Configuring S7-1500 PROFINET HMI Connection to a WinCC Professional PC Station

This guide walks through commissioning an HMI connection between a SIMATIC S7-1500 controller (typically with an external CP IE interface module) and a WinCC Professional Runtime PC station over PROFINET in TIA Portal. It also documents the two recurring field faults — the "Wrong partner" diagnostic in the HMI connection editor and the flashing red ERROR / SF LED on the CPU — and explains how the topology view interacts (or interferes) with the logical S7 connection.

1. Required Hardware and Software

TIA Portal, the WinCC Professional option, and the CP IE HSP (Hardware Support Package) must all be installed before the CP can be inserted into the device configuration. Install matching versions of TIA Portal and WinCC Professional — mixing V18 TIA Portal with V17 WinCC Runtime is not supported.

2. Network Architecture

Two valid topologies exist:

• Direct connection (recommended for engineering): Engineering PC ↔ CPU PN port ↔ CP 1543-1 ↔ WinCC RT PC. PROFINET and HMI traffic share one subnet.
• Separated subnets: The CP IE connects to a dedicated PN/IE_1 subnet that is physically isolated from the field-level PROFINET used by distributed I/O. The CPU's PROFINET interface handles the field network, the CP IE handles the HMI/IT network.

For the separated subnet case (the most common in customer projects), the IP scheme below is a working baseline:

All devices must share the subnet PN/IE_1 as it is declared in the project. PROFINET device names must be unique across the subnet; the WinCC PC station uses its own name (default PCStation.x) and the CPU uses a separate name (default plc1.x).

3. Device Configuration in TIA Portal

1. Open the TIA Portal project and add the S7-1500 CPU to the project. Use Add new device > SIMATIC S7-1500 > CPU and select the exact order number and firmware version. The firmware version of the inserted CPU must match the physical hardware; mismatched firmware is the most common reason for a flashing SF LED after a download.
2. From the hardware catalog, expand Communication modules > CP 1543-1 and drag the module into a free slot of the S7-1500 rack. Confirm the firmware version.
3. Add the PC station: Add new device > PC systems > SIMATIC PC Station. Insert a WinCC Professional RT application from the catalog into slot 1 of the PC station. Insert an IE General (CP IE) into a free PCI/PCIe slot of the PC station so it can be connected to the PROFINET subnet.
4. Open the Devices & Networks editor. The Network view shows the CPU, CP 1543-1, and PC station.

3.1 Connect the CP IE of the PC Station to PN/IE_1

In the network view, select the IE General (CP IE) module on the PC station and look at Properties > Ethernet addresses. In the Interface connected with dropdown, choose PN/IE_1. Assign the WinCC RT PC IP (192.168.0.20) and the matching subnet mask. TIA Portal will create a logical network that the CP 1543-1 and the CPU can also be assigned to.

For the CPU, the X1 (or X2) PROFINET interface must also be assigned to PN/IE_1. Likewise the CP 1543-1 X1 interface. Three devices, one logical subnet, all reachable.

4. Creating the HMI Connection

With the network in place:

1. In Devices & Networks, click the Connections button in the toolbar at the top. The editor mode switches from network view to the connection editor.
2. In the dropdown on the left of the connections editor toolbar, choose HMI connection.
3. The left pane lists the HMI-capable endpoints in the project. Locate WinCC RT Professional under the PC station.
4. Drag a connection from WinCC RT Professional onto the S7-1500 CPU. The endpoint is the CPU's PROFINET interface — not the CP 1543-1.

TIA Portal now creates a named HMI connection. The connection name and parameters can be reviewed in the connection table. By default the access point is S7ONLINE and the connection uses the S7 protocol over TCP/IP (ISO-on-TCP, port 102).

4.1 Connection Parameters

5. WinCC Professional Project Settings

Open the WinCC RT Professional project node and verify:

• Runtime settings > General: The configured computer name matches the Windows hostname of the RT PC. TIA Portal compiles the RT project with this name; mismatched names cause "Cannot find partner" errors at runtime.
• Runtime settings > Services: The WinCC RT process is set to start automatically. The "Autostart" option is recommended for production lines.
• Tag management: Tags pointing to the S7-1500 use the connection name created in step 4. TIA Portal auto-fills the connection name; if the connection is renamed later, tag references break silently.

