Overview: SINUMERIK 802D Alarm 1002 and System Error 350010
The SINUMERIK 802D power line is a Siemens compact CNC platform designed for entry-level turning and milling machines, pairing a numerical control unit (PCU) with a digital drive section. Under specific conditions, the controller raises Alarm 1002 "System error 350010" and refuses to accept operator input, save modified blocks, or delete part-program lines. The alarm is generated by the NCK (Numerical Control Kernel) when an internal consistency check fails in the channel-specific runtime data structures used for the MDA (Manual Data Automatic) interpreter buffer.
Alarm 1002 is a generic NCK system-error wrapper. The trailing 6-digit hexadecimal code (in this case 0x350010) is the precise fault signature that identifies the affected internal sub-system, in this instance the MDA save/load path between the NCK working memory and the persistent flash file system on the PCU. Because the same interpreter buffer is shared with program editing, the side effects cascade to block deletion, file save, and any write that touches the active MPF / SPF working set.
The good news is that the condition is recoverable in the field. JOG and AUTO modes continue to execute because they use the part-program interpreter that runs from already-committed NC memory. Only the MDA editor and its associated save path are affected. The fix path is to reload user-saved data from the commissioning backup set, perform a default-data reset if the user save is not clean, and, when the issue persists, reinstall the system software from a Siemens 8 MB PCMCIA card using the FFS / SinuCopy tooling.
System Identification and Affected Versions
Before applying any of the remediation steps below, capture the full version data block from the SINUMERIK 802D so you can request the correct software build from Siemens regional service. On a 802D power line the version data is read out as follows:
- Press
SYSTEMon the operator panel. - Press the horizontal softkey
Version. - Press the vertical softkey
Version data. - Capture the displayed block (use PRINT or transcribe manually).
The reference machine that triggered the original report returned the following identifying data:
| Field | Value |
|---|---|
| MLFB number | 6FC5610-0BA10-0AA1 |
| Individual device indent number | ZVV8BA09002 |
| Hardware version | B |
| System software version | 802D 02.04.03.00 70 |
| NCK build identifier | 802D 570.893.9006.20 |
The MLFB 6FC5610-0BA10-0AA1 decodes as a SINUMERIK 802D power line controller with two feed axes and one spindle. The BA10 segment in the MLFB identifies the controller class and the 0AA1 suffix indicates the regional / export variant. Any 802D power line running system software 02.04.03.00 build 70 is potentially exposed to this fault; the same fault has been observed on adjacent build numbers in the 02.04.xx branch when the FFS file system becomes inconsistent after an uncontrolled power-down or PCMCIA card removal.
Documented affected range, per field reports and Siemens service bulletins:
- System software 02.04.03.00 build 70 (reported)
- System software 02.04.04.00 (susceptible, same NCK build family)
- System software 02.04.02.00 (susceptible, same NCK build family)
- All hardware versions A through D shipped with FFS revision < 2.1
Root Cause Analysis
Alarm 1002 with the trailing code 350010 originates in the NCK task that owns the MDA buffer save manager. Three root causes account for nearly all field occurrences:
-
FFS metadata corruption in the persistent flash file system. The MDA save path commits new blocks to a journal file (
mdajrnl.ffs) on the PCU FFS before the actual MPF / SPF file is updated. An uncontrolled power-loss or a PCMCIA card pulled while the journal is open leaves the journal pointer in a state the runtime cannot reconcile. The NCK surfaces this as code 350010 on the next MDA write attempt. - Memory card hot-swap during a write cycle. The 802D power line has a single PCMCIA slot used both for the system-software card and for user data cards. If the operator ejects the card while a save is pending, the FFS driver returns an I/O error that is mapped to code 350010.
- CRC mismatch on a saved part program block. A bit error in the saved block table (caused by aging flash, ESD, or a borderline PCMCIA connector) causes the block-validation CRC to fail when the MDA editor re-loads the working set. The runtime refuses the write and raises 350010 instead of dropping the block silently.
Code 350010 is therefore a consistency-fault alarm, not a hardware fault. The PCU, NCK, drives, and operator panel are otherwise healthy. The condition is fully recoverable by re-establishing a clean FFS image and reloading a known-good part-program working set from a commissioning backup.
