Overview
The SIMATIC KTP1000 Basic DP (article number 6AV6647-0AA11-3AX0) and its PROFINET sibling (6AV6647-0AB11-3AX0) ship with WinCC Basic as the configuration environment. A common commissioning pain point is that the panel only surfaces the start-up (transfer) screen after a full power cycle. Operators have to walk to the cabinet, pull the breaker, count to ten, and re-energize the device before a project can be reloaded through the loader dialog.
Three independent mechanisms in the WinCC Basic / TIA Portal project remove that step:
- Remote Control – enabled in the loader settings, exposed on the start-up screen without a power cycle.
- Transfer channel selection – switching from Serial to MPI or PROFINET unlocks remote transfer on the DP variant.
- STOPRUNTIME event – a script-level trigger that exits Runtime cleanly so the loader appears without a hardware reboot.
This article walks through each mechanism against the SIMATIC HMI HMI device KTP400 Basic / KTP600 Basic / KTP1000 Basic / TP1500 Basic operating instructions (chapters 5.9 and 6.4.3) and the TIA Portal Help system, then finishes with a troubleshooting matrix and a cross-platform comparison for engineers who maintain mixed fleets.
Identifying Your Panel Variant
Before changing any project parameter, confirm the exact article number and firmware. The "DP" and "PN" suffixes denote the integrated fieldbus, and the loader dialog branches differently for each.
| Article Number | Model | Fieldbus | Loader / Transfer | WinCC Version |
|---|---|---|---|---|
| 6AV6647-0AA11-3AX0 | KTP1000 Basic DP | PROFIBUS DP / MPI | Serial + MPI + DP | WinCC flexible 2008 SP5 / TIA V13+ |
| 6AV6647-0AB11-3AX0 | KTP1000 Basic PN | PROFIBUS DP / PROFINET | Serial + MPI + PN | WinCC flexible 2008 SP5 / TIA V13+ |
| 6AV6647-0AE11-3AX0 | KTP1000 Basic DP (color PN/DP) | PROFINET + DP | Serial + MPI + PN + DP | WinCC flexible 2008 SP5 / TIA V13+ |
| 6AV6647-0AC11-3AX0 | TP1500 Basic | PROFINET | Serial + PN | WinCC flexible 2008 SP5 / TIA V13+ |
Locate the article number on the rating plate behind the front bezel or via Start Center > System > Information on the panel itself. The loader version is reported in the same menu and must be ≥ V14.0.00.00_01.05 for the remote-control workflow described below; older loaders ignore the project-side enable bit and revert to the legacy "power-cycle to enter loader" behaviour. The latest WinCC Basic image (TIA V18 / V19) is available from the Siemens Industry Online Support portal.
Prerequisites
- Project engineering host: TIA Portal V18 Update 2 or newer, with WinCC Basic / Comfort / Professional installed.
- Compatible firmware image loaded onto the KTP1000 Basic (recommended: V18.00.01 or newer, download from the KTP Basic firmware entry).
- Cabling matched to the chosen transfer channel:
- RS-232 Null-Modem (6XV1 440-2A...) for serial transfer.
- PROFIBUS DP cable with PROFIBUS connector (6GK1 500-0EA02) for MPI / DP transfer.
- Standard Cat-5e or better for PROFINET transfer on PN models.
- Source project with a defined transfer mode (Manual, Automatic, or Semi-automatic).
- Operator password for the Loader (default:
1000– reset before commissioning if changed from the factory value).
Enabling Remote Control in the WinCC Project
Remote Control is the master bit that exposes the loader without a power cycle. The setting lives in the loader configuration, not in the runtime project.
- Open the TIA Portal project that targets the KTP1000 Basic.
- In the project tree, select HMI_1 [KTP1000 Basic DP].
- Open Properties > Loader (older releases: Device Settings > Transfer).
- Tick Enable Remote Control. The dialog expands to show the sub-options listed below.
- Set Remote Control Type to
HMI Loader(notService) when the goal is simply to enter the loader from the project. - Under Permissions, choose the access level that should be allowed to invoke the loader (
0 – No accessthrough9 – All). For service technicians,5 – Serviceis the recommended compromise. - Compile the project and download it. The next time Runtime starts, the loader is reachable via the start-up screen, the "Control Panel" entry, or the configured hotkey.
