SINUMERIK 840D sl NCU 710 CF Card Backup via Service Shell

David Krause12 min read
Motion ControlSiemensTroubleshooting
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Problem Overview

On a SINUMERIK 840D sl system configured with an NCU 710 numerical control unit and a separate PCU 50.3 industrial PC, technicians performing a CompactFlash (CF) card backup frequently encounter the following symptom: inserting the NC bootable USB stick into the NCU 710 and powering the rack does not produce the familiar Service Center / eboot screen on the connected Thin Client Unit (TCU). Instead, the system boots normally and the HMI (HMI Operate) appears as if no service stick had been inserted.

The same procedure works perfectly on a TCU-only configuration (no PCU attached), which confirms the boot stick itself is functional. The root cause is an HMI display routing conflict between the NCU's internal HMI and the PCU 50.3's HMI Operate runtime: only one HMI may own the active display channel at any given time.

This reference documents the three field-proven workarounds, the underlying X120/X127 addressing, the seven-segment boot indicator states, and the .tgz image capture workflow for 8 GB NCU CompactFlash cards.

Affected Components and Firmware

Component Designation Notes
NCU NCU 710.3 (6FC5371-0AA30-0AA0 / -0AB0 variants) Contains 8 GB CompactFlash card
PCU PCU 50.3 (Windows 7 / Windows 10 IoT LTSB) Runs HMI Operate in parallel
Operator panel TCU (Thin Client Unit) over Ethernet Receives display from either NCU or PCU
Service stick Siemens NCU service USB stick (bootable) Built with SINUMERIK Service Center
NCU firmware NCU software V4.x for 840D sl Applies across V4.5 SP2 - V4.95
Service Center Embedded Linux on boot stick Provides eboot, Backup/Restore, Commissioning

Root Cause: HMI Display Routing

The 840D sl architecture permits both the NCU's embedded HMI and the PCU's HMI Operate to serve as the active HMI host. By default, the system hands the TCU display to whichever host responds first to the DHCP request on the service network (X127) or the plant network (X120). When the PCU 50.3 is present and powered, its HMI Operate runtime typically claims the display before the NCU's internal Service Center has a chance to surface the eboot menu.

Two addressing ranges must be kept separate:

Interface IP address (NCU default) Subnet Purpose
X127 192.168.215.1 255.255.255.0 NCU service / commissioning
X120 192.168.214.1 255.255.255.0 Plant network (HMI, NC/PLC)
X130 192.168.210.1 255.255.255.0 PLCs / drive units (PROFINET)

Symptom confirmation: if the PCU's network adapter has been reconfigured to a different subnet or its HMI service has been disabled, the NCU boot stick displays the eboot screen normally. The moment the PCU 50.3 HMI comes back online, it preempts the NCU display.

Critical: Never run HMI Operate on the PCU 50.3 and the NCU 710 simultaneously. Both instances will conflict on the TCU display and may corrupt the active HMI license as well as the HMI log path. Always disable the unused HMI host before performing backup or commissioning operations.

Prerequisites

  1. A bootable NC service USB stick prepared with the SINUMERIK Service Center image matching the NCU firmware line (V4.x). Verify the stick on a TCU-only machine first to confirm it boots to the eboot menu.
  2. A Windows service laptop with the following tools installed:
    • VNC Viewer (RealVNC, TightVNC, or TigerVNC) — connect to port 5900 of the NCU.
    • WinSCP or any SCP/SFTP client — used to drop a script that toggles the NCU internal HMI.
    • PuTTY or any SSH client — for the "enable hmi" / "disable hmi" shell command.
    • A network cable (CAT5e or better) and access to either the X127 or X120 port on the NCU 710.
  3. If the 8 GB CF card is to be backed up to a network share (recommended on Windows), the target share must be formatted as NTFS. FAT32 will refuse files larger than 4 GB and the image will silently fail partway through. This requirement is documented in Siemens Support entry 56733508 — SINUMERIK 840D sl: Backup / Restore of the 8 GB NCU CompactFlash card.
  4. At least 12 GB free space on the destination drive to accommodate the compressed .tgz archive (the on-disk image is roughly 6-8 GB after compression).

Method 1 — VNC into the NCU Service Shell (Recommended)

This is the cleanest method because it does not require re-routing the active HMI and it does not risk leaving the PCU 50.3 in a non-default state.