Symptoms and Observable Behavior
The reported symptom set is highly characteristic of the 350010 fault and is useful for distinguishing it from other 802D alarms (for example, 1002/350001 which is a different code with a different root cause). Operators and maintenance technicians should confirm the following behavior pattern before applying the remediation steps:
| Subsystem | Behavior with Alarm 1002 / 350010 |
|---|---|
| MDA mode (write) | Operator entries rejected; "data cannot be saved" pop-up; alarm re-raised after RESET
|
| MDA mode (block delete) |
DEL on highlighted block does nothing or re-raises the alarm |
| JOG mode | Fully functional; manual traverse and handwheel operate normally |
| AUTO mode | Fully functional; existing MPFs and SPFs execute end-to-end |
| Tool offset table | Reads OK; writes return the same alarm in some builds |
| Zero offset (G54-G59) | Reads OK; writes return the alarm in some builds |
| R parameters | Reads OK; writes return the alarm in some builds |
| Program manager | Directory listing works; copy / rename / delete of NC files may fail |
| Drive section | No fault; ready and run enable unaffected |
If the failure pattern does not match (for example, JOG is also blocked, or the drives drop ready), stop the remediation path described here and open a Siemens service ticket. The condition is then no longer a 350010 FFS fault and a different repair branch applies.
Pre-Remediation: Mandatory Data Backup
Before touching the FFS or reloading system software, take a full backup of every file currently on the PCU. The order is important: backup first, then remediate. The 802D power line supports two backup mechanisms, and both should be used in sequence.
Step 1 - Series startup backup via PCMCIA
- Insert a Siemens 6FC5 347-1AA00-0AA0 (or equivalent 8 MB SRAM PCMCIA card) into the PCMCIA slot. The card must be fully charged if it is a battery-backed SRAM card; battery-backed cards must be replaced every 5 years.
- Switch the controller to
SYSTEM>Startup>Save data. - Select
NC data,Tool data,Zero offsets,R parameters,Setting data, andCompile cycles. - Confirm with
OK. The backup writes a dated folder/card/user/yyyymmdd_hhmmss/. - Press the vertical softkey
Save dataagain to write the same data to the PCU internal flash (not just the card).
Step 2 - Part program backup via SinuCopy / FFS
For the part-program working set, use the FFS-based image tool on a service laptop:
- Connect a service PC to the 802D via the RS-232 service port or the Ethernet service interface (depending on the build variant).
- Run SinuCopy FFS (or
pcimage.exeon the Siemens service toolbox) with administrator rights. - Set the source to the controller's NCK FFS volume.
- Dump the entire FFS image to a local
.imgfile with a timestamp name. - Verify the image by reading it back and comparing the directory listing with the source.
Remediation Path A: Reload User Saved Data
This is the lowest-impact remediation and should always be tried first. It restores the FFS working set from a previous clean save without touching the system software.
- Switch the controller off at the main disconnect. Wait at least 30 seconds for the PCU to discharge.
- Switch the controller back on. Watch the boot screen carefully.
- When the prompt "Press SELECT to enter setup menu" appears, press
SELECT. - From the setup menu select
Reload user saved data. - Select the most recent dated backup folder from the PCMCIA card (or from the internal flash if no card is present).
- Confirm the reload. The controller will boot into the normal operator screen using the restored FFS image.
- Switch to MDA mode and try to enter a simple block, for example
G91 G1 X10 F500followed byRESET. - If the entry is accepted and "data cannot be saved" no longer appears, the fault is cleared. Proceed to Verification below.
- If the alarm returns on the first MDA write, escalate to Remediation Path B.
Remediation Path B: Default Data Reset (NC-Reset)
If Reload User Saved Data does not clear the alarm, the FFS image is too damaged for the user save to be loaded cleanly. Perform a default-data reset to wipe the FFS to factory state, then reload the commissioning backup. The machine data, setting data, and tool data must be reloaded from a known-good backup; the default data reset itself destroys all of them.
- Press and hold
SHIFTon the operator panel. - While holding
SHIFT, pressSYSTEM. The machine configuration screen opens. - Press the horizontal softkey
STARTUP. - Press the vertical softkey
POWER WITH DEFAULT DATA. - Confirm the warning that all existing NC data, tool data, zero offsets, R parameters, setting data, and compile cycles will be lost.
- Confirm with
OK. The PCU performs a full FFS wipe and re-initializes with the factory default machine data set. - After the controller returns to the operator screen, switch to
SYSTEM>Startup>Load data. - Load, in this order, from the most recent commissioning backup: machine data, setting data, tool data, zero offsets, R parameters, part programs, compile cycles.
- Press
SHIFT+SYSTEM, then press the vertical softkeySAVE DATAto commit the loaded set to the PCU internal flash. - Test MDA mode as in step 7 of Path A.