Configuring the Transfer Channel
Each transfer channel exposes a different set of loader capabilities. Match the channel to the physical wiring you actually have in the cabinet.
| Channel | Loader Entry on Power-up | Remote Control | Remote Transfer (TiaPortal "Load to device") | Typical Use |
|---|---|---|---|---|
| Serial (RS-232 on X5) | Yes | Yes (on PN models only) | No | First commissioning, no fieldbus available |
| MPI | Yes | Yes (DP and PN) | Yes | S7-300 / S7-400 retrofit |
| PROFIBUS DP | Yes | Yes (DP and PN) | Yes | ET 200S / DP master |
| PROFINET | Yes | Yes (PN models only) | Yes | S7-1200 / S7-1500 |
To switch the channel on the panel side:
- Power the panel and tap Start Center > Settings > Transfer.
- Toggle the channel you need (
Serial,MPI/DP, orPROFINET) to Enabled. - Set the Channel 1 / Channel 2 parameters (MPI address
1by default, baud1.5 Mbit/s). - Press Apply; the panel prompts for restart only if the change touches the loader firmware.
To switch the channel inside the project:
- HMI_1 > Properties > Connection – assign the S7 PLC that will host the runtime tag set.
-
Properties > Loader > Transfer Channel – select
PROFIBUS MPIorPROFINET. - Set the matching HMI Station Address (1–126, default
1) and the baud rate (PROFIBUS: 9.6 kbit/s to 12 Mbit/s; PROFINET: 100 Mbit/s full duplex).
Adding a STOPRUNTIME Event to Exit Runtime Cleanly
The STOPRUNTIME event is a project-side script trigger that closes Runtime, hands the panel back to the loader, and avoids a hardware power cycle entirely. It works on every KTP Basic variant, regardless of transfer channel.
- In the project tree, right-click HMI_1 > Events and add a new event, e.g. ExitRuntime.
- Attach the event to a discrete button, a tag trigger, or a global scheduler entry.
- In the function list, call the system function
StopRuntimewith the reason0(normal exit) or1(operator-initiated transfer). - Optionally, chain the
StartRuntimefunction with delay0 msto bounce straight back into the loader.
Typical ladder on an S7-1200 to drive the trigger:
// OB1 - cyclic
// Trigger HMI Runtime exit on operator request
IF "HMI_Exit_Req" THEN
"HMI_Stop_Cmd" := TRUE; // pulse a discrete tag
END_IF;
// On the HMI side, configure an event "ValueChange" on "HMI_Stop_Cmd"
// that calls StopRuntime with Reason := 1
For multi-screen projects, put the event in a template so it is always loaded. That guarantees the operator can exit Runtime from any screen, which is especially useful on cell HMIs where a failed project download otherwise requires a service call.
Verification Procedure
- Compile the project (Project > Compile > Software (rebuild all)) and resolve every warning. TIA Portal flags inconsistencies between the loader channel and the connection configuration in the "Go online" dialog.
- Click Online > Load to device > Software and configuration. The transfer dialog should appear without a power cycle on the panel.
- On the panel, watch for the loader screen to surface within 5–8 seconds after Runtime ends.
- Confirm the loader version under Start Center > System > Information matches the version the project was compiled against.
- Run a controlled Runtime exit by triggering the STOPRUNTIME event from a button or the simulator (HMI_1 > Simulation > Start) and confirm the loader appears.
- Cycle the 24 V supply once to verify that the legacy start-up path still works as a fall-back.
