Problem Summary
The 2nd-generation Siemens SIMATIC KTP400 Basic (and related Basic Panels such as KTP700 Basic, KTP900 Basic, KTP1200 Basic) occasionally returns to the loader screen — Transfer / Start / Settings — immediately after power-up or on every restart. The runtime project no longer launches, the Start button is visible but greyed out, and pressing it does not initiate the HMI application. The PLC is unaffected: tags continue to update, pings to the panel succeed, and the loader responds to remote commands such as Flash LED from TIA Portal. Field reports show the failure can appear 4–5 months after commissioning without any change to the project, firmware, or wiring, and affects multiple panels at the same site.
- Loader screen displays Transfer / Start / Settings; Start button visible but not selectable.
- Runtime project fails to start automatically after a power cycle.
- Panel replies to ICMP ping at its configured IP address.
- Panel responds to Flash LED from TIA Portal Online & Diagnostics.
- Download attempts from TIA Portal finish in seconds with no visible transfer progress.
- Touch response, audible feedback, and overall panel operation become sluggish.
Affected Hardware and Firmware Range
| Article Number | Panel | Display | Notes |
|---|---|---|---|
| 6AV2123-2DB03-0AX0 | KTP400 Basic | 4" mono / color | 2nd generation, most commonly reported |
| 6AV2123-2GB03-0AX0 | KTP700 Basic | 7" color | Same loader/firmware stack |
| 6AV2123-2JB03-0AX0 | KTP900 Basic | 9" color | Same loader/firmware stack |
| 6AV2123-2MB03-0AX0 | KTP1200 Basic | 12" color | Same loader/firmware stack |
The behavior is reproducible across the 2nd-generation Basic Panel family (KTP400 Basic mono and color variants share the same loader behavior). Field failures correlate with the factory-shipped firmware image shipped with panels delivered before the firmware revision that introduced loader stability fixes. Updating the image via a TIA Portal transfer resolves the failure in the majority of cases.
Root Cause Analysis
Two distinct root causes can produce this symptom set:
- Loader firmware bug (primary): Early 2nd-generation Basic Panel firmware images contain a defect in the loader's project integrity check. After a number of write cycles to internal flash or after prolonged operation, the loader misinterprets the runtime project's signature as invalid and forces the panel into recovery mode at every boot. The runtime is not actually corrupted — the loader simply refuses to execute it. The Start button is rendered in a greyed state because the loader cannot start the (correctly stored) image.
- Aborted transfer via the data record area pointer (secondary): When the HMI receives a data record transfer from the PLC, the data mailbox status Transfer completed with error is set if the transfer is aborted. If the runtime project subsequently depends on configuration data that was never fully written, the loader can flag the project as invalid on the next boot. Documented trigger conditions include a disconnected Ethernet cable during transfer, PLC stop during transfer, and insufficient free memory on the panel. See the official TIA Portal documentation on Possible causes of error when transferring data records for the full trigger list.
The reason the panel still responds to Flash LED and ICMP echo is that the loader — not the corrupted runtime — owns the network stack and the panel service channel at boot. The same network reachability that lets you ping the panel is what makes firmware recovery over Ethernet possible.
Prerequisites
- TIA Portal V13 SP2 or later (V13 SP1 exhibits known loader-related transfer issues with 2nd-generation Basic Panels and must be updated first).
- Ethernet connectivity between the PG/PC and the panel on the same subnet. The panel must respond to
ping <panel-IP>. - Access to the original TIA Portal project file (.ap13) that matches the panel, or an export of the HMI configuration.
- For the destructive recovery path (USB image): Siemens support registration to obtain the Basic2nd_Recovery_System.zip image from Entry ID 109744950 — note that this entry is export-restricted and may require several days for download authorization.
- Administrator rights on the PG/PC to modify the Set PG/PC Interface settings.
Resolution Path — Primary: TIA Portal Transfer with Firmware Update
This is the recommended path. It restores the loader image, the runtime image, and the project in a single operation.
Step 1 — Upgrade the Engineering Software
- Uninstall any TIA Portal V13 SP1 components.
- Install TIA Portal V13 SP2 (or the highest SP supported by your license). V13 SP2 contains updated panel image components and corrected transfer behavior for 2nd-generation Basic Panels.
- Open the original project and confirm it compiles without errors. If you do not have the original project, use Project > Retrieve from the TIA Portal backup.
