1. Problem Overview
The WinCC.LicenseLimit indicator is published through the SIMATIC Shell on every engineering station (ES) and runtime PC in a TIA Portal V15 WinCC Professional project. When an operator or commissioning engineer opens the SIMATIC Shell, the field is expected to enumerate the installed WinCC license and its associated power tag / external tag capacity. If the entry is missing, blank, or shows an unexpected value, the engineering station cannot reliably determine whether a target PC has sufficient licensed tags to host a compiled WinCC Runtime Professional project. Loading a project across the network may be blocked, the project may fail to compile, or the runtime may refuse to start because the licensing handshake cannot complete.
This article documents the diagnostic path for a missing or incorrect WinCC.LicenseLimit display in WinCC Professional V15 (part of the TIA Portal V15.0 / V15.1 engineering suite). Procedures are written for engineers performing on-site commissioning, factory acceptance tests (FAT), and remote diagnostics.
LicenseLimit field name in SIMATIC Shell but the licensing table differs. Always match the engineering suite to the target runtime version before troubleshooting licensing errors.2. WinCC License Architecture in TIA Portal V15
WinCC Professional V15 licensing is based on three components that must be present and consistent across the ES and the target PC:
- Software License (Base): The WinCC Professional base license authorizes the engineering or runtime installation.
- Tag-count License (PowerPack): Scalable licenses in steps of 128, 512, 2048, 4096, 8192, 16384, 32768, 65536, and the unrestricted maximum.
- Option Licenses: Add-ons such as WinCC Recipes, WinCC Logging, WinCC User-Admin, WinCC WebNavigator, and WinCC DataMonitor.
Each license is stored in the SLC (Siemens License Container) on the local hard disk. The Automation License Manager (ALM) reads the container and exposes the count to the WinCC runtime services. The WinCC License Service (service name WinCC-LicenseService on Windows, executable CCLicenseService.exe) publishes the LicenseLimit value over the network via SIMATIC Shell.
2.1 License Variants Available for WinCC Professional V15
| License Article Number | Description | Power Tags | External Tags |
|---|---|---|---|
| 6AV2105-0BA05-0AA0 | WinCC Professional V15, 128 Power Tags | 128 | Yes (1k) |
| 6AV2105-0DA05-0AA0 | WinCC Professional V15, 512 Power Tags | 512 | Yes (10k) |
| 6AV2105-0EA05-0AA0 | WinCC Professional V15, 2048 Power Tags | 2048 | Yes (10k) |
| 6AV2105-0FA05-0AA0 | WinCC Professional V15, 4096 Power Tags | 4096 | Yes (10k) |
| 6AV2105-0GA05-0AA0 | WinCC Professional V15, 8192 Power Tags | 8192 | Yes (10k) |
| 6AV2105-0HA05-0AA0 | WinCC Professional V15, 16384 Power Tags | 16384 | Yes (10k) |
| 6AV2105-0JA05-0AA0 | WinCC Professional V15, 32768 Power Tags | 32768 | Yes (100k) |
| 6AV2105-0KA05-0AA0 | WinCC Professional V15, 65536 Power Tags | 65536 | Yes (100k) |
| 6AV2105-0LA05-0AA0 | WinCC Professional V15 max. Power Tags | Unlimited | Yes (100k) |
Reference the official licensing documentation at docs.tia.siemens.cloud – Licensing STEP 7 and WinCC and the licensing FAQ PDF at support.industry.siemens.com – WinCC TIA Portal Licenses (PDF) for the full tag-count matrix including the V15 generation.
3. SIMATIC Shell and the LicenseLimit Indicator
SIMATIC Shell is a Windows Explorer namespace extension installed with TIA Portal. It appears under Network > SIMATIC Shell when you open Windows Explorer. The shell enumerates all WinCC-capable PCs reachable on the local network. For each remote PC, the ES reads three fields:
-
ComputerName– NetBIOS name of the target PC. -
WinCC.Version– Installed WinCC Runtime Professional version (e.g., V15.0, V15.1, V16.0). -
WinCC.LicenseLimit– The maximum number of power tags the installed license allows.
