Problem Definition: SIMATIC S5 115U CPU 944 with QV, BA, and ST LED Anomaly
The SIMATIC S5-115U with CPU 944 is a legacy Siemens programmable logic controller widely found in service on packaging lines, water-treatment skids, and small process cells commissioned in the 1990s. A field-typical diagnostic question is: "When I power up the rack, QV and BA are glowing red, ST is blinking red, and no other LEDs are lit — is the CPU damaged?" Without software diagnostics this question has to be answered by interpreting front-panel LEDs, then by attempting a serial online connection to confirm.
This article consolidates the Siemens S5-115U front-panel LED definitions from the original programming manual, maps each LED state to a probable cause, and walks the engineer through a freeware-based procedure to verify CPU 944 operability over an RS232-TTY programming cable. The procedure requires only a PC with a real or virtual serial port, a Siemens PG-2000 / STEP5 cable (or 6ES5 734-1... adapter with TTY-to-RS232 converter), and either Siemens STEP5, the open-source STEP5/STEP7 PG-2000 clone, or KEPServerEx in demo mode.
CPU 944 Hardware Identification
Before interpreting LEDs, confirm the exact module. The S5-115U family includes CPU 941, CPU 942, CPU 943, CPU 944, and CPU 945. The CPU 944 is the most common "mid-range" 115U processor with the following relevant front-panel markings:
| Module | Order Number (MLFB) | Memory | Typical Application |
|---|---|---|---|
| CPU 944 | 6ES5 944-7UB11 / 6ES5 944-7UB21 | 32 KB RAM / 32 KB EPROM | Mid-size discrete and analog |
| CPU 944B | 6ES5 944-7UB22 | 48 KB RAM | Larger I/O, faster scan |
The CPU 944 is single-width and inserts in any central rack slot configured for a CPU. Its front face carries four status LEDs arranged vertically, in this order (top to bottom):
- QVZ — Quittierverzögerung (acknowledgement timeout)
- BA — Batterie (battery / RAM backup status)
- BASP — Befehlsausgabe gesperrt (command output disabled)
- ST — Stop (run/stop/fault indicator)
Many CPU 944 faceplates also show additional mode LEDs (RUN, STOP) and a green "PWR" indicator driven by the rack power supply. Refer to the S5-115U Programmable Controller System Manual, chapter 5, for the exact LED layout of your hardware revision.
LED Definitions and Normal States on Power-Up
Section 5.1.3 of the S5-115U Programmable Controller system manual enumerates the LED error-signalling matrix. The relevant entries for a CPU 944 with no project loaded and no online connection are:
| LED | Colour | Lit Steady (Normal) | Lit Flashing (Fault) | Meaning |
|---|---|---|---|---|
| QVZ | Red | On in STOP | — | Indicates an I/O acknowledgement time-out. Normal in STOP because the cyclic OB1 is not being processed. |
| BA | Red | On when backup battery is missing or discharged | — | RAM contents are not retained. Replace the lithium backup battery (3.6 V, 1.5 Ah) — Siemens part 6ES7 971-1AA00 equivalent or 3.6 V AA lithium primary cell. |
| BASP | Red | On in STOP with no valid program | — | All digital output modules are inhibited. Normal when the user program is absent or corrupt. |
| ST | Red | On steady in STOP | Flickering at self-test → defective module | Run/Stop/Fault indicator. The flicker pattern (high-frequency alternating) is distinct from the slower 1 Hz flash used for fault codes. |
Power-On Self-Test Sequence
When the rack is energised, every S5 module performs a self-test. The CPU 944 executes a hardware check of its RAM, EPROM, watchdog, and the bus interface. The expected LED sequence is:
- All front-panel LEDs illuminate briefly (≈ 100-300 ms) — this is a lamp test, not a fault.
- QVZ and BASP turn on, BA may also turn on if the battery is low or absent.
- ST turns on steady. The CPU waits for a cold-restart OB (OB20 for manual cold restart, OB21 for automatic) or remains in STOP if no user program is present.
The crucial diagnostic test is: does the ST LED flicker during step 1? If the ST LED begins a high-frequency alternating on/off pattern (commonly interpreted as "flickering" — frequency not specified in the Siemens manual, but observationally 5-10 Hz) and remains in that pattern, the manual states: the CPU module is defective and must be replaced. There is no software recovery path for this hardware fault.
