1. Overview: The Budget Alarm Display Problem on S7-312C
The classic retrofitting scenario is a small S7-300 station built around a CPU 312C (order number 6ES7 312-5BF04-0AB0 or the older -5BF03/-5BF02), where the original cabinet design did not include an HMI. After commissioning, operations asks for one thing: "if a fault occurs, show me a number." The challenge is that the 312C exposes only one integrated serial port — an MPI interface — and the customer is unwilling to fund a full TP177 or Comfort Panel. This reference covers the four lowest-cost ways to put a fault code in front of an operator, ranked by total installed cost:
- Siemens TD17 two-line text display.
- Siemens OP3 single-line operator panel.
- Siemens OP7 / OP17 multi-line operator panel (used / surplus market).
- Discrete 7-segment LED numeric indicator driven directly from PLC outputs.
Each option is evaluated against the real S7-312C constraint: no Ethernet, no PROFIBUS DP master, only MPI at 187.5 kbit/s on the front 9-pin D-sub. The trade-off is between purchase cost, configuration effort, message volume, and the operator's ability to actually read the fault.
2. S7-312C Interface Inventory and Communication Constraints
Before choosing a display, audit what the 312C actually has on its front face. The 312C family has three principal variants, and they differ in the integrated I/O and second port:
| CPU Variant | Order Number (typical) | Port 1 | Port 2 | Integrated DI/DO/AI |
|---|---|---|---|---|
| CPU 312C | 6ES7 312-5BF04-0AB0 | MPI (X1) | none | 10 DI / 6 DO / 2 AI |
| CPU 312C with DP | 6ES7 312-5BE03-0AB0 | MPI/DP switchable | none | 10 DI / 6 DO |
| CPU 313C / 313C-2 DP | 6ES7 313-5BE02 / 6ES7 313-6CF03 | MPI/DP | DP on -2 variants | 16/16 DI/DO |
For a bare 312C without a DP suffix, the only HMI-bus connection is the MPI port, electrically an RS-485 transceiver on a 9-pin female D-sub, and software-limited to 187.5 kbit/s in the default STEP 7 hardware configuration. Higher rates (1.5 Mbit/s, 12 Mbit/s) are available, but require that every node on the segment — and there is usually only the panel — support the same rate. Running MPI at 187.5 kbit/s is the lowest common denominator and the only rate that a TD17 / OP3 / OP7 from the 1990s will reliably accept. Refer to the SIMATIC S7-300 CPU 31xC and CPU 31x Operating Instructions for the port specification:
Two hard rules follow from this interface inventory:
- The display must be a natively MPI-speaking device, or it must be paired with an MPI-capable gateway.
- The bus segment may contain only the CPU 312C and the panel (or a programming device during commissioning). Adding even one more participant forces an MPI repeater or a re-evaluation of bus termination.
3. Siemens Text Display and Operator Panel Family
Siemens' legacy text-class panels all support the MPI protocol natively, configured as passive node on the bus. They are programmed with ProTool (very old variants) or WinCC Flexible (TD17, OP3, OP7, OP17, OP73micro, OP77, TP170micro). The TD17 and OP3 are absolute minimum-cost choices; the OP7 and OP17 are slightly larger, more readable, and are usually sourced as refurbished units because Siemens discontinued them in the late 2000s.
| Panel | Order Number | Display | Function Keys | Interface | Configuration Software |
|---|---|---|---|---|---|
| TD17 | 6AV3 017-1NE20-0AX0 | 2 lines × 20 char backlit LCD | 8 (4 system, 4 user) | MPI / PROFIBUS DP | ProTool, WinCC Flexible 2004+ |
| OP3 | 6AV3 503-1DB10 | 1 line × 20 char backlit LCD | 4 user keys | MPI | ProTool, WinCC Flexible |
| OP7 / OP7 PP | 6AV3 607-1JC20 / -1JC20-0AX1 | 4 lines × 20 char LCD | 24 user keys | MPI / PROFIBUS | ProTool, WinCC Flexible |
| OP17 | 6AV3 617-1JC20-0AX0 | 8 lines × 20 char LCD | 24 user keys + numeric | MPI / PROFIBUS | ProTool, WinCC Flexible |
For a single-purpose alarm display where the only required action is "show the current fault number," any of these four will work. The choice is driven by:
- Operator reading distance: TD17 / OP17 are most legible.