  1. Insert the NC service USB stick into any of the USB ports on the NCU 710 (front-panel USB-A is preferred).
  2. Power-cycle the NCU (24 V OFF / ON) or trigger a controlled restart from the operator panel.
  3. Watch the seven-segment display on the NCU front panel during boot. The expected sequence is:
Display Meaning
0 / 1 BIOS POST / hardware init
2 Boot loader active (searches USB)
3 Boot loader handed off to Linux kernel on USB stick
6 Service Center / eboot shell running; HMI server up on VNC port 5900
Blank Service Center loaded successfully on the internal HMI (this is the desired state — proceed to step 4)
5 or 7 Boot error — refer to NCU diagnostics manual
  1. Connect the service laptop directly to the X127 port of the NCU using a point-to-point cable (no switch required when the laptop is set to 192.168.215.2 / 255.255.255.0). Alternative: connect to X120 with the laptop at 192.168.214.2 / 255.255.255.0 when the plant network is isolated.
  2. Launch VNC Viewer and connect to 192.168.215.1:5900 (X127) or 192.168.214.1:5900 (X120). The Service Center desktop appears, identical to the one normally seen on a TCU-only system.
  3. From the Service Center main menu select Backup/Restore > Backup complete CF card. Choose the destination: USB stick, local HDD (if one is mapped), or network drive. For 8 GB CF cards, use a network drive formatted as NTFS as documented in Siemens Support entry 56733508.
  4. Confirm the file name (default backup_<NCU_serial>_<timestamp>.tgz) and start the backup. Expected duration on NCU 710: 18-35 minutes for an 8 GB card over gigabit Ethernet.
  5. Once the Service Center displays Backup completed successfully, power down the NCU, remove the service USB stick, and reboot into normal operation.

Method 2 — Enable NCU Internal HMI via WinSCP

Use this method when the VNC path is unavailable (firewalled laptop, no DHCP, X127/X120 blocked) but WinSCP file transfer still works.

  1. Connect the service laptop to X127 (or X120) and verify SSH reachability with PuTTY: ssh [email protected]. Default credentials on the NCU Linux are root / SUNRISE for older service images, or the password defined during the latest commissioning. Newer firmware prompts for password change on first login.
  2. Open WinSCP with the same IP and credentials, protocol SCP.
  3. Navigate to /card/user/system/configuration/ on the NCU.
  4. Create or edit the file hmi.ini with the following content:
[HMI]
EnableInternalHmi=1
  1. From the PuTTY shell issue the command enable hmi. The next time the NCU is rebooted with the service USB stick inserted, the TCU display will be sourced from the NCU's internal HMI, the eboot screen will appear, and the Backup/Restore menu becomes reachable.
  2. Perform the backup as described in Method 1, steps 6-8.
  3. After backup, return to the PuTTY shell and issue disable hmi to release the display back to the PCU 50.3. Verify by rebooting without the service stick — the HMI Operate on the PCU 50.3 should once again own the TCU display.
Warning: Forgetting the disable hmi command leaves the system in a dual-HMI state. Both HMI hosts will race for the TCU, producing flickering, lost key focus, and intermittent alarm 120402 "HMI connection to NC lost". Always re-verify by power-cycling and checking the seven-segment display and HMI log under /card/hmi/log/.

Method 3 — Service Center SSD Image (PCU 50.3 Alternative)

When the goal is to recover a corrupted PCU 50.3 rather than back up the NCU 710's CF card, a CF-card backup is the wrong tool. The PCU runs on an SSD/HDD with Windows, not on the NCU's CompactFlash. For PCU systems the field-proven procedure is to capture a disk image through the Service Center instead of the NCU's backup utility.

  1. Attach an external USB DVD-ROM or a USB stick containing a Windows PE / Service Center image to the PCU 50.3.
  2. Boot the PCU from the external media (BIOS boot order may need to be changed; on PCU 50.3 the F2 / F12 key accesses the boot menu at POST).
  3. Run the disk-imaging tool (ImageX, Acronis True Image, or the Service Center disk-imaging module) and capture the entire PCU SSD to an external USB drive or a network share.
  4. Restore on the replacement SSD using the same tool, then re-seat the license key (CFast card with the SINUMERIK license) on the new drive.

Boot Sequence and Seven-Segment Diagnostics

The NCU 710's two-digit seven-segment display provides a definitive indication of which subsystem owns the display. When the service stick is inserted but no TCU or PCU display responds, the blank display (segment '6' with all LEDs off) means the Service Center has loaded the internal HMI server and is waiting for a VNC client. This is the correct state and proves the boot stick is functional.

Seven-segment code Subsystem state Operator action
1 BIOS POST in progress Wait
2 Boot loader stage 2 Wait; verify USB stick is detected in BIOS
3 Linux kernel loading from USB Wait
5 Bricked / boot device not found Re-image USB stick; verify CF card seating
6 Service Center HMI server ready Connect VNC viewer; perform backup
7 Hardware fault (RAM, CF card) Replace CF card; clear NVRAM
8 Firmware mismatch Match service stick firmware to NCU CF firmware line
blank Internal HMI running, no TCU/PCU response Use VNC to view Service Center

Network Drive and Storage Requirements

The 8 GB NCU CompactFlash card is backed up as a single .tgz (gzip-compressed tar) archive. On FAT32 file systems the 4 GB single-file limit truncates the archive silently. The remedy specified in Siemens Support entry 56733508 is to use a network share formatted as NTFS. Local USB media larger than 4 GB can also be used if formatted as NTFS or exFAT.