The LicenseLimit value is the deciding factor when the ES compiles a project for distribution: if the destination PC reports a value below the project's required tag count, the ES raises an error and aborts the load operation. If the value is missing entirely, the load proceeds with a warning and falls back to optimistic assumptions, which can cause runtime activation to fail on the target.
3.1 Where to Find the LicenseLimit
- Open Windows Explorer on the engineering station.
- Navigate to Network > SIMATIC Shell.
- Double-click the target PC entry.
- Read the
WinCC.LicenseLimitproperty pane on the right side.
If the property pane is empty, the WinCC License Service is not reachable on the target PC. Do not assume the absence means "unlimited" – it is a network or service fault.
4. Root Causes of a Missing or Incorrect LicenseLimit
| Root Cause | Symptoms | Likelihood |
|---|---|---|
| WinCC License Service not started on target PC |
LicenseLimit empty, WinCC.Version also empty |
High |
| Automation License Manager (ALM) service stopped | ALM UI shows "No license found"; LicenseLimit = 0 |
High |
| License not transferred to target PC's SLC | ALM shows license on ES, but not on RT PC | High |
| Network discovery blocked (UDP 137/138, TCP 445) | Target PC not listed in SIMATIC Shell | Medium |
| Windows firewall blocking SIMATIC Shell broadcast | Target PC listed, but properties empty | Medium |
| Mixed TIA Portal versions (e.g., V15 ES, V16 RT) | LicenseLimit displays wrong value or 0 | Medium |
| Hardened OS / DCOM permissions restricted | Shell enumeration fails with Access Denied | Low |
| Stale ALM cache (C:\ProgramData\Siemens\Automation\Licensing) | ALM shows correct license, Shell shows 0 | Low |
5. Network Configuration Requirements
SIMATIC Shell uses a combination of SMB (Server Message Block) and a Siemens-proprietary UDP broadcast for PC discovery. The minimum required open ports and services are:
| Protocol | Port | Direction | Purpose |
|---|---|---|---|
| UDP | 137, 138 | Bidirectional | NetBIOS name service (discovery) |
| TCP | 139 | Bidirectional | NetBIOS session |
| TCP | 445 | Bidirectional | SMB direct hosting (used by V15+) |
| TCP | 49152–65535 (dynamic) | Bidirectional | DCOM callback range |
All participating PCs must be members of the same Windows workgroup or domain. Mixed workgroup/domain memberships where the ES is in a domain and the RT PC is in a workgroup require explicit credential mapping in the Windows Credential Manager. The complete network requirements are documented in Siemens FAQ entry "What are the requirements for operating SIMATIC WinCC in a Windows network?".
6. Step-by-Step Diagnostic Procedure
Follow this ordered procedure before contacting Siemens support. Each step isolates one of the root causes listed in section 4.
Step 1 – Verify the WinCC License Service is running on the target PC
- Open
services.mscon the target PC. - Locate "CCLicenseService" (display name: "WinCC License Service").
- Confirm Status =
Runningand Startup Type =Automatic. - If the service is stopped, right-click → Start.
- If it fails to start, check the Windows Event Viewer under Applications and Services Logs > Siemens > Automation > License.
Step 2 – Verify the ALM service and license
- Launch Automation License Manager from the Start menu.
- Confirm the local PC is selected in the left tree.
- Check that the WinCC Professional license is listed with status Valid.
- Note the License Limit value. This is the value the License Service should publish.
Step 3 – Verify the license count matches the project
- Open the WinCC project in TIA Portal V15 on the ES.
- Navigate to Project tree > Runtime settings > Licensing.
- Compare the project's configured power tag count with the target PC's installed limit.
- If the project exceeds the target license, either reduce the tag count, install a larger license, or split the project.
Step 4 – Test SIMATIC Shell enumeration
- On the ES, open Windows Explorer → Network.
- Click SIMATIC Shell.
- Confirm the target PC appears in the list.
- Double-click it. Confirm
WinCC.VersionandWinCC.LicenseLimitare populated.
Step 5 – If the target PC is not listed at all
- Verify both PCs are in the same subnet and workgroup/domain.
- Disable Windows Firewall temporarily as a test (netsh advfirewall set allprofiles state off). Re-enable after the test with a proper rule set.
- Open a command prompt and execute
net view \\<TargetPC>. If this fails, the issue is at the network/SMB level, not WinCC-specific. - Confirm
Function Discovery Resource PublicationandSSDP Discoveryservices are running on the target.
7. Resolving Common Errors
7.1 Error: LicenseLimit = 0 despite valid ALM license
Cause: The ALM cache is out of sync with the License Service. This occurs after license transfer operations, virtual machine snapshots, or restoring an image with a different SLC hardware fingerprint.
Resolution:
- Stop the
CCLicenseService. - Delete the contents of
%PROGRAMDATA%\Siemens\Automation\Licensing(do not delete the folder itself). - Restart
CCLicenseService. - Re-launch ALM and confirm the license is detected.
- Re-check SIMATIC Shell.
7.2 Error: "The license is missing or invalid" during project load
Cause: The project tag count exceeds the LicenseLimit on the target PC. TIA Portal blocks the load to prevent runtime activation failure.
Resolution:
- Reduce the number of power tags in the project to match the target license, OR
- Install a larger PowerPack license on the target PC, OR
- Switch to a WinCC max. license (article 6AV2105-0LA05-0AA0 for V15).
7.3 Error: Shell shows wrong WinCC.Version
Cause: Multiple WinCC versions are installed side-by-side (for example, V15 RT Professional and V16 RT Professional on the same PC). The shell returns the version of the most recently installed runtime.
Resolution: Uninstall the older runtime version, or explicitly set the default version in SIMATIC Shell > Settings if available in your service pack.
7.4 Error: LicenseLimit visible locally but not remotely
Cause: The remote ES cannot read the License Service over the network. The SMB session is established (PC visible) but the DCOM call to CCLicenseService is blocked.
Resolution: Add a Windows Firewall inbound rule for C:\Program Files\Siemens\Automation\WinCC\bin\CCLicenseService.exe on the target PC, allowing TCP traffic from the ES subnet on all ports (the service binds to a dynamic port).
8. Tag-Count License Scaling Reference
For engineers deciding which license to install on a new RT PC, the following table maps common project sizes to the recommended V15 license. Power tags are the most restrictive count; ensure the project stays within budget even after commissioning additions.
| Project Class | Typical Power Tag Count | Recommended V15 License |
|---|---|---|
| Small machine HMI | < 128 | 128 Power Tags (6AV2105-0BA05) |
| Single-line SCADA | 128 – 512 | 512 Power Tags (6AV2105-0DA05) |
| Multi-station cell | 512 – 2048 | 2048 Power Tags (6AV2105-0EA05) |
| Plant-wide SCADA | 2048 – 4096 | 4096 Power Tags (6AV2105-0FA05) |
| Large plant SCADA | 4096 – 16384 | 16384 Power Tags (6AV2105-0HA05) |
| Enterprise HMI | 16384 – 65536 | 65536 Power Tags (6AV2105-0KA05) |
| Maximum / unrestricted | > 65536 | max. Power Tags (6AV2105-0LA05) |
Each power tag typically corresponds to one PLC address. Aggregate tags (indirect addressing) are not power tags but count against the external tag limit, which is 1k, 10k, or 100k depending on the installed license variant. See Licensing STEP 7 and WinCC for the full matrix.
9. Verification and Commissioning Checks
After applying the corrective steps, perform the following verification sequence before signing off the commissioning report:
- Local license test: On the target PC, open ALM and confirm the WinCC license is Valid with the expected Power Tag limit.
-
Service test: In
services.msc, confirmCCLicenseServiceis Running and Automatic. -
Network test: From the ES, open SIMATIC Shell and confirm the target PC displays both
WinCC.VersionandWinCC.LicenseLimitcorrectly. - Project test: In TIA Portal, select Online > Load to target system > RT PC. The load should proceed without a licensing error.