- Number of distinct alarm texts: TD17/OP7/OP17 store 250–500 messages locally; OP3 stores fewer.
- Acknowledge / reset keys: only OP7/OP17 have a dedicated ACK key, useful if the application requires a single-button acknowledge.
- Panel lifecycle: OP3 and OP17 are fully obsolete; TD17 and OP7 are still serviced as spares but not recommended for new projects.
4. Comparison: TD17 vs OP3 vs OP7 vs OP17 for Fault-Only Use
| Criterion | TD17 | OP3 | OP7 | OP17 |
|---|---|---|---|---|
| New-unit price class (2010 list, USD) | ~ 350 | ~ 200 | ~ 500 | ~ 700 |
| Refurb / surplus market price (USD, 2024 typical) | 60–110 | 30–70 | 80–150 | 90–180 |
| Message storage | 250 events | ~ 100 events | 256 messages, 500 events | 320 messages, 1000 events |
| Operator legibility at 2 m | Good (2-line) | Marginal (1-line, small char) | Good | Best in class |
| Acknowledge key | No dedicated | No | Yes (F1+K) | Yes |
| Configuration tool | ProTool, WinCC Flexible | ProTool, WinCC Flexible | ProTool, WinCC Flexible | ProTool, WinCC Flexible |
| Current firmware still in support | No (obsolete) | No (obsolete) | No (obsolete) | No (obsolete) |
| Spare availability | High (refurb) | Moderate | High (refurb) | High (refurb) |
Recommendation for a pure fault-code display: the OP3 is the cheapest device that can do the job end-to-end with a backlit display and 4 user keys, but its single 20-character line forces one-line messages like "E 17 OVERHEAT". The TD17 is the next price step and gives two lines plus message buffering, which is the practical minimum for a shift electrician who is reading it from 1.5 m away. For a fault-only retrofit where the operator is expected to read the code and phone a number in, the TD17 is the engineering sweet spot.
5. The Lowest-Cost Path: LED Numeric Indicators Driven by PLC Outputs
If the budget is below the OP3 tier, the only option left is a discrete numeric display. Two architectures work on the 312C:
5.1 Direct Binary Drive from a DO Module
A two-digit 7-segment display with BCD input can be wired directly to two SM322 DO bytes (16 outputs). The PLC writes the fault number as a BCD word (0–99) and the segment decoders latch the value. This is the configuration that Siemens small-machine retrofitters used before TD17 pricing collapsed. It avoids any panel purchase at all — only a BCD-to-7-segment module (e.g., a Phoenix Contact IMC 1B/24 or a Wieland 741 series) plus the LEDs themselves.
5.2 SPI/Serial-Driven Module from a Free MPI Port
A third-party panel that speaks RS-485 and accepts a free-form ASCII message can be wired to the MPI port provided it is configured as a passive listener. Spectra Displays' panel family (e.g., the Spectra 116 series mentioned in field retrofits) is an example of a device that accepts a serial string and renders it on large 7-segment or dot-matrix LED arrays. The integration is: PLC writes fault number to a marker word → a Siemens FB (e.g., FB 192 from the standard library "S7 Communication") assembles a frame → MPI is queried by the panel. This is engineering-intensive; budget half a day of work for the wrapper logic plus a custom ProTool/WinCC Flexible driver, which is not always available.
