Problem Overview
A Sinumerik 840D NCU (Numerical Control Unit) refuses to complete its boot sequence. The seven-segment display on the NCU cycles upward through its diagnostic states, briefly settles, and then collapses to a single cyclic dot indicating an unresolved error. The operator panel (PCU/HMI) cannot establish communication with the PLC, and Step 7 connection attempts time out. The PCU cannot get a signal from the PLC. The fault is intermittent on first observation: a cold reset may bring the controller back, but there is no diagnostic confirmation that the underlying condition has been removed.
This pattern - rapid counting through 0..8, dwell at 5, transient 6, cyclic dot, POK/PR green, Step 7 timeout - is one of the most common "dead Sinumerik" symptoms reported in service tickets on 840D and 840D sl lines (NCU 561.x / 571.x / 710.x / 720.x / 730.x). Because the machine often controls a high-value, long-cycle machining operation (parts with weeks or months of lead time, tight diameter tolerances), a fault classified as "unexplainable" is unacceptable to operations. The procedure below is engineered to convert a non-deterministic boot fault into a deterministic, documented recovery that operators can execute before calling field service.
Reference: Siemens Industry Online Support, SINUMERIK product portal.
NCU Front-Panel Indicators (POK, PR, SF, BF)
Before interpreting the seven-segment code, capture the LED state. The LEDs provide a coarser signal that is needed to separate power-supply faults from PLC faults from drive-commissioning faults.
| LED | Color | Function | Lit | Off |
|---|---|---|---|---|
| POK | Green | Power OK | 24 V supply on the NCU is within tolerance | Power supply fault - check 24 V before any further action |
| PR | Green | PLC Run / Ready | PLC has completed initial run and is in RUN | PLC is in STOP, has crashed, or has not finished booting |
| SF | Red | System Fault | PLC diagnostic buffer contains a fault entry | No PLC-level system fault logged |
| BF / BF1 / BF2 | Red | Bus Fault (PROFIBUS / PROFINET) | At least one configured bus is in fault | All configured busses are operating |
| MAINT | Yellow | Maintenance request | Maintenance demanded (fan, battery, etc.) | No maintenance request |
Decoding the Seven-Segment Status Code
The seven-segment display on a Sinumerik 840D NCU (and the NCU 7x0 of 840D sl) is the primary diagnostic channel for the NCK/PLC boot state. Each digit corresponds to a defined phase. Operators should observe at least three full cycles and note the last stable digit before the display collapses to the cyclic dot.
| Display | Phase | Interpretation |
|---|---|---|
| 0 | Initial power-on | Supply good, NCK firmware not yet loaded |
| 1 | NCK firmware loading | Boot image being read from CFast / CompactFlash |
| 2 | NCK initializing | Runtime data structures built |
| 3 | PLC initial start | PLC firmware starting, OB100/OB101 execution |
| 4 | PLC stop transition | PLC reached RUN then STOP - programming error likely |
| 5 | PLC stop (dwell) | PLC held in STOP; NCK waiting for PLC RUN |
| 6 | PLC run, drives not ready | PLC is RUN; NCK has not yet received all drive ready signals |
| 7 | Normal operation | PLC RUN + all drives ready - machine in follow-up / reset |
| 8 | Extended reset / cold restart | NCK in controlled restart, persistent data being re-read |
| . | Cyclic error dot | NCK alive but a fatal condition prevents operational state |
The reported symptom - "cycles up to 8, then back to 5 for some time, then to 6 for a second, then disappears to dot" - maps to the following state trajectory:
- NCU powers up; firmware loads; NCK reaches phase 8 (cold restart complete).
- PLC comes up, attempts RUN, drops back to STOP - dwell at phase 5.
- PLC recovers briefly, reaches RUN - phase 6 visible for ~1 second.
- Drive-ready handshake fails OR the PLC drops to STOP again - controller collapses to cyclic-error dot.
State Machine (Boot Path With Fault Injection)
PLC Timeout in Step 7 - Interpretation
Step 7 (or TIA Portal with the 840D sl add-in) times out when the PLC side of the NCU does not respond to MPI/PROFIBUS/TCP "online" requests. The most common causes:
- PLC in STOP with no cyclic communication running.
