1. Problem Overview
The TIA Portal V13 SP1 (Update 5) runtime throws the dialog "Online: Cannot load the selected communication driver; file not found" the moment the user clicks Go online against a SIMATIC S7-1200 station. The error appears before the Go online wizard enumerates the accessible nodes, which means the failure is inside the local PG/PC communication stack, not in the physical link to the controller.
The dialog originates from the TIA Portal subsystem that tries to load a communication driver DLL (typically Siemens.Automation.CommonServices.Online.dll or one of the S7DOS proxy modules) from the TIA Portal install path or from the Windows system folder. The exact driver name is masked by the user-facing error string; the file the runtime is hunting is normally one of the following:
-
S7DosDll.dll— S7 DOS interface -
s7oiehsx64.dll/s7oiesx64.dll— S7ONLINE export -
S7IEPG.dll— Internet / Ethernet PG interface used by the SIMATIC IEPG Help service -
SIAPIx64.dll— Siemens Application Interface
When one of those DLLs is missing, blocked by an installer cleanup, or unable to register against the local Windows service stack, the runtime reports the generic "file not found" condition and refuses to open the S7ONLINE access point.
2. Affected Environment and Versions
| Component | Version / Catalog No. | Notes |
|---|---|---|
| Controller | SIMATIC S7-1200 CPU 1212C DC/DC/DC 6ES7 212-1BD30-0XB0 |
Firmware V3.0 (third generation). The 6ES7 212-1BD30-0XB0 is a 1212C with 8 DI / 6 DO / 2 AI on board. |
| Engineering | STEP 7 Basic V13 SP1 Update 5 | Build ships with TIA Portal V13.0 plus SP1 and Update 5. Compatible with Win 7 SP1, Win 8.1, Server 2008 R2, Server 2012 R2. |
| Operating system | Windows 8.1 Professional (64-bit) | The fix procedure is also valid for Windows 7 SP1 and Windows 10 1709-era builds. |
| Required service | SIMATIC IEPG Help (display name) / SIMATIC IEPG (service name) |
Provides TCP/IP access to S7-1200 CPUs from the TIA Portal access point S7ONLINE. |
| Required local group | Siemens TIA Engineer | Auto-created by the TIA Portal installer. Removed when TIA Portal is uninstalled. |
| Complementary tool | SIMATIC Automation Tool (includes PN_Identifier) | Used to repair PROFINET/PROFINET-device naming tables. |
3. Root Cause Matrix
| # | Likely Cause | Typical Symptom | Diagnostic Command |
|---|---|---|---|
| C1 | SIMATIC IEPG Help service is stopped or set to Disabled | Go online fails immediately, no timeout | sc query "SIMATIC IEPG" |
| C2 | Logged-on user is missing from local Siemens TIA Engineer group |
Failure only on user account; admin account works | net localgroup "Siemens TIA Engineer" |
| C3 | TIA Portal install was partially repaired — DLLs missing | Dialog names a driver; reinstall fixes it | Verify %ProgramFiles%\Siemens\Automation\Portal V13\ contents |
| C4 | PROFINET device name table corrupted (PN_Identifier) | Online scan shows wrong device names | Run SIMATIC Automation Tool > PN_Identifier |
| C5 | NIC driver stack damaged or TCP chimney offload enabled | Online works after NIC uninstall/reinstall | Device Manager > NIC > Driver tab |
| C6 | PG/PC interface points to wrong S7ONLINE access point | Online only works after manual interface selection | Start > Siemens Automation > Set PG-PC Interface |
| C7 | Windows firewall blocks UDP/TCP — port 102, 5001, 34964 | Ping to CPU works, online fails | Test-NetConnection 192.168.0.1 -Port 102 |
| C8 | Third-party security suite (Trend, McAfee, Bitdefender) quarantines S7DOS DLLs | DLL signed by Siemens flagged as "untrusted" | Check quarantine log of the AV product |
4. Pre-Diagnostic Checklist
- Close all instances of TIA Portal. Stop the SIMATIC Automation Runtime tray service to release the S7DOS driver lock.
