Siemens 6ES5 734-1BD20: USB Connection and STEP 5 VM Setup
The Siemens 6ES5 734-1BD20 is a PC-TTY programming cable used to connect SIMATIC S5 series PLCs to programming devices such as the PG 740 PIII. The original PG hardware is long obsolete, but the cable itself remains usable when paired with a USB-to-serial adapter and STEP 5 running in a virtual machine. This reference covers cable identification, TTY electrical interface behavior, USB-to-serial selection, STEP 5 versioning, and VMware/VirtualBox COM port mapping to bring a legacy S5 online from a current Windows laptop.
Cable Identification and Specifications
The 6ES5 734-1BD20 is part of the Siemens SIMATIC S5 accessory family. It is a shielded multi-conductor cable with a 25-pin D-sub (DB-25) on the PC end and a 9-pin TTY connector on the PLC end. The DB-25 was chosen because the original Siemens PG 7xx programming devices used a 25-pin COM port. The 9-pin end is sized to match the TTY programming port on the S5-90U and S5-95U CPUs. For S5-100U and larger CPUs, which use a 15-pin TTY port, an adapter or a different cable variant (such as 6ES5 734-2xxx) is required.
| Parameter | Value |
|---|---|
| Siemens part number | 6ES5 734-1BD20 |
| Cable classification | PC-TTY (PC to 20 mA current loop) |
| PC end connector | 25-pin D-sub male (DB-25) |
| PLC end connector | 9-pin D-sub female (TTY for S5-90U/95U) |
| Electrical conversion | Active TTY current loop to RS-232 |
| Maximum cable length | 5 m (factory), 1000 m max for TTY segment |
| Supported baud rate | 9600 bit/s (fixed by S5 AS511 protocol) |
| Compatible CPUs | SIMATIC S5-90U, S5-95U; adapter needed for S5-100U/115U/135U/155U |
| Conversion box | Internal to cable or inline breakout |
The cable is sometimes listed in the third-party market under the same Siemens part number. Listings on the cable confirm the 25-pin PC connector and the 9-pin TTY connector on the S5 end.
TTY vs RS-232: Why a Direct Serial Cable Will Not Work
The 6ES5 734-1BD20 is not a straight RS-232 extension. The S5 programming port uses a 20 mA current loop (TTY) interface, which is electrically distinct from the voltage-based RS-232 used on PC COM ports. The cable contains an active or passive converter that translates between the two electrical standards.
| Characteristic | RS-232 | TTY (20 mA current loop) |
|---|---|---|
| Signal form | Voltage levels | Current loop (0 mA / 20 mA) |
| Voltage swing | ±3 V to ±15 V | Loop voltage, typically 5-24 V |
| Reference | Common ground | Galvanically isolated |
| Maximum distance | 15 m at 9600 baud | Up to 1000 m |
| Connectors | DB-9 or DB-25 | D-sub 9 or 15 pin (Siemens-specific) |
| Typical application | PC COM ports, modems | Industrial PLC programming ports |
The TTY interface in the S5-90U and S5-95U is opto-isolated. The current loop driver inside the CPU sources or sinks 20 mA on the transmit and receive pairs, and the cable converts that to RS-232 levels on the PC side. Because TTY is isolated, ground potential differences between the laptop and the PLC cabinet are tolerated, which is one of the reasons Siemens chose TTY for the S5 platform.
AS511 Protocol Layer
Above the electrical layer, the S5 CPU speaks the AS511 protocol (also called the S5 PG protocol). AS511 is a master-slave, byte-oriented protocol where the PG (master) polls the CPU (slave) for block contents, status, and force values. The protocol is fixed at 9600 bit/s, 8 data bits, even parity, 1 stop bit. STEP 5 (running on the PC) is the only master; the CPU does not initiate traffic.
Key AS511 frame characteristics:
- Frame delimiter: 0x02 (STX) for commands, 0x03 (ETX) for data blocks.
- Checksum: 8-bit additive checksum on payload bytes.
- Retransmit on checksum mismatch: master retries up to 3 times before declaring error.
