Sm@rtServer on Siemens Comfort Panels: View HMI Online in TIA

David Krause12 min read
HMI / SCADASiemensTutorial / How-to
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Overview: Sm@rtServer / Sm@rtClient Architecture

Siemens Comfort Panels (TP Comfort, KP Comfort, KTP Comfort series running WinCC Comfort / WinCC Advanced) embed an HTTP-based remote-view server called Sm@rtServer. The companion viewer is Sm@rtClient, distributed both as a standalone Microsoft Windows application (downloadable from Siemens support entry 109482434) and as an integrated view inside TIA Portal. Together they let an engineer or operator see the actual runtime screen of a panel anywhere a TCP/IP route exists, without interrupting the running process and without physically walking to the machine.

The flow is straightforward:

  1. The HMI runtime on the panel hosts the Sm@rtServer, listening on TCP/80 (HTTP) or TCP/443 (HTTPS) by default.
  2. The user opens Sm@rtClient on a Windows PC, enters the panel's IP address, the port configured in the project, and the access password.
  3. The client negotiates a session, downloads the current screen bitmap plus the active screen-object list, and mirrors input events (touch, key) back to the panel in real time.
Service PC TIA Portal Sm@rtClient 192.168.0.50 Switch Comfort Panel HMI Runtime Sm@rtServer 192.168.0.10:443 TCP/IP — HTTP (80) or HTTPS (443), password-protected session
Sm@rtClient is a remote view, not an emulator. The runtime project you see is the one currently executing on the panel hardware. This is fundamentally different from the TIA Portal Simulation (RT Simulator), which runs a copy of the project on the engineering PC and shares no state with the real machine.

Prerequisites

Item Requirement
Panel family Comfort Panels only — TP700 / TP900 / TP1200 / TP1500 / TP1900 / TP2200 Comfort; KP400 / KP700 / KP900 / KP1200 / KP1500 Comfort; KTP Comfort (e.g. KTP1200 Comfort). Basic Panels (KTP400/700/900/1200 Basic) do not support Sm@rtServer.
Panel firmware V14.0.0.0 or later recommended. Older images lack the Sm@rtServer control panel page.
Engineering software TIA Portal V13 SP1 minimum for basic Sm@rtServer configuration; V14 SP1 or later for the integrated Sm@rtClient view inside the editor.
Sm@rt option in project The panel device in the TIA project must have "Sm@rtServer" enabled under Runtime settings > Services.
License No chargeable license key is required on the panel for the basic Sm@rtServer (local network). The optional Sm@rtServer for Internet add-on is bundled in current Comfort Panel firmware images.
Network Reachable TCP/IP path between client PC and panel, with the Sm@rtServer port allowed in any intermediate firewall.
Password A Sm@rtServer access password must be configured before the server will accept incoming sessions. Blank passwords are rejected.

Enabling the Sm@rtServer Option in the TIA Project

  1. In the TIA Portal project tree, select the Comfort Panel device.
  2. Open Runtime settings > Services.
  3. Tick Sm@rtServer. A sub-node Sm@rtServer appears in the navigation pane.
  4. Click the sub-node and configure the following fields:
Parameter Default Field recommendation
Port number 80 (HTTP) / 443 (HTTPS) Use a non-default port above 1024 in plants where firewalls are open only to specific destinations.
Access password empty (server will not start) Minimum 8 characters, alphanumeric, no shared service password.
Start automatically with runtime off Enable so the server survives a power-cycle and is available immediately after reboot.
HTTPS only off Enable for any deployment crossing untrusted networks. The panel then enforces TLS for every session.
Maximum number of clients 1 Increase to 2 for an operator + service parallel view, if licensed.
  1. Compile the HMI project (right-click panel > Compile > Software (rebuild all)) and transfer to the panel.
The project transfer must succeed before the runtime settings take effect. A project downloaded only to the engineering PC does not change runtime behaviour on the physical panel.

Configuring the Panel's Network Adapter

The panel must have a stable IP address. DHCP is acceptable in lab environments but discouraged on production cells because the address documented in the network register must match the address the service PC dials.

Configure from the panel's Control Panel: Control Panel > Network and Dial-Up Connections > [adapter] > Properties > IP address. Alternatively set it from TIA Portal under Device configuration > Ethernet addresses > Ethernet interface and transfer the configuration.

Parameter Recommended setting
IP address Fixed, in the engineering subnet (e.g. 192.168.0.10)
Subnet mask 255.255.255.0 (or matching plant scheme)
Default gateway Required only for remote / cross-subnet access
DNS server Optional; required only if the client reaches the panel by hostname
PROFINET name Required only if the panel is a PROFINET IO device on the same subnet as the PLC

Starting the Sm@rtServer on the Panel

Two start paths exist, depending on the project setting:

  • Automatic — if "Start Sm@rtServer with Runtime" is enabled in the TIA project, the server launches when the HMI runtime boots. No manual action is required after a reboot or a project transfer.
  • Manual from Control Panel — on the panel itself, navigate to Control Panel > WinCC Internet Settings (IE) → Sm@rtServer. Press Start. The status field displays the current IP, port, and the number of connected clients.