Step 2 — Correct the PG/PC Interface Assignment
An incorrect access path is the single most common reason a transfer starts but fails silently. Configure the interface as follows:
- Open Windows Control Panel → Set PG/PC Interface.
- In the Access Path tab, locate Access Point of the Application and select
S7ONLINE (STEP 7) -> TCP/IP. - In Interface Parameter Assignment Used, select the Ethernet adapter that ends with
... TCPIP.1. Do not select the... TCPIP.Auto.1variant — it picks an adapter heuristically and is unreliable for panel transfers. - Click OK to apply. Restart TIA Portal so the new access point is bound.
S7ONLINE (STEP 7) -> TCP/IP.Auto.1. If you transfer with this default, TIA Portal reports a successful connection setup but the loader-side transfer completes in < 1 second with no data written. Always confirm TCPIP.1 explicitly.
Step 3 — Verify the Panel Transfer Settings
- Power-cycle the panel.
- On the loader screen, tap Settings → Transfer Settings.
- Set the channel to Ethernet.
- Set the mode to Automatic (the loader will accept a remote transfer without requiring a tap on the panel).
- Confirm the panel's IP address, subnet mask, and gateway match the project configuration.
- Return to the loader.
Step 4 — Transfer the Project and Firmware
- In TIA Portal, select the HMI device in the project tree.
- Choose Online > HMI Device Maintenance > Firmware Update or simply Download to Device > Software (all).
- When prompted, select the panel as the target (it should appear in the accessible nodes list via Flash LED).
- TIA Portal will first push the updated loader/runtime image, then the compiled HMI project. Do not power off the panel during this operation; a typical 400-type panel takes 4–8 minutes for the full image plus project.
- Wait for the green Transfer completed successfully dialog before pressing OK.
Step 5 — Reboot and Validate
- Power-cycle the panel.
- Confirm the runtime project launches directly without displaying the loader.
- If the loader still appears, repeat Step 4 — the first transfer updates the loader, the second writes the runtime image reliably on top.
Resolution Path — Secondary: Reset to Factory Settings via Loader
If the TIA Portal transfer fails repeatedly (loader reports Download interrupted or transfer completes in < 1 second):
- Power off the panel.
- Hold the touch area at the upper-right corner of the screen.
- Apply power while holding the touch contact for ~10 seconds.
- The panel enters the Service / Recovery menu.
- Select Reset to Factory Settings. The panel will reboot into a clean loader state.
- Retry Step 4 of the primary resolution path.
Resolution Path — Tertiary: USB Recovery Image
Use only when both the Ethernet transfer and the loader reset fail. This rewrites the full panel firmware from a USB stick.
- Request the export-restricted image from Siemens Entry ID 109744950 (USB Recovery image for 2nd-generation Basic Panels). Note Siemens states that the download authorization review may take several days.
- Unzip the archive and copy the image files to a FAT32-formatted USB stick.
- Insert the USB stick into the panel's USB port.
- Power off the panel, then power on while holding the upper-right touch area.
- Follow the on-screen prompts to select the USB source and confirm the recovery write.
- When recovery completes, remove the USB stick and reboot into the loader.
- Re-apply TIA Portal V13 SP2 transfer as in the primary path.
Prosave / SIMATIC Prosafe Tool Notes
Siemens ProSave (formerly known as Prosafe) is a service tool shipped with TIA Portal that performs backup, restore, and firmware update over Ethernet independent of the TIA Portal project compiler. If the full TIA Portal download fails:
- Launch ProSave from
C:\Program Files\Siemens\Automation\TIA Portal V13 SP2\bin. - Device type: KTP400 Basic color PN (or matching article).
- Connection: Ethernet, IP address = panel IP.
- Operation: Update Operating System, then Restore with a backup created earlier.
ProSave isolates the loader update from the project compile and frequently succeeds where the TIA Portal integrated transfer aborts.
