Problem Overview
On a SINUMERIK 840D sl system configured with an NCU 710 numerical control unit and a separate PCU 50.3 industrial PC, technicians performing a CompactFlash (CF) card backup frequently encounter the following symptom: inserting the NC bootable USB stick into the NCU 710 and powering the rack does not produce the familiar Service Center / eboot screen on the connected Thin Client Unit (TCU). Instead, the system boots normally and the HMI (HMI Operate) appears as if no service stick had been inserted.
The same procedure works perfectly on a TCU-only configuration (no PCU attached), which confirms the boot stick itself is functional. The root cause is an HMI display routing conflict between the NCU's internal HMI and the PCU 50.3's HMI Operate runtime: only one HMI may own the active display channel at any given time.
This reference documents the three field-proven workarounds, the underlying X120/X127 addressing, the seven-segment boot indicator states, and the .tgz image capture workflow for 8 GB NCU CompactFlash cards.
Affected Components and Firmware
| Component | Designation | Notes |
|---|---|---|
| NCU | NCU 710.3 (6FC5371-0AA30-0AA0 / -0AB0 variants) | Contains 8 GB CompactFlash card |
| PCU | PCU 50.3 (Windows 7 / Windows 10 IoT LTSB) | Runs HMI Operate in parallel |
| Operator panel | TCU (Thin Client Unit) over Ethernet | Receives display from either NCU or PCU |
| Service stick | Siemens NCU service USB stick (bootable) | Built with SINUMERIK Service Center |
| NCU firmware | NCU software V4.x for 840D sl | Applies across V4.5 SP2 - V4.95 |
| Service Center | Embedded Linux on boot stick | Provides eboot, Backup/Restore, Commissioning |
Root Cause: HMI Display Routing
The 840D sl architecture permits both the NCU's embedded HMI and the PCU's HMI Operate to serve as the active HMI host. By default, the system hands the TCU display to whichever host responds first to the DHCP request on the service network (X127) or the plant network (X120). When the PCU 50.3 is present and powered, its HMI Operate runtime typically claims the display before the NCU's internal Service Center has a chance to surface the eboot menu.
Two addressing ranges must be kept separate:
| Interface | IP address (NCU default) | Subnet | Purpose |
|---|---|---|---|
| X127 | 192.168.215.1 | 255.255.255.0 | NCU service / commissioning |
| X120 | 192.168.214.1 | 255.255.255.0 | Plant network (HMI, NC/PLC) |
| X130 | 192.168.210.1 | 255.255.255.0 | PLCs / drive units (PROFINET) |
Symptom confirmation: if the PCU's network adapter has been reconfigured to a different subnet or its HMI service has been disabled, the NCU boot stick displays the eboot screen normally. The moment the PCU 50.3 HMI comes back online, it preempts the NCU display.
Prerequisites
- A bootable NC service USB stick prepared with the SINUMERIK Service Center image matching the NCU firmware line (V4.x). Verify the stick on a TCU-only machine first to confirm it boots to the eboot menu.
- A Windows service laptop with the following tools installed:
- VNC Viewer (RealVNC, TightVNC, or TigerVNC) — connect to port 5900 of the NCU.
- WinSCP or any SCP/SFTP client — used to drop a script that toggles the NCU internal HMI.
- PuTTY or any SSH client — for the "enable hmi" / "disable hmi" shell command.
- A network cable (CAT5e or better) and access to either the X127 or X120 port on the NCU 710.
- If the 8 GB CF card is to be backed up to a network share (recommended on Windows), the target share must be formatted as NTFS. FAT32 will refuse files larger than 4 GB and the image will silently fail partway through. This requirement is documented in Siemens Support entry 56733508 — SINUMERIK 840D sl: Backup / Restore of the 8 GB NCU CompactFlash card.
- At least 12 GB free space on the destination drive to accommodate the compressed
.tgzarchive (the on-disk image is roughly 6-8 GB after compression).
Method 1 — VNC into the NCU Service Shell (Recommended)
This is the cleanest method because it does not require re-routing the active HMI and it does not risk leaving the PCU 50.3 in a non-default state.
- Insert the NC service USB stick into any of the USB ports on the NCU 710 (front-panel USB-A is preferred).
- Power-cycle the NCU (24 V OFF / ON) or trigger a controlled restart from the operator panel.
- Watch the seven-segment display on the NCU front panel during boot. The expected sequence is:
| Display | Meaning |
|---|---|
| 0 / 1 | BIOS POST / hardware init |
| 2 | Boot loader active (searches USB) |
| 3 | Boot loader handed off to Linux kernel on USB stick |
| 6 | Service Center / eboot shell running; HMI server up on VNC port 5900 |
| Blank | Service Center loaded successfully on the internal HMI (this is the desired state — proceed to step 4) |
| 5 or 7 | Boot error — refer to NCU diagnostics manual |
- Connect the service laptop directly to the X127 port of the NCU using a point-to-point cable (no switch required when the laptop is set to 192.168.215.2 / 255.255.255.0). Alternative: connect to X120 with the laptop at 192.168.214.2 / 255.255.255.0 when the plant network is isolated.