6. Compile, Download, and Verify

1. Right-click the CPU > Compile > Hardware and software (rebuild all). Resolve any compilation errors before continuing — the most common is "Device with order number X cannot be configured because the HSP is not installed."
2. Right-click the PC station > Compile > PC station. The compile output generates the PC station configuration file (typically PCStation.cfg) that the RT loader (WinCC RT) reads at startup.
3. Download the S7-1500 station first. The CPU's MRES or RUN/STOP switch should be set to STOP if the hardware configuration has changed (e.g., a new CP 1543-1 was added). After a successful download, set the switch back to RUN.
4. Download the PC station. Confirm the RT loader reports the new configuration and that the WinCC RT service restarts.

7. Resolving the "Wrong Partner" Error

The "Wrong partner" message is reported by the WinCC Runtime when it attempts to establish the S7 connection and the device on the configured IP does not respond as an S7 server. Common causes and their fixes:

8. Resolving the Flashing Red CPU LED After Hardware Download

When the CPU shows a steady or flashing red ERROR / SF LED immediately after downloading a hardware configuration that includes a CP IE module, the most frequent root causes are:

1. Firmware version mismatch. The CP IE inserted into the device configuration has firmware X, but the physical module has firmware Y. TIA Portal flags this as an "IO device error." Update the catalog entry or update the physical module firmware via the TIA Portal online dialog.
2. Missing or incorrect PROFINET device name on the CPU. The CPU's PROFINET interface must have a unique device name (not the default empty name) for IO controllers to address it. Assign the name online using Online & diagnostics > Assign PROFINET device name.
3. Duplicate IP address on the subnet. Two devices share the IP entered in TIA Portal. The CPU's SF LED combined with a BF on the PROFINET port indicates this. Use Wireshark or the ARP table of a managed switch to find the duplicate.
4. CP 1543-1 security / firewall settings. The CP IE supports an internal stateful firewall. If "Security > Firewall" is enabled and the WinCC RT PC IP is not in the allowed list, the CP silently drops S7 traffic. Disable the firewall during commissioning and re-enable with a clean rule set afterwards.

The CPU's diagnostic buffer (Online & diagnostics > Diagnostics buffer) provides the exact error code and timestamp. Common diagnostic buffer entries for PROFINET issues are:

• IO device failure (channel / station) — physical disconnect or duplicate IP.
• PROFINET IO: Device name assignment error — name on the device does not match the configured name.
• Security event: Communication blocked by firewall — CP IE firewall drop.
• Connection resource exhausted — too many HMI / S7 connections opened.

9. Secure Communication Considerations (TIA Portal V17 and Later)

From TIA Portal V17 onward, secure S7 communication can be configured for S7-1500 controllers. The basics are documented in the official Siemens TIA Portal help under Useful information on Secure Communication.

For a WinCC RT connection, the typical secure setup is:

1. The S7-1500 CPU has a security user with appropriate rights (HMI access).
2. The HMI connection in TIA Portal is created with Connection type = HMI connection, secure.
3. The PC station's local security certificate is imported into the CPU's certificate manager under Devices & networks > CPU > Security > Certificate manager.
4. The WinCC RT PC trusts the CPU's certificate (the runtime loads it automatically from the project).

10. Topology View vs. Network View — Field Practice

The confusion between the network view and the topology view is the single most repeated mistake when commissioning S7-1500 with WinCC PC stations. Rules of thumb:

• Network view = logical assignment of devices to subnets (PN/IE_1). This is where the HMI connection lives.
• Topology view = physical port-to-port wiring for PROFINET devices, used by PROFINET IO controllers for neighbor detection. It is not required for HMI-only connections.

Procedure to clean up after a topology mistake:

1. Switch to Topology view.
2. Identify any line drawn between the S7-1500 CPU and the PC station. The PC station's IE General will show as a "PROFINET endpoint" but the WinCC RT application is not an IO device.
3. Right-click the line and choose Delete. Save and recompile the project.
4. Re-download both the CPU and the PC station configuration.

11. Verification Checklist

12. Troubleshooting Matrix

13. Frequently Asked Questions