TP700 TIA Portal Ethernet Connection: ProSave OS Recovery

David Krause10 min read
SiemensTIA PortalTroubleshooting
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Problem Summary

A Siemens SIMATIC TP700 Comfort panel (typical catalog number 6AV2 124-1JC01-0AX0) responds on its configured Ethernet address (for example 192.168.100.5/24) and accepts ProSave backup/restore operations, yet the TIA Portal engineering station cannot establish a device connection to the same panel. The HMI is visible to ping and arp -a but TIA Portal reports "Device not found", "Connection to device failed", or hangs in the "Establishing connection" state.

This specific failure pattern — ProSave works, TIA Portal does not — almost always indicates a runtime / image version mismatch between the panel firmware and the WinCC Comfort project target. The recovery path is to refresh the panel's operating system (the runtime image) using ProSave, then re-attempt the TIA Portal transfer.

Field note: ProSave uses raw back/transfer/restore channel access on port 1030/tcp (Siemens S7ONLINE), which is more permissive than the TIA Portal "Online > Accessible nodes" discovery. If ProSave talks but TIA Portal does not, suspect the panel image, not the cable or the switch.

Affected Hardware and Firmware Scope

Item Value Notes
Panel family SIMATIC HMI TP700 Comfort 7" widescreen, touch, 16M colors
Typical MLFB 6AV2 124-1JC01-0AX0 Confirm against the rating label on the rear of the unit
Alternate MLFBs 6AV2 124-1JC01-0AX1, 6AV2 124-1JC02-0AX0 Same recovery procedure
Image version (pre-failure) V14.0.0.0 to V16.0.0.0 commonly seen Verify in panel menu: Control Panel > System > Device > Image Version
Image version (recovery target) Match TIA Portal installation (e.g., V17, V18, V19) Image must equal or exceed project target
Ethernet ports 2 × RJ45 PROFINET, 10/100 Mbit/s Port 1 (PN/IE) is default for engineering
Serial port RS422/485 (MPI/PROFIBUS) Used as fallback if Ethernet is unavailable
USB ports 2 × USB 2.0 host Accepts USB stick for ProSave OS image transfer

Root Cause Analysis

The TP700 ships with a WinCC Comfort / TIA Portal runtime image stored on internal flash. Each TIA Portal version (V14, V15.1, V16, V17, V18, V19, V20) generates project files that target a specific runtime image version. When the panel's installed image is older than the project target — for example a V14 panel image is asked to load a V17 project — TIA Portal refuses the transfer with protocol errors such as:

  • 0xE0FF0001 — Firmware version mismatch
  • 0xE0FF0002 — Incompatible configuration
  • Connection interrupted (0xFFFEFEFE) — TLS / PG handshake abort

ProSave is unaffected because it operates on raw file transfer and does not validate the runtime compatibility the same way. This asymmetry is why ProSave downloads succeed while TIA Portal "Compile and download" hangs or fails.

TIA Portal V17 Project target V17 TP700 Image V14 Stale runtime ProSave Raw file channel REJECT OK Fix: Re-flash TP700 image via ProSave, then reconnect

Secondary Causes (Rule Out First)

  1. PG/PC interface in TIA Portal is set to a non-Ethernet access point (e.g., PC Adapter (MPI)) while the panel is on PROFINET.
  2. Firewall on the engineering station blocking 102 (ISO-TSAP), 1030 (S7ONLINE), 1031 (S7ONLINE TLS), or UDP broadcast discovery on 34964.
  3. Different subnet: panel 192.168.100.5/24 and PC 192.168.0.10/24 with no router in between.
  4. Panel Control Panel > Transfer > "Enable transfer" is set to Manual or Off instead of Automatic.
  5. WinCC project device version in the TIA Portal device tree is pinned to an older image than the running TIA Portal.

Prerequisites

  • ProSave V14 or later (shipped with each TIA Portal installation under C:\Program Files\Siemens\Automation\Portal Vxx\Data\ProSave). Version must equal the TIA Portal version you want to deploy.
  • Matching panel image .upd file located at C:\Program Files\Siemens\Automation\Portal Vxx\Data\Hmi\Transfer\<image-version> or downloaded from Siemens Industry Online Support.
  • Ethernet cable from the PG/PC directly to the TP700 PROFINET port X1 (PN/IE) — bypass managed switches if possible to remove spanning-tree delay.
  • Panel IP address and subnet mask known. Default is 192.168.100.5 / 255.255.255.0 with no gateway.
  • Administrator rights on the engineering PC.
  • Windows Firewall inbound rules permitting Siemens.Automation.Portal.exe and ProSave.exe on private networks.