Troubleshooting Matrix
| Symptom | Likely Cause | Diagnostic | Corrective Action |
|---|---|---|---|
| Loader only shows after power cycle, no Remote Control option | Transfer channel is Serial and the project was compiled with WinCC flexible 2008 SP2 or older | Open the project; check Properties > Loader > Transfer Channel and the build signature | Switch the channel to MPI/DP, recompile with TIA V18+, redownload |
| Remote Control checkbox is greyed out | Loader version < V14.0.00.00_01.05 | Start Center > System > Information | Update panel firmware using the Siemens firmware update package |
| STOPRUNTIME event fires but loader does not appear | Access level on the loader is too restrictive (Level 0) | Loader > Permissions dialog | Raise the access level to 5 (Service) for the technician account |
| Transfer from TIA Portal times out at 30 s | MPI address mismatch (PC adapter set to 0, panel at 1) | Compare PG/PC interface settings to the panel address | Match the HMI address and the PC adapter MPI address; restart the loader |
| Loader shows only PROFINET channel, DP channel missing | Project bound to the PN article number, panel is the DP variant | Compare the article number in the project to the rating plate | Re-assign the device in the project tree to the DP article number; recompile |
| Runtime restarts itself after STOPRUNTIME | Auto-start option in the loader is enabled and the project has no operator present | Loader > Auto-Start | Disable Auto-Start, or set the operator inactivity delay to a value the cell can tolerate |
| Panel boots directly to the project, no Start Center ever shown | Project is configured for "Automatic start in Runtime" | Properties > Runtime > Start Center | Toggle "Show Start Center at startup" to Yes
|
Cross-Platform Reference
Engineers maintaining mixed HMI fleets often need to apply the same logic to other vendors. The conceptual steps differ in name only:
- AutomationDirect C-more Micro: The setup screen is exposed via an internal system tag the project can write. F1/F5 key combinations navigate the loader without a reboot. Project-level "System Setup Screen Enable" determines whether operators can reach the loader at runtime.
- Beijer Electronics iX / X2 series: The iX runtime exposes System > Reboot to logged-in operators. Configure the iX project under Settings > System > Reboot to allow the loader to restart the panel without cycling 24 V. Refer to the Beijer iX Knowledge Base – Reboot the HMI Panel.
In all three platforms (Siemens KTP Basic, AutomationDirect C-more, Beijer iX) the principle is the same: a project-side permission plus a runtime-side exit function must be configured, otherwise the operator is forced into a hardware power cycle.
Field-Proven Commissioning Tips
- Two passwords, two roles. Set a level-9 administrator password for engineering and a level-5 service password for operators. The loader will then respect the operator role without exposing the full compile configuration.
- Document the loader version. Pin the loader firmware in the project archive. Mismatches between project and panel are the most common cause of "the loader changed" after a service visit.
- Avoid "automatic transfer" in production. TIA Portal supports fully unattended transfer; leave it disabled until the cell has been validated. A triggered STOPRUNTIME + manual confirm is safer for life-safety systems.
- Use the same transfer channel as the PLC link. If the S7-300 sits on PROFIBUS, the HMI on MPI uses the same cable and connector types, which simplifies spares.
- Tag the panel physically. A small label with the article number, firmware version, and project CRC eliminates guesswork for the next engineer.
Why does the KTP1000 Basic DP loader only appear after a power cycle on some projects?
Most often the transfer channel is set to Serial while the project was compiled with WinCC flexible 2008 SP2 or older. Switch the channel to MPI or DP in Properties > Loader > Transfer Channel, recompile with TIA Portal V18 or newer, and the Remote Control option becomes available without rebooting.
Can the DP variant of the KTP1000 Basic do a remote transfer at all?
Yes. Remote transfer is supported on the DP variant provided the transfer channel is MPI or PROFIBUS DP and the loader firmware is ≥ V14.0.00.00_01.05. PROFINET transfer is only available on the PN article number (6AV6647-0AB11-3AX0).
What does the STOPRUNTIME system function actually do?
It cleanly closes the Runtime, dismisses any scheduled tasks, and returns control to the loader or the Start Center. The function takes one parameter (the exit reason: 0 for normal, 1 for transfer) and runs in < 2 seconds on a KTP1000 Basic.
What is the default loader password on a new panel?
The factory default is 1000 and is set per access level. Siemens recommends changing the level-9 password during commissioning and documenting the change in the project archive to avoid lock-out.
Is there a way to trigger the loader from the S7 PLC instead of from a button?
Yes. Drive an HMI tag from the PLC (e.g. HMI_Stop_Cmd), bind the tag's "ValueChange" event to the StopRuntime system function, and the loader appears the moment the tag is set. Use access level 5 (Service) on the loader so the PLC cannot bypass the operator guard.