- Runtime test: On the target PC, launch WinCC Runtime Professional. Confirm the project starts and remains in Run mode for at least 10 minutes without falling back to a demo banner (which indicates an unlicensed runtime).
-
Failure-mode test: Temporarily disable
CCLicenseService. Confirm WinCC Runtime transitions to a "License missing" state within 60 seconds (the service heartbeat interval), demonstrating the watchdog is functional.
Get-Service CCLicenseService cmdlet combined with a WMI query against root\Siemens\Automation for the LicenseLimit value produces a machine-readable licensing inventory.10. Preventative Measures
- Image hardening: When deploying WinCC RT images with a cloning tool (e.g., Symantec Ghost, Acronis), re-arm the SLC after each deployment to avoid the hardware fingerprint mismatch that zeros out the LicenseLimit.
- Backup the ALM database: Export the ALM license keys via ALM > License Key > Export and store them in a secure vault. Re-import is the fastest recovery from a corrupted SLC.
- Firewall baseline: Document and apply the Siemens-recommended firewall rules from FAQ 868014. A baseline Windows Firewall with default rules breaks SIMATIC Shell discovery on Windows 10/11 / Server 2019+.
- Version matrix: Maintain a site-wide table of ES versions and target RT versions. Mismatches cause subtle LicenseLimit display errors that are easy to misdiagnose as licensing issues.
- Periodic audit: Run the verification sequence from section 9 quarterly. LicenseLimit anomalies often appear weeks before they cause a runtime failure.
11. Quick Reference: Service and File Locations
| Component | Path / Service Name |
|---|---|
| WinCC License Service | C:\Program Files\Siemens\Automation\WinCC\bin\CCLicenseService.exe |
| Automation License Manager | C:\Program Files (x86)\Siemens\Automation\ALM\ALM.exe |
| SLC cache | %PROGRAMDATA%\Siemens\Automation\Licensing |
| License Service log | %PROGRAMDATA%\Siemens\Automation\WinCC\Logs\CCLicenseService.log |
| SIMATIC Shell namespace | Explorer → Network > SIMATIC Shell |
| Network requirements FAQ | 868014 |
FAQ
Why does SIMATIC Shell show no LicenseLimit for my WinCC V15 Runtime PC?
The WinCC License Service (CCLicenseService) is not running, or a network/firewall rule blocks the DCOM call. Start the service in services.msc, then add an inbound rule for CCLicenseService.exe on TCP dynamic ports. Reference FAQ 868014 for full network prerequisites.
How do I find the installed license limit on a WinCC Professional V15 PC?
Open Automation License Manager, select the local PC in the left tree, and read the License Limit column for the WinCC Professional entry. The value published in SIMATIC Shell is the same value, exposed over the network.
Can I load a 2000-power-tag project to a PC with a 512-power-tag license?
No. TIA Portal will block the load and display a license error. Either reduce the project's power tag count, install a 2048-tag PowerPack (6AV2105-0EA05-0AA0), or replace the license with a higher-tier variant such as 4096 (6AV2105-0FA05-0AA0). See the licensing table for the full V15 article numbers.
Does the LicenseLimit field differ between WinCC V15, V16, and V20?
The field name WinCC.LicenseLimit and its semantic meaning are unchanged from V15 through V20. The supported tag-count steps differ slightly: V15 supports steps up to 65536, while later versions consolidate some tiers. Always check the current licensing documentation at support.industry.siemens.com for the active release.
What is the difference between a 10k and 100k external-tag license?
External tags are read-only tags imported via OPC UA, S7 connection, or Modbus. The 10k and 100k suffixes indicate the maximum number of external tags a WinCC Professional license allows. The 100k variant is bundled with the 32768, 65536, and max. Power Tag licenses; the 10k variant is bundled with the 512 through 16384 Power Tag licenses. See the WinCC TIA Portal License FAQ (PDF) for the full mapping.