| Indicator Approach | Hardware Cost | Engineering Cost | Operator Use | Verdict |
|---|---|---|---|---|
| 2-digit BCD + DO module | Low (40–80 USD) | Half hour (BCD = fault number / 10) | Read number, look up in binder | Acceptable for 0–99 codes |
| 4-digit BCD + DO module | Low–moderate (80–150 USD) | 1 hour | Read 0–9999 code | Acceptable |
| Spectra 116-class LED | 200–400 USD | 1 day (custom ASCII frame) | Read 4–6 character code from 10 m | Best legibility per dollar |
A field-tested fault-mapping example for the BCD approach:
// STL — convert fault word MW 100 (0..999) to BCD digits
L MW 100
ITB // integer to BCD
T MW 110 // MW110 = hundreds & tens BCD
T MW 112 // MW112 = units & thousands BCD
The two bytes are then driven to two SM322 DO modules: low byte of MW110 → tens, high byte → hundreds, etc. The wiring harness is the only cost beyond the displays.
6. MPI Cabling and Bus Topology for a Single-Panel Setup
The 312C's MPI port is on a 9-pin female D-sub. The TD17/OP3/OP7/OP17 use the same connector with pin 3 = B (data +), pin 8 = A (data −), pin 5 = GND (signal ground), pin 6 = +24 V (isolated, optional for termination on early devices). The PROFIBUS connector block (e.g., 6ES7 972-0BA12-0XA0) with integral termination resistor is the recommended interconnect: drop the terminating switch ON at the end of the bus, OFF at intermediate nodes.
Topology constraints for a 312C + single panel:
- Maximum cable length at 187.5 kbit/s: 1000 m with repeater, 50 m without repeater for a single segment with two nodes and no repeater. See SIMATIC NET PROFIBUS Network Manual.
- Bus terminator: ON at the very last physical device on the segment — the panel, in this case.
- Shield: tie the cable shield to ground at the cabinet entry; do not ground at both ends for short runs.
- PG/PC port: a programming device plugs into the same bus during commissioning. If the bus is left with the PG connected and terminated, communication will fail at runtime — disable termination on the PG cable.
For a single-panel retrofit, the typical wiring is:
[CPU 312C X1 (MPI)] -- 1.5 m PROFIBUS cable -- [TD17 / OP3 / OP7 / OP17] term OFF (CPU) term ON (panel)
7. ProTool / WinCC Flexible Project Configuration
The TD17, OP3, OP7, and OP17 are all configured by ProTool (legacy) or WinCC Flexible 2004 / 2005 / 2007 / 2008 SP2. The newer TIA Portal does not support any of these four panels; a new project must use WinCC Flexible or stay on the legacy ProTool CS. The configuration is identical in structure across the four panels:
- Create a new project, select the panel type (e.g., "TD17 2-line").
- Set the connection to
MPI, default 187.5 kbit/s, station address 2 (CPU is address 1 by default; the panel is address 2). - Define a tag of type
WORDpointing at the PLC's fault message word, e.g.,MW 200. - Configure an alarm message of type
Discrete Alarmtriggered by a bit change on a separate acknowledge tag (optional), or an event message triggered by a numeric value change on MW 200. - Define the message text pool: "E 17 — Motor Overtemp", "E 18 — Low Pressure", etc., keyed by the integer value of MW 200.
For the OP3 (single line), the message is rendered as a single 20-character line. For the TD17 (two lines), use line 1 for the code, line 2 for the descriptor. The PLC simply updates MW 200; the panel looks up the message text from its own internal database — there is no need to send the long string over MPI, which keeps bus load negligible.
8. PLC Program: Ladder and STL for Triggering Fault Messages
The PLC side of the integration is a small fault-collection block. The pattern is well established in SIMATIC libraries: OR-fan all fault latches into a single "first-out" register, debounce, and then write the fault number to the message word used by the panel. The following example uses standard S7-300 STL:
// STL — fault collector with priority encoder (simplified)
// Inputs: I 0.0 .. I 1.7 = 16 fault bits, latched in M 50.0 .. M 51.7
// Output: MW 200 = fault code (0 = no fault)
// Auxiliary: M 60.0 = "new fault" pulse, MW 202 = acknowledged code
NETWORK 1 // priority encoder: lowest-numbered fault wins
L 0
T MW 200 // default: no fault
L MW 200 // accumulator placeholder
U M 50.0 // fault #1
SPB ENC1
U M 50.1
SPB ENC2
U M 50.2
SPB ENC3
...