- Block types: OB (organization block), PB (program block), FB (function block), DB (data block), SB (sequence block), FX (extension block).
The 6ES5 734-1BD20 does not perform any protocol conversion; it only converts the electrical layer. STEP 5 speaks AS511 directly to the CPU's TTY port. This is important when troubleshooting: a port with the wrong baud rate, parity, or stop bits will result in AS511 timeout, not silent corruption.
Prerequisites for Modern PC Connection
To bring the 6ES5 734-1BD20 online from a current laptop, the following items are required:
- Working cable: Inspect the 6ES5 734-1BD20 for crushed jackets, broken connector backshells, or oxidized pins. Damage to the inline TTY converter will prevent communication even if the conductors are continuous.
- USB-to-serial adapter: A VCP-capable adapter based on FTDI FT232, FT230X, or similar proven chipset. Avoid unbranded adapters using CH340 or unknown chipsets for industrial legacy work.
- DB-9 to DB-25 straight-through adapter: Most USB-to-serial adapters output a DB-9 male. The 6ES5 734-1BD20 has a DB-25 male. A 1:1 straight-through gender changer is required. Do not use a null-modem adapter.
- STEP 5 software: STEP 5 V6.6 HF02 is the last shipping release and supports Windows XP and Windows 7 32-bit. Older V7.x versions are 16-bit and run on DOS or Windows 3.11.
- Virtualization platform: VMware Workstation Pro/Player, Oracle VirtualBox, or Hyper-V with a Windows XP or Windows 7 32-bit guest. Native Windows 7 32-bit host is workable but unsupported by Microsoft.
- PLC access: Physical access to the S5-90U/95U CPU's 9-pin TTY port, or the corresponding 15-pin port plus an adapter for larger S5 models.
Selecting a USB-to-Serial Converter for STEP 5
STEP 5 communicates through a Win32 COM port handle. The application calls CreateFile, SetCommState, ReadFile, WriteFile, and WaitCommEvent on the COM device name. A USB-to-serial adapter must therefore expose a virtual COM port that the OS enumerates as COM1, COM2, COM3, etc. STEP 5 can then address it through the standard Windows COM API.
Recommended adapter selection criteria:
- Chipset: FTDI FT232R, FT232H, or FT230X is the most reliable for industrial legacy work. The FTDI VCP driver is signed and stable across Windows 7 through Windows 11. Prolific PL2303 adapters are widely available but have had driver-signing issues on 64-bit Windows; install the correct version (PL2303 HXA/HXD/RA/SA/TA/TB) explicitly.
- Isolation: For shop floor connection to a live S5, an optically isolated USB-serial adapter provides a second isolation barrier in addition to the TTY isolator. Recommended for any installation where the laptop is grounded to a different source than the PLC cabinet.
- DB-9 output: Most industrial-grade adapters output a DB-9 male. Pair with a straight-through DB-9 female to DB-25 male adapter to mate with the 6ES5 734-1BD20's PC end.
- FIFO buffer: Adapters with larger FIFOs (e.g., FT232H 1 KB) help at higher interrupt rates. The S5 at 9600 baud is not a bottleneck.
- Driver source: Always install the manufacturer's signed VCP driver, not the generic Microsoft CDC driver that Windows may auto-select on FT232 adapters.
DB-9 to DB-25 pin mapping for a straight-through adapter (for reference when building or verifying a custom adapter):
| DB-9 Pin | Signal | DB-25 Pin | Direction |
|---|---|---|---|
| 2 | RXD | 3 | Adapter to cable |
| 3 | TXD | 2 | Cable to adapter |
| 4 | DTR | 20 | Adapter to cable |
| 5 | GND | 7 | Common |
| 6 | DSR | 6 | Cable to adapter |
| 7 | RTS | 4 | Adapter to cable |
| 8 | CTS | 5 | Cable to adapter |
DB-25 pins 8 (CD), 15 (TXC), 17 (RXC), and 22 (RI) are not used by the 6ES5 734-1BD20. Leave them unconnected on the adapter.
