Configuring WinCC v14 Redundant Operator Stations with Dual

David Krause10 min read
SiemensTechnical ReferenceWinCC
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Overview

WinCC Runtime Professional inside TIA Portal supports a paired-operator redundant topology in which two identically configured PCs take over the visualization of the same process. Either station can fail, be taken offline for maintenance, or be rebooted without operator-screen loss because the partner machine takes over the process connection. Adding a dual-monitor extension lets a single WinCC Runtime Professional instance drive two physical displays (extended desktop) while the redundancy partnership is preserved across both units.

This reference covers the configuration sequence documented for WinCC Professional V13 SP1 / V14 in the Siemens manual WinCC Professional V13.0 SP1 (entry ID 109096785), section 14.3.2 "Configuring the redundant system", together with the multi-monitor how-to (entry ID 109744837) and the WinCC Unified redundancy requirements described in the TIA Portal V20 What's New – Redundancy documentation. Although the V20 entry describes WinCC Unified, the hardware/OS parity rule applies equally to the WinCC Professional redundancy model.

Scope: This document targets the redundant Operator Station topology, not the redundant Server topology. No central archive/redundancy server is used; each PC runs a local WinCC RT Professional project with the redundancy partner link.

Topology and Component Roles

In a redundant operator-station configuration, two engineering/runtime PCs host the same WinCC Professional project. Each runs an independent WinCC RT Professional service that maintains its own connection to one or more PLCs (S7-1200, S7-1500, S7-300/400). The two stations communicate continuously over the redundancy LAN using the WinCC redundancy channel and exchange:

  • Lifecycle state (master, standby, fault, passivated).
  • User-archive and tag values for hot-standby handover.
  • Audit-trail / logging context when the option is licensed.

Both PCs can also drive a dual-monitor desktop (left monitor = main process overview, right monitor = detail faceplates / alarm overview). The monitor layout is part of the project, not the redundancy logic; therefore both partner stations must be configured with the same screen resolution per monitor to avoid visual drift after a switchover.

Prerequisites

Item Requirement
Engineering software TIA Portal V14 with WinCC Professional V14 (or V13 SP1 project imported)
Runtime license WinCC RT Professional (per station) plus the redundancy option package on each PC
PC hardware Two PCs with identical CPU, RAM, storage, and graphics adapters (per Siemens redundancy guidance – WinCC Unified reference: TIA Portal V20 Redundancy)
Operating system Windows 7 / 10 / Server 2012 R2 / 2016 in matching edition, language and patch level on both PCs
Graphics Two graphics outputs per PC (DP, HDMI, DVI) supporting extended desktop at the project resolution
Network Dedicated redundancy LAN between the two PCs (separate VLAN recommended) plus the terminal-bus connection to the PLCs
User rights Local administrator on both PCs for RT installation and firewall configuration
Hardware parity: Siemens explicitly requires identical hardware and OS installation for the WinCC redundancy pair. Drift in service packs, graphics drivers, or runtime build will surface as switchover jitter or synchronization faults.

Step-by-Step: Project-Side Redundancy Configuration

  1. Open the WinCC Professional project in TIA Portal V14.
  2. In the project tree, select the HMI device that represents the first operator station (OS_1).
  3. Open Properties > Redundancy and enable Operate as redundant partner. Assign a unique redundancy partner IP address and verify the redundancy port (default 5000/tcp – confirm in the manual 109096785, section 14.3.2).
  4. Open the second operator-station device (OS_2). Enable the same redundancy role and enter the IP of OS_1 as its partner.
  5. Compile both devices. Check that the redundancy tag block (system tags under @Redundancy) is generated on both stations.
  6. Download the project to OS_1, then to OS_2. The runtime on the second machine starts in standby; the first machine starts in master.
  7. From the TIA Portal "Online > Redundancy diagnostics" view, verify that both stations report the partner as reachable and that the synchronization state is in sync.

Step-by-Step: Dual-Monitor Configuration

The procedure follows the Siemens how-to 109744837 for multiple monitors in WinCC Runtime Professional.

