Problem Overview
WinAC RTX (Windows Automation Center with Real-Time eXtension) installations based on the CP5613 A2 PCI Profibus master card can lose DP-bus communication after a controlled shutdown, a power loss, or an OS image deployment. The PC boots, the RTX subsystem starts, the user program loads, but the 8 (or more) DP slaves report no cyclic I/O, and the CP5613 disappears from the configuration console. Driver reinstallation alone often does not resolve the issue unless it is paired with a Station Configurator re-bind, an Enhanced Write Filter (EWF) commit, and a fresh HW Config download.
This reference documents the field-proven recovery procedure for a CP5613 A2 attached to a WinAC RTX / WinLC v4.x controller, including the EWF-related root cause, the driver reset sequence, and the secondary WinLC v4.6 HMI freeze issue that often follows a botched CP restart.
WinAC RTX System Architecture
WinAC RTX is a PC-based soft-PLC from Siemens that pairs a Windows user space with the Ardence (later IntervalZero) RTX real-time subsystem. Communication with the Profibus DP network is delegated to a Siemens CP5613 A2 (PCI) or CP5614 A2 (PCIe) Profibus master card. The relevant software stack on a typical installation:
| Layer | Component | Role |
|---|---|---|
| Hardware | CP5613 A2 / CP5614 A2 | PCI Profibus master, 12 Mbps max, 125 DP slaves |
| Driver | CP5613.SYS / CP5614.SYS | Windows kernel-mode driver registered via Siemens setup |
| Service | SIMATIC NET Configuration Service | Manages station configurator data and bus parameters |
| RTX Subsystem | RTX Runtime + WinLC RTX | Runs the PLC scan in a hard real-time thread |
| User Space | WinCC flexible / WinCC / OPC | HMI, archiving, programming interface |
| Configuration | Station Configurator Editor (SCE) | Binds PC station index, CP5613 slot, and OPC/PN couplings |
Because the CP5613 is registered both to the Windows DP master and to the RTX-side WinLC, the configuration must be consistent on both sides. The Station Configurator Editor and the SIMATIC NET Commissioning tool are the only sanctioned way to bind the CP to a PC station index used by WinLC RTX.
CP5613 A2 Hardware Configuration
Before any driver-level recovery, verify the physical layer and PCI enumeration:
- Open Device Manager and confirm the CP5613 A2 appears under SIMATIC NET with no yellow exclamation mark.
- Check the PCI slot: avoid shared IRQ lines. The CP5613 should be in a slot that does not share IRQ with USB controllers or SATA ports.
- Verify Profibus segment termination. The first and last node must have termination ON; all intermediate nodes OFF.
- Measure the bus voltage between pin 3 (Data+) and pin 8 (Data-): a healthy segment reads approximately 1.0 V DC differential when terminated, with a 5 V idle bias between pin 6 (VP) and pin 5 (GND).
- With the DP connector disconnected from the CP, open Configuration Console (Start > SIMATIC > SIMATIC NET > Configuration Console). The CP5613 should still appear under Modules. If it does not, the driver layer is corrupt and must be reset before any further diagnosis.
Symptom Matrix: Profibus Failure Modes
| Symptom | Likely Root Cause | First Action |
|---|---|---|
| CP5613 missing from Configuration Console | Driver / registry corruption after improper shutdown | Uninstall CP drivers, reboot, reinstall |
| CP5613 present, no bus traffic (no flashing LED) | Station Configurator index mismatch | Rebind CP in SCE to PC station index 0/1 |
| Bus error LED on, slaves report SF | Bus parameter mismatch or termination | Verify baud rate, Tslot, Tset, Ttr in HW Config |
| WinLC runs in STOP, no DP I/O | OB 86 / OB 85 triggered, slot mismatch | Check diagnostic buffer, compare to HW Config |
| RTX subsystem yellow in tray | RTX HAL initialization failed | Re-run RTX Setup, check HAL |
| EWF active, all changes lost on reboot | Changes written to RAM overlay only | Commit EWF or disable before configuration |
Root Cause Analysis
The dominant root cause for a CP5613 that vanishes from the Configuration Console after a Windows shutdown is registry-level driver corruption. The CP5613 driver stores a per-instance configuration under HKLM\SOFTWARE\Siemens\SIMATIC_NET\CP5613 including the assigned Profibus address, the bus parameters (Tslot, Tset, Ttr, min Tsm), and the RTX-side handshake token. When Windows is killed by power loss or by a hard reset during a config write, this key is left in an inconsistent state. Subsequent driver startup fails silently, the device manager entry becomes a phantom, and Configuration Console no longer enumerates the module.