If, after the lamp test, the ST LED transitions to a slower flash (0.5-1 Hz) or steady-on, the CPU is operable but the system is reporting a logic fault — most commonly a missing or corrupt user program.
Interpreting the Reported Symptom: QV + BA Red, ST Blinking Red
Mapping the field report against the LED table:
- QV (red, steady): Expected in STOP because the cyclic OB1 is not being executed. Indicates "no I/O cycle in progress." Not a fault indicator in this state.
- BA (red, steady): Backup battery is missing, discharged, or the battery jumper on the CPU is not fitted. The RAM is volatile. This means the program is not retained across power cycles — but it does not mean the CPU is broken.
-
ST (red, blinking): Two interpretations:
- If the blink rate is the high-frequency "flicker" (5-10 Hz) seen during self-test, the CPU is defective per Siemens manual section 5.1.3.
- If the blink rate is ≈ 1 Hz and the QVZ LED is pulsing in a complementary pattern, the CPU is signalling "STOP requested, no user program loaded". This is recoverable.
Diagnostic Procedure Without Dedicated Software
Step 1: Battery Replacement
- Power down the rack. Wait 30 seconds for capacitor discharge on the CPU.
- Open the CPU front cover; locate the 3.6 V lithium backup cell (typically a 1/2 AA or AA form factor).
- Replace the cell. Observe polarity: positive terminal toward the front of the CPU.
- Re-apply power. Note whether the BA LED extinguishes. If BA remains lit after 30 s, the on-board charging circuit may be damaged — proceed with serial diagnostic.
Step 2: Overall Reset (Cold-Restart Memory Clear)
If a programmer is available:
- Connect the PG-2000 cable (or compatible) between the CPU's TTY port and the PC's COM port.
- Open STEP5 or the STEP5/STEP7 PG-2000 clone.
- Select PLC > Memory Reset > Overall Reset (German: Gesamtlöschen).
- After overall reset, the CPU performs a cold restart automatically. With no user program it will return to STOP with QVZ, BA (if battery still absent), and BASP illuminated.
This confirms the CPU's ability to execute its bootstrap. If the CPU enters STOP and stays there with no error code, the processor core is functional.
Step 3: Online Connection Test
The simplest confirmation that the CPU is alive is a successful online connection. Tools and their availability:
| Tool | Cost | Function | Notes |
|---|---|---|---|
| Siemens STEP5 (PG-2000 environment) | Commercial (legacy) | Full programming, online, diagnostics | Best option if available. Runs under DOS or in DOSBox on modern Windows. |
| STEP5 / STEP7 PG-2000 clone (e.g. Pg2000win) | Free / shareware | Online read, program transfer, force I/O | Works with the standard PG-2000 cable. Verify compatibility with CPU 944 firmware. |
| KEPServerEx (Kepware) demo | Trial | OPC-DA / DDE server with Siemens S5 MPI/TTY driver | Demo mode allows read-only access — sufficient to verify the CPU is responding. The S5 serial driver in KEPServerEx does not require STEP5 to be installed. |
| libnodave / S5Lib (open source) | Open source | Direct S5 protocol over serial | For engineers who want to script a custom test. Compatible with S5-115U at 9600 baud, 8-E-1. |
For a quick check using KEPServerEx:
- Install KEPServerEx. Launch the Configuration tool.
- Add a Channel of type Serial. Set COM port parameters: 9600 baud, 8 data bits, even parity, 1 stop bit.
- Add a Device with the Siemens S5 Serial driver. Enter the PLC address (default 1).
- Click Quick Client. Try to read DB1 or Merker (M) bits. If the server returns values without error, the CPU is responsive.