U M 51.7
SPB ENC18
BEA
ENC1: L 1
T MW 200
BEA
ENC2: L 2
T MW 200
...
ENC18: L 18
T MW 200
BEA
NETWORK 2 // raise "new fault" flag on rising edge of MW 200
L MW 200
L MW 202 // last acknowledged code
<>I
= M 60.0
NETWORK 3 // operator acknowledge: copy MW 200 to MW 202 (bit triggered by panel F1)
U I 2.0 // OP7/OP17 ACK key wired to DI 2.0
SPBN NOA
L MW 200
T MW 202
NOA: NOP 0
For very small applications, a faster ladder-only equivalent:
// LADDER (relay logic) — minimum fault collection
[ I 0.0 ] -- [ MW200 := 1 ] // "E 1 — E-STOP"
[ I 0.1 ] -- [ MW200 := 2 ] // "E 2 — Low Air"
[ I 0.2 ] -- [ MW200 := 3 ] // "E 3 — Overload"
[ I 0.3 ] -- [ MW200 := 4 ] // "E 4 — Probe Fail"
// Last assignment wins; rearrange contacts to put the most critical fault last
The panel only needs to read MW 200. The PLC decides which fault is the most important; the panel just displays it.
9. Step-by-Step Commissioning Procedure
- Hardware audit. Confirm the 312C variant and that the MPI port is functional. Open STEP 7 (V5.5 or earlier) and go online; the CPU should be visible in the accessible nodes window at address 1, baud rate 187.5 kbit/s.
- Panel address. On the TD17/OP3/OP7/OP17, set the MPI address via the rear DIP switches or the panel menu. Use address 2 (CPU is 1).
- Bus termination. Set the PROFIBUS connector switch on the panel to ON. Set the connector on the CPU to OFF. If a programming cable is left in place, set its terminator to OFF.
- Power up. Apply 24 V to the panel. The panel should display its boot screen within 5 s, then idle text. If the screen stays blank, swap the A/B lines (3/8) — this is the most common wiring error.
-
Download project. In ProTool or WinCC Flexible, set the transfer mode to Serial / MPI, target address 2, baud 187.5 kbit/s. Transfer the compiled
.pwl/.hmiproject. Cycle power on the panel to activate. -
Force a test fault. From STEP 7, set
MW 200 = 7in the VAT table. The panel should display message #7 within 1 s. If nothing appears, verify the connection tag in the WinCC Flexible project points toMW 200and the message number mapping in the project matches the value. - Wire operator acknowledge (optional). If the OP7/OP17 ACK key is used, wire one of the function-key outputs (dry contact on the rear of the panel) to a free DI on the 312C, and use the network in Section 8 to clear the alarm flag.
- Final verification. With the cabinet door closed, trigger each input fault in turn and confirm the panel updates correctly.
10. Verification, Diagnostics, and Common Pitfalls
| Symptom | Probable Cause | Verification | Fix |
|---|---|---|---|
| Panel backlight on, no message | Tag address mismatch between PLC and project | Monitor MW 200 in STEP 7 VAT, write 1, observe panel |
Re-check connection tag and message database |
| Panel screen blank after 24 V applied | A/B polarity reversed | Measure +/− on pins 3/8 with scope; expect idle ~ 1 V differential, idle = opposite to A = high | Swap the wires on pins 3 and 8 |
| Panel shows "Connection Failed" or constant retry | CPU MPI address or baud rate mismatch | Online → Accessible Nodes in STEP 7 | Align baud rates; set panel address to 2 |
| Bus errors after PG is unplugged | PG cable terminator left ON | Inspect PG connector switch | Set PG connector terminator OFF before unplugging |
| Display updates but messages are scrambled | CPU program overwrites MW 200 with intermediate codes | Force MW 200 in VAT, watch the panel | Use the priority-encoder pattern in Section 8 |
| Operator cannot read text from 1.5 m | OP3 used instead of TD17 / OP7 | Visual inspection | Replace OP3 with TD17 or OP7 |
| Panel goes dark at site but tests OK in shop | 24 V supply too low under panel load | Measure +24 V at panel input during alarm event | Use a separate 24 V branch or upsize PSU |
11. Lifecycle, Migration, and Field-Proven Caveats
All four legacy panels (TD17, OP3, OP7, OP17) are formally discontinued and outside the active Siemens product lifecycle. Field retrofits continue to use them because:
- Surplus market is large; refurbished OP3 units ship for 30–70 USD.