Procedure — Restore TP700 Image via ProSave

  1. Confirm connectivity. Open a command prompt and run ping 192.168.100.5 -t. Expect reply within < 1 ms on a direct link. If no reply, validate the cable and panel power.
  2. Open ProSave with elevated rights: Start > Siemens Automation > ProSave, right-click → Run as administrator.
  3. Set device type to Operator panel → TP700 Comfort. ProSave auto-populates the correct transfer parameters.
  4. Set connection parameters:
    • Connection: Ethernet (TCP/IP)
    • IP address: 192.168.100.5
    • MAC address: leave blank (ProSave will resolve)
  5. Backup current state first: select tab Backup, click Start Backup, store the *.psb archive on a local SSD. This is your rollback path if the new image misbehaves.
  6. Update the operating system:
    • Tab Update operating system
    • Image path: browse to the .upd matching your TIA Portal (for example TP700_V17_Upd1.upd)
    • Click Update OS
    • Acknowledge the dialog: "All data on the panel will be deleted" — confirm only if backup completed
  7. Wait for the panel reboot. The TP700 display will go blank, the LED bar pulses, and within 60 – 180 seconds the WinCC start screen returns. Do not power-cycle during this window.
  8. Verify image version on the panel: Control Panel > System > Device > Image Version. It should now match the TIA Portal you intend to use (e.g., V17.0.0.1).
  9. Re-enable Transfer: Control Panel > Transfer > Channel: Ethernet > Mode: Automatic. Press Apply.
Critical: The OS update is destructive. Recipe data, user-defined screens loaded at runtime, and any historian data on the panel are erased. Always export recipes and logs via ProSave Restore > Backup before flashing.

Configure TIA Portal for Ethernet Connection

Set PG/PC Interface

  1. In TIA Portal: Menu > Online > Accessible devices does not require pre-configuration but uses Windows network adapters.
  2. For project downloads: Menu > Online > Options > Set PG/PC interface.
  3. Select S7ONLINE (STEP 7) -> TCP/IP -> <your Ethernet NIC>. Do not select PC Adapter (MPI/DP), TCP/IP (Auto), or ISO Ind. when talking to a PROFINET TP700.
  4. Click Diagnostics → confirm the panel responds in the node list with its MAC and IP.

Compile and Download the WinCC Project

  1. In the project tree, right-click the TP700 → Compile > Software (rebuild all). Resolve any warnings — a yellow icon in the lower-right indicates image-version mismatches.
  2. Right-click TP700 → Download to device > All.
  3. In the dialog Extended download to device:
    • PG/PC interface: same selection as above
    • Connection to target: PN/IE
    • Target IP: 192.168.100.5
    • Slot: leave default
  4. Click Search. The TP700 appears in the list with its MAC. Select it → Download.
  5. Accept the certificate prompt if TLS is enabled (TIA V17+ default).
  6. Monitor progress in the "Load preview" window. Typical transfer: 4 – 12 MB project, 30 – 90 seconds on 100 Mbit/s.

Verification

Check Procedure Pass Criterion
Image version parity Panel Control Panel > System > Device vs. TIA Portal project properties Equal major.minor versions
PG/PC interface reachability Set PG/PC interface → Diagnostics → Broadcast search Panel listed with correct MAC
Active transfer channel Panel Transfer settings Ethernet / Automatic
Compile status Project tree → TP700 → no red error icons Green check, 0 errors
Runtime startup After download, observe panel screen Configured start screen appears within 30 s
Tag test Online > Go online > Monitor tags Real PLC values visible on HMI
Ping under load Continuous ping during HMI runtime Reply time < 10 ms, 0% loss