- Launch VNC Viewer and connect to
192.168.215.1:5900(X127) or192.168.214.1:5900(X120). The Service Center desktop appears, identical to the one normally seen on a TCU-only system. - From the Service Center main menu select Backup/Restore > Backup complete CF card. Choose the destination: USB stick, local HDD (if one is mapped), or network drive. For 8 GB CF cards, use a network drive formatted as NTFS as documented in Siemens Support entry 56733508.
- Confirm the file name (default
backup_<NCU_serial>_<timestamp>.tgz) and start the backup. Expected duration on NCU 710: 18-35 minutes for an 8 GB card over gigabit Ethernet. - Once the Service Center displays Backup completed successfully, power down the NCU, remove the service USB stick, and reboot into normal operation.
Method 2 — Enable NCU Internal HMI via WinSCP
Use this method when the VNC path is unavailable (firewalled laptop, no DHCP, X127/X120 blocked) but WinSCP file transfer still works.
- Connect the service laptop to X127 (or X120) and verify SSH reachability with PuTTY:
ssh [email protected]. Default credentials on the NCU Linux areroot/SUNRISEfor older service images, or the password defined during the latest commissioning. Newer firmware prompts for password change on first login. - Open WinSCP with the same IP and credentials, protocol SCP.
- Navigate to
/card/user/system/configuration/on the NCU. - Create or edit the file
hmi.iniwith the following content:
[HMI]
EnableInternalHmi=1
- From the PuTTY shell issue the command
enable hmi. The next time the NCU is rebooted with the service USB stick inserted, the TCU display will be sourced from the NCU's internal HMI, the eboot screen will appear, and the Backup/Restore menu becomes reachable. - Perform the backup as described in Method 1, steps 6-8.
- After backup, return to the PuTTY shell and issue
disable hmito release the display back to the PCU 50.3. Verify by rebooting without the service stick — the HMI Operate on the PCU 50.3 should once again own the TCU display.
disable hmi command leaves the system in a dual-HMI state. Both HMI hosts will race for the TCU, producing flickering, lost key focus, and intermittent alarm 120402 "HMI connection to NC lost". Always re-verify by power-cycling and checking the seven-segment display and HMI log under /card/hmi/log/.
Method 3 — Service Center SSD Image (PCU 50.3 Alternative)
When the goal is to recover a corrupted PCU 50.3 rather than back up the NCU 710's CF card, a CF-card backup is the wrong tool. The PCU runs on an SSD/HDD with Windows, not on the NCU's CompactFlash. For PCU systems the field-proven procedure is to capture a disk image through the Service Center instead of the NCU's backup utility.
- Attach an external USB DVD-ROM or a USB stick containing a Windows PE / Service Center image to the PCU 50.3.
- Boot the PCU from the external media (BIOS boot order may need to be changed; on PCU 50.3 the F2 / F12 key accesses the boot menu at POST).
- Run the disk-imaging tool (ImageX, Acronis True Image, or the Service Center disk-imaging module) and capture the entire PCU SSD to an external USB drive or a network share.
- Restore on the replacement SSD using the same tool, then re-seat the license key (CFast card with the SINUMERIK license) on the new drive.
Boot Sequence and Seven-Segment Diagnostics
The NCU 710's two-digit seven-segment display provides a definitive indication of which subsystem owns the display. When the service stick is inserted but no TCU or PCU display responds, the blank display (segment '6' with all LEDs off) means the Service Center has loaded the internal HMI server and is waiting for a VNC client. This is the correct state and proves the boot stick is functional.
| Seven-segment code | Subsystem state | Operator action |
|---|---|---|
| 1 | BIOS POST in progress | Wait |
| 2 | Boot loader stage 2 | Wait; verify USB stick is detected in BIOS |
| 3 | Linux kernel loading from USB | Wait |
| 5 | Bricked / boot device not found | Re-image USB stick; verify CF card seating |
| 6 | Service Center HMI server ready | Connect VNC viewer; perform backup |
| 7 | Hardware fault (RAM, CF card) | Replace CF card; clear NVRAM |
| 8 | Firmware mismatch | Match service stick firmware to NCU CF firmware line |
| blank | Internal HMI running, no TCU/PCU response | Use VNC to view Service Center |
Network Drive and Storage Requirements
The 8 GB NCU CompactFlash card is backed up as a single .tgz (gzip-compressed tar) archive. On FAT32 file systems the 4 GB single-file limit truncates the archive silently. The remedy specified in Siemens Support entry 56733508 is to use a network share formatted as NTFS. Local USB media larger than 4 GB can also be used if formatted as NTFS or exFAT.
| Filesystem | Maximum file size | Suitable for 8 GB NCU backup? |
|---|---|---|
| FAT16 | 2 GB | No |
| FAT32 | 4 GB - 1 | No — silent truncation |
| exFAT | 16 EB (practical limit: drive size) | Yes |
| NTFS | 16 TB | Yes (Siemens recommended) |
| ext3 / ext4 | 2 TB (default inode size) | Yes on Linux targets |
SMB / CIFS share mount syntax on the Service Center shell:
mount -t cifs //192.168.214.50/Backup /mnt/backup -o user=service,pass=*****,vers=3.0
Verify the mount before launching the backup:
df -h /mnt/backup
mount | grep backup
Verification
- After the Service Center reports Backup completed successfully, list the contents of the destination directory and confirm the file size is at least 3.5 GB and the timestamp matches the backup window.