RS232-to-TTY Cable Wiring
The CPU 944 communicates over a 20 mA current-loop TTY interface, not RS-232. A direct serial cable will not work. Use one of:
| Cable | MLFB | Notes |
|---|---|---|
| Siemens PG-2000 cable (TTY end) | 6ES5 734-2BF00 | Has integrated TTY ↔ RS-232 converter. Standard programming cable. |
| Siemens 6ES5 734-1... adapter + 6ES5 731-1... TTY converter | — | Older approach using 25-pin TTY adapter and separate converter box. |
| USB-to-Serial + USB-to-TTY (Westenhoff / HMS Anybus) | — | Use when the PC no longer has a built-in COM port. |
Standard TTY pinout (15-pin D-sub on the CPU side):
| Pin | Signal |
|---|---|
| 1 | +5 V (rarely used) |
| 4 / 11 | TTY transmit loop (+/-) |
| 6 / 13 | TTY receive loop (+/-) |
| 14 | Shield / GND |
Modern PCs lack a 9-pin RS-232 port. Either a USB-to-RS232 adapter (FTDI FT232R-based devices work reliably with the Siemens TTY converter) or a direct USB-to-TTY cable is acceptable. Verify the cable supports 9600 baud, which the CPU 944 uses as the default.
Test Program for the CPU 944
If the online connection succeeds, write a minimal OB1 to confirm that the CPU can execute user code:
; OB1 - Test program for CPU 944
; Single rung, no inputs, no outputs
;
BE
Transfer this to the CPU using PLC > Download. Issue a cold restart. Expected behaviour:
- CPU transitions to RUN (green RUN LED on, if fitted).
- QVZ extinguishes because the cyclic OB is now executing.
- BASP extinguishes because outputs are now enabled.
- ST LED extinguishes (CPU is in RUN).
- BA remains lit if the backup battery is still missing or discharged.
If the CPU enters RUN with this single BE instruction in OB1, the processor, RAM, firmware, and I/O bus are all functional. The CPU is operational.
Fault Code Reference for CPU 944
The S5-115U CPU 944 indicates software faults through the combination of ST and QVZ LEDs and the binary fault number visible only to STEP5. The most common codes that an engineer will see on a CPU that has stopped are:
| Fault (STEP5) | LED Pattern | Cause |
|---|---|---|
| OB not loaded | ST slow flash, QVZ on | Required OB (1, 21, 22, 34, etc.) missing — memory reset and reload fix this. |
| Stack overflow | ST slow flash with burst pattern | User program error — check block stack in STEP5. |
| Substitution error | ST slow flash | I/O module signals a malfunction — check module status LEDs and rack power. |
| Timeout (QVZ) | QVZ on steady, ST slow flash | Digital input module is not ready or address is wrong — verify IM and slot configuration. |
| Battery fault | BA on steady, ST on | Backup battery missing — replace cell. |
| Self-test fail | ST high-frequency flicker | CPU hardware defect — replace CPU module. |
Step-by-Step Verification Procedure
- Replace the backup battery if BA is lit.
- Apply power. Observe the ST LED for the first 1-2 seconds.
- If the ST LED flickers at 5-10 Hz, the CPU is defective — replace it.
- If the ST LED transitions to a slow flash or steady on, continue to step 5.
- Connect the PG-2000 cable to the PC. Configure COM port to 9600, 8, E, 1.
- Attempt an online connection with STEP5, the STEP5/STEP7 PG-2000 clone, or KEPServerEx in demo mode.
- If the connection succeeds, the CPU is responsive. Read or write a test word and verify the response.
- Program an empty OB1 with only a
BEinstruction and download it. - Perform a cold restart. The CPU should enter RUN. ST, QVZ, and BASP LEDs should all extinguish.
- If the CPU enters RUN, the module is operational. The BA LED will remain lit if the battery was not replaced — this is non-fatal but the program will not survive a power cycle.
Troubleshooting Matrix
| Symptom | Probable Cause | Action |
|---|---|---|
| QV + BA + BASP + ST all on, ST slow flash | CPU is in STOP, no user program, battery low | Replace battery, load program |
| QV + BA + ST on, ST high-frequency flicker at self-test | CPU hardware fault | Replace CPU module |
| BA only, no other red | Battery missing or discharged | Replace battery |
| QVZ only, no other red | I/O cycle timeout (slot empty or defective IM) | Verify rack configuration, check IM LEDs |
| All LEDs off after power-up | No power to rack, or CPU fully dead | Check 24 V supply, check rack power supply LEDs, reseat CPU |
| ST on, online connection fails | Cable fault, wrong COM parameters, defective TTY interface | Verify cable, test with a known-good PG-2000, check for 20 mA loop current with a clamp meter |
| Online connection succeeds, but program download errors | RAM/EPROM write-protect jumper set, battery low causing RAM volatility | Check EPROM/EEPROM jumpers, replace battery, attempt overall reset |
Recommended Learning Path for the SIMATIC S5 Platform
For an engineer newly assigned to an S5-115U fleet, the following reference materials are essential:
- S5-115U Programmable Controller System Manual (Siemens, 6ES5 998-0UBx5) — covers hardware, addressing, and LED diagnostics.