Installing the USB-to-Serial Driver
Driver installation procedure for a Windows 10/11 64-bit host:
- Connect the USB-to-serial adapter to the host. Do not connect the 6ES5 734-1BD20 cable yet.
- Allow Windows to detect the new hardware. On first connection, Windows may auto-install a generic driver. Open Device Manager, expand Ports (COM & LPT), and identify the new entry.
- If the entry shows as USB Serial Device (Microsoft CDC) instead of the manufacturer's VCP driver, right-click and choose Update driver → Browse my computer for driver software → Let me pick from a list of device drivers on my computer.
- Download the latest VCP driver from the manufacturer's website (FTDI 2.12.36 or later for FT232). Run the setup executable or point the manual driver install to the extracted INF file.
- Confirm the new virtual COM port appears with the correct manufacturer description (e.g., USB Serial Port (COM3)).
- If a specific COM port number is required (e.g., COM1 or COM2, which STEP 5 often defaults to), right-click the entry, choose Properties → Port Settings → Advanced, and select a free COM port number from the dropdown. Note that COM1 and COM2 are commonly occupied by internal UARTs on legacy motherboards but are free on most modern laptops.
After driver installation, run a quick test outside the VM. Open PuTTY or Tera Term on the host at 9600 8E1 connected to the assigned COM port. Short pins 2 and 3 on the DB-9 output of the adapter with a wire. Typed characters should echo back. This proves the USB-to-serial hardware and host driver are functional before adding the VM layer.
STEP 5 Compatibility and Virtualization
STEP 5 is no longer distributed or supported by Siemens. The last shipping release, STEP 5 V6.6 HF02, was designed for Windows 95/NT 4.0/2000/XP. It is informally used on Windows 7 32-bit with some registry compatibility shims. Newer Windows releases (10/11 64-bit) cannot run STEP 5 natively; a virtual machine is required.
| OS | Native Run | VM Run | Recommendation |
|---|---|---|---|
| MS-DOS / Windows 3.11 | Yes (STEP 5 V7.x) | DOSBox, VMware | Legacy option, 16-bit, no USB passthrough |
| Windows 95/98/ME | Yes (STEP 5 V6.x) | VMware | USB passthrough possible but unstable |
| Windows XP 32-bit | Yes (STEP 5 V6.6) | Native or VMware | Recommended VM guest OS |
| Windows 7 32-bit | Possible (STEP 5 V6.6) | Native or VMware | Workable with compatibility fixes |
| Windows 10/11 64-bit | No | Yes, with Win XP guest | Run Win XP in VM and pass COM through |
Yes, STEP 5 installs and runs in a virtual machine. The success of the connection depends on how the virtual COM port is mapped to the host's physical or virtual USB-serial adapter. VMware Workstation has the most mature COM port passthrough; VirtualBox works but occasionally loses COM state on host sleep/wake.
Recommended VM configuration for STEP 5:
- Guest OS: Windows XP SP3 32-bit
- Disk: 20-40 GB (XP needs less; reserve space for STEP 5 projects)
- RAM: 1-2 GB (XP runs comfortably in 1 GB)
- Network: Bridged or NAT (only needed for file transfer to host)
- Serial port: 1, mapped to host COM port
- USB controller: present but not required for COM port mapping mode
Configuring the Virtual Machine COM Port
There are two methods to expose the USB-to-serial adapter inside the VM. Pick one, not both, to avoid device conflicts.
Option A: Map a Host COM Port (Recommended)
If the USB-to-serial adapter enumerates as COM3 on the host, the guest should be configured to use COM3. In VMware Workstation Pro or Player:
- Power off the VM and open VM Settings.
- Select Add → Serial Port → Next.
- Choose Use physical serial port on the host and select COM3 (or whichever COM number the USB-serial adapter created on the host).
- Check Connect at power on.
- Inside the XP guest, the device shows up as the first free COM port, typically COM1 or COM2. STEP 5 will use this in-guest COM number, not the host COM number.
- Verify in the XP guest's Device Manager → Ports (COM & LPT) that a Communications Port (COM1) or (COM2) entry is present.
