Replacing Siemens TP170B with TP177B MPI Backup, Restore

David Krause14 min read
HMI / SCADASiemensTechnical Reference
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Overview: Field Scenario and Equipment Stack

The water-treatment line is controlled by a SIMATIC S7-300 CPU 313C connected over MPI to a TP170B color HMI (6AV6 545-0BA15-2AX0 family). After the TP170B panel went blank and was declared unrepairable in the field, the only spare available was a TP177B 6" color PN/DP (6AV6 642-0BA01-1AX0) pulled from a working bottle-conveyor line. Both panels are 6-inch, 256-color, 320×240 STN units, but they are not drop-in compatible at the project level because:

  • TP170B projects are created in ProTool V6.0 SP2+ with the "TP170B" device integration.
  • TP177B projects must be built in WinCC flexible 2004 SP2 or later (Compact/Standard), selected with the "TP177B 6" color PN/DP" device.
  • TP177B supports MPI/Profibus-DP at 187.5 kbit/s and 1.5 Mbit/s and adds PROFINET, but it cannot load a compiled *.pdb/ProTool runtime image.

The migration therefore has three distinct engineering work-packages:

  1. Recover the current TP177B runtime (conveyor project) so the conveyor line is not lost.
  2. Create a TP177B target in WinCC flexible, migrate the original TP170B ProTool source, and compile a new runtime.
  3. Get the new panel online against the S7-300 CPU over MPI, with or without routing through the PLC.

Direct communication between the PG (Siemens Field PG or laptop with PC adapter) and the HMI without the PLC in the path is possible on MPI, but only if the bus topology, baud rate, and node addresses are correct. The remainder of this reference covers that path and the alternative path (routing through the S7-300) used when the panel is already wired in the cabinet.

Prerequisites: Software, Cables, and Authorizations

Item Required Version / Part Purpose
SIMATIC Manager (Step 7) V5.4 + SP5 (or V5.5) NetPro routing configuration, S7 project management
WinCC flexible 2004 SP2 / 2005 SP1 / 2007 / 2008 TP177B project creation, compilation, transfer
ProTool / ProSave ProTool V6.0 SP2 SP3 or ProSave V6.0 SP2 Backup/restore of legacy TP170B runtime
ProTool/Pro to WinCC flexible converter Bundled in WinCC flexible Migrate TP170B source from ProTool to WinCC flexible
Siemens PC Adapter USB / MPI 6ES7 972-0CB20-0XA0 (USB) or 6GK1 571-0BA00-0AA0 (RS-232 legacy) PG-to-MPI connection
Profibus/MPI cable, 2-core shielded 6XV1 830-0EH10 (purple) or 6XV1 830-3EH10 Bus cable, 9.6 kbit/s to 12 Mbit/s
Profibus connector with PG socket 6ES7 972-0BA12-0XA0 (90°) or -0BA50 (35°) Allows PG to be inserted anywhere on the bus with termination OFF
USB / serial driver Siemens PC Adapter driver (S7DOS V2.x) Sets virtual COM port for ProSave/Step7
Cabling rule: Profibus connectors at the end of the bus must have the terminating resistor switch set to ON. The connector feeding the PG must be in the middle of a terminated segment; otherwise reflections will drop the panel offline during transfer.

Node Addressing and Bus Parameters

Confirm the following before any transfer attempt. Mismatches here are the single most common cause of "connection failure" errors when commissioning TP panels over MPI.

Station Default MPI Address Highest MPI Address Baud Rate
S7-300 CPU 313C 2 31 (default 31) 187.5 kbit/s (default MPI/DP)
TP170B (original) 1 31 187.5 kbit/s
TP177B (replacement) 1 (factory) 31 187.5 kbit/s (set to match PLC)
PG / Field PG 0 (default, do not change to 1/2) 31 187.5 kbit/s

To change the TP177B's MPI address when the project is empty or unknown, power the panel off, hold the upper-left softkey area, power on, and enter Start > Settings > MPI/DP > Address on the touch screen (Control Panel > Transfer). Confirm "Highest Station Address" matches the PLC (default 31). Baud rate must be identical on every node.

Direct PG-to-HMI Communication over MPI

Yes, a programming device can talk to a TP17x panel directly on MPI without any PLC routing. This is the recommended path for the very first commissioning step, because it isolates the panel hardware from the rest of the bus and removes PLC routing variables from the fault list.