  1. In Windows, open Display Settings on OS_1 and OS_2 and arrange the two monitors as an extended desktop. Use the same left/right ordering and the same resolution on both PCs.
  2. In TIA Portal, open the OS_1 device and navigate to Properties > Screen > Monitor configuration. Activate Multi-monitor operation.
  3. Assign each WinCC screen to monitor 1, monitor 2, or dynamic (start screen). The Overview screen mentioned in the how-to is configured under Runtime settings > Screen management; this entry point was renamed between V13 and V14, which is why the inspector window does not surface it directly in V14.
  4. Verify the setting with Compile > Check consistency. TIA V14 will report "Multi-monitor configuration is valid" only when every referenced screen exists on every assigned monitor.
  5. Repeat steps 1–4 on OS_2 so the partner station mirrors the layout.
  6. Download the modified project to both stations and restart the WinCC RT Professional service.
V13 → V14 migration: The V13 SP1 manual (entry ID 109096785) is the authoritative source for redundancy in V14 because the V14 manual set was incomplete in some revisions and the redundancy chapter was re-published without functional change. All V13 SP1 redundancy procedures apply unchanged to V14 unless explicitly noted in a V14 service-pack readme.

Remote Access without WebNavigator / Web Access

Because the requirement excludes the built-in WinCC WebNavigator and the V14 Web Access mechanism, the engineering options for off-station access are:

  • Requires a mechanism to update the A-record on switchover (PowerShell script reacting to the WinCC redundancy tag block)
  • Method Mechanism Considerations
    RDP (Remote Desktop Protocol) Native Windows host; one user per host session; multiple sessions with RDS CALs Works with redundancy because each station can be remoted independently; monitor mapping follows the remote client's resolution, not the host's two monitors
    DNS-based load distribution A DNS A-record (e.g. os-red.hmi.local) resolves to the currently active master; clients always reach whichever station is master Simple but provides only one logical target – clients lose their session on every switchover
    RAS / VPN Windows RRAS or a third-party VPN appliance provides the IP path; WinCC Remote Desktop then tunnels in Cleanest separation between network access and visualization; matches typical plant firewall policy
    Third-party KVM / IP-KVM Hardware-based access to the operator-station video outputs and USB Useful for vendor support; does not provide an automation-grade API

    For a redundant pair, the recommended pattern is RDP-over-VPN into the partner PC, with the active master connected through a jump host that resolves either via DNS (with auto-update on redundancy state) or via a manually chosen target. RDP does not consume a WinCC license; it uses the existing Windows session that runs RT Professional.

    Network and Firewall Configuration

    The redundancy channel uses TCP/IP between the two operator stations. Open the following ports in the Windows firewall on both OS_1 and OS_2:

    • TCP 5000 (default WinCC redundancy service – verify in the manual 109096785).
    • UDP 5001 (redundancy heartbeat – verify per project compile log).
    • TCP 1030–1033 (WinCC RT internal channels for trend, alarm, and tag service).

    Both PCs must have:

    • Static IP addresses on the redundancy VLAN.
    • Same subnet mask and gateway.
    • Matching computer names resolved through DNS or a local hosts file (redundancy relies on NetBIOS resolution in addition to IP).

    Switchover, Failover, and Synchronization

    Once both stations are running, the redundancy layer behaves as follows:

    • Master election: The station that starts first becomes master; if both start simultaneously, the lower IP address wins.
    • Heartbeat timeout: If no heartbeat is received within the configured supervision time (default ≈ 25 s), the standby station promotes itself to master.
    • PLC connection: Only the master holds an active connection to the PLCs; the standby passively receives tag values through the redundancy sync. On switchover, the new master opens its own PLC connections within seconds.
    • Operator sessions: Any open client (HMI client on the master, RDP session, or remote operator) loses its connected state on switchover. Reconnection is automatic for HMI clients; RDP users must reconnect.