VirtualBox equivalent: Settings → Serial Ports → Enable Serial Port → Port Number: COM1, Host Device: COM3 (Windows host) or /dev/ttyUSB0 (Linux host), Mode: Host Device.
Option B: USB Passthrough (Direct)
Some engineers prefer to pass the entire USB device into the guest, so the FTDI driver runs in the XP guest rather than on the host. In VMware: VM → Removable Devices → [FTDI adapter name] → Connect (Disconnect from host). The device disappears from the host and appears in the XP guest as a virtual COM port that STEP 5 can use directly.
This method is sometimes less stable than the COM port mapping because USB device hot-plug inside a VM can cause re-enumeration issues after VM suspend/resume. Use COM port mapping if the connection drops intermittently.
Setting Up STEP 5 Online Communication
With the VM running and the virtual COM port in place, start STEP 5 and configure the PG interface:
- Launch STEP 5 in the XP guest.
- Open the project or create a new S5 program file (STL, LAD, or CSF representation).
- From the menu, select File → Set Interface (or the German Datei → Schnittstelle einstellen).
- Select Online as the working mode.
- Set the COM port to the in-guest COM number (typically COM1 or COM2 inside XP).
- Set the baud rate to 9600, parity to Even, data bits to 8, stop bits to 1. The S5 programming port is fixed at 8E1.
- Click Test to send a polling frame. If the S5 responds, the green Connected indicator appears in the status bar.
Default STEP 5 communication parameters for the S5 PG interface:
| Parameter | Value |
|---|---|
| COM port (in-guest) | COM1 or COM2 |
| Baud rate | 9600 |
| Data bits | 8 |
| Parity | Even |
| Stop bits | 1 |
| Protocol | Siemens S5 PG protocol (AS511) |
| Handshake | None (or XON/XOFF in some PG firmwares) |
Verification and Acceptance Test
After the cable, USB-serial adapter, VM, and STEP 5 are all in place, run this checklist before going online with a live PLC.
- Loopback test on host: Disconnect the 6ES5 734-1BD20 from the PLC. Short pins 2 and 3 on the DB-9 output of the USB-serial adapter with a wire. Open PuTTY on the host at 9600 8E1 to the assigned COM port. Typed characters should echo back. This proves the USB-to-serial hardware and host driver are good.
- Loopback test in guest: Repeat step 1 with PuTTY running inside the XP guest connected to the in-guest COM port. This proves the VM COM passthrough is functional.
- STEP 5 self-test: In STEP 5, choose Online → Test. The software polls the bus; without a connected S5 you should get a timeout error, not a port-not-found error. A timeout confirms STEP 5 is talking to the COM port.
- Live connection: Power the S5 PLC, connect the 6ES5 734-1BD20 to the PLC's TTY programming port, then click Online in STEP 5. The CPU type, rack number, and program status should populate within a few seconds.
- Block upload: Upload a single FB or PB block from the S5 to the STEP 5 project. This exercises the full AS511 path including error detection, checksum verification, and retransmission.
- Block download (with caution): Download a small test block to verify the write path. Do not download to a running production process without a backup and a controlled stop sequence.
Troubleshooting Matrix
| Symptom | Likely Cause | Remediation |
|---|---|---|
| STEP 5 reports "Interface not available" | In-guest COM port number wrong, or VM not configured for COM passthrough | Confirm VM Settings → Serial Port is mapped; verify in XP Device Manager |
| STEP 5 reports "Timeout" on connect | No PLC on bus, wrong parity, or baud rate mismatch | Verify 9600 8E1; check S5 is in RUN or STOP with programming port enabled |
| Garbage characters in upload | DB-9 to DB-25 null-modem adapter used, or DTR/RTS not asserted | Use a 1:1 straight-through adapter; loopback test first |
| Connection drops after a few minutes | USB selective suspend, or VM screen-saver suspend | Disable USB selective suspend in host power plan; disable guest screen saver |
| Driver installs but no COM port appears | FTDI driver conflict with Microsoft CDC driver, or signing issue | Force-install the FTDI VCP driver manually from Device Manager |
| Connection works on bench, fails on plant floor | Ground potential difference, EMI on long cable run | Add an isolated USB-serial adapter; verify cable shield continuity |
| STEP 5 locks up when going online | FTDI driver or VM COM port driver crash | Cycle the VM serial port; update to the latest FTDI driver |
| Error 0x0001 / "no response from AG" | TTY converter box in cable damaged, or PLC in HARD STOP | Check S5 CPU status LEDs; swap cable with a known-good 6ES5 734-1BD20 |
| XP guest BSOD on USB attach | USB passthrough conflict with host COM mapping | Remove the host COM mapping; use USB passthrough only, or vice versa |
Cable Care and Known Failure Modes
The 6ES5 734-1BD20 contains inline conversion electronics. Failure modes observed in the field include:
- Crushed cable near the strain relief, breaking one of the current loop conductor pairs.