Wiring

  1. Disconnect the TP177B's MPI/DP connector from the bus terminator and connect it to the spare Profibus connector with PG socket.
  2. Insert the Siemens PC Adapter (USB A on the PG side) into the PG socket of that connector.
  3. Power the PC Adapter from the USB port only when the bus is not energized; the adapter draws 5 V from USB and must NOT be on a terminated bus segment with both ends switched ON.

PG/PC Interface Assignment

  1. In SIMATIC Manager choose Options > Set PG/PC Interface.
  2. Select the access point S7ONLINE (STEP7) → PC Adapter (MPI) (or PC Adapter (Auto) for the USB variant).
  3. Open Properties and set: MPI address = 0, Transmission rate = 187.5 kbit/s, Highest station address = 31, Timeout 30 s.

Node-Flush Test

  1. Start Start > SIMATIC > STEP 7 > Accessible Nodes.
  2. The TP177B should appear as TP177B 6" color PN/DP at MPI address 1 (or whichever you set).
  3. If the panel does not appear, verify the bus is terminated only at the two physical ends, the shield is bonded at every connector, and the PC Adapter is seated firmly (the LED on the adapter should pulse green at 187.5 kbit/s).
Why not address 0? Some older PC Adapter firmware revs reserve MPI address 0 only for the master. The TP177B may still answer on 1 while the PG is on 0; do not change the PG to 1 or 2 because those addresses are used by HMI and PLC respectively.

Backing Up the Existing TP177B Conveyor Project

Use ProSave to pull the runtime out of the TP177B before you overwrite it. ProSave ships with both ProTool and WinCC flexible and lives in Start > SIMATIC > ProSave. It writes a single *.psb package that contains the project binary, the device image, the recipe data and (optionally) the user administration.

  1. Launch ProSave. In the General tab set:
    • Device type: TP177B 6" color PN/DP
    • Connection: MPI
    • Interface: PC Adapter (MPI), 187.5 kbit/s
    • Node address: 1 (must match the panel)
  2. Click Backup. Choose a target folder and a filename such as TP177B_Conveyor_2024.psb.
  3. Click Start Backup. The TP177B automatically switches to Transfer mode and reboots into the loader; the progress bar in ProSave should reach 100 % within 60–120 s for a fully populated project (≈ 4 MB).
  4. Verify the backup by clicking Restore on a second machine or by opening the *.psb in WinCC flexible (File > Retrieve) to confirm the project opens cleanly.
Field tip: If the TP177B is still connected to the conveyor S7-300 (not the water-treatment PLC), disconnect the bus cable during backup. Some TP177B firmware revs (V1.1.x) attempt to refresh tags from the PLC every few seconds and the constant change can extend the backup window or, in rare cases, abort it.

Restoring an Existing TP170B Backup onto a TP177B

You cannot flash a TP170B *.pdb runtime onto a TP177B. The device type is different and the runtime signature is rejected at boot. The supported procedure is a project migration in WinCC flexible, then a fresh download:

  1. Open WinCC flexible and choose File > Migrate Project. Point it at the original ProTool *.pdb for the TP170B (the one recovered from PG/ProTool backup). ProTool V6.x projects migrate directly; older V5.x sources need a ProTool upgrade to V6 first.
  2. The migration wizard re-targets the destination to the closest matching panel. Pick TP177B 6" color PN/DP.
  3. Review the conversion log. Common warnings to expect on water-treatment SCADA projects:
    • "Trend view curves > 4 not supported" — TP177B supports max 4 trend curves per view.
    • "Active area for bit-triggered alarms not portable" — recable alarms in WinCC flexible bit-message config.
    • "S7 diagnostics buffer view: not supported on TP177B" — replace with the WinCC flexible "Diagnostics - System" window.
  4. Set the connection parameters in Project > Transfer > Connection 1 (MPI):
    • PLC = SIMATIC S7-300 / S7-400
    • HMI station = 1, PLC station = 2
    • Baud = 187.5 kbit/s, profile = MPI
  5. Build the project (Project > Compiler > All) and resolve any errors. The compile output must show "0 Errors, 0 Warnings (treated as error)".
  6. Connect the PG to the panel as described in Section: Direct PG-to-HMI Communication over MPI.
  7. In WinCC flexible choose Transfer > Transfer > MPI/DP and click Transfer. Accept the prompt to overwrite the runtime. The panel reboots, the loader receives the runtime, and the panel switches to online mode against the water-treatment S7-300.

