S7-400 Upload Error 13:4298: Resolving Rack Slot Determination

1. Problem Overview: S7-400 Upload Error 13:4298

When attempting to upload an S7-400 station to a programming device (PG/PC), the operation aborts with the SIMATIC Manager diagnostic:

Error 13:4298 — The number of the rack and the slot of the module could not be determined online.

The upload wizard in SIMATIC Manager (Step 7 V5.6) and the comparable "Upload from device (software)" command in TIA Portal V15.1 both require an unambiguous rack/slot anchor that points to the controller CPU. When the live online topology contains multiple stations — for example rack 0 (S7-400), rack 1 (ET 200), rack 2 (S7-200) — the wizard cannot resolve which rack/slot pair refers to the controller CPU without operator input. In that situation the upload aborts before any block is read, and the user is shown error 13:4298.

The diagnostic is not a hardware fault. It is a routing/identification fault in the upload routine. The PG/PC continues to communicate normally with the CPU over MPI, PROFIBUS-DP, or PROFINET. Online block view, monitor/modify, and diagnostic buffer read work. Only the upload operation, which is anchored on a project-side station object, fails because the project does not yet contain a station object that matches the live CPU.

2. Affected Hardware and Software

3. Root Cause: Why Rack/Slot Cannot Be Resolved

Error 13:4298 is raised when the upload routine cannot build an unambiguous mapping between the live online node and the upload target's rack/slot. The most common triggers on an S7-400 with mixed central and distributed I/O are:

1. Multiple online nodes share one PG interface. When the S7-400, the ET 200 station, and the S7-200 are reachable from the same MPI/PROFIBUS segment, the wizard needs a unique rack/slot pair to anchor the upload. Without it, the candidate set is non-unique.
2. Missing or mismatched S7ONLINE interface assignment. The active S7ONLINE interface must be the one physically connected to the CPU's MPI/DP/PN port. If a different interface is selected (e.g., a NIC on a different subnet), the CPU's rack/slot is never returned.
3. Project–station mismatch. The offline HW Config in the opened project describes a different rack layout (different CPU type, different firmware, or different slot count). The wizard cannot reconcile the live rack layout with the offline one, so it cannot resolve the slot index.
4. Firmware version not in the HW catalog. The CPU 412-5H PN/DP FW V6.0.4 ships after the cut-off of SIMATIC Manager V5.6's default HW catalog. Without the matching Hardware Support Package (HSP), the wizard cannot parse the CPU's online identification and therefore cannot return a rack/slot.
5. S7-200 panel attached as rack 2. A S7-200 addressed through the S7-400's DP master is enumerated as a logical slave on rack 2. If the S7-400's own CPU slot is not selected explicitly, the wizard may treat the S7-200 as the upload target.
6. H-system with two CPUs. On a CPU 412-5H redundant system, the upload routine must address the active CPU, not the standby. A blank slot field can result in a standby CPU query and the same 13:4298 fault.

4. S7-400 Rack and Slot Conventions

S7-400 central racks follow a fixed slot rule. The official STEP 7 / TIA Portal documentation, "Rack: General slot rules", defines the slot order from left to right on the mounting rail:

Slot 1 is the leftmost slot in the rack. Slot 1 is always reserved for the power supply. The CPU sits in the first free slot to the right of the (possibly wide) power supply. Signal modules follow to the right of the CPU.

For rack 1 (ET 200), slot numbering is local to the distributed station: slot 1 is the head module (IM 153-1, IM 157, etc.) in the ET 200's own backplane. For rack 2 (S7-200 attached as DP slave), the S7-200 has no backplane; its "slot 1" is the CPU 2xx itself.

5. S7-400 Rack Types Reference

The slot count limits the maximum I/O count for the rack. A CPU 412-5H PN/DP supports up to 1,048,576 bits of digital I/O and 524,288 analog channels; the rack you choose bounds the number of modules that can be installed locally.

6. Power Supply Width Reference

The position of the CPU depends on the power supply's slot width. The most common PS modules used with a CPU 412-5H PN/DP are:

If the rack contains a wide PS, the CPU is in slot 3, not slot 2. The upload wizard will not auto-shift for you. You must enter slot 3 manually.