- Burned-out TTY opto-isolator from a miswired parallel TTY port on a third-party interface.
- Loose DB-25 backshell screws causing intermittent RXD/TXD.
- Corroded 9-pin connector pins on the PLC side from long-term storage in a humid cabinet.
- Open circuit in the TTY current source, manifesting as no response from the CPU even when the host loopback is good.
A quick bench test for the cable: power the S5 CPU and connect the 6ES5 734-1BD20. Measure the voltage across the TTY current loop pins on the PLC connector. A healthy TTY port shows roughly 5-24 V DC across the active pair, depending on the CPU variant. Zero voltage indicates either a cable break or a dead TTY driver in the PLC. In a dim room, a powered TTY opto-isolator in the cable glows faintly through the cable jacket; this is a quick way to spot an active cable and confirm power flow.
Replacing a Damaged PG 740 PIII
The PG 740 PIII is a Siemens-branded laptop from the 1990s, originally built around an Intel Pentium III processor. If it is damaged or has failed, the modern functional equivalent is any current Windows laptop with a USB port, a USB-to-serial adapter, a copy of STEP 5, and a virtualization layer. The replacement stack:
- PG 740 PIII equivalent: Any modern laptop running Windows 10/11 64-bit with a USB-to-serial adapter and a Windows XP or Windows 7 32-bit VM running STEP 5 V6.6.
- PG 720/730 equivalent: Same as above.
- Field PG replacement: A ruggedized laptop (e.g., Panasonic Toughbook, Getac, or Durabook) with the same stack, useful for shop floor commissioning where dust, moisture, or drop hazards are present.
Older PGs used a proprietary MPI/TTY port and could connect directly to the S5. Modern hardware cannot, hence the need for a USB-to-serial adapter plus the 6ES5 734-1BD20 cable in between. The advantage of the modern stack is that the laptop can also run TIA Portal for newer S7-300/400/1200/1500 commissioning, making it a single device for the entire SIMATIC estate.
Cable Variants and S5 Family Compatibility
The 6ES5 734 family includes several variants. Selecting the right one depends on the S5 CPU's TTY port form factor:
| Cable | PC End | PLC End | Compatible S5 CPUs |
|---|---|---|---|
| 6ES5 734-1BD20 | DB-25 male | DB-9 female (TTY) | S5-90U, S5-95U |
| 6ES5 734-2BD20 | DB-25 male | DB-15 female (TTY) | S5-100U, S5-115U, S5-135U, S5-155U (TTY port) |
| 6ES5 734-1BD30 | DB-9 female | DB-9 female (TTY) | Modern USB-serial adapter compatible |
| 6ES5 734-2BF20 | DB-9 female | DB-15 female (TTY) | Modern USB-serial adapter compatible |
For modern USB-serial adapters that output DB-9 male, the 6ES5 734-1BD30 or 6ES5 734-2BF20 eliminates the need for a separate DB-9 to DB-25 adapter. If the existing 6ES5 734-1BD20 is intact, the 25-pin variant remains fully usable with a passive straight-through adapter.