Routing Through the S7-300 (PG → PLC → HMI)

When the TP177B is already wired to the bus and the cabinet is live, it is often simpler to leave the bus in place and route through the CPU. This is the option Siemens describes in FAQ 2383206 — Routing S7 connections and OP connections.

NetPro Configuration

  1. Open the S7 project in SIMATIC Manager.
  2. Launch Options > NetPro.
  3. Verify the topology: PG (MPI, addr 0) → S7-300 MPI subnet → TP177B (MPI, addr 1). The HMI must appear as an "OP" station on the same MPI subnet as the CPU.
  4. Open the OP station properties, set MPI address = 1, slot = 3 (TP177B always uses slot 3), and assign it to the S7-300 connection you intend to route through.
  5. On the CPU station, double-click the MPI interface and confirm the address (2 by default) and that the subnet is flagged "Activated".
  6. Click Save and Compile (NetPro toolbar) and answer Compile and Check All. Resolve any errors (typically a missing slot or an OP without an S7 connection).
  7. Click Configure Network (the toolbar button with the download arrow) to push the routing tables down to the S7-300. The CPU must be in STOP or RUN-P; you will be prompted.

WinCC flexible Routing Bit

  1. Open the migrated project in WinCC flexible.
  2. Go to Project > Transfer > Settings and tick Enable routing.
  3. Set the transfer channel: MPI/DP → "S7 routing via PLC".
  4. Start the transfer. WinCC flexible will handshake with the S7-300 first, then route the runtime blocks to the TP177B at MPI address 1 over the existing bus.
Field tip: Routing requires the S7-300 firmware to support S7 routing (CPU 313C FW V2.0+ is fine). If the transfer hangs at "Searching target station", check the CPU's MPI diagnostics with PLC > Diagnostics/Settings > Module Information → "MPI" tab. The "Routing" line must read "enabled".

Verification Procedure

  1. Node visibility: In SIMATIC Manager → Accessible Nodes, both the S7-300 (addr 2) and the TP177B (addr 1) must be listed with no warning triangles.
  2. Tag test: In WinCC flexible → Project > Compiler > Start Runtime, simulate the project on the PG against the live S7-300. Toggle a known output (e.g. raw-water pump starter) and confirm the HMI button reflects the change within one bus cycle (≤ 1 s at 187.5 kbit/s).
  3. Alarm test: Force a low-level digital input and confirm that the configured alarm appears in the HMI message view with timestamp and status text.
  4. Recipe test: If the original TP170B used recipes, write a known set, then read it back; the value table must be byte-identical.
  5. Restart test: Power-cycle the panel cold. The runtime should boot to the configured start screen in < 25 s and re-establish the MPI connection automatically.
  6. Routing rollback: If the panel was originally commissioned with ProTool, confirm the converted project does not contain a leftover "PROFIBUS-DP" master on the wrong subnet — a common source of bus errors after migration.

Troubleshooting Matrix

Symptom Likely Cause Diagnostic Action
"Connection failure (0080:0000xx)" on HMI Wrong MPI address or baud rate Accessible Nodes, ProSave node scan Match HMI address (1) and baud (187.5 kbit/s) to PLC; confirm CPU MPI diagnostics show the HMI online
ProSave stops at 0 % with "Timeout" PC Adapter on terminated bus end PC Adapter LED off or red Switch off termination on the PG connector, leave termination ON only at the two physical bus ends
WinCC flexible transfer hangs at "Establish connection" Routing not downloaded to CPU CPU diagnostics → MPI → Routing In NetPro click Configure Network and re-download to the S7-300; tick Enable routing in WinCC flexible
Panel boots, shows "Waiting for PLC" but PLC is reachable Connection slot mismatch WinCC flexible → Connections → check "Slot" field Set Connection 1 to the S7-300 at MPI addr 2, slot 2 (CPU 313C)
Migrated project compiles with errors on trend views TP170B supported > 4 curves Compile log Reduce trend curves to 4, use bit-multiplexed selection or split into multiple views
TP177B locks up 10 s after power-up Faulty *.pdb transferred by mistake Loader → Transfer log Force a ProSave Update OS with the matching TP177B image (V1.1.x for 6AV6 642-0BA01-1AX0), then re-transfer the WinCC flexible runtime
Baud rate 1.5 Mbit/s requested but no link Connector pins 6/7 swapped or missing shielding Visual inspection, ohmmeter across shield Re-terminate, verify shield bonded at every connector, retry at 187.5 kbit/s first
Backup file *.psb is only 1.2 MB but project is large Recipes/user data not selected in ProSave ProSave > Backup > Options Re-backup with "Complete backup with recipes and user administration" ticked