Troubleshooting Matrix

Symptom Likely Cause Action
ProSave works, TIA Portal "Device not found" Stale panel image Re-flash OS via ProSave (this article)
Neither ProSave nor TIA Portal connects Subnet mismatch / wrong cable Verify IP, mask, switch port, crossover if needed
TIA Portal freezes at "Establishing connection" Firewall or wrong PG/PC interface Set interface to TCP/IP on correct NIC; allow 1030/tcp, 1031/tcp, UDP 34964
Download starts then aborts with 0xE0FF0001 Firmware / image mismatch Update panel image to match TIA Portal
Download succeeds but panel shows white screen Wrong project device version Right-click TP700 → Change device → select matching MLFB and firmware version
Panel reboot loop after image update Power dip during flash Reflash via USB stick (Control Panel → Service → USB image)
"Enable transfer" greyed out Runtime is in a user level that locks transfer Log in as administrator or perform a clean OS update
Works over MPI but not Ethernet Port X1 disabled or PROFINET name missing Assign PROFINET device name; verify Port 1 enabled

Alternate Recovery: USB Stick Image Load

If the panel is unreachable over Ethernet after a failed flash, or if ProSave is unstable, the TP700 also supports OS recovery from a USB stick formatted FAT32 containing the .upd file. Procedure:

  1. Power off the panel.
  2. Insert USB stick containing only the matching .upd file (no subfolders).
  3. Hold the finger on the screen during power-on; when the "Boot from USB" prompt appears, confirm.
  4. Wait for the LED bar to complete its cycle (~5 minutes) and the panel to reboot into the new image.
  5. Remove the USB stick.
Safety: Wear an ESD wrist strap when handling the panel rear and when inserting USB drives into operating equipment. Maintain a stable 24 V supply; brown-outs during flash can brick the runtime and force a USB recovery.

Network Topology Recommendation

PG/PC 192.168.100.10/24 TP700 X1 (PN/IE) 192.168.100.5/24 CPU 1500 (optional) 192.168.100.20 Cat 5e direct (engineering)

Keep the engineering PC on the same subnet as the panel during commissioning. Avoid enterprise VLANs with IGMP/MLD snooping that strip Siemens discovery multicasts. Once commissioning is complete, integrate the panel into the production PROFINET network with a managed switch and proper topology file.

Preventive Measures

  1. Lock the image version: standardize on a single TIA Portal release across the engineering team. Document the panel image version inside the project properties so future upgrades trigger a deliberate OS update.
  2. Pre-stage USB sticks with the correct .upd per cell. Field engineers can recover a mis-flashed panel without a PG.
  3. Use ProSave scripted mode for fleet maintenance: ProSave.exe /cmd /restore /file:C:\backup\panel01.psb /type:TP700 /ip:192.168.100.5. Run from a batch file over SSH or scheduled task.
  4. Enable transfer logging on the panel (Control Panel > Transfer > Trace) and archive the logs with each project revision.
  5. Maintain an offline copy of every .upd file on a versioned share. Siemens Support portal access is not guaranteed at commissioning sites.

Related Siemens References

FAQ

Why does ProSave connect to the TP700 but TIA Portal fails on the same cable?

ProSave uses a raw file transfer on port 1030/tcp and skips the runtime compatibility check that TIA Portal performs before downloading a WinCC project. A stale panel image will accept ProSave backups but reject a TIA Portal download because the project targets a newer WinCC image than the panel is running. Re-flash the panel image via ProSave to match your TIA Portal version.

Which TP700 image version do I need for TIA Portal V17?

TIA Portal V17 targets image version V17.0.x. The matching .upd is shipped with the TIA Portal installation under Data\Hmi\Transfer and is also published on Siemens Industry Online Support. Install the same major version as the engineering station, including the latest update (e.g., V17.0.0.3) for bug fixes.

Can I update the TP700 image without losing recipes?

No. An OS update wipes the internal flash including recipes, audit trails, and any runtime-loaded screens. Always perform a ProSave Backup of the panel to a .psb archive before updating, then restore that archive after the image flash completes if you need the historical data on the same unit.

What PG/PC interface should I select in TIA Portal for an Ethernet transfer?

Select S7ONLINE (STEP 7) → TCP/IP → <your Ethernet NIC>. Do not select PC Adapter (MPI/DP), TCP/IP (Auto), or any ISO entry. If multiple NICs are present, choose the one physically connected to the panel and confirm with the Diagnostics button before downloading.

The panel reboots in a loop after the image update — what now?

Power was likely interrupted during the flash. Reformat a USB stick as FAT32, copy the correct .upd onto the root, power off the TP700, insert the stick, then power on while holding the screen. The panel boots from USB and re-installs the image. This recovery works even when Ethernet and ProSave are unavailable.

Back to blog