DB-9 to DB-25 Adapter Specification
A passive 1:1 DB-9 female to DB-25 male adapter is the typical companion to the 6ES5 734-1BD20. The wiring must be straight-through: each DB-9 pin connects to its corresponding DB-25 pin. Use a fully populated adapter (all relevant pins wired) to ensure DTR, DSR, RTS, and CTS pass through. A minimal adapter that only wires pins 2, 3, and 5 will not work for the S5, because the 6ES5 734-1BD20 expects DTR/DSR handshaking from the host PC.
Avoid null-modem (crossover) adapters; they swap TD/RD and will produce timeout errors in STEP 5 even though the host loopback is good.
Sample VMware Workstation Configuration
The following is a complete vmx file snippet for mapping a host COM3 to a Windows XP guest as COM1:
# /path/to/step5vm.vmx
serial0.present = "TRUE"
serial0.fileType = "device"
serial0.fileName = "COM3"
serial0.autodetect = "FALSE"
serial0.startConnected = "TRUE"
serial0.yieldOnMsrRead = "TRUE"
guestOS = "winxppro"
The four serial0 parameters are the minimum required. The yieldOnMsrRead flag is important: it makes the guest yield CPU time when waiting for the COM port, avoiding a 100% guest CPU stall that some VMware versions produce on idle COM waits. Inside the XP guest, the mapped port appears as COM1 (the first free COM number in the guest namespace) and STEP 5 should be configured to COM1 at 9600 8E1.
Safety and Plant Floor Precautions
When connecting the 6ES5 734-1BD20 to a live S5 in a running process, observe the following:
- Process state: Putting an S5 into STOP for online editing will stop program execution. Many S5 processes are interlocked; verify with the process engineer that STOP is safe for the affected machine.
- Cable connection: The TTY port is hot-pluggable (the opto-isolator tolerates live insertion), but avoid plugging/unplugging while a block download is in progress.
- Block overwrite: STEP 5 will overwrite an existing block in the CPU when downloading the same block number. Always archive the current PLC program to a STEP 5 file on the host before any download.
- Power-off handling: The S5 PLC does not retain user program or data block contents across a power loss in the standard S5-90U/95U configuration (no battery-backed RAM option for these models). Uploading to STEP 5 is the only archive method.
Can STEP 5 run in a Windows XP virtual machine?
Yes. STEP 5 V6.6 HF02 is fully compatible with Windows XP 32-bit. Install the OS in VMware, VirtualBox, or Hyper-V, then install STEP 5. Map the host's COM port (created by the USB-serial adapter) into the guest as a serial port. STEP 5 sees a real COM port and goes online normally.
Can a generic USB-to-serial adapter be used with the 6ES5 734-1BD20?
Yes, provided the adapter exposes a virtual COM port (VCP) and is supported by the OS. FTDI-based adapters are most reliable. Pair the USB-serial DB-9 output with a straight-through DB-9 to DB-25 adapter to mate with the cable's 25-pin PC end. Do not use a null-modem adapter.
Why does the 6ES5 734-1BD20 have a 25-pin connector instead of 9-pin?
The cable was designed for the original Siemens PG programming devices, which used a 25-pin COM port (DB-25). Modern PCs and laptops no longer have DB-25 ports, so a DB-9 male USB-serial adapter plus a 1:1 DB-9 to DB-25 gender changer is required to keep the original cable.
What baud rate does the S5 use for programming?
The S5 programming port operates at 9600 bit/s, 8 data bits, even parity, 1 stop bit (8E1). The AS511 protocol runs over this fixed configuration. STEP 5 will fail to connect at any other setting.
What if the S5 PLC has a 15-pin TTY port instead of 9-pin?
For S5-100U and higher CPUs with the 15-pin TTY port, use a 6ES5 734-2BD20 cable (DB-25 to DB-15) or a 9-pin to 15-pin passive adapter matched to the 6ES5 734-1BD20. Verify the connector type on the specific CPU before purchasing the cable variant.
How is the COM port number assigned inside the Windows XP guest?
When a host COM port is mapped to a VMware or VirtualBox guest, the guest OS enumerates it as the first free COM number in its namespace, typically COM1. If COM1 is already occupied by a virtual machine-internal device, it appears as COM2. STEP 5 must be configured to match the in-guest COM number, not the host COM number.