7. Resolution Methods

Method A — Manual rack/slot entry in the SIMATIC Manager upload dialog

1. Close all open STEP 7 projects.
2. Open SIMATIC Manager and select PLC > Upload Station to PG.
3. In the "Select Target Station" dialog, choose the online node visible via S7ONLINE.
4. Click Node Address (not "View"). Set the target rack and slot by hand:
   • Rack = 0
   • Slot = 2 (single-wide PS) or Slot = 3 (wide PS)
5. Confirm with OK; the upload proceeds with the manual anchor.

Method B — Use "Accessible Nodes" with the correct PG/PC interface

1. Open SIMATIC Manager.
2. From Options > Set PG/PC Interface…, select the interface physically wired to the CPU's MPI/DP/PN port.
3. Click PLC > Display Accessible Nodes. Confirm only one CPU is listed with rack 0, slot 2 (or 3) and order number 6ES7412-5HK06-0AB0.
4. Double-click the node and accept the upload target.

Method C — Physical inspection of the rack

1. Open the cabinet.
2. Read the slot strips on the S7-400 mounting rail. Siemens labels every slot from left (1) to right (18 for UR1).
3. Identify the power supply. If two slots are occupied, the CPU is in slot 3.
4. Note the CPU's order number and firmware on the front label (here: 6ES7412-5HK06-0AB0, FW V6.0.4).
5. Re-enter the values manually in the upload wizard.

Method D — TIA Portal Device Configuration

1. Open the project in TIA Portal V15.1.
2. Double-click Devices & Networks, then double-click the S7-400 device.
3. The Device view shows the rack with rack number, slot number, and module order number for every slot.
4. From the online menu, right-click the CPU and select Upload from device (software). TIA Portal uses the project's rack/slot, so the upload anchor is known and the operation does not raise 13:4298.

8. PG/PC Interface Configuration

The S7ONLINE interface must be set to the CP that is physically connected to the CPU's communication port. Common CP choices are:

After installing the CP driver, set the access point of S7ONLINE to the CP using Options > Set PG/PC Interface… > Standard Interface for S7ONLINE. If the wrong interface is active, the upload routine will not find the CPU's rack/slot even if the bus is online.

9. Hardware Support Package (HSP) Installation

SIMATIC Manager V5.6 SP9 does not list CPU 412-5H PN/DP FW V6.0.4 in its default HW catalog. Without the matching HSP, the upload wizard cannot parse the module's online identification string and returns 13:4298.

1. Open Siemens Online Support and search for "S7-400 HSP" corresponding to firmware V6.0.4 of the CPU 412-5H PN/DP.
2. Download the HSP archive (.exe or .zip).
3. In SIMATIC Manager, run Options > HW Config > Install HW Updates….
4. Browse to the HSP directory and install the package.
5. Restart SIMATIC Manager. The CPU 412-5H PN/DP FW V6.0.4 will now appear in the HW catalog under SIMATIC 400 > CPU 400 > CPU 412-5H PN/DP > 6ES7412-5HK06-0AB0 > V6.0.4.
6. Re-open HW Config. The new module can now be inserted in rack 0 / slot 2 (or 3), and the upload wizard can resolve the rack/slot.

For TIA Portal V15.1, the same support package is supplied as a TIA HSP and installed via Options > Manage General Station Description (GSD) Files / Support Packages. After the TIA HSP is loaded, the CPU 412-5H PN/DP FW V6.0.4 is selectable in the TIA HW catalog.

10. TIA Portal Migration Procedure

When a SIMATIC Manager V5.6 project is opened in TIA Portal V15.1, the rack and slot assignments are carried over. Migration is the cleanest path to a definitive upload because TIA Portal's Device view permanently stores the rack/slot mapping.

1. Launch TIA Portal V15.1.
2. Select Project > Migrate project and choose the SIMATIC Manager .s7p file.
3. TIA Portal converts the HW Config, the symbol table, and the program blocks.
4. Open the migrated project and double-click Devices & Networks to verify the rack layout (rack 0 = S7-400, rack 1 = ET 200, rack 2 = S7-200).
5. Right-click the CPU 412-5H PN/DP and select Upload from device (software).
6. Select the PG/PC interface to the CPU (TCP/IP for PROFINET or the configured CP for PROFIBUS).
7. TIA Portal anchors the upload on the project's rack 0 / slot 2 (or 3) and the operation completes without 13:4298.

11. H-System Specific Cases (CPU 412-5H PN/DP)

The CPU 412-5H PN/DP is redundant-ready. In an H-system, two CPUs of the same type are installed in two sub-racks of an UR2-H. Only one CPU is active at a time; the other is standby.