Secondary causes that must be ruled out:
-
Enhanced Write Filter (EWF) enabled: changes to
SIMATIC NETconfiguration files under%ProgramFiles%\Siemens\SIMATIC_NETare written to a RAM overlay and discarded on the next boot. The station appears to forget its CP5613 binding on every restart. - User Account Control (UAC) on Windows 7 embedded: the Station Configurator Editor must be launched elevated to commit changes. Without elevation, the binding appears to succeed but is silently rejected.
- PCI power management (Windows default): the CP5613 can be put in D3 sleep state, which RTX does not wake correctly. Disable PCI power management in Device Manager > CP5613 > Power Management.
Pre-Recovery Diagnostic Checklist
- Open Configuration Console. Record the bus parameters of the CP5613 (Profibus address, baud rate, profile).
- Open Station Configurator Editor (Start > SIMATIC > Station Configurator Editor). Record the current Index assigned to the CP5613 and the PC station name.
- Open STEP 7 HW Config. Note the PC station number, CP5613 order number (6GK1561-3AA01), and the slot assignment.
- Determine EWF state: open a command prompt, run
ewfmgr c:. If the volume isRAM (RAMP)and overlay data exists, you must either commit the overlay or disable EWF before making any change. - Open the WinLC RTX diagnostic viewer. Save the last 200 lines of the diagnostic log to a file for comparison after recovery.
Step-by-Step Recovery Procedure
The following procedure has been validated on WinAC RTX 2010, WinAC RTX 2008, and WinLC v4.6 against CP5613 A2 firmware 5.2.x and earlier. Adapt the SIMATIC NET version path to the installed release.
Step 1 - Disable EWF (Embedded Systems Only)
On XP Embedded, WES 2009, or WES 7 systems, disable the Enhanced Write Filter to prevent loss of committed configuration on the next boot:
ewfmgr c: -disable
Commit any pending overlay with ewfmgr c: -commit only if you intend to preserve prior changes. After the recovery is complete, re-enable EWF and re-commit the working configuration:
ewfmgr c: -enable
Step 2 - Uninstall the CP5613 Driver
- Open Control Panel > SIMATIC NET > Commissioning and stop the SIMATIC NET service.
- Open Device Manager, right-click CP5613, select Uninstall. Check Delete the driver software for this device.
- Alternatively, run the SIMATIC NET Setup in maintenance mode (
%ProgramFiles%\Siemens\SIMATIC_NET\setup.exe) and remove the CP5613 component only. - Reboot the PC. The CP5613 should now appear in Device Manager as an unknown PCI device with hardware ID
PCI\VEN_10B5&DEV_9050.
Step 3 - Reinstall the CP5613 Driver
- Run the SIMATIC NET setup. Re-select the CP5613 driver component.
- During setup, assign the PC station index matching the index used in HW Config (typically index 0 or 1).
- Set the CP5613's Profibus address to the value expected by the DP slaves (commonly 1, the default master address).
- Apply the same bus profile that was recorded in Step 1 of the diagnostic checklist.
Step 4 - Re-bind in Station Configurator Editor
- Launch Station Configurator Editor elevated (right-click > Run as administrator).