- PLC firmware corrupted - OB100 cannot complete.
- PLC and NCK handshake stalled (PLC RUN requested but not acknowledged).
- MPI/DP address mismatch between the PC station and the NCU (default PLC MPI address on 840D is 2, baudrate 187.5 kbps or 1.5 Mbps depending on NCU generation).
- Defective PROFIBUS cable / connector on the X2 (MPI/DP) port of the NCU.
- NCU in extended reset with bus interfaces disabled.
Because POK and PR are both lit, the PLC is electrically alive and has reached a "ready" state at least once during boot. The Step 7 timeout is therefore almost always a software-side condition (PLC in STOP with cyclic blocked, or address conflict), not a physical-layer fault.
Root Cause Categories
Reduce the symptom to one of five buckets before deciding on a recovery action:
| Category | Likelihood | Indicator | First Action |
|---|---|---|---|
| PLC STOP due to programming error (OB121, OB85) | High | Phase 5 dwell, SF briefly lit or cycled | NC/PLC clearing + reload backup |
| NCK-PLC handshake stalled | High | Phase 5 -> 6 -> dot with no error LED | NCK clearing, then PLC clearing |
| Drive bus fault (PROFIBUS / PROFINET to 611D / SINAMICS) | Medium | Phase 6 collapses immediately, BF lit or flashing | Check drive bus termination, slave diagnostics |
| Corrupted PLC firmware / project on CFast | Medium | Looping at phase 1-3 indefinitely | Reload PLC firmware via SIMATIC Manager / TIA Portal |
| Defective NCU module (CPU, memory, NIC) | Low | SF permanently lit, 7-segment never reaches 5 | RMA / NCU replacement |
Primary Recovery: NC/PLC Clearing Procedure
NC/PLC clearing is a controlled reset that wipes the volatile NCK and PLC working memory, forces a re-read of the project files from persistent storage (CFast card or hard disk), and re-runs the cold-restart sequence. It is non-destructive to the backed-up project files. It is the correct first action whenever the seven-segment shows the 5 -> 6 -> . pattern with PR green and SF off.
Procedure for 840D Classic (NCU 561.x / 571.x) with MMC 100/103
- Switch the controller to a safe state - program end / reset, axis standstill, door closed.
- On the MMC front panel, turn the keyswitch to position 0 (or remove the key from RUN).
- Set the NCK rotary switch (S4 on the NCU module, position visible through a small window) to position 1 - this is the "NCK general reset" position.
- Power-cycle the NCU (24 V off, count to 10, 24 V on).
- Watch the seven-segment: it should count 0 -> 1 -> ... -> 7 with no collapse to dot.
- When the HMI shows "PLC stop / Reset" and the seven-segment sits at 5, set the S4 switch back to position 0.
- From the HMI, trigger a PLC general reset (Start-up -> PLC -> PLC general reset).
- Reload the PLC project from backup (Start-up -> PLC -> Load from PG/PC or Load from archive).
Procedure for 840D sl (NCU 710.x / 720.x / 730.x) with TCU/PCU
- Place the machine in a safe state - reset, axes stopped.
- From Sinumerik Operate, navigate to Start-up -> HMI -> Reset / Clear.
- Select "NCK reset" first; confirm with "OK". The controller reboots.
- After NCK returns to operational state, navigate to Start-up -> PLC -> "Clear PLC".
- Confirm. The PLC performs an OB100 cold start; project files are reloaded from
/card/user/system/. - If the seven-segment again collapses to dot, escalate to "NCK general reset (clear CF)" which wipes volatile machine data and forces a full reload from the system image. WARNING: this clears compensation data, machine dates, tool lists, and requires a full re-commissioning - do NOT run this on a production machine without an intact backup.
Reference: SINUMERIK 840D sl Commissioning Manual (TCU / NCU).
