Configuring Siemens MP377 Sm@rtServer for Remote HMI Access

Overview

Siemens SIMATIC operator panels in the MP377 / Multi Panel class expose their runtime screens over Ethernet using the WinCC flexible Sm@rtServices option family. The two relevant components are Sm@rtServer (embedded in the panel) and Sm@rtClient (the viewing runtime on the engineering / observer PC). When correctly licensed, configured, and networked, a remote PC can connect to a panel such as a SIMATIC MP 377 using a TCP session and either mirror or control the panel faceplate from the office, control room, or any LAN/WAN segment routed to the panel.

This reference covers the engineering required to make a panel reachable on an address like http://192.168.0.1:8000 from a host on 192.168.0.2, the licensing path that unlocks the feature, the TCP ports that must be open, the configuration steps in WinCC flexible 2008 SP3 and later, and the verification procedure for confirming that screen mirroring is operational.

Prerequisites

Before enabling remote screen access on a Siemens MP377-class panel, confirm the following items are in place:

• Hardware: SIMATIC MP 377 (12", 15", or 19") or compatible 377-generation Multi Panel with integrated PROFINET/Ethernet interface. The on-board Ethernet port is mandatory; CPU variants without Ethernet cannot host Sm@rtServer.
• Firmware / Image: Panel image version V12.01.01 or newer that supports the Sm@rtServer runtime. Check with Start > Settings > OP Properties > Version on the panel or via ProSave.
• Engineering tool: WinCC flexible 2008 SP3 (or later micro versions) with the matching HSP matching the panel image. TIA Portal WinCC (Comfort/Advanced) can be used for newer project migrations, but the runtime option key must match the engineering environment.
• Licensing: A valid WinCC flexible /Sm@rtAccess option license for the panel. Sm@rtServer is bundled inside the Sm@rtAccess option key and is transferred to the panel via ProSave / Automation License Manager.
• Runtime on viewing PC: A WinCC flexible Runtime (RT) installation acting as Sm@rtClient, or any third-party VNC viewer configured to the panel's listening port (for read-only mirroring, depending on firmware variant).
• Network reachability: Layer-2/3 path between the observer PC and the panel, with no firewall blocking the Sm@rtServer TCP ports (see table below).

Sm@rtServices Architecture

Sm@rtServices is the umbrella term for three sub-options in WinCC flexible:

For screen mirroring the workflow is:

1. The panel runs Sm@rtServer as a TCP listener.
2. The observer PC launches Sm@rtClient (a plug-in inside WinCC flexible Runtime) which initiates a TCP session to the panel.
3. The session negotiates a display channel; the panel periodically transmits screen tiles and accepts pointer / key events from the client, depending on the configured rights.

TCP / UDP Port Assignments

Sm@rtServer uses the port range listed below. These values match the Siemens FAQ "Which ports are used by WinCC flexible?" and must be opened on any stateful firewall between the panel and the viewing PC.

Network Topology

The reference topology assumes a flat industrial LAN with the panel and observer PC on the same /24 subnet. Replace the placeholder IPs with the project values.

Step-by-Step Configuration

Step 1 — Enable Sm@rtServer in the WinCC flexible project

1. Open the project in WinCC flexible.
2. Navigate to Project > Properties > Services (or in 2008 SP3: right-click the panel device > Properties > Services).
3. Tick Sm@rtServer.
4. Under Server settings, set the listen port (default 1024) and define the access password (recommended: 8+ characters, mixed case, one digit).
5. Define operating rights: View only, Operate, or Full administration. The default of "View only" prevents accidental writes from a remote client.
6. Compile → Transfer → to the panel.

Step 2 — Configure the panel IP

1. On the panel, open Control Panel > Network and Dial-up Connections > PN_X1.
2. Set IP 192.168.0.1, subnet mask 255.255.255.0, leave gateway blank for a flat LAN.
3. Confirm reachability from the PC: ping 192.168.0.1 must succeed before continuing.