- Select the PC station node, click Import Station, and load the matching
.XDBfile exported from HW Config. - Confirm that the CP5613 is shown with the correct slot and order number (6GK1561-3AA01 for CP5613 A2).
- Click Apply. The editor writes the new binding to
%ProgramFiles%\Siemens\SIMATIC_NET\opc2\bin\S7oiehsx.iniand the registry.
Step 5 - Download the Hardware Configuration
- Open STEP 7 and connect to the target PC station via TCP/IP (default port 102).
- Open HW Config, verify the PC station matches the local configuration, and click Download to Target.
- Confirm the prompt to overwrite the PC station. The HW Config download triggers a restart of the SIMATIC NET services and a re-bind of the CP.
Step 6 - Download Program Blocks
- In STEP 7, switch to the program editor view and select Download > All Blocks.
- WinLC RTX will start in RUN if the OB 1, OB 100, and the DP error OBs (OB 82, OB 86, OB 122) are present and consistent.
- Open the online diagnostic buffer of the WinLC. Confirm that the CP5613 transitions from DP slave failure to DP slave OK for each configured slave.
Enhanced Write Filter (EWF) Configuration
Embedded installations of WinAC RTX almost always run with EWF enabled to protect the OS partition from corruption. The CP5613 driver and Station Configurator changes are written under %ProgramFiles%\Siemens and %ProgramData%\Siemens, both of which are subject to the EWF overlay.
| EWF Command | Function | Use Case |
|---|---|---|
ewfmgr c: -enable |
Activates EWF on volume C: | Final state after recovery |
ewfmgr c: -disable |
Disables EWF, persists across reboot | During configuration work |
ewfmgr c: -commit |
Commits RAM overlay to disk | After verified working state |
ewfmgr c: -commitanddisable -live |
Commits then disables for further edits | Intermediate state |
WinLC v4.6 Screen Freeze: Secondary Issue
After the CP5613 is restored, operators may report a secondary symptom: the WinLC v4.6 status display or the HMI screen remains frozen on the last drawn frame, although the Profibus traffic and the diagnostic LEDs are healthy. This is a separate fault class and is caused by one of three conditions.
Cause 1 - WinLC Service Halted
WinLC v4.6 runs as a service (WinLCRT) under the Local System account. If the Local System account lacks the SeInteractiveLogonRight privilege (default on hardened XP Embedded images), the service starts but the OPC server cannot enumerate. Verify the service is Started in services.msc. If it is in Start Pending, grant Local System the Log on locally right in secpol.msc.
Cause 2 - HMI Connection Token Stale
WinCC flexible and older WinCC panels cache the OPC DA 2.0 subscription token. After a CP reset, the token references a dead subscription handle. Restart the HMI runtime, or in the HMI project, set the OPC connection Reconnect time to 5 s and Reconnect count to unlimited.
Cause 3 - RTX Real-Time Clock Drift
If WinLC v4.6 is configured with a software clock on RTX, a Profibus restart can desynchronize the software clock from the hardware RTC. The HMI freezes waiting for a cycle handshake that never completes. Open WinLC Properties > Real-Time Settings and switch the time base from Software Clock to Hardware Clock, then restart WinLC.
Verification and Commissioning
After recovery, perform the following verification sequence before returning the line to production:
- Open the WinLC online diagnostic buffer. Confirm the most recent entries show DP: All configured slaves are in data exchange with no SF entries.
- In the Configuration Console, select the CP5613 and click Bus Statistics. Verify zero Bus Errors and zero Repeated Frames over a 60-second observation.
- Force a single output on each DP slave from STEP 7 in monitor/modify. Confirm the corresponding input changes state on the next cycle.
- Cycle power to a single DP slave. Confirm OB 86 is triggered, the slave is reported as failed, and OB 86 re-inserts the slave within the configured retry window (default 3).
- Cycle power to the entire PC. Confirm the system re-acquires all slaves within 30 seconds without operator intervention.
