S7-1200 Program Loss Diagnosing 24V Power Supply and Brown-Out

S7-1200 Program Loss: Diagnosing 24V Power Supply and Brown-Out Failures

The Siemens SIMATIC S7-1200 PLC retains its user program in non-volatile load memory, but field reports show that certain power supply combinations and brown-out events can still trigger program loss, particularly on CPU 1215DC/DC/DC deployments using third-party 24 V DC supplies such as the Mean Well AD-55 series. This troubleshooting reference consolidates the diagnostic logic, Siemens memory architecture, TIA Portal recovery procedure, and power-budget rules needed to identify the root cause and recover the controller without permanent damage.

1. Problem Scope and Reported Symptoms

The reported failure mode involves the following sequence on a CPU 1215DC/DC/DC powered from a Mean Well AD-55 24 V DC supply with battery backup:

1. Controller operates normally for approximately two years on the original project.
2. An unspecified field event (suspected brown-out, transient, or lightning activity) occurs.
3. The CPU transitions to STOP mode.
4. When an engineer connects via TIA Portal V13, the project is reported as empty — the load memory no longer holds the user program.
5. Diagnostics buffer access is required to confirm whether the loss was caused by a power-related diagnostic event or by actual memory damage.

The same symptom has been independently observed on S7-214/AC/DC/RLY CPUs (note: the 200 series designation appears in field reports; verify against your actual catalog number) using Omron 24 V supplies, sometimes backed by an APC UPS. The common factor is the field electrical event, not a single supply vendor.

2. S7-1200 Memory Architecture Review

Before diagnosing a power-related failure, the engineer must understand the three memory areas of an S7-1200 CPU, because each behaves differently during a power loss:

If the load memory appears empty, the issue is one of the following:

• The flash write was interrupted by a voltage collapse below the brown-out threshold.
• The diagnostics buffer shows a "Firmware update interrupted" or "Memory card removed during write" type event.
• The internal flash has reached end-of-life (rare after two years, but possible with extreme write cycling).

3. Root Cause Hypotheses

3.1 Brown-Out Trigger

A brown-out is a sustained low-voltage condition, distinct from a momentary sag. The S7-1200 power supply specifications require a steady 24 V DC within tolerance; if the supply droops below the brown-out threshold for longer than the PLC's hold-up time, the CPU may interpret the event as a power-down and execute its orderly STOP sequence. If voltage recovers before the internal bulk capacitors fully discharge, the CPU can be caught in a partially-initialized state.

3.2 Mean Well AD-55 Supply Behavior

The Mean Well AD-55 series is a dual-output linear-style supply. Field reports specifically cite this family as a co-occurring factor. Two operational characteristics matter:

• Hold-up time: The AD-55 datasheet specifies a hold-up time of approximately 17 ms at full load and 115 VAC input. If the PLC requires longer for orderly shutdown sequencing under partial load, marginal brown-out events can interrupt in-progress writes.
• Battery backup interaction: When a 24 V battery is wired in parallel with a regulated supply to provide ride-through, the two sources can fight each other unless a decoupling diode or proper charge-share circuit is used. The Siemens manual explicitly warns about this configuration.

3.3 Lightning or Transient Event

Field installations without surge protective devices (SPDs) on the 24 V DC rail are vulnerable to induced transients from nearby lightning strikes. A high-energy transient can latch the CPU into a state where load memory appears corrupted; in some cases the only recovery path is a full firmware reload.

3.4 Service Mode Lockup

After certain unrecoverable events, the CPU enters a Service mode that does not exit via power cycling. In this state, the only remediation is a fresh firmware/program installation via TIA Portal or SIMATIC Automation Tool. This behavior has been documented on multiple Siemens platforms when the firmware update process is interrupted or the flash file system integrity is compromised.

4. Pre-Recovery Actions: Capture the Diagnostics Buffer

The diagnostics buffer is the single most important artifact for root-cause analysis. Always retrieve it before any reset or reload attempt.

4.1 Procedure in TIA Portal V13

1. Connect the engineering station to the CPU via PROFINET or the configured route.
2. Open the project (or create a new empty project and go online to the device).
3. Right-click the CPU in the project tree and select Online & Diagnostics.
4. Navigate to Diagnostics > Diagnostics Buffer.
5. Select Save As and export the buffer to a CSV file for offline analysis.

