:                          6ES7658-7BX61-0YE0
- SIMATIC Logon Electronic Chip Card Reader (USB):             6ES7652-0XX02-1XC0
- Chip Cards (Blank, Pack of 5):                              6ES7652-0XX00-1XC2

[!IMPORTANT]
Commercial Accuracy Disclaimer: SIMATIC Logon runtime client software is included on the PCS 7 OS media, but requires valid license keys for productive plant operation. Each physical workstation or server utilizing SIMATIC Logon requires an appropriate license entitlement. Final license quantities and MLFBs must be validated against the applicable Siemens ST PCS 7 Catalog and authorized distributor quotations.

Verification

To verify that SIMATIC Logon functions properly in runtime:

Open WinCC OS Runtime on the target client.
Click the user login icon on the system menu header.
Verify that the SIMATIC Logon dialog opens, displaying fields for User name, Password, and Domain.
Enter valid Windows credentials: confirm the user name appears in the system status bar.
Open the Windows Event Viewer -> Application log: confirm an audit event from SIMATIC Logon was successfully recorded.

Limitations and Operational Precautions

Operational boundaries when deploying SIMATIC Logon:

Domain Controller Connectivity: If configured for Active Directory domain authentication, ensure OS stations maintain uninterrupted DNS and RPC connectivity to the Domain Controller; configure local Windows fallback accounts for off-grid operation.
Card Reader Drivers: When using smart chip card or RFID authentication, install certified Siemens PC/SC smart card drivers.
Unlicensed Mode Behavior: Running SIMATIC Logon without a valid ALM license key triggers recurrent trial period expiration warnings across operator screens.

Engineer FAQ

Where can I check if SIMATIC Logon is installed without launching WinCC?

Open Windows Start Menu -> Siemens Automation -> SIMATIC -> Installed Software, and inspect the products table for SIMATIC Logon.

Can SIMATIC Logon authenticate against Windows workgroup accounts?

Yes. SIMATIC Logon can authenticate against either local Windows computer user accounts or Active Directory domain accounts.

What happens if no password is set on an account?

If configured to allow blank passwords, pressing OK in the SIMATIC Logon dialog logs the user in; however, industrial cybersecurity standards strongly recommend enforcing password complexity.