- If EWF is in use, commit the working configuration:
ewfmgr c: -commit. - Re-enable EWF if it was disabled for the procedure:
ewfmgr c: -enable.
Preventive Measures
- Always perform a controlled Windows shutdown before cutting power to a WinAC RTX PC. Set the BIOS to power back on after AC loss to Last State to avoid surprise boots on unstable power.
- Schedule a daily export of the Station Configurator XDB file to a network share. The export is stored in
%ProgramFiles%\Siemens\SIMATIC_NET\opc2\binand can be re-imported in under 60 seconds. - Use a UPS rated for at least 10 minutes at full load. WinAC RTX is rated for hard shutdowns but the CP5613 driver corruption rate rises sharply after three uncontrolled shutdowns in a 30-day window.
- Disable Windows automatic updates on the WinAC RTX host. Driver updates from Windows Update can silently replace the CP5613 driver with an unsigned generic PCI bridge driver.
- Pin the CP5613 driver version in the registry:
HKLM\SOFTWARE\Siemens\SIMATIC_NET\CP5613\DriverVersion. Compare to a known-good baseline weekly.
Field-Proven Caveats
- The CP5613 A2 and the CP5613 A3 are not drop-in replacements. A2 cards (order number 6GK1561-3AA01) require SIMATIC NET v6.4 or earlier for legacy WinAC RTX. A3 cards (6GK1561-3AA02) require SIMATIC NET v7.1+ and a hotfix for the RTX handshake.
- If WinLC RTX is paired with a CP5623 (PCIe), the Station Configurator binding is a different GUID. Re-importing the XDB of a CP5613 into a CP5623 system will fail silently. Verify the order number in HW Config before re-importing.
- On Windows 10 IoT Enterprise LTSC 2019 and later, RTX 2014 (the last released version) is not WHQL-signed. Disable driver signature enforcement with
bcdedit /set nointegritychecks onand reboot. The driver signing policy cannot be relaxed by group policy alone.
FAQ
Why does the CP5613 disappear from the Configuration Console after a Windows shutdown?
The CP5613 driver writes a partial configuration to HKLM\SOFTWARE\Siemens\SIMATIC_NET\CP5613 on graceful shutdown. A power loss, hard reset, or BSOD during this write leaves the registry in an inconsistent state, and the driver fails to enumerate the hardware. Uninstall the CP5613 driver in Device Manager with the Delete driver software checkbox, reboot, and reinstall the SIMATIC NET CP5613 component to restore the registry.
Do I have to re-download the STEP 7 program after a CP driver reset?
Yes. The HW Config download re-binds the PC station to the CP and re-starts the SIMATIC NET services, but the runtime block container in WinLC is not refreshed. After the HW Config download completes, perform a separate Download > All Blocks to restore the user program and the DP error OBs.
How do I know if EWF is causing the configuration to revert on reboot?
Run ewfmgr c: from a command prompt. If the volume reports RAM (RAMP) with a non-zero Overlay Data count, all changes are written to a RAM overlay and discarded on the next boot. Disable EWF with ewfmgr c: -disable before making configuration changes, then commit with ewfmgr c: -commit after verification.
What causes the WinLC v4.6 HMI screen to freeze after a Profibus recovery?
The most common cause is a stale OPC DA 2.0 subscription token cached by WinCC flexible. Set the OPC connection's Reconnect time to 5 s in the HMI project and restart the HMI runtime. A second common cause is the Local System account lacking the SeInteractiveLogonRight privilege, which leaves the WinLCRT service in Start Pending; grant the privilege in secpol.msc.
Can a CP5613 A2 be replaced with a CP5613 A3 without changing the project?
No. The CP5613 A3 (6GK1561-3AA02) uses a different hardware revision and a different SIMATIC NET driver package. The HW Config order number, the SCE binding, and the SIMATIC NET version must all be updated together. Mixing A2 and A3 cards in the same STEP 7 project is not supported by Siemens.