4.2 Expected Buffer Entries for Power Events

5. Recovery Procedure for an S7-1200 with Empty Load Memory

5.1 Confirm the State

1. Power cycle the CPU (off for 30 s, then on).
2. Observe the LED pattern on the CPU.
3. Compare against the standard S7-1200 LED legend.

5.2 LED Interpretation

5.3 Reload the Project

1. In TIA Portal, open the archived project (.ap13) that matches the lost CPU.
2. Select the CPU device and choose Download to device.
3. TIA Portal will compile, compare, and offer a download dialog. Confirm Overwrite all if prompted — this re-installs both the user program and the system configuration into load memory.
4. After a successful download, perform a STOP → RUN transition and verify the program executes.

5.4 Service Mode Recovery

If the CPU will not accept a standard download and remains in Service mode (yellow flashing STOP with maintenance indication), perform the following:

1. Use the SIMATIC Automation Tool or TIA Portal's Update Firmware function (found in Online & Diagnostics under "Operating Mode").
2. Select the matching firmware version (match the project archive).
3. Execute the firmware update — this also clears load memory and forces a fresh boot.
4. Reload the user project after the firmware update completes.

6. Power Supply Verification for S7-1200 CPUs

6.1 CPU 1215DC/DC/DC Power Budget

6.2 Third-Party Supply Sizing Rule

The selected 24 V DC supply must provide at minimum:

• The CPU's nominal 24 V current draw.
• All sensor and actuator loads connected to the same supply rail.
• A 25% design margin above the calculated sum to ensure stable regulation under step loads.
• Hold-up time of at least 20–30 ms at full load to bridge short mains sags.

6.3 Battery Backup Implementation

When implementing a 24 V battery backup on an S7-1200 installation, the two supplies must be combined through a proper diode-OR or charge-share controller. Direct parallel connection without isolation is a documented anti-pattern in the Siemens manual.

7. Field Hardening Recommendations

7.1 Surge Protection

• Install a Type 2 or Type 3 SPD on the 230 V AC mains feeding the 24 V supply.
• Install a 24 V DC SPD on the output of the 24 V supply, before the PLC input terminals.
• Verify SPD rating and let-through voltage match the PLC's immunity rating.

7.2 UPS Sizing

An APC or equivalent UPS on the AC mains side provides ride-through for short outages, but does not protect against load-side brown-outs caused by the DC supply itself. For applications where program integrity is critical:

• Use a true online double-conversion UPS rather than line-interactive topology.
• Specify UPS hold-up time greater than the DC supply's own hold-up time, so the AC supply is removed cleanly before the DC droops.

7.3 Memory Card Strategy

Insert a SIMATIC memory card (SMC) into the CPU. With an SMC installed, the user program is mirrored to the card and can be reloaded into a replacement CPU in minutes. This is the most effective mitigation against permanent program loss.

8. TIA Portal V13 Specific Considerations

TIA Portal V13 is a legacy version with limited firmware support for newer S7-1200 CPU variants. If the field CPU was later upgraded to firmware V4.x and the archived project is in V13 format, an upgrade to a current TIA Portal version may be required to download successfully. Verify:

• TIA Portal V13 supports the CPU's firmware version per the TIA Portal compatibility matrix.
• The project archive is complete (HW config, program blocks, HMI tags if applicable, and recipes).
• The PC interface is configured correctly (TCP/IP, PROFIBUS, or USB depending on the route).

9. Verification Steps After Recovery

1. Confirm the CPU transitions to RUN with the expected green STOP/RUN LED.
2. Verify all outputs toggle correctly via a test sequence.
3. Read back the project from the CPU and compare against the offline project to confirm load memory integrity.
4. Force a brief power loss (controlled disconnect) and verify the CPU returns to RUN with the program intact.
5. Re-export the diagnostics buffer to confirm no new errors were logged during recovery.

10. Field-Interview Diagnostic Matrix

Use the following matrix to triage program loss reports in the field:

11. Frequently Asked Questions