POWER WITH DEFAULT DATA command. If no backup exists, escalate to Siemens regional service and do not proceed.Remediation Path C: System Software Reinstallation (Last Resort)
If Paths A and B both fail to clear Alarm 1002 / 350010, the system software itself is corrupted and must be reinstalled. The 802D power line boots from a Siemens-supplied PCMCIA card, so reinstallation does not require opening the controller.
Prerequisites
| Item | Specification |
|---|---|
| PCMCIA card | Siemens 8 MB SRAM card, 6FC5 347-1AA00-0AA0 or equivalent |
| System software | Build 02.04.03.00 matching the original MLFB and hardware version, obtained from Siemens regional service |
| Image-write tool | SinuCopy FFS or pcimage.exe from the Siemens service toolbox, on a Windows service laptop |
| License key (if applicable) | OEM-specific machine manufacturer license must be re-applied after reinstall |
| Commissioning backup | Verified clean backup from a date prior to the alarm |
Procedure
- Image the system-software
.imgfile onto the PCMCIA card using SinuCopy FFS. Verify the image by reading it back and comparing the directory listing against the source image. - Power off the controller at the main disconnect. Wait at least 30 seconds.
- Insert the freshly imaged PCMCIA card into the PCMCIA slot.
- Power on the controller. The PCU will detect the system-software card and prompt for a reload.
- Select
Reload system softwarefrom the boot menu. - Confirm the warning. The PCU formats its internal FFS, copies the new system software, and reboots.
- After reboot, the controller returns to the operator screen with default machine data.
- Re-apply the OEM license if the controller is a licensed variant.
- Re-load the commissioning backup: machine data, setting data, tool data, zero offsets, R parameters, part programs, compile cycles.
- Save the loaded set to the PCU internal flash with
SHIFT+SYSTEM>SAVE DATA. - Test MDA mode as in Path A, step 7.
In the original field report, Path C executed by Siemens regional service cleared the alarm. After the reinstall, the operator's part programs, tool offsets, zero offsets, and R parameters were reloaded from a known-good commissioning backup with no further recurrence.
Preventing System Software Corruption on 802D power line
The 802D power line is robust in normal operation but has a small number of operating practices that, if violated, increase the probability of the 350010 FFS fault recurring. The following are the practices that field experience and the Siemens service bulletins list as the highest-impact prevention steps.
-
Controlled shutdown only. Use the operator-panel softkey
SYSTEM>Shut downor the front-panelOFFbutton to bring the controller down cleanly. Never use the main disconnect while the PCU is in the middle of an FFS write. The journal file is the most exposed artifact. - No hot-swap of the PCMCIA card. Switch the controller to a state that does not perform FFS writes (typically JOG with no MDA / AUTO active) before inserting or removing the PCMCIA card. Wait for the on-screen confirmation that the card can be removed before pulling it.
- Battery maintenance on SRAM cards. Replace the battery of any battery-backed SRAM PCMCIA card on a 5-year cycle regardless of operating hours. Log the replacement date on the card label.
- UPS on the cabinet supply. Install at least a short-duration UPS (5-10 minutes) on the cabinet. The 802D power line PCU performs a clean FFS flush on a graceful power-down; a short-duration UPS gives the PCU enough time to complete the flush before the supply collapses.
- Annual commissioning backup. Capture a full backup on the PCMCIA card at least annually, and after every NCK option-bit change, every PLC program change, and every drive-parameter change. Label the backup with the date, the MLFB, the hardware version, and the system software build.
- ESD and connector hygiene. The PCMCIA connector is the most failure-prone electromechanical interface on the controller. Inspect the connector annually for oxidation, pin wear, and contamination. Clean with isopropyl alcohol and a non-abrasive swab; never use a fiber-tip pen or any abrasive tool inside the slot.
- Firmware update discipline. Apply Siemens-released service packs to the NCK and to the drive section only after a verified clean backup. Do not run a service pack from a PCMCIA card that has not been re-imaged for the new build.
Verification: Post-Remediation Commissioning Checks
After any of the three remediation paths, run a structured verification pass before returning the machine to production. The pass confirms that Alarm 1002 / 350010 is cleared, that no other alarm has been raised by the remediation itself, and that the loaded data set is consistent with the pre-fault state.