Step 3 — Install / Activate the Sm@rtAccess license

1. On the engineering PC launch Automation License Manager.
2. Connect to the panel (USB, Ethernet, or MPI/PROFIBUS depending on the variant).
3. Transfer the Sm@rtAccess license key to the panel's license dongle or onboard license storage.
4. Reboot the panel; on the next runtime start the message "Sm@rtAccess is not licensed" should no longer appear.

Step 4 — Configure the Sm@rtClient on the observer PC

1. Install WinCC flexible Runtime on the observer PC. The RT can be a minimal "Sm@rtClient-only" installation; it does not need to host a project of its own.
2. Start the RT; the Sm@rtClient dialog appears on first launch.
3. Enter the panel IP 192.168.0.1, port 1024, and the password defined in Step 1.
4. Click Connect. The panel screen renders in a window on the PC; mouse and keyboard events are forwarded if "Operate" or higher rights are enabled.

Step 5 — (Optional) HTTP-style viewer on port 8000

If a literal browser URL such as http://192.168.0.1:8000 is required by plant standards, two supported paths exist:

• Custom web pages: WinCC flexible supports HTML pages with plugin integration; the URL handler can be programmed in the project to redirect to the Sm@rtServer channel. Port 8000 must be opened in the panel firewall (see WinCC flexible /Sm@rtAccess FAQ).
• Third-party VNC bridge: A small Windows service on the observer PC can convert VNC frames served by Sm@rtServer into HTTP MJPEG. This is not a Siemens-supported path; verify against the plant IT security policy before deployment.

Verification Procedure

After commissioning, run the following checks and record the results in the FAT/SAT report:

1. Ping test: ping 192.168.0.1 -n 4 returns < 5 ms with no loss on a /24 LAN.
2. Port reachability: Test-NetConnection -ComputerName 192.168.0.1 -Port 1024 (PowerShell) or telnet 192.168.0.1 1024 shows TcpTestSucceeded : True.
3. Sm@rtClient connection: a stable screen image appears within 2–5 s of pressing Connect; the connection state indicator on the client shows Connected.
4. Bidirectional event test: with "Operate" rights enabled, press a button on the Sm@rtClient window and confirm the corresponding tag value changes in the WinCC flexible project (visible in the tag simulator or via cross-reference in the panel diagnostic pages).
5. Stress / stability test: leave the session open for ≥ 24 h; CPU load on the panel stays below 60 % and no watchdog resets are logged.

Comparison: Sm@rtServer vs. Generic Remote Desktop Tools

For commissioning and operator observation, prefer Sm@rtServer: it understands the WinCC flexible project structure, which means the panel does not waste CPU rendering an entire desktop that the operator will never see. For ad-hoc remote support into the engineering PC running TIA Portal, a separate VNC / TeamViewer session is acceptable but should be documented and time-limited.

Troubleshooting Matrix

Security and Operational Notes

• Sm@rtServer exposes the panel's runtime over TCP. Treat the segment as a process-control network: no direct Internet exposure, no consumer-grade routers, and mandatory change control for any firewall modification.
• Rotate the Sm@rtServer password at every maintenance window. The credential is sent as part of the Sm@rtClient handshake, so it must not match any domain password used elsewhere.
• Disable Sm@rtServer when not in use if the project allows runtime toggling via a tag. This removes the attack surface between operator shifts.
• For audit / regulatory environments (21 CFR Part 11, IEC 62443), route Sm@rtClient sessions through a jump host that records the operator identity and session duration.

Migration to TIA Portal / WinCC Comfort Panels

Projects that migrate from WinCC flexible to TIA Portal (WinCC Comfort / Advanced) gain a similar but more feature-rich remote-access model:

• Comfort Panels (TP700 / TP900 / TP1200, KP / KTP series) bundle Sm@rtServer and add native VNC support as a runtime option, accessible on port 5900/tcp by default.
• The web-based visualization option publishes the WinCC Runtime screens over HTTPS (port 443/tcp) using the panel's web server — the closest equivalent to the user's http://panel:8000 request. See the SIMATIC HMI Web Access documentation for commissioning details.

FAQ