    Verification Checklist

    1. From TIA Portal, open Online > Redundancy diagnostics. Both stations must show Status = in sync and Partner = reachable.
    2. Stop the WinCC RT service on the master. Within the supervision time, confirm the partner becomes Master and the alarm line on the HMI screen shows the expected "Redundancy switchover" event.
    3. Restart the previously stopped service. Confirm it returns in Standby and that the original master does not auto-takeover (re-arm required to avoid thrashing).
    4. Open both monitor outputs and verify that the screen population on each monitor matches between OS_1 and OS_2.
    5. From a remote client (RDP), connect to the DNS name and verify the RDP session lands on the active master after a forced switchover.

    Troubleshooting Matrix

    Symptom Likely Cause Remedy
    Standby stays in Fault Redundancy port blocked or partner unreachable Verify TCP 5000 / UDP 5001 are open on both Windows firewalls and that partner IP is pingable
    Both stations become master simultaneously Heartbeat packets dropped, asymmetry in routing, or VLAN mismatch Reduce redundancy supervision time; check VLAN tagging on redundancy switch ports
    Multi-monitor layout shows only one screen at runtime Windows display not set to extend, or V14 does not recognize the second adapter Re-enable extend mode, set primary monitor, restart RT Professional
    V14 cannot locate the Overview screen setting from the V13 manual Setting relocated between V13 and V14 Use Runtime settings > Screen management instead of the inspector window; the multi-monitor how-to (109744837) covers the V14 path
    Manual download truncates at ~600 pages Siemens support portal download cache corruption Clear browser cache, re-download with a fresh session, or request the entry through Siemens Industry Online Support with the entry ID
    RDP session shows black screen on second monitor RDP multi-monitor not enabled on client Use mstsc /multimon on the client and connect with the option Use all my monitors for the remote session
    DNS auto-update not happening on switchover Script bound to wrong redundancy tag Read the @RedundancyMaster tag and write to the DNS A-record via dnscmd / PowerShell DnsServerResourceRecord

    Migration and Version Compatibility Notes

    The V13 SP1 system manual (entry ID 109096785) remains valid for V14 redundancy configuration because the runtime redundancy engine was carried forward without functional change in the V14 release. Differences that affect only the engineering interface:

    • The Overview screen property moved from the inspector window to the Screen management runtime settings dialog.
    • Multi-monitor assignment now uses a graphical layout editor rather than the tabbed inspector in V13.
    • The redundancy option package is licensed per station and does not require the WinCC RC license on the engineering station if redundancy is configured in the project tree.
    Forward planning: When migrating from V14 to V17 or later, re-validate the redundancy partner IP and port because Siemens reserved a new redundancy service in V17 that may default to a different port if the older setting is not preserved during upgrade.

    Can the WinCC Professional V13 SP1 manual be used for a TIA Portal V14 redundancy project?

    Yes. The redundancy chapter from WinCC Professional V13.0 SP1 (section 14.3.2) is valid for V14 because the redundancy runtime engine was carried forward unchanged. Only the location of the Overview screen setting in the engineering UI was renamed.

    Where do I configure the Overview screen in TIA Portal V14 if the inspector window no longer shows it?

    Open the HMI device, go to Runtime settings > Screen management > Multi-monitor, and assign the start screen there. This replaces the V13 inspector path described in 109744837.

    Do both redundant operator stations need identical hardware and operating systems?

    Yes. Siemens explicitly requires identical hardware and identical OS installation for a redundant pair so that switchover behavior is deterministic. This is documented for WinCC Unified and applies equally to the WinCC Professional operator-station redundancy model; see TIA Portal V20 Redundancy.

    Is remote access without WebNavigator or Web Access possible on a redundant pair?

    Yes. The standard pattern is RDP-over-VPN (Windows RRAS or third-party VPN) into the active master, optionally fronted by a DNS name whose A-record is updated when the @RedundancyMaster tag changes. Both stations remain reachable independently through RDP; switchover simply changes which station holds the live process connection.

    Which TCP/UDP ports must be opened between the two redundant operator stations?

    The WinCC redundancy service uses TCP 5000 by default for partner communication and a UDP heartbeat on port 5001; verify both values in the compiled project log and the V13 SP1 system manual 109096785. Internal WinCC channels for trend, alarm, and tag service additionally use TCP 1030–1033.

    Back to blog