Troubleshooting STEP 7 V5.5 PROFINET Assign Device Name Failures

David Krause14 min read
Industrial NetworkingSiemensTroubleshooting
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Troubleshooting STEP 7 V5.5 PROFINET Assign Device Name Failures

The legacy PROFINET device-name assignment utility inside SIMATIC STEP 7 V5.5 (Classic) is reached through PLC > Ethernet > Assign Device Name. Under specific host operating-system conditions the dialog opens, the network adapter is selected, but the device list returns zero entries. No error message is raised and the application does not log a fault in the Windows Event Viewer. The PROFINET IO device (ET 200S IM 151-3PN, ET 200M IM 153-4 PN, ET 200pro IM 154-8 PN, ET 200MP IM 155-5 PN, SCALANCE switches, SINAMICS drives) is physically reachable and replies to ping, yet remains invisible to the STEP 7 discovery service.

This silent failure pattern is a documented compatibility symptom between the SIMATIC NET PC software stack shipped with STEP 7 V5.5 and Microsoft Windows XP Professional SP3. The same STEP 7 V5.5 installation functions normally on Windows 7 SP1, and the older STEP 7 V5.4 functions normally on Windows XP SP3, which isolates the regression to a single OS / STEP 7 version pair.

1. Affected System Configurations

STEP 7 Version Operating System Discovery Behavior Notes
V5.4 + SP8 Windows XP Professional SP3 Devices enumerated Baseline reference
V5.5 (no SP) Windows XP Professional SP3 Empty list, no fault Confirmed failure
V5.5 + SP1 Windows XP Professional SP3 Empty list, no fault Hotfix required
V5.5 + SP2 Windows XP Professional SP3 Empty list, no fault Hotfix required
V5.5 (any SP) Windows 7 SP1 (32/64) Devices enumerated Recommended host
V5.5 + SP4 Windows 7 SP1 / Windows 10 Devices enumerated Production target
TIA Portal V13 / V14 / V15 / V16 / V17 Windows 7 SP1 / Windows 10 Devices enumerated Modern replacement

The combination STEP 7 V5.5 + Windows XP SP3 is the diagnostic fingerprint. Any matching pair without a Siemens-issued hotfix reproduces the symptom.

2. Root Cause Analysis

2.1 PROFINET Discovery Mechanism in STEP 7 V5.5

PROFINET device-name assignment relies on the Discovery and Configuration Protocol (DCP), defined in IEC 61158-6-10. DCP uses Layer-2 multicast frames to 01-0E-CF-00-00-00 (Identify Request) so that a station can locate all DCP-capable nodes on the same Ethernet segment. The STEP 7 V5.5 client sends Identify Requests, waits 1.5 seconds (default DCP timeout in the SIMATIC NET stack), and lists all Identify Responses it receives.

DCP operates strictly at Layer 2; IP configuration on the engineering station is not required for discovery. The engineering PC only needs a working Ethernet adapter bound to the SIMATIC NET protocol stack and a connection to the PROFINET subnet. A missing IP address on the engineering station does not prevent discovery, but a misconfigured subnet mask, a firewall dropping DCP multicast, or a NIC driver that filters unknown multicast groups will all silently suppress the Identify Responses.

2.2 Windows XP SP3 Multicast and Firewall Behavior

Windows XP Service Pack 3 introduced stricter inbound handling for unsolicited multicast frames, even when the Windows Firewall is reported as Off. The default netsh firewall policy in SP3 still blocks inbound UDP frames from non-bound ports, and the Link Layer Topology Discovery (LLTD) responder behaves differently than on Windows Vista / 7. The SIMATIC NET stack used by STEP 7 V5.5 binds DCP to a Windows socket using a Winsock catalog that pre-dates these SP3 changes; under SP3 the binding succeeds but the multicast receiver buffer is closed before Identify Responses are collected.

This is why the symptom is silent and why disabling third-party antivirus or Windows Firewall does not resolve it: the issue lives in the SP3 socket layer, not in user-configurable firewall rules.

2.3 SIMATIC NET Stack Regression Between V5.4 and V5.5

STEP 7 V5.5 ships with SIMATIC NET PC Software 2008 SP2 (or later), which rebuilt portions of the PROFINET discovery service to integrate with WinCC flexible 2008 SP2 and the new S7-PCT integration. The rebuilt discovery path is the component that fails on Windows XP SP3. STEP 7 V5.4 used SIMATIC NET 2006/2007, which had its own socket handling that tolerated SP3, and is unaffected.

Engineering implication: any plant that standardized on STