Migrating SIMATIC PCS 7 from a Single OS to a Redundant Client-Server Project
Single-station operator stations (OS) work fine for small SIMATIC PCS 7 plants, but they cannot deliver the availability, scalability, and load distribution that production facilities require. This reference walks through the complete migration of an existing PCS 7 single-user ES/OS project into a redundant OS Server pair plus three OS Clients, covering PCS 7 V8.x and V9.x, with a parallel upgrade path for legacy V7.1 plants.
1. Target Architecture Overview
The migration target is a standard PCS 7 Client-Server configuration that follows the SIMATIC PCS 7 Minimal Configuration rules. The new architecture separates the engineering station (ES), the redundant OS Server pair (Master + Standby), and the OS Clients onto different PC Stations connected by a dedicated terminal bus.
| PC Station | Software Role | Network Connection | Redundancy |
|---|---|---|---|
| ES / OS Engineering | WinCC Explorer, ES application, single-user OS (optional) | Plant bus + Terminal bus | None |
| OS Server (Master) | WinCC Server, OS Runtime, alarm logging, tag logging | Plant bus + Terminal bus | Active partner |
| OS Server (Standby) | WinCC Server (Stby.), parallel archive | Plant bus + Terminal bus | Hot standby |
| OS Client 1..3 | WinCC Client, picture display, operator input | Terminal bus only | N/A (auto-failover via server) |
Three network segments must be present and properly routed:
- Plant bus - connects the AS stations to the OS servers (typically Industrial Ethernet / PROFINET, isolated subnet).
- Terminal bus - connects the OS servers to the OS clients (standard TCP/IP Ethernet, switch-based, 1 Gbps recommended).
- ES engineering bus - carries ES-to-AS downloads, NetPro, and S7 connections; often shared with the terminal bus on the engineering NIC.
2. Prerequisites and Licensing
Before opening the project, validate that the existing ES, the new server pair, and the three clients all meet the PCS 7 hardware and software compatibility list (see SIMATIC PCS 7 V9.0 Released Modules and PCS 7 V8.2 Released Modules). Confirm the following:
| Item | ES | OS Server (Master/Stby.) | OS Client |
|---|---|---|---|
| CPU | Multi-core x64, 8 GB+ RAM | Multi-core x64 server-grade, 16 GB+ RAM, ECC | Multi-core x64, 8 GB+ RAM |
| OS | Windows 10/11 LTSC or Server 2019 per PCS 7 catalog | Windows Server 2016/2019/2022 per catalog | Windows 10/11 LTSC |
| Ethernet NICs | 1 (terminal/ES bus) + 1 (plant bus if needed) | 2 (one plant bus, one terminal bus) | 1 (terminal bus) |
| CP 1623 / CP 1628 (optional) | Not required | Required for hard real-time plant bus (PROFINET IRT) | Not required |
| WinCC / PCS 7 license | PCS 7 ES (with optional single-user OS) | OS Server redundancy license (6 license AS-OS + redundant pair) | OS Client license (16 / 64 / 256 tags) |
| SIMATIC Logon | Required if central user administration | Required | Required |
3. Pre-Migration Inventory and Backup
Take a full backup of the ES before any change. PCS 7 projects are stored on the ES under the project path, typically C:\Program Files\Siemens\Automation\PCS7\S7Proj for V8.x and C:\ProgramData\Siemens\Automation\PCS7\<project> for V9.x.
- Open the existing WinCC Explorer on the ES and run Project > Cross Reference. Export a list of all picture references, scripts, and tag connections for traceability.
- In SIMATIC Manager (V8.x) or PCS 7 Plant View (V9.x), open Options > PCS 7 Plant Documentation and generate a PDF of the plant hierarchy (PH), the OS Area, and the network/NetPro configuration.
- Use WinCC Explorer > Tools > Project Duplicator to create a full copy of the project on a separate drive. This is your rollback image.
- Capture the WinCC archive path, alarm logging path, and report path. In V8.x these are configured under Computer > Properties > Graphics Runtime.
- Record the S7 connections in NetPro: AS-OS connections use connection type "S7 Connection" and must be re-validated after the new server is online.
4. Step-by-Step Migration (PCS 7 V8.x / V9.x)
The migration runs in two phases: first the OS Server pair, then the OS Clients. Do not start the client phase until both servers are synchronized and the runtime is stable on the master.
4.1 Phase 1 - OS Server and Standby Configuration
-
Add the new PC Station for the Standby OS. In SIMATIC Manager, right-click the project and select Insert New Object > PC Station. Name it
OS-Server-Stby(or the customer-specific hostname). - Insert the WinCC Application (Stby.). Open the new PC Station, right-click and choose Insert New Object > WinCC Application. Assign the Standby OS role (not "Server-Stby." - in V9.x this is renamed to OS Server (Stby.)).
- Insert a CP if used. If the plant bus requires a hard real-time CP (e.g., CP 1623 or CP 1628), add the CP to the PC Station and assign it to the existing plant bus subnet. The terminal bus uses the standard Windows NIC and is assigned later.
- Link the Standby to the Master OS. Open the properties dialog of the Standby OS, switch to the Target OS and Standby OS Computer tab, and enter the computer name of the existing target OS (now renamed to Master). This binding is what enables WinCC redundancy.
- Run the Station Configuration Editor. On both the master and standby PCs, start Station Configuration Editor and assign the components to the indices declared in SIMATIC Manager (index 1 typically = WinCC Application, index 2 = CP, index 3 = additional OPC). Click Update Station and confirm the station name matches the SIMATIC Manager entry.
- Configure AS-OS communication in NetPro. Open NetPro from SIMATIC Manager. For every AS in the project, check that the S7 connection to the OS still has a valid path through the plant bus. With redundancy, NetPro automatically generates the mirrored connection to the standby once the Standby OS is bound.
- Convert the WinCC project to Multi-User. In WinCC Explorer on the master, choose Project > Properties and switch Project type from Single-User Project to Multi-User Project. Accept the prompt to generate the server data; this writes the package files the clients will later subscribe to.
- Generate the server package. In the master project, right-click Server Data and select Generate Server Data. Repeat on the standby after the data has been replicated.
- Download the PC Station to both servers. Highlight the new PC Station in SIMATIC Manager, then choose PLC > Download to Target Station > All. The Station Configuration Editor on each machine will instantiate the components and start the WinCC services.
- Activate runtime and verify redundancy. Start WinCC Runtime on the master. Confirm that the standby logs "Partner Online" and the archive synchronization runs without errors. Pull the network cable from the master to confirm failover; restore only after the standby takes over.
4.2 Phase 2 - Terminal Bus and OS Clients
- Create the Terminal Bus subnet. In NetPro, insert a new Ethernet subnet for the terminal bus. Assign a unique subnet ID and mask (e.g., 192.168.10.0/24). Do not overlap with the plant bus.
-
Add three new PC Stations for the clients. Insert
OS-Client-01,OS-Client-02, andOS-Client-03. Each gets a single WinCC Application configured as OS Client. Bind each client to the terminal bus subnet through the Windows NIC. - Select the target OS server on each client. In the client's WinCC Application properties, enter the server computer name under Server Assignment. With redundancy, both master and standby are listed; the client automatically fails over when the active partner goes down.
- Run the Station Configuration Editor on each client PC and load the project from SIMATIC Manager. The client only needs index 1 = WinCC Application; the terminal bus is the Windows NIC.
- Generate the server package from the master one more time. The clients pull this package at startup; if the picture tree is missing tags, regenerate Server Data on the master and restart the client runtime.
- Reference client (optional). If the three clients are identical, set up one of them as the Reference Client in WinCC Explorer. The other two inherit the same picture tree, user administration, and alarm routing. This simplifies change management.
- Validate user rights through SIMATIC Logon. Confirm that operator, supervisor, and engineer roles propagate to the clients. Test logout on one client and login on another to validate the central user database.
5. Upgrade Path for Legacy V7.1 Projects
Plants still on PCS 7 V7.1 must be upgraded stepwise: V7.1 → V8.0 → V8.2 → V9.0 as the user reported. Each jump is a clean re-installation - PCS 7 does not support in-place upgrade between major versions. Plan downtime per upgrade.
| From | To | Required Action | Typical Outage |
|---|---|---|---|
| V7.1 | V8.0 | Reinstall ES, convert S7 program, re-import OS projects | 1-2 days |
| V8.0 | V8.2 | In-place upgrade of ES, then OS | 0.5-1 day |
| V8.2 | V9.0 | Reinstall on Server 2016/2019, new license keys | 1-2 days |
After each upgrade, run PCS 7 OS Project Migrator to adapt the WinCC project to the new WinCC version, then redo the redundant server and client setup using the procedure in section 4.
6. NetPro and AS-OS Communication Configuration
NetPro is the central point where the redundant OS pair is bound to the S7 program. Two S7 connections per AS are now required - one to the master, one to the standby - and NetPro creates them automatically once both PC Stations are configured and the Standby OS is bound to the Master OS in the properties dialog.
| AS | Connection Type | Endpoint 1 | Endpoint 2 |
|---|---|---|---|
| AS-01 | S7 Connection | OS Server Master | Plant bus IP of Master |
| AS-01 | S7 Connection (mirror) | OS Server Stby. | Plant bus IP of Standby |
| AS-02 | S7 Connection | OS Server Master | Plant bus IP of Master |
| AS-02 | S7 Connection (mirror) | OS Server Stby. | Plant bus IP of Standby |
7. WinCC Multi-User Project and Server Data
The conversion of a single-user WinCC project to multi-user is the single largest source of post-migration problems. Three things must happen in order:
- The local tags (tags defined directly on the OS) are migrated to the server, but the picture tree still references them locally. The Generate Server Data step republishes them as server-side tags and rewrites the package.
- Alarm logging and tag logging must be configured to write to the server's local disk, not the original ES path. Modify the archive paths in WinCC Explorer to point to
D:\PCS7_Archives\on the master and standby. - User administration moves from WinCC local users to SIMATIC Logon. Migrate existing users under Computer > User Administrator > Migrate and select the Logon domain.
8. Verification, Commissioning and Acceptance Tests
Document the following tests in the site acceptance protocol. Each test must pass before the redundant server pair is considered production-ready.
| ID | Test | Expected Result |
|---|---|---|
| FAT-01 | Start runtime on Master, observe Standby | Standby shows "Partner Active", no alarm |
| FAT-02 | Pull plant bus cable on Master | Standby takes over within 30 s, clients reconnect |
| FAT-03 | Restore plant bus on Master | Master becomes Standby, no data loss, archives merged |
| FAT-04 | Pull terminal bus on Client 02 | Operator screen freezes, runtime continues on others |
| FAT-05 | Force WinCC service stop on Master | Failover within 60 s, no alarm lost |
| FAT-06 | Operator logout/login across clients | SIMATIC Logon user replicates, role enforced |
| FAT-07 | Archive backup of Master | Round-up file generated, no gaps in alarm log |
| FAT-08 | Add a new tag in PH, regenerate | Package regenerates, client sees new tag after restart |
9. Troubleshooting Matrix
| Symptom | Likely Cause | Resolution |
|---|---|---|
| Client shows "Server not found" | Server name resolution fails on terminal bus | Add DNS entries or hosts file mapping; check WinCC Service Mode is running |
| Standby stays "Partner not found" | Target OS computer name not bound or wrong subnet | Re-open Standby OS properties, verify computer name, save, and re-download |
| Archive gaps after failover | Archive path still points to ES local drive | Redirect both servers to D:\PCS7_Archives, regenerate |
| Client picture tree missing tags | Server data not regenerated after PH change | Right-click Server Data, Generate Server Data, restart client runtime |
| License error 1024 at runtime start | Stby. license not installed or wrong license type | Use Automation License Manager to assign OS-Server Stby. license; transfer rather than copy |
| S7 connection fault 33: Connection to partner aborted | Plant bus IP mismatch after OS rename | Open NetPro, double-click S7 connection, set new partner IP, recompile and download |
| Operator cannot log in on client | SIMATIC Logon not configured for that client | Run SIMATIC Logon Service Manager on the client, join the Logon group |
| Time stamp drift between master and standby | No central time source | Configure both servers as NTP clients of a plant time server; verify with w32tm /monitor
|
10. Operational Notes
- Always start the master first, then the standby. Reversed order results in a "Partner not yet defined" state until the master initializes.
- Avoid mixing the plant bus and terminal bus on the same physical NIC. Performance and broadcast storms will degrade picture update times below 1 s.
- Schedule archive round-up to occur during the standby's idle window. Round-up runs only on the active partner; a failover during round-up is safe but the standby completes the cycle.
- Keep the master and standby at the same Windows patch level. Asymmetric patches cause WinCC service restart loops after failover.
- Use the PCS 7 Maintenance Station if the plant requires a separate diagnostic OS - it runs as an additional client and does not consume AS-OS connection resources.
11. FAQ
What is the difference between PCS 7 OS Server and OS Server Stby.?
The OS Server runs the active runtime and writes the live archives; the OS Server Stby. (Standby) runs in parallel, holds a copy of all data, and takes over automatically if the master fails. Both must be licensed and bound in the Standby OS properties dialog under the Target OS and Standby OS Computer tab.
Can I migrate directly from PCS 7 V7.1 to V9.0?
No. PCS 7 only supports consecutive major version upgrades. The accepted path is V7.1 → V8.0 → V8.2 → V9.0, and each step requires a full ES reinstallation and OS Project Migrator run before the redundant server configuration is rebuilt.
How long does a master/standby failover take in PCS 7?
Failover typically completes within 30 to 60 seconds. The exact time depends on the configured redundancy synchronization interval, the archive size, and the plant bus latency. A plant bus link loss is detected faster than a WinCC service crash because the partner heartbeats every few seconds.
Do I need a CP 1623 or CP 1628 on the OS servers?
Only if the plant bus requires hard real-time (PROFINET IRT) or you need a deterministic separation from the Windows TCP/IP stack. For standard plant bus with PROFINET RT or standard S7 communication, a normal Intel or Broadcom NIC on the server is sufficient and is the common configuration in V8.x and V9.x systems.
Why do the OS clients show empty pictures after a WinCC project change?
The clients subscribe to the server package that is generated on the master. After any change to the plant hierarchy, tag list, or picture tree, you must right-click Server Data in WinCC Explorer on the master and run Generate Server Data, then restart the client runtime. Skipping this step is the most common cause of "ghost pictures" on the clients.