- Configuration toolchain is still in use at many system integrators running older STEP 7 V5.5 SPx and WinCC Flexible 2008 SP2 installations.
- No programming adapter is required — the project is transferred over the same MPI cable.
Risks the engineer should price into the project:
- Tool obsolescence. WinCC Flexible 2008 SP2 will not install on Windows 10/11 64-bit without compatibility mode. A small engineering PC kept on Windows 7 with STEP 7 V5.5 SP4 is the de-facto support platform.
- Spare parts. No factory repair path. Stock two units if the site has zero tolerance for downtime.
- Firmware mismatch. Some OP7 / OP17 units report "Firmware update required" when paired with a newer WinCC Flexible project. The firmware download tool is no longer hosted; the workaround is to source a panel already at the correct firmware revision.
- Migration path. If the site is later upgraded to a 314C-2 PN/DP or 315-2 PN/DP, the natural replacement is an OP73micro (MPI/PROFIBUS, ~ 600 USD new) or a KTP400 Basic (Ethernet, ~ 800 USD). The ProTool / WinCC Flexible project must be re-built in TIA Portal in either case.
For new installations where the budget is fixed but lifecycle is a concern, the Spectra-Displays LED panel family (mentioned by retrofitters in the field) plus an MPI tap is a viable alternative, but it requires a custom protocol wrapper in the PLC and a dedicated commissioning effort. See Spectra Displays 116-series large-format LED indicators for one example of a large-format numeric indicator family used in industrial retrofit applications.
12. Frequently Asked Questions
What is the absolute cheapest panel that can show an alarm number on a Siemens S7-312C?
The Siemens OP3 (1 line × 20 characters) is the lowest-cost Siemens panel that natively speaks MPI and can render a single-line fault message. On the used / refurb market an OP3 ships for 30–70 USD. If the budget is below that, the next step is a 2-digit BCD 7-segment display wired to two SM322 digital output bytes.
Can the S7-312C drive a modern KTP or Comfort Panel over MPI?
No. Comfort panels, TP700/TP900, and KTP400 Basic (PN) require Ethernet PROFINET. The 312C has no Ethernet port and no PROFINET interface. The modern MPI-capable minimum panel is the SIMATIC OP73micro (6AV6 640-0BA11-0AX0), which connects at MPI 187.5 kbit/s and is configured in TIA Portal.
Do I need a PROFIBUS repeater for a single 312C + TD17 link?
No. For a 1–3 m link inside the cabinet at 187.5 kbit/s with two nodes, no repeater is required. The PROFIBUS specification allows up to 50 m of cable per segment at this baud rate without repeaters, provided the segment has exactly two terminations: one at each physical end, switches ON.
Can the TD17, OP3, OP7, or OP17 be configured in TIA Portal?
No. None of the four legacy text panels is supported by TIA Portal. They require ProTool (oldest) or WinCC Flexible 2004 / 2005 / 2007 / 2008 SP2. The OP73micro is the first text-class panel supported in TIA Portal and is the recommended replacement for new projects.
What is the simplest PLC code to make the panel show a fault number?
Write the fault number to a single marker word such as MW 200 and configure the WinCC Flexible / ProTool project to map that word to a message database. The PLC only updates the integer; the panel performs all message text rendering locally, keeping MPI bus load negligible (under 1 % even with frequent updates).