- Compare the SHA-256 checksum generated by the Service Center against a freshly computed checksum on the destination host:
sha256sum backup_NCU710_<serial>_<timestamp>.tgz
- Power down the NCU, remove the service USB stick, and reboot. Verify the TCU displays HMI Operate as before the backup.
- If Method 2 was used, confirm the
hmi.inifile is reverted and thedisable hmicommand was issued. Inspect/card/hmi/log/hmi_startup.logfor the line HMI source = PCU. - Validate the archive by performing a dry-run restore on a bench NCU or in a virtual SINUMERIK environment before discarding any prior backup.
Troubleshooting Matrix
| Symptom | Likely cause | Remedy |
|---|---|---|
| System boots to HMI Operate normally despite service stick | PCU 50.3 HMI claims display | Use Method 1 (VNC on X127/X120) or Method 2 (enable hmi) |
| Seven-segment stays on '2' | USB stick not bootable or wrong firmware line | Re-create stick with matching NCU firmware version |
| Seven-segment blank but no VNC display | VNC port 5900 blocked or wrong subnet | Verify laptop IP (192.168.215.2 or 192.168.214.2); check firewall |
| Backup stops at ~3.9 GB | FAT32 destination | Switch to NTFS network share per Siemens KB 56733508 |
| 'Permission denied' on network share | SMB version mismatch or wrong credentials | Force vers=3.0 or vers=2.0; verify user rights |
| enable hmi returns 'command not found' | NCU firmware does not support toggle | Update NCU firmware to V4.7 SP4 or later; alternatively use Method 1 |
| Backup completes but checksum mismatch | Unstable USB stick or power dip during write | Use industrial-grade USB media; ensure 24 V supply is stable |
| HMI flickers between PCU and NCU | disable hmi not issued | Run disable hmi and reboot |
| NCU alarms 120402 / 120403 after backup | Both HMIs active simultaneously | Disable the unused HMI host; clear alarm from HMI log |
| VNC viewer shows black screen | Service Center still booting | Wait until seven-segment code 6 / blank; reconnect |
Field-Proven Best Practices
- Always perform the backup from the same firmware line as the running NCU software. Mixing V4.7 service sticks with V4.95 NCU cards can produce partial restores with mismatched PLC symbols.
- Document the NCU serial number and the NCK version in the backup file name. The default Service Center file name is acceptable but adds ambiguity when archiving across multiple machines.
- Keep at least three generations of backups on separate physical media. Store one off-site to recover from fire or water damage.
- Verify every backup with a dry-run restore on a test bench before deleting the previous generation. A backup that has never been restored is not a backup.
- Tag each USB stick with the firmware line, build date, and the NCU serial it was built for. Industrial environments accumulate dozens of near-identical sticks and confusion is the leading cause of wrong-firmware restores.
- For NCU 710 specifically, prefer Ethernet backup over USB backup. The CF card write bandwidth (~25 MB/s sustained) saturates a USB 2.0 stick quickly; gigabit Ethernet routinely delivers 60-90 MB/s and halves the backup window.
FAQ
Why does the NCU 710 service stick boot to HMI Operate instead of the Service Center when a PCU 50.3 is connected?
The PCU 50.3's HMI Operate runtime claims the TCU display before the NCU's internal Service Center can surface the eboot menu. Connect to the NCU via VNC on 192.168.215.1 (X127) or 192.168.214.1 (X120) to access the service shell directly, or run the enable hmi command from WinSCP/SSH to force the display back to the NCU.
Can I back up the 8 GB NCU CompactFlash card to a FAT32 USB stick?
No. FAT32 has a 4 GB single-file limit and the compressed backup archive will be silently truncated. Use a network share formatted as NTFS, an exFAT USB drive, or a Linux ext3/ext4 target as documented in Siemens Support entry 56733508.
What is the correct VNC address to view the NCU 710 service shell?
Connect VNC Viewer to 192.168.215.1:5900 on the X127 service interface or 192.168.214.1:5900 on the X120 plant interface. The service laptop must use a compatible IP on the same subnet (192.168.215.2 or 192.168.214.2 with mask 255.255.255.0).
Should I use the NCU CF card backup or the Service Center SSD image for a PCU 50.3?
The two procedures target different hardware. The NCU CF backup captures the NCK / PLC / HMI configuration stored on the NCU 710's CompactFlash. The Service Center SSD image captures the Windows installation and license state on the PCU 50.3's SSD. Use the NCU CF backup for NCK-related changes and the SSD image for Windows recovery.
How do I know the Service Center has finished booting when the seven-segment display is blank?
A blank seven-segment on the NCU 710 indicates the Service Center has loaded the internal HMI server and is listening on VNC port 5900. The system is ready when a VNC connection to 192.168.215.1 returns the Service Center desktop. Boot codes 1-3 indicate earlier boot stages; code 6 confirms the HMI server is up.