Secondary Recovery: Backup Restore
If clearing alone does not return the controller to a stable 7, the next step is a project restore. Sinumerik supports several backup formats:
| Format | Extension | Contents | Restore Procedure |
|---|---|---|---|
| Series commissioning archive | .arc | Full NCK + PLC + drives + HMI snapshot | Start-up -> Series commissioning -> Read in archive |
| NCK backup | .dsf / .bk | NCK machine data only | Start-up -> Backup/restore -> NCK |
| PLC project | .s7p / .zap / .zap15 / .zip | PLC program, blocks, symbols | Step 7 / TIA Portal - download to PLC |
| Drive parameters | .dnc | 611D / SINAMICS parameter sets | Start-up -> Drives -> Load parameters |
| HMI sl backup | .tgz | Sinumerik Operate images and configuration | Service menu -> restore tgz |
For the symptom in question, load the .arc archive first; if that fails or returns the same fault, fall back to the PLC .zap/.zap15 and the NCK .dsf separately. A partial restore that touches only the PLC is sufficient when the seven-segment is collapsing because of an OB121 programming error.
Hardware Verification: NCU Module and NCU Box
When clearing does not bring the seven-segment to a stable 7, escalate to hardware verification. The procedure below is the minimum cost-effective set; it assumes that POK is lit (24 V supply verified externally) and that the NCK and PLC firmware are known to be intact on persistent storage.
- Remove all PROFIBUS / PROFINET connectors from the NCU (X2, X126, X127, etc.) and power-cycle. If the controller reaches phase 7 with the bus disconnected, a slave or cable is dragging the bus. Re-connect one segment at a time.
- Check the fan on the NCU module. NCU 720 / 730 have temperature sensors; if the fan has seized, the NCK will throttle and may drop to a fault state with no clear error code.
- Inspect the CFast card seating. Power off, remove the CFast card, reseat firmly. A partially-seated card can boot past phases 1-3 and then stall when the runtime image is partially readable.
- Measure the 24 V supply at the NCU terminal block. Tolerance: 20.4 V to 28.8 V. Voltages above 28.8 V cause the NCU to throttle; voltages below 20.4 V cause the NCK to crash with no diagnostic buffer entry.
- Check the NCU-to-PCU link (Ethernet on X120, or the backplane on integrated panels). A damaged patch cable mimics a software fault.
- If all of the above are clean and the fault persists, the NCU module itself is suspect. Swap with a known-good NCU of the same firmware version. NCU 561.4 and 571.4 are not interchangeable - check the MLFB article number before any swap.
Risk Classification for Unattended Recovery
Long-cycle, single-piece machines (weeks or months of work, tight tolerances, no mid-cycle recovery) cannot accept a cold reset as a routine recovery action. The table below defines risk classes and the sign-off required before returning the machine to production.
| Risk Class | Machine Profile | Recovery Action | Sign-off Required |
|---|---|---|---|
| A - Bench / training | No workpiece at risk, no operator present | NC/PLC clearing, restart, no further checks | Operator only |
| B - Production, replaceable part | Workpiece replaceable in days | NC/PLC clearing, observe one full program cycle, then resume | Operator + supervisor |
| C - Production, long-cycle, tight tolerance | Workpiece takes weeks/months, single-cycle process | NC/PLC clearing, run dedicated test program to verify PLC logic, observe PLC diagnostic buffer for 24 hours, then resume under continuous monitoring | Engineer + supervisor + customer sign-off |
| D - High-value single-piece | Part destruction on stop is unacceptable | Manual NCU module replacement, controlled re-commissioning under backup | Siemens field service |
The user case is class C: clearing is acceptable, but the machine should not be returned to unattended production without monitoring the PLC diagnostic buffer (Step 7 online -> PLC -> Diagnostic buffer) for at least one full warming-up cycle.
Verification After Recovery
- Confirm POK, PR green; SF, BF off.
- Open Step 7 / TIA Portal and connect to the PLC. Verify the diagnostic buffer is empty or contains only the expected cold-restart entries.
- From Sinumerik Operate, navigate to Diagnosis -> NC/PLC -> Version. Verify the NCK software version and PLC firmware version match the commissioning record.
- Run the axes in JOG through the full travel range; verify no following-error alarms.
- Run one full MDI block that exercises all tool-change logic.