Verification Checklist
| Check | Expected Result | Pass Criterion |
|---|---|---|
| Power cycle panel 3 times consecutively | Runtime launches without loader appearing | No Transfer / Start / Settings screen |
| Tag simulation from PLC | Tags update on HMI within poll interval | Visible change within 1 s |
| Touch response time | Back to nominal after firmware refresh | < 100 ms perceived latency |
| Audible feedback (beep) | Returns after image reflash | Beep on touch confirmed |
| Network service channel | Flash LED works, online diagnostics connect | TIA Portal shows device Online |
| Data record transfer (if used) | Data mailbox status = Transfer completed | No Transfer completed with error |
Troubleshooting Matrix
| Symptom | Likely Cause | Action |
|---|---|---|
| Loader persists after transfer; transfer reports success in < 1 s | PG/PC interface set to TCPIP.Auto.1
|
Reassign to TCPIP.1 per Step 2 |
| Loader persists; TIA Portal cannot see panel | Wrong subnet or VLAN | Verify ping and panel IP from Windows CMD |
| Loader persists; transfer fails after ~30 s with timeout | Insufficient flash, corrupted image | Reset to factory settings, then retry |
| Loader appears after a PLC data record transfer | Aborted transfer wrote partial data | Confirm mailbox status, retransfer with stable PLC state |
| Loader persists on every boot after replacing panel | Spare panel shipped with old firmware image | Always transfer via V13 SP2+ before commissioning |
| Export-restricted recovery image download pending | Siemens export compliance review | Use ProSave / loader reset as alternate path |
Prevention
- Maintain a baseline TIA Portal project archive for every machine. Store the .ap13 file in version control alongside the PLC project.
- Use ProSave to create a panel backup immediately after commissioning and store it in the same archive. A ProSave backup restores in minutes and avoids the export-restricted image path entirely.
- Standardize on TIA Portal V13 SP2 or later for any work involving 2nd-generation Basic Panels.
- When using the data record area pointer, ensure the PLC remains in RUN and the Ethernet cable is stable for the entire transfer. The TIA Portal documentation lists these as primary abort triggers that can leave the project in a non-executable state.
- Verify the loader version in Settings > System Information during commissioning and record it in the machine documentation.
Key Constants and Parameters
| Parameter | Value | Source |
|---|---|---|
| TIA Portal minimum version | V13 SP2 | Siemens Support recommendation |
| Required access point | S7ONLINE (STEP 7) -> TCPIP |
Set PG/PC Interface |
| Required adapter parameterization |
... TCPIP.1 (not ... TCPIP.Auto.1) |
Set PG/PC Interface |
| Loader transfer channel | Ethernet, mode = Automatic | Panel loader settings |
| Recovery image entry | Entry ID 109744950 (export-restricted) | Siemens Support |
| Loader recovery touch position | Upper-right corner, hold ~10 s during power-on | Siemens loader recovery procedure |
FAQ
Why does the KTP400 Basic return to the Transfer screen after months of normal operation?
The loader firmware shipped with early 2nd-generation Basic Panels contains a defect in the project integrity check. After a number of write cycles or extended uptime, the loader refuses to start the runtime even though it is intact, and forces the panel into the loader on every boot. Updating to the latest loader image via a TIA Portal V13 SP2 (or later) transfer resolves the failure.
The Start button is visible but greyed out on the loader. What does this mean?
The loader has detected that the stored runtime image cannot be executed and has deliberately disabled Start. The runtime is typically not actually corrupted — the loader simply refuses to launch it. A loader reset, followed by a fresh TIA Portal transfer, normally restores operation without any data loss.
The TIA Portal download completes in less than a second and the panel does not update. What is wrong?
The most common cause is the PG/PC interface being set to TCPIP.Auto.1 instead of TCPIP.1. Open Set PG/PC Interface, set Access Point of the Application to S7ONLINE (STEP 7) -> TCPIP, and select the Ethernet adapter that ends with ... TCPIP.1. Restart TIA Portal after applying the change.
The Basic2nd_Recovery_System.zip download from Siemens is pending authorization. What are my options?
Use the loader's built-in Reset to Factory Settings function (hold the upper-right touch area during power-on for ~10 seconds) and retry the TIA Portal V13 SP2 transfer. Alternatively, use ProSave (bundled with TIA Portal) to perform an Update Operating System operation directly over Ethernet, which bypasses the export-restricted image path entirely.
Will a data record transfer from the PLC cause the panel to return to the loader?
Yes, if the transfer is aborted partway through. Documented triggers include a disconnected Ethernet cable, a PLC stop, or insufficient free memory on the panel. The data mailbox status will report Transfer completed with error. Stabilize the connection and retransfer to clear the condition; refer to the TIA Portal documentation on data record transfer errors for the full list.