Siemens MLFB Number and Firmware Changes: S7-1500 Reference

David Krause10 min read
PLC HardwareSiemensTechnical Reference
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Siemens MLFB Number and Firmware Version Changes: S7-1500 Reference

Every Siemens automation component carries two identifiers that evolve independently but interact: the MLFB (Machine-Readable Product Designation) order number and the embedded firmware version. A new firmware release does not always trigger a new MLFB, but a new MLFB almost always signals a hardware or feature scope change that the firmware must follow. This reference consolidates the rules that govern those changes for the SIMATIC S7-1500 / ET 200MP family and gives engineers a working procedure for firmware updates, MLFB reconciliation, and field commissioning.

1. Overview: Two Identifiers, One Product

An MLFB number is the printed, orderable part number stamped on the module label and embedded in the device's electronic nameplate. A firmware version is the software build flashed into the module's non-volatile memory. The two are decoupled in the catalog but tightly coupled in the field:

  • MLFB identifies what you ordered and what you can reorder. It defines the hardware revision, the licensed functional scope, and the maximum firmware level the device can accept.
  • Firmware version identifies the runtime behavior. It can usually be updated within the constraints set by the MLFB.

Siemens publishes firmware as downloadable archives (.upd for S7-1500 CPUs and displays) through the Siemens Industry Online Support portal. Each firmware file is bound to one or more MLFBs; flashing an incompatible firmware is rejected by the bootloader.

Rule of thumb: Same MLFB plus higher firmware version = behavior change only. New MLFB plus newer firmware = hardware or scope change that exceeds what the previous MLFB could express.

2. MLFB Structure for S7-1500 Modules

Siemens MLFB numbers are positional. Each position carries meaning, and small shifts in specific positions signal specific changes. For an S7-1500 CPU such as the 6ES7516-3AN02-0AB0, the structure decodes as follows:

Position Example Meaning
1–7 6ES7516 Siemens SIMATIC prefix + basic CPU family (516 = CPU 1516 class)
8 3 Functional scope digit (work memory, bit operations, motion capability)
9–10 AN Sub-variant code (interfaces, display, runtime system features)
11–12 02 Hardware/firmware release index
13–16 0AB0 Packaging, documentation language, country identifier

The digit most engineers watch is position 11–12, often called the "release index" or simply "the version digit." Siemens increments this digit whenever the product is re-released with a substantive change — new work memory tier, added interfaces, bug-fixed silicon revision, or major firmware feature additions. A one-digit shift (e.g., 0AB0 → 0AB1, or 02 → 03 in the release index) is the visible MLFB marker for what is essentially a new product variant.

3. Firmware Version Numbering

S7-1500 firmware uses a four-segment version of the form Vx.y.z, where x is the major field release:

Field Example Indicates
V1.x V1.8.6 Original S7-1500 launch generation
V2.x V2.9.7 Major feature addition generation (security, OPC UA server)
V3.x V3.1.4 Generation aligning with TIA Portal V17/V18 project scope
V4.x V4.1.4 Current generation; aligns with TIA Portal V19/V20 and ET 200SP/pro extensions

The trailing y.z segments indicate minor enhancements and bug fixes. A patch within the same major field (for example V4.0.3 → V4.1.4) is delivered as a firmware update that the existing MLFB accepts. A jump between major fields (for example V2.x → V3.x) is typically shipped with a new MLFB and a new bootloader, because hardware-level changes are required to support the new feature set.

4. When the MLFB Changes, When the Firmware Changes

The trigger matrix below summarizes the relationship observed across the S7-1500 / ET 200MP families:

Change Event MLFB Impact Firmware Impact
Bug fix within same major firmware field No change Update from Vx.a.b to Vx.a.c
Functional enhancement, no new hardware No change Update from Vx.a.b to Vx.c.d
New work memory tier (e.g., 1 MB → 1.5 MB program / data) New MLFB (one or two digits shift) Bundled firmware version rises to match
New interfaces (additional PROFINET ports, integrated display) New MLFB Bundled firmware supports new hardware blocks
Major firmware jump (V2 → V3, V3 → V4) New MLFB on most CPUs New firmware field release
Silicon revision / hardware bug fix New MLFB often with note in catalog Firmware may be unchanged or carry a compatibility patch

The crucial engineering implication: a firmware update is valid only for the MLFBs listed in the firmware file's release notes. If your CPU carries MLFB 6ES7516-3AN01-0AB0 and you download the firmware archive intended for 6ES7516-3AN02-0AB0, the bootloader will refuse it.