- Run one full AUTO program on a sacrificial workpiece (if class B or C). Inspect the surface for chatter marks that would indicate the controller skipped an interpolation block.
- For class C machines, leave the controller under continuous monitoring for 24 hours with the PLC diagnostic buffer uploaded every 4 hours to a network share. If any OB121 or OB85 entry appears, escalate to engineering.
Preventive Hardening
- Replace the NCU backup battery (CR2032 or equivalent, depending on NCU generation) on the maintenance schedule. A flat battery can corrupt the PLC retentive data and produces exactly the 5 -> 6 -> . pattern on the next cold start.
- Keep two independent backups of the NCK + PLC project: one on the CFast card (automatic) and one on a server share (manual, weekly). The user case was saved because a backup existed.
- Enable the PLC diagnostic buffer upload to a remote syslog or to a SIMATIC log server. A PLC in STOP that does not produce an alarm is the most common root cause of unexplained boot loops.
- Schedule a controlled NCK reset every 6 to 12 months on machines that are otherwise never power-cycled. Long uptime with no reset accumulates PLC diagnostic events that can stall a cold start.
- Apply Siemens firmware updates only after testing on a non-production machine of the same NCU type. The 840D sl firmware versions are not interchangeable across NCU 710 / 720 / 730.
Field Notes
A "machine bad day" classification is a process gap, not a diagnosis. The minimum standard for a class C machine is to capture the PLC diagnostic buffer on every such event and to add the event to a maintenance log. Three unexplained events in twelve months on the same machine is no longer unexplained - it is a latent fault that will eventually coincide with a high-value tool cycle. Treat the first event as a data point and the third as an action item.
Reference documentation for the procedures above: Siemens Industry Online Support portal, Function Manual "SINUMERIK 840D sl Basic Functions", Sinumerik Operate Commissioning Manual, and the SIMATIC S7-300 / S7-1500 diagnostic buffer reference. Operators should also have local access to the SINUMERIK 840D sl Diagnostics Manual for the seven-segment code table specific to the NCU variant installed on the machine.
FAQ
What does the seven-segment code 5 mean on a Sinumerik 840D NCU?
Code 5 means the NCK has booted successfully but the PLC is in STOP. The NCK is waiting for the PLC to enter RUN. If the seven-segment then briefly shows 6 and collapses to a single dot, the PLC has either dropped back to STOP due to a programming error (OB121 / OB85), or the NCK-PLC handshake has stalled because the drive bus (PROFIBUS / PROFINET) did not return ready.
Is it safe to clear the NCK on a production machine?
"NCK reset" is safe - it clears the volatile working memory and forces a reload from the persistent project files on the CFast card. "NCK general reset" is NOT safe on a production machine - it wipes the machine data, tool lists, and compensation data and requires a full re-commissioning. Operators must use the first form, not the second, unless an engineer has verified that a complete backup exists and is restorable.
Why does Step 7 time out when POK and PR are both green?
POK and PR indicate that the NCU has 24 V and that the PLC has reached the RUN state at least once during boot. Step 7 times out when the PLC drops back to STOP after the initial run, which blocks cyclic communication on the MPI/DP interface. The fault is software-side (PLC program issue, address mismatch, or bus handshake) rather than hardware-side (no supply, defective NCU module).
Can a depleted NCU backup battery cause this exact symptom?
Yes. A depleted CR2032 / equivalent backup battery on the NCU corrupts the PLC retentive data on power-down. On the next cold start the PLC can enter a state where the OB100 reads invalid retentive flags, executes a programming error, and is forced into STOP. The seven-segment then shows 5 -> 6 -> . Replace the battery on the maintenance schedule and verify the date code on the slot.
How long should a class C machine be monitored after a recovery?
A class C machine (long-cycle, single-piece, tight tolerance) should be under continuous PLC diagnostic buffer monitoring for at least 24 hours after a recovery, with the buffer uploaded to a network share every 4 hours. Any OB121 or OB85 entry within that window must be escalated to engineering. A class C machine must not be left unattended in production until the buffer has been clean for one full warming-up cycle.