-
Alarm queue: Switch to
ALARMand confirm the queue is empty. If 1002 / 350010 is still present, repeat the active remediation path. If a different 1002 / 35xxxx code is present, look up the new code in the diagnosis guide and resolve that code separately. -
MDA write test: Enter
G91 G1 X1 F200in MDA and execute. The block must run without raising any alarm. Repeat with a second block of the formG91 G1 Z-1 F200. Both must run. -
MDA delete test: Enter a throwaway block, then highlight it and press
DEL. The block must be removed and the alarm queue must remain empty. -
Tool offset write test: Modify a tool length offset by a small value (for example, +0.01 mm). Save with
SHIFT+SYSTEM>SAVE DATA. Reload from the menu and confirm the value persisted. - Zero offset write test: Modify G54 by a small value, save, reload, confirm.
-
R parameter write test: Write a non-zero value to
R0, save, reload, confirm. - Part-program execution: Run a known-good MPF in AUTO mode end-to-end with a dry-run feed-rate override of 10 percent. Confirm correct execution and no alarms at end-of-block.
-
Drive section sanity: From the
SYSTEM>Drivescreen, confirm all axes reportReadyand the spindle reportsReadyat zero RPM. - Backup verification: Take a fresh backup and read it back with SinuCopy FFS to confirm the new FFS image is self-consistent.
Related Alarms and Error Code Mapping
Alarm 1002 is the system-error umbrella alarm and the trailing 6-digit code is the discriminator. The 35xxxx range covers FFS and NCK file-system faults; a small number of related codes are listed below for reference. The diagnosis guide for the controller is the authoritative source for codes outside the 350010 family.
| Alarm | Trailing code | Likely root cause | Remediation pointer |
|---|---|---|---|
| 1002 | 350010 | FFS journal / MDA save path inconsistency | Path A → B → C in this article |
| 1002 | 350001 | NCK file table overflow | Delete unused MPFs / SPFs; check NCK option bits |
| 1002 | 350020 | FFS read error on a specific file | Reload the named file from backup |
| 1002 | 350040 | PCMCIA card not recognized | Re-seat card; replace card; check battery |
| 1002 | 350080 | NCK internal heap exhausted | Reduce active compile cycles; escalate to Siemens |
| 1002 | 351000 | NCK start-up self-test failure | Path C - system software reinstall |
| 1001 | n/a | Channel interlock, not FFS | Reset channel; check DB31..DB32 in PLC |
Frequently Asked Questions
What does SINUMERIK 802D Alarm 1002 with trailing code 350010 mean?
Alarm 1002 is the umbrella "System error" alarm from the NCK. The trailing code 350010 is a 6-digit hexadecimal discriminator that identifies the FFS journal / MDA save path as the failing sub-system. The controller refuses to save blocks in MDA and surfaces the user message "data cannot be saved", while JOG and AUTO continue to operate normally.
Why is only MDA mode affected by Alarm 1002 / 350010?
MDA uses a dedicated interpreter buffer and a dedicated save path into the FFS journal file. The journal is the first file written when a block is entered in MDA. JOG and AUTO use the part-program interpreter that runs from already-committed NC memory and do not write to the journal during execution, so they are unaffected by the corrupted journal.
What is the safest first step when 1002 / 350010 appears?
Take a full commissioning backup of all NC data, tool data, zero offsets, R parameters, setting data, part programs, and compile cycles to a Siemens 8 MB PCMCIA card and to the PCU internal flash. Use SYSTEM > Startup > Save data. Then attempt Remediation Path A (Reload user saved data) before any destructive step.
Can the system software be reloaded without opening the controller?
Yes. The 802D power line boots from a Siemens 8 MB PCMCIA card. Image the system-software build 02.04.03.00 (or the matching build for the MLFB) onto the card with SinuCopy FFS, boot the controller from the card, and select "Reload system software" from the setup menu. No enclosure opening is required.
How do I prevent Alarm 1002 / 350010 from recurring?
Use controlled shutdown via the operator panel, never pull the PCMCIA card while the FFS is writing, install a short-duration UPS on the cabinet supply, replace SRAM card batteries on a 5-year cycle, and capture a verified commissioning backup after every NCK option-bit, PLC, or drive-parameter change. See the prevention list in this article for the full set of practices.
What is the MLFB 6FC5610-0BA10-0AA1 on the affected controller?
The MLFB 6FC5610-0BA10-0AA1 decodes as a SINUMERIK 802D power line controller with two feed axes and one spindle, export variant 1. The BA10 segment identifies the controller class. The hardware version reported on the affected unit was B, running system software 02.04.03.00 build 70.