5. Work Memory and MLFB Migration

One of the most common reasons for an MLFB change in the S7-1500 family is the work-memory scaling of the CPU. Work memory is split into two regions:

  • Program memory — holds the compiled user code blocks (OB, FB, FC, DB).
  • Data memory — holds runtime data, instance DBs, and retentive tags.

When Siemens re-releases a CPU with a larger memory tier, the new MLFB appears in the catalog with a higher release index. The shipped firmware is matched to the new memory map. Re-flashing an old firmware onto a new MLFB is not possible because the memory layout differs.

Field experience: TIA Portal projects that target an older MLFB must be recompiled against the new MLFB after a hardware swap. The hardware catalog in TIA Portal hides incompatible firmware/MLFB combinations, so the recompile is forced.

6. Firmware Update Procedure for S7-1500 CPUs

Siemens publishes the canonical firmware update procedure in the SIMATIC S7-1500 / ET 200MP Manual Collection on the TIA Portal documentation cloud (Firmware update — S7-1500 Manual Collection). The condensed field procedure is:

  1. Identify the current state. Read the electronic nameplate via TIA Portal (Online > Accessible devices > Device properties) or the CPU display (Settings > Module information). Record MLFB, serial number, and firmware version.
  2. Match the firmware archive. On the Siemens support portal, navigate to Firmware update S7-1500 CPUs incl. Displays and ET 200 CPUs (ET 200SP, ET 200pro). Confirm the firmware file explicitly lists your MLFB.
  3. Check project compatibility. In TIA Portal, open the device configuration. If the new firmware requires a higher TIA Portal version (for example V4.x firmware requires TIA V19+), upgrade the engineering project first.
  4. Verify redundancy behavior. For S7-1500R/H redundant systems, follow the dedicated firmware update procedure for H-systems, which preserves the redundant partner and performs a fail-over upgrade.
  5. Place the CPU in STOP or update mode. Some firmware updates require STOP; others run online. The CPU display indicates which mode is needed.
  6. Transfer the .upd file. Use Online > Firmware update > Select file. The transfer takes 2–10 minutes depending on the module type.
  7. Wait for automatic restart. The CPU reboots into the new firmware and re-initializes the work memory. Retentive data is preserved only if the firmware update is a same-MLFB patch.
  8. Verify online. Re-read the module information. Confirm the firmware version on the CPU display matches the target file.

7. Compatibility Rules in Mixed-Fleet Installations

Most S7-1500 installations combine CPUs of different MLFB generations. The rules that keep such a fleet coherent are:

Scenario Constraint
Two CPUs with different MLFBs in one PROFINET line Firmware must share the same major field (V4.x). Minor differences tolerated.
ET 200SP / ET 200pro stations behind a CPU IO device firmware must be compatible with the CPU's firmware major field
Display upgrade (e.g., CPU 1515 → 1516 display) Display firmware is independent of CPU firmware; update the display as a separate module
Spare-part replacement with newer MLFB Recompile project in TIA Portal; reuse existing program logic
Downgrade firmware (rare, support-driven) Only possible when the target firmware is in the same major field as the current MLFB

8. Commissioning Checklist When Swapping MLFBs

A hardware swap to a newer MLFB is routine but requires structured verification. Use the following checklist:

  1. Note the old MLFB and the new MLFB on the maintenance log.
  2. Confirm the new firmware version on the device display at first power-up.
  3. Open the TIA Portal project. Update the device in the hardware catalog to the new MLFB.
  4. Recompile the program. Inspect the cross-reference for any blocks flagged "device-specific" — these are typically OPC UA server, security, or trace blocks whose configuration changed between MLFB releases.
  5. Download the recompiled project to the new CPU.
  6. Verify retentive tag behavior. If the work memory layout changed, expect retentive DBs to initialize from their load values rather than retaining their last runtime values.
  7. Run a controlled test sequence covering each safety-relevant path.
  8. Update the asset register: MLFB, serial, firmware version, install date.