The same page offers Stop to terminate the server without affecting the runtime, which is useful when granting remote access only during a service window.

A red status icon in the WinCC Internet Settings page indicates either that no password is set, that the option has not been enabled in the TIA project, or that the project has not yet been transferred. Re-transfer the project after any change to the Sm@rtServer settings.

Connecting with the TIA Portal Integrated Sm@rtClient

  1. Open the TIA Portal project containing the Comfort Panel.
  2. Select the panel device in the project tree.
  3. From the menu bar, choose Online > Sm@rtClient > Start Sm@rtClient. Equivalent paths exist in the right-click context menu of the panel device and in the toolbar of the device editor. TIA Portal V17 and later place the entry under Online > HMI > Sm@rtClient.
  4. The integrated Sm@rtClient view opens inside the TIA Portal editor area, side by side with the project tree.
  5. Click Connect (or New connection) and enter:
  • IP address of the panel
  • Port matching the one configured in the project (default 80 or 443)
  • Password
  • HTTPS checkbox if the panel is configured for secure mode
  1. Press Connect. The panel's current screen renders inside the Sm@rtClient view within a few seconds on a 100 Mbit LAN.
  2. Click anywhere in the view to send a touch event to the panel. Keyboard input is forwarded automatically when the view has focus.
  3. Use the toolbar to switch display orientation, force a refresh, or disconnect cleanly.
The TIA Portal V20 documentation describes a related function, "View in online mode", which surfaces online device diagnostics, tag values, and the live project tree of an online device inside the editor — see View in online mode. This is not the full remote screen of Sm@rtClient. For the actual HMI screen content with graphics and animations, Sm@rtClient remains the correct tool.

Connecting with the Standalone Sm@rtClient

For service technicians who do not have TIA Portal installed, or for plant-floor operators who only need remote viewing, install the standalone Sm@rtClient from Siemens support entry 109482434:

  1. Download the self-extracting installer from the Siemens support entry.
  2. Install on a Windows 10 / Windows 11 PC. The installer registers WinCC Sm@rtClient as a separate application.
  3. Launch from the Start menu. The connection dialog opens.
  4. Enter IP, port, password, and HTTPS flag exactly as in the TIA-integrated client.
  5. Use File > Save connection to bookmark the panel for one-click recall next time.
  6. Use View > Tile to arrange multiple saved connections in a grid for fleet monitoring.

The standalone client is the preferred option for:

  • Multi-panel overview layouts (tile multiple connections in a 2 × 2 or 3 × 3 grid)
  • Long-running operator monitoring sessions where TIA Portal licensing is not required
  • Field service laptops provisioned with only the Sm@rtClient runtime

Remote Access over WAN / Internet

The basic Sm@rtServer is designed for local plant networks. To reach the panel across the WAN or Internet, extend the path in one of three ways:

Method How it works Operational notes
Site-to-site or remote-access VPN The client PC joins the plant network via IPsec, OpenVPN, or WireGuard. Sm@rtServer is then reached as if local. Recommended for service. No inbound firewall ports opened.
HTTPS reverse proxy / port forward Plant firewall forwards an external port (e.g. 8443) to the panel's internal IP:443. The client connects to the firewall's public DNS. Requires HTTPS and a panel certificate signed by a CA the client trusts. Subjects the panel to the full Internet threat surface.
Sinema Remote Connect Siemens remote-management platform establishes an OpenVPN-style tunnel between the panel gateway and the client without opening inbound firewall ports. Used for large fleets; see the Sinema Remote Connect operating instructions.
Never expose the Sm@rtServer port directly to the Internet without HTTPS and a strong, unique password. The default project configuration uses plain HTTP and is trivially interceptable, and the Sm@rtServer password is the only authentication barrier against unauthorized machine operation.

Security Hardening Checklist

Treat the Sm@rtServer interface as an HMI control surface — anyone who can authenticate can operate the machine. Apply the following items before commissioning:

  • Unique password per panel — do not reuse the same password across a fleet, and do not share it with the WinCC flexible / TIA project password.
  • HTTPS mandatory — enable "Allow HTTPS only" in the Sm@rtServer runtime settings; load a server certificate signed by a trusted CA.
  • Rotate the password at every major software revision, when a service contract ends, and whenever a technician leaves the organization.
  • Restrict by IP where the panel OS supports it (recent Comfort firmware images accept a list of allowed source addresses in the WinCC Internet Settings).
  • Audit — periodically check the panel's diagnostic buffer and the Sm@rtClient log for unexpected sessions. Each connection is logged with timestamp, client IP, and disconnect reason.
  • Disable Sm@rtServer during long idle periods if remote access is not part of normal operation.

Performance and Bandwidth Tuning

Sm@rtClient refresh rate is dominated by the size of the screen region that changes between frames. To keep WAN sessions responsive:

  • Use the panel's Refresh mode "Scope" rather than "Always" in screen properties — only the dirty rectangle is sent.
  • Reduce the use of large animations on the start screen; an animated GIF refreshes on every frame and consumes WAN bandwidth.
  • Set the Sm@rtClient refresh interval to 1 s for monitoring-only sessions and to "On event" for interactive sessions.
  • On the PC side, disable hardware acceleration in the Sm@rtClient settings if you observe tearing on remote-desktop virtual machines.