- Confirm administrator credentials for the local workstation. The fixes below need Run as administrator on both the TIA Portal shortcut and the elevated command prompt.
- Capture the controller IP, subnet mask, and PROFINET device name (from the project offline). A factory-new 6ES7 212-1BD30-0XB0 ships with IP 192.168.0.1 and PROFINET device name
s71200. - From an elevated command prompt, verify the CPU responds to the ICMP echo:
If ping fails, the issue is the physical link — do not continue with this procedure until the cable, switch, or IP configuration is fixed.ping 192.168.0.1 - Verify the workstation and the CPU are in the same IP subnet. With the default mask 255.255.255.0 the PG can use 192.168.0.2..192.168.0.254.
- Note any recently installed updates or security products in the last 14 days — the IEPG service is frequently disabled by Group Policy or by an overzealous AV product.
5. Procedure 1: Restore the SIMATIC IEPG Help Service
The SIMATIC IEPG Help service is a TCP/IP socket server that brokers the S7-1200 online traffic. If the service is stopped, the TIA Portal runtime cannot bind the S7ONLINE access point and aborts with the driver-not-found dialog.
- Open Control Panel → Administrative Tools → Computer Management. On Windows 8.1 press Win+X and select Computer Management.
- Expand Services and Applications → Services.
- Locate the entry SIMATIC IEPG Help. The internal service name is
SIMATIC IEPGand the binary isS7iepgsv.exe(32-bit) orS7iepgsv64.exe(64-bit). - Right-click → Properties. Set Startup type to Automatic.
- Click Start. Status must reach Running. If the service fails to start, the executable is missing — jump to Procedure 3.
- From an elevated command prompt verify:
sc query "SIMATIC IEPG" Tasklist /FI "IMAGENAME eq S7iepgsv*.exe" - Open Start → Siemens Automation → Set PG-PC Interface. Confirm the access point S7ONLINE is assigned to TCP/IP → <your NIC>.
102 (ISO-TSAP) and uses UDP 34964 for PROFINET discovery. If another program has already bound these ports, the service starts and immediately exits. Use netstat -ano | findstr :102 to find the conflicting PID.
6. Procedure 2: Restore Local Group Membership
TIA Portal V13 enforces Windows group-based access to its COM activation and online services. If the user account is removed from the local group, the activation scope cannot load the S7ONLINE proxy and reports a missing driver file.
- Open Computer Management → Local Users and Groups → Groups.
- Double-click Siemens TIA Engineer. If the group does not exist, jump to Procedure 3 — the TIA Portal install is broken.
- Click Add… and enter the Windows account that runs TIA Portal. Use the Locations… button to confirm the local computer is selected, not the domain.
- Verify the result from an elevated command prompt:
net localgroup "Siemens TIA Engineer" - Log off and log on again so the new group membership applies to the user's security token.
- Launch TIA Portal V13 with Run as administrator and retry Go online.
7. Procedure 3: Repair or Reinstall TIA Portal V13 SP1 UPD5
A partial uninstall, a Windows installer rollback, or a malware cleanup can delete the driver DLLs while leaving the registry and shortcuts intact. Repair the install before re-imaging the workstation.
- Close all Siemens software and tray services.
- Insert the original TIA Portal V13 SP1 Update 5 install media or mount the corresponding
.iso— e.g.SIMATIC_TIAP_V13_SP1_UPD5.iso. - Run
Setup.exeand select Repair / Modify Installation. - Accept the default component set. The repair re-extracts
S7DosDll.dll,S7IEPG.dll, and the S7ONLINE proxy modules to:C:\Program Files (x86)\Siemens\Automation\Portal V13\ - Reboot the workstation. Verify the binaries are present:
dir /s /b "C:\Program Files (x86)\Siemens\Automation" S7DosDll.dll S7IEPG.dll - If the repair fails or the group from Procedure 2 is still missing, perform a full uninstall, then reinstall. Use the SIEMENS Install Cleanup Tool (Siemens KB entry 109751706) to remove orphan registry keys before reinstalling.