9. Common Pitfalls and Field-Proven Caveats

  • Firmware file intended for the wrong MLFB. The bootloader rejects it, but partial flashes have been observed on older S7-1500 firmware with weak signature checks. Always check the release notes before flashing.
  • TIA Portal version mismatch. TIA Portal hides the firmware update option if the connected CPU's firmware is newer than what the project supports. Upgrade TIA Portal first.
  • Display firmware caught at a lower level. The display module on the CPU front has its own firmware. After a CPU firmware update, the display may prompt for its own update.
  • Retentive loss across major-field jumps. When a firmware jump (V2 → V3) coincides with an MLFB change, retentive behavior is reset.
  • Spare-parts procurement. When ordering a replacement, specify both the MLFB and the firmware version Siemens currently ships with that MLFB. The shipped firmware may have advanced past the version on the failing unit.
  • Catalog "0AB0" vs "0AB1" suffixes. Trailing digits in the packaging/country section can indicate documentation language bundles. They do not change electrical behavior but can affect the printed manual set.

10. Troubleshooting Matrix

Symptom Likely Cause Action
Firmware update rejected: "incompatible MLFB" Wrong .upd file Re-download the file matching the device's printed MLFB
CPU display shows firmware but TIA shows "unknown device" TIA Portal version too old Upgrade TIA Portal to a version that ships the GSD/EDD for the current MLFB
After firmware update, retentive tags reset Major firmware field change Expected behavior. Re-arm the process and accept the load values
Display firmware lower than CPU firmware Display was not updated Update display firmware as a separate step via TIA Portal
Online firmware list empty for new CPU Catalog not refreshed Update the TIA Portal hardware catalog via the support package
Project compiles but blocks flagged "invalid for device" Project was created against an older MLFB Replace device in project with the current MLFB and recompile

11. Standards and Documentation Anchors

Always anchor MLFB and firmware decisions to the current Siemens documentation. Two authoritative sources are:

Verify against the live URLs before each firmware campaign; release-note pages are updated whenever Siemens ships a new firmware file.

12. Quick Reference Card

Question Answer
Can I flash any firmware onto any MLFB? No. The firmware must list your MLFB in its release notes.
Does a new MLFB always mean new hardware? Often yes; sometimes the change is only a memory tier or feature bundle reclassification.
Does a new firmware always need a new MLFB? No. Patch and minor updates share the existing MLFB.
Where do I find the firmware file? Siemens Industry Online Support, entry ID 109478459 for S7-1500 / ET 200MP.
How long does an S7-1500 CPU firmware update take? 2–10 minutes online, depending on CPU class and file size.
Is retentive data preserved across an update? Yes within the same major field. No across major-field jumps.

What does MLFB stand for and why does Siemens use it?

MLFB stands for Machine-Readable Product Designation. It is Siemens' structured order number where each digit encodes family, function, variant, release index, and packaging. It allows the catalog, configurator, and TIA Portal to recognize a device unambiguously and to bind firmware, manuals, and GSD files to that device.

Does every firmware update require a new MLFB?

No. Bug-fix and minor enhancement updates (for example V4.0.3 → V4.1.4) ship against the same MLFB. A new MLFB appears when the change set is large enough that Siemens reclassifies the product variant — typically a work-memory tier change, a new interface, or a major firmware field jump such as V3.x → V4.x.

How do I tell whether a firmware file is safe to flash onto my CPU?

Open the firmware file's release notes on the Siemens support portal (entry 109478459 for S7-1500/ET 200 CPUs). The notes list every supported MLFB. If your CPU's printed MLFB appears in that list and your TIA Portal version is at or above the required engineering version, the file is safe to flash.

Will swapping a CPU with a newer MLFB break my running program?

The program logic transfers, but the project must be recompiled against the new MLFB in TIA Portal. Retentive tags initialize from their load values if the work memory layout changed. Always run a controlled test sequence after an MLFB swap.

Can I downgrade firmware on an S7-1500 CPU?

Only within the same major firmware field, and only if the target firmware file lists your MLFB. Downgrades across major fields (V4.x → V3.x) are not supported by the bootloader and are not recommended for production systems.

Back to blog