Verification Procedure

  1. From the client PC, open a command prompt and run ping <panel-IP>. Confirm reply.
  2. If HTTPS is enabled, validate the certificate: openssl s_client -connect <panel-IP>:443 -showcerts on Linux, or inspect the certificate chain in the Sm@rtClient connection log.
  3. Start Sm@rtClient and connect. The panel's current screen must appear within 5 seconds on a 100 Mbit LAN.
  4. Trigger a screen change on the panel (touch button or PLC-driven tag). Confirm the change is visible in the Sm@rtClient view within one refresh cycle.
  5. Send a touch event from Sm@rtClient and verify that the panel registers it (e.g. via a tag value change or a screen change).
  6. Disconnect cleanly from Sm@rtClient. The panel should show "0 active connections" in WinCC Internet Settings.

Troubleshooting Matrix

Symptom Likely cause Remedy
Sm@rtClient reports "Connection refused" Server not started, wrong port, or firewall blocking Open WinCC Internet Settings on the panel, verify status is Running; verify the port; check Windows firewall on the PC and any L3 device between PC and panel
Connection establishes, screen stays blank HTTPS mismatch, expired panel certificate, or unsupported screen objects Disable HTTPS temporarily to isolate; regenerate certificate if needed; check the panel diagnostic buffer for Sm@rtServer warnings
"Authentication failed" Wrong password, or password not configured in the TIA project Re-enter the password; recompile and retransfer the project; ensure the Sm@rtServer option is enabled
Client freezes after some time Keep-alive packets blocked by stateful firewall Lower TCP idle timeout or enable long-lived session rules on the firewall
Slow refresh / stuttering Network congestion or panel CPU load above 80 % Check the diagnostic buffer on the panel for performance warnings; reduce screen complexity or refresh area; switch to Scope refresh
Sm@rtServer option greyed out in TIA Wrong panel variant selected (Basic panel does not support Sm@rtServer) Replace the device with a Comfort variant in the project tree
"Maximum number of clients reached" Default limit is 1 (or 2 with the optional expansion) simultaneous sessions Disconnect orphan sessions; for multi-viewer setups, raise the allowed session count if licensed
TIA Portal does not show the "Start Sm@rtClient" menu entry TIA Portal older than V14 SP1, or current project does not contain a Comfort Panel Upgrade TIA Portal to V14 SP1 or later, or use the standalone Sm@rtClient from 109482434
Touch events from Sm@rtClient do not register on the panel Panel in a screen with input lock, or another client already holding the input focus Release input lock in the panel project; disconnect other clients

Field Commissioning Notes

  • Document the Sm@rtServer port in the plant network register; do not let it drift between rebuilds.
  • For multi-vendor panels (Comfort + WinCC Unified), note that WinCC Unified panels use a different mechanism — Unified Collaboration / Web Client based on OPC UA, not the legacy Sm@rtServer protocol. This procedure applies to Comfort (WinCC Comfort/Advanced) panels only.
  • If the panel is behind a managed industrial firewall (e.g. SCALANCE), open the configured Sm@rtServer port only for the engineering VLAN — do not allow it from the corporate VLAN.
  • After every project transfer that touches the Sm@rtServer runtime settings, the runtime restarts and the server stops. Plan the transfer during a maintenance window, or schedule a follow-up touch on the panel to restart the server.
  • Capture a screenshot of the WinCC Internet Settings status page after commissioning and attach it to the project's Commissioning Report for audit traceability.

FAQ

What is the difference between TIA Portal's online view and the Sm@rtClient?

The TIA Portal online view (View in online mode) surfaces device diagnostics, tag values, and the live project tree of an online device inside the editor. Sm@rtClient mirrors the runtime HMI screen in full, including graphics and animations, and forwards operator input back to the panel.

Which Siemens panels support Sm@rtServer?

All Comfort Panels do — TP700, TP900, TP1200, TP1500, TP1900, TP2200 Comfort and the KP400 / KP700 / KP900 / KP1200 / KP1500 Comfort key panels, plus the KTP Comfort variants. Basic Panels (KTP400, KTP700, KTP900, KTP1200 Basic) do not support Sm@rtServer.

What TCP port does Sm@rtServer listen on?

By default TCP/80 for HTTP and TCP/443 for HTTPS. The port is configurable in the TIA project under Runtime settings > Services > Sm@rtServer. The chosen port must be allowed in any firewall between the client PC and the panel.

Can I connect to the panel from outside the plant network?

Yes — via a VPN tunnel, an HTTPS-secured reverse proxy, or Siemens Sinema Remote Connect. The basic Sm@rtServer is not intended for direct Internet exposure; always enable HTTPS and a strong unique password before any remote access.

Where can I get the Sm@rtClient installer?

The standalone Sm@rtClient for Windows is published in Siemens support entry 109482434. The integrated Sm@rtClient is part of TIA Portal V13 SP1 or later.

Back to blog