8. Procedure 4: Install the SIMATIC Automation Tool and PN_Identifier
The PN_Identifier component that ships with the SIMATIC Automation Tool can rebuild the PROFINET device name table on the PG/PC. The communication driver load step inside TIA Portal consults the same table; a corrupt entry causes the S7DOS layer to throw the file-not-found dialog.
- Download the SIMATIC Automation Tool (SAT) version 2.x or higher from the Siemens support portal.
- Install SAT with default options. The installer registers the
PN_IdentifierCOM service. - Launch SAT and connect to the S7-1200 subnet. Run Diagnostics → PROFINET → Identify. SAT will list all reachable PROFINET devices and their stored names.
- For the 6ES7 212-1BD30-0XB0 confirm that the device name is
s71200. If the entry is empty, assign it from the TIA Portal project via Online & Diagnostics → PROFINET Device Name → Assign. - Close SAT and retry the TIA Portal Go online action.
9. Procedure 5: Reset and Reinstall the Network Card Drivers
The TIA Portal S7ONLINE stack binds sockets directly against the NIC driver. A damaged NIC driver or an offload feature such as TCP Chimney Offload can break the bind, causing the runtime to lose its DLL handle.
- Open Device Manager → Network Adapters. Right-click the active Ethernet NIC and select Uninstall device. Tick Delete the driver software for this device.
- Reboot. Windows Plug and Play reinstalls the in-box driver. For Intel/Realtek NICs, install the OEM driver from the vendor site to restore RSS and LSO support.
- Disable TCP Chimney Offload, RSS, and NetDMA on the NIC advanced properties:
netsh int tcp set global chimney=disabled rss=disabled netdma=disabled netsh int tcp set global autotuninglevel=normal - Reset Winsock and the TCP/IP stack to factory defaults:
Reboot again.netsh winsock reset netsh int ip reset ipconfig /flushdns ipconfig /release ipconfig /renew - From an elevated command prompt, run the TIA Portal Online → Accessible Nodes test by launching the Set PG-PC Interface diagnostic page. Confirm the S7-1200 MAC address appears in the list.
10. Procedure 6: Reconfigure the PG/PC Interface
The S7ONLINE access point routes the online traffic to a logical interface assignment. If the assignment points to a now-removed VPN, virtual, or wireless NIC, the driver load fails.
- Start → Siemens Automation → Set PG-PC Interface. Choose the desired interface parameterization and confirm.
- Set:
Access Point of the Application S7ONLINE (STEP 7) Interface Parameter Assignment TCP/IP → <Local Area Connection wired to S7-1200> Diagnostics Run — verify status = OK and PC internal is reachable - Avoid TCP/IP (Auto) when the network spans multiple subnets or VPNs. Lock the assignment to a single physical NIC.
11. Procedure 7: Validate the Windows Firewall Rules
Windows 8.1 ships with the firewall turned on by default. The TIA Portal install creates rules for the SIMATIC services, but a Windows reset of the firewall profile re-enables the blocks.
- Open Control Panel → Windows Firewall → Advanced Settings.
- In Inbound Rules confirm the following rules are present and enabled for the Domain, Private, and Public profiles as required:
-
Siemens S7 Protocol(TCP 102) -
SIMATIC IEPG Help(TCP 102, UDP 34964) -
Siemens PROFINET RPC(TCP 34964)
-
- If the rules are absent, recreate them or run the TIA Portal installer in repair mode (Procedure 3) which restores the rules.
- From an elevated PowerShell test the S7-1200 port reachability:
The output TcpTestSucceeded: True confirms the path is open.Test-NetConnection 192.168.0.1 -Port 102
12. Procedure 8: Verify Routing and Subnet Alignment
If the workstation sits on a corporate VLAN and the S7-1200 is on an automation VLAN, the IP gateway may discard the ISO-TSAP packets. The TIA Portal driver may still report "file not found" because the timeout closes the session before the S7DOS proxy loads its DLL handle.
- Run
route printand confirm the destination subnet has a route. If not, add a persistent route:route -p add 192.168.0.0 mask 255.255.255.0 192.168.0.254 - Disable any VPN client during the troubleshooting session. Split-tunnel VPNs frequently hijack the default route.