Edge Cases and Field-Proven Caveats

  • TP170B color vs TP170B mono: Confirm the original is the color variant (6AV6 545-0BA15) before migration. The mono variant uses a different color palette and the converter will warn, but may not block the migration.
  • CPU 313C integrated I/O: If the project uses the on-board digital and analog I/O, verify the area-pointer configuration in WinCC flexible (default: Inputs 0…7, Outputs 0…7). TP177B does not support area pointers to the integrated counters (slot 0) — only to the standard PII/PIQ ranges.
  • Multi-language text: The ProTool → WinCC flexible converter preserves all configured language databases. Confirm font availability on the TP177B (only Siemens fonts: Arial, Tahoma, Courier ship with the runtime).
  • Passwords and user administration: TP170B used a 4-digit numeric password; TP177B supports alphanumeric passwords up to 24 characters. Document the original PIN before migration, otherwise you will be locked out of the user admin when commissioning the new panel.
  • Time synchronization: TP177B can act as the time master on MPI, but the S7-300 313C does not have a battery-backed clock on all variants. Set the time to "PLC time" in Project > Time Synchronization to avoid a 1970s-timestamp problem on long power-downs.
  • OS update compatibility: TP177B 6" color PN/DP images are: V1.0.0, V1.1.0, V1.1.2, V1.1.4. WinCC flexible 2008 SP3 supports images up to V1.1.4. Older WinCC flexible (2005 SP1) caps at V1.1.0. Match your WinCC flexible version with the panel image before commissioning.

Documentation References

FAQ

Can a Siemens PG communicate directly with a TP177B over MPI without the PLC in the loop?

Yes. Connect the PG to the bus with a Siemens PC Adapter (USB or RS-232, 6ES7 972-0CB20-0XA0), assign S7ONLINE (STEP7) → PC Adapter (MPI) at 187.5 kbit/s, set the PG to MPI address 0, and the TP177B to address 1. Use SIMATIC Manager → Accessible Nodes to confirm the panel is visible before attempting a ProSave or WinCC flexible transfer.

How do I back up the existing TP177B project before overwriting it?

Launch ProSave, set Device type to "TP177B 6" color PN/DP", Connection to MPI, and click Backup. The output is a single *.psb file containing the runtime, recipes, and user administration. A typical 4 MB project takes 60–120 s to back up at 187.5 kbit/s.

Can I flash a TP170B backup directly onto a TP177B?

No. The TP170B runtime image is rejected by the TP177B loader. You must migrate the source project from ProTool to WinCC flexible using File > Migrate Project, retarget the device to TP177B, recompile, and download the new runtime. The original TP170B *.pdb is used as input, not as a binary blob.

What is the correct way to route a WinCC flexible transfer through an S7-300?

In NetPro, place the OP on the same MPI subnet as the CPU, set the OP to slot 3 / MPI address 1, and download the network configuration to the S7-300. In WinCC flexible → Transfer → Settings tick Enable routing, then start the transfer. The CPU must be firmware V2.0+ on a 313C and have routing enabled in its MPI diagnostics.

The TP177B shows "Connection failure" after download. What should I check first?

Verify three things in order: (1) MPI address on the panel matches the project (default 1) and baud rate matches the CPU (default 187.5 kbit/s); (2) Connection 1 in WinCC flexible points to "SIMATIC S7-300/400" at MPI address 2, slot 2; (3) the bus is terminated only at the two physical ends and the PG connector is in the middle of the segment. Most field failures trace to a mismatched baud rate or an over-terminated segment.

Back to blog