Filesystem Maximum file size Suitable for 8 GB NCU backup?
FAT16 2 GB No
FAT32 4 GB - 1 No — silent truncation
exFAT 16 EB (practical limit: drive size) Yes
NTFS 16 TB Yes (Siemens recommended)
ext3 / ext4 2 TB (default inode size) Yes on Linux targets

SMB / CIFS share mount syntax on the Service Center shell:

mount -t cifs //192.168.214.50/Backup /mnt/backup -o user=service,pass=*****,vers=3.0

Verify the mount before launching the backup:

df -h /mnt/backup
mount | grep backup

Verification

  1. After the Service Center reports Backup completed successfully, list the contents of the destination directory and confirm the file size is at least 3.5 GB and the timestamp matches the backup window.
  2. Compare the SHA-256 checksum generated by the Service Center against a freshly computed checksum on the destination host:
sha256sum backup_NCU710_<serial>_<timestamp>.tgz
  1. Power down the NCU, remove the service USB stick, and reboot. Verify the TCU displays HMI Operate as before the backup.
  2. If Method 2 was used, confirm the hmi.ini file is reverted and the disable hmi command was issued. Inspect /card/hmi/log/hmi_startup.log for the line HMI source = PCU.
  3. Validate the archive by performing a dry-run restore on a bench NCU or in a virtual SINUMERIK environment before discarding any prior backup.

Troubleshooting Matrix

Symptom Likely cause Remedy
System boots to HMI Operate normally despite service stick PCU 50.3 HMI claims display Use Method 1 (VNC on X127/X120) or Method 2 (enable hmi)
Seven-segment stays on '2' USB stick not bootable or wrong firmware line Re-create stick with matching NCU firmware version
Seven-segment blank but no VNC display VNC port 5900 blocked or wrong subnet Verify laptop IP (192.168.215.2 or 192.168.214.2); check firewall
Backup stops at ~3.9 GB FAT32 destination Switch to NTFS network share per Siemens KB 56733508
'Permission denied' on network share SMB version mismatch or wrong credentials Force vers=3.0 or vers=2.0; verify user rights
enable hmi returns 'command not found' NCU firmware does not support toggle Update NCU firmware to V4.7 SP4 or later; alternatively use Method 1
Backup completes but checksum mismatch Unstable USB stick or power dip during write Use industrial-grade USB media; ensure 24 V supply is stable
HMI flickers between PCU and NCU disable hmi not issued Run disable hmi and reboot
NCU alarms 120402 / 120403 after backup Both HMIs active simultaneously Disable the unused HMI host; clear alarm from HMI log
VNC viewer shows black screen Service Center still booting Wait until seven-segment code 6 / blank; reconnect

Field-Proven Best Practices

  • Always perform the backup from the same firmware line as the running NCU software. Mixing V4.7 service sticks with V4.95 NCU cards can produce partial restores with mismatched PLC symbols.
  • Document the NCU serial number and the NCK version in the backup file name. The default Service Center file name is acceptable but adds ambiguity when archiving across multiple machines.
  • Keep at least three generations of backups on separate physical media. Store one off-site to recover from fire or water damage.
  • Verify every backup with a dry-run restore on a test bench before deleting the previous generation. A backup that has never been restored is not a backup.
  • Tag each USB stick with the firmware line, build date, and the NCU serial it was built for. Industrial environments accumulate dozens of near-identical sticks and confusion is the leading cause of wrong-firmware restores.
  • For NCU 710 specifically, prefer Ethernet backup over USB backup. The CF card write bandwidth (~25 MB/s sustained) saturates a USB 2.0 stick quickly; gigabit Ethernet routinely delivers 60-90 MB/s and halves the backup window.

FAQ

Why does the NCU 710 service stick boot to HMI Operate instead of the Service Center when a PCU 50.3 is connected?

The PCU 50.3's HMI Operate runtime claims the TCU display before the NCU's internal Service Center can surface the eboot menu. Connect to the NCU via VNC on 192.168.215.1 (X127) or 192.168.214.1 (X120) to access the service shell directly, or run the enable hmi command from WinSCP/SSH to force the display back to the NCU.

Can I back up the 8 GB NCU CompactFlash card to a FAT32 USB stick?

No. FAT32 has a 4 GB single-file limit and the compressed backup archive will be silently truncated. Use a network share formatted as NTFS, an exFAT USB drive, or a Linux ext3/ext4 target as documented in Siemens Support entry 56733508.

What is the correct VNC address to view the NCU 710 service shell?

Connect VNC Viewer to 192.168.215.1:5900 on the X127 service interface or 192.168.214.1:5900 on the X120 plant interface. The service laptop must use a compatible IP on the same subnet (192.168.215.2 or 192.168.214.2 with mask 255.255.255.0).

Should I use the NCU CF card backup or the Service Center SSD image for a PCU 50.3?

The two procedures target different hardware. The NCU CF backup captures the NCK / PLC / HMI configuration stored on the NCU 710's CompactFlash. The Service Center SSD image captures the Windows installation and license state on the PCU 50.3's SSD. Use the NCU CF backup for NCK-related changes and the SSD image for Windows recovery.

How do I know the Service Center has finished booting when the seven-segment display is blank?

A blank seven-segment on the NCU 710 indicates the Service Center has loaded the internal HMI server and is listening on VNC port 5900. The system is ready when a VNC connection to 192.168.215.1 returns the Service Center desktop. Boot codes 1-3 indicate earlier boot stages; code 6 confirms the HMI server is up.

Back to blog