- STEP5 Programming Manual — describes the line-oriented, structured text, and ladder representations used by S5.
- PG-2000 Programming Device Manual — covers the programming cable and the COM port settings.
- CPU 944 Reference Manual — describes instruction set, scan times, and memory organisation.
Siemens continues to host legacy documentation on its product support portal. Searching the MLFB (e.g. 6ES5 944-7UB11) on the Siemens Support site returns the full PDF library for that module. For an S5-115U overview and the complete family tree, refer to the Siemens Legacy PLC Knowledge Base.
Safety Considerations Before Working on a Live S5-115U
When working with a 24 V DC powered S5-115U, the rack may remain live even after the CPU is removed if the power supply is separate. Verify zero energy on the backplane before any contact.
Field-Commissioning Notes
- Always replace the backup battery with the rack powered up, to avoid RAM loss and program reload work. The CPU 944 charges the lithium cell only when the rack is energised.
- Document the cold-restart OB selection in your project documentation. A CPU 944 that has OB20 but not OB21 will not auto-restart after power recovery.
- If the S5-115U is part of a process plant with HazOp requirements, treat any CPU replacement as a SIL-relevant event. Test all safety functions before returning the line to production.
- Keep at least one spare CPU 944 and one spare PG-2000 cable in the maintenance locker. Lead time on new-old-stock units is unpredictable.
What does a flickering STOP LED on an S5-115U CPU 944 mean?
A high-frequency flicker (≈ 5-10 Hz) on the STOP LED during the first 1-2 seconds of power-up indicates a CPU hardware failure per Siemens manual section 5.1.3. The module must be replaced; no software procedure will recover it. A slow 1 Hz flash, in contrast, signals a logic condition such as a missing OB, which is recoverable with a memory reset and program reload.
Is the QV LED on an S5-115U CPU 944 a fault indicator in STOP?
No. QVZ (Quittierverzögerung) is on whenever the CPU is in STOP and not executing the cyclic OB1, which is normal. It is only a fault indicator when the CPU is in RUN and QVZ lights, meaning an I/O module is not responding to the cyclic poll. The corresponding inputs/outputs are typically displayed in the STEP5 "QVZ stack" view.
What is the difference between BA and BASP LEDs on the CPU 944?
BA (Batterie) lights when the lithium backup cell is missing, discharged, or out of specification, indicating that RAM contents will not survive a power cycle. BASP (Befehlsausgabe gesperrt) lights when all digital output modules are inhibited because the CPU is in STOP, no valid user program is loaded, or the program has been deleted. Both can be on simultaneously during a normal power-up with no project loaded.
Can I test a CPU 944 with freeware or trial software?
Yes. The STEP5 / STEP7 PG-2000 clone is shareware that can establish an online connection to a CPU 944 over a standard PG-2000 cable. KEPServerEx in demo mode provides read-only access via OPC and is sufficient to verify that the CPU is responding to serial polls. For scripted testing, the open-source libnodave or the s5util libraries can be used, but they require a TTY-to-RS232 converter cable.
What COM port settings are required to communicate with a CPU 944?
Use 9600 baud, 8 data bits, even parity, 1 stop bit (8-E-1). The CPU 944 communicates over a 20 mA current-loop TTY interface, not native RS-232. A PG-2000 cable or compatible TTY-to-RS232 (or TTY-to-USB) converter is required. On modern PCs without a built-in COM port, an FTDI-based USB-to-RS232 adapter in combination with the Siemens TTY converter is the most reliable approach.
How can I tell the difference between a missing program and a defective CPU when only the ST LED is flashing?
Connect the programming cable and attempt an online connection. If STEP5 reports "connection established" and you can read the system status, the CPU is healthy and the flash is a logic fault. If the connection fails or STEP5 reports "module not responding," reseat the CPU and re-test. If still no response, swap in a known-good CPU 944 from a spare to confirm the module is defective.