- Temporarily bridge the PG and the CPU with a crossover or direct patch cable to rule out switch ACLs.
13. Inline Diagnostic Diagrams
14. Verification and Acceptance Test
- Reboot the PG to flush all stale service handles.
- Launch TIA Portal V13 SP1 UPD5 as administrator and open the project containing the 6ES7 212-1BD30-0XB0 station.
- Right-click the device → Go online. The Go online wizard should reach the Select target station dialog without raising the file-not-found error.
- From the Online → Accessible Nodes menu confirm the CPU shows up with its PROFINET name
s71200and its IP address. - From Online → Online & Diagnostics run the diagnostic buffer read. No entries should be reported for missing communication modules.
- Download the project to the CPU once with Download to device and confirm the RUN/STOP LED transitions to RUN.
15. Preventive Maintenance
- Set the SIMATIC IEPG Help service to Automatic (Delayed Start) so Windows cumulative updates cannot stop it.
- Add a Group Policy preference that re-adds the engineering user to the Siemens TIA Engineer local group after every TIA Portal upgrade.
- Whitelist the Siemens driver paths in any EDR/AV product:
C:\Program Files (x86)\Siemens\Automation\Portal V13\ C:\Program Files\Siemens\Automation\Portal V13\ %WINDIR%\System32\S7iepgsv64.exe - Keep the SIMATIC Automation Tool updated so PN_Identifier and the PROFINET name table are aligned with the firmware on the S7-1200 (V3.0 for 6ES7 212-1BD30-0XB0).
- Image the PG/PC workstation once a stable configuration is reached so the repair procedure becomes a one-click restore.
- Schedule a quarterly smoke test: run the TIA Portal Go online against a known-good S7-1200 test bench to catch silent service failures.
Frequently Asked Questions
What is the SIMATIC IEPG Help service and why does TIA Portal V13 need it?
The SIMATIC IEPG Help service is the TCP/IP broker that lets the S7ONLINE access point reach S7-1200 CPUs on port 102 (ISO-TSAP) and UDP 34964 (PROFINET discovery). TIA Portal V13 loads S7IEPG.dll via this service; if the service is stopped, the runtime cannot find the driver and reports "file not found". Set its startup type to Automatic and verify it is Running with sc query "SIMATIC IEPG".
Do I need to be in the Siemens TIA Engineer local group to go online with an S7-1200?
Yes. TIA Portal V13 enforces group-based access to its COM activation and the SIMATIC services. Confirm with net localgroup "Siemens TIA Engineer"; if your domain or local account is missing, add it and log off/on to refresh the security token.
Will reinstalling TIA Portal V13 SP1 UPD5 delete my STEP 7 projects?
No. Projects live under %USERPROFILE%\Documents\Automation and are not touched by the installer. Back up the folder, run the installer in Repair mode, and if the problem persists use the SIEMENS install cleanup tool (KB 109751706) before performing a clean reinstall.
What is PN_Identifier and when does it fix the file-not-found error?
PN_Identifier ships with the SIMATIC Automation Tool and rebuilds the local PROFINET device name table. If the S7-1200 (default name s71200) is missing or duplicated, the S7DOS driver fails to enumerate the device and the runtime reports the file-not-found dialog. Run SAT → PROFINET → Identify to refresh the table.
Does the firewall on Windows 8.1 block TIA Portal V13 from reaching an S7-1200?
It can. Confirm with Test-NetConnection 192.168.0.1 -Port 102. The TIA Portal install creates inbound rules for TCP 102 and UDP 34964; if they were removed by a profile reset, run the installer in repair mode or recreate the rules manually for the Domain, Private, and Public profiles.
Is the 6ES7 212-1BD30-0XB0 supported by TIA Portal V13 SP1 UPD5?
Yes. The 6ES7 212-1BD30-0XB0 is a CPU 1212C DC/DC/DC with firmware V3.0, fully supported by STEP 7 Basic V13 SP1 Update 5 on Windows 7 SP1, Windows 8.1, and Windows Server 2012 R2. For newer firmware (V4.x and later) upgrade TIA Portal to V14 SP1 or newer.