When the upload routine is invoked against an H-system, it must address the active CPU. If the slot field is left blank, the wizard may query the standby CPU and receive a response without a valid rack/slot. The 13:4298 diagnostic is the symptom.

Resolution steps:

1. In the project, identify the active CPU by reading PLC > Diagnostics/Settings > H-CPU State. The active CPU returns role = MASTER.
2. Enter the slot of the active CPU in the upload wizard's "Node Address" field.
3. Proceed with the upload. Once the active CPU's program is read, the standby CPU can be updated by performing a link-up.

12. ET 200 Distributed I/O (Rack 1)

The ET 200 station connected to the S7-400 is an independent station. Its slot 1 is the head module (IM 153-1 for PROFIBUS, IM 157 for PROFINET). When the upload wizard enumerates the online nodes, it will show the ET 200 as a separate candidate. To upload the ET 200's configuration:

1. Open the S7-400 project that already contains the ET 200 station object.
2. Set the upload target to rack 1, slot 1.
3. Upload only the ET 200 station.

Do not attempt to upload the ET 200 from the S7-400 upload dialog. They are independent stations.

13. S7-200 Coupling (Rack 2)

A S7-200 connected to the S7-400 as a PROFIBUS-DP slave is enumerated as rack 2 in the S7-400's HW Config, but it is not an S7-400 station. The S7-200 has its own upload mechanism via PPI/MPI/DP using STEP 7-Micro/WIN or the S7-200 PC Access tool.

When the S7-400's upload wizard reports 13:4298 and the rack/slot field is ambiguous, the S7-200 is sometimes the culprit. Exclude rack 2 from the upload target selection by setting Rack = 0 explicitly.

14. Error Code Reference

15. Step-by-Step Verification Procedure

1. Open SIMATIC Manager. From Options > Set PG/PC Interface…, pick the CP assigned to the subnet that contains the CPU 412-5H PN/DP (e.g., CP 5622 for PROFIBUS or the NIC for PROFINET).
2. Select PLC > Display Accessible Nodes. Confirm the CPU appears once, with rack 0, slot 2 (or 3), order number 6ES7412-5HK06-0AB0, firmware V6.0.4.
3. Right-click the CPU and select Upload Station to PG…. If the rack/slot dialog still raises 13:4298, manually type Rack = 0, Slot = 2 (or 3 for a wide PS).
4. Wait for the upload to complete. Expect the full HW Config including the UR1/UR2 racks, the ET 200 station, and the DP-coupled S7-200 to be brought back.
5. Open the resulting project in TIA Portal V15.1 with Project > Migrate project to verify the upload captured all devices.
6. Compare the rack/slot count in Device view with the physical rack. Every slot must show a green module.
7. Open Online & Diagnostics > Diagnostic buffer on the CPU and confirm no new fault entries appeared during the upload.
8. Re-compile the program in TIA Portal. A successful compile confirms the uploaded HW Config is consistent with the CPU firmware.

16. Best Practices for Future Uploads

• Keep a project archive on the engineering network. Use Project > Archive after every commissioning change so you never depend on an upload.
• Install the latest HSP for your CPU firmware. Siemens releases HSPs that add new firmware versions to the HW catalog. Without the HSP, online identification of new firmware cannot be parsed.
• Document the physical slot layout. A photo of each rack with slot numbers visible saves hours during a fault.
• Use TIA Portal for new projects. The Device view shows the rack/slot of every module and avoids the manual entry that triggers 13:4298.
• Configure the PG/PC interface permanently. Use a separate CP for PROFIBUS and a separate NIC for PROFINET to keep the S7ONLINE assignment stable.
• For H-systems, record the slot of the active CPU after every failover. The upload wizard needs this anchor.
• Avoid coupling the PG to multiple subnets on the same interface. The wizard can only resolve one set of rack/slot candidates per S7ONLINE access point.

17. Troubleshooting Matrix

18. Reference Documentation

• TIA Portal — Rack: General slot rules
• Siemens S7 — Rack and slot reference (Beijer Electronics)
• STEP 7 V5.6 Online Help — "Uploading a station to the PG"
• S7-400 Automation System — Hardware and Installation manual
• S7-400 CPU 412-5H PN/DP — Equipment manual (Siemens Support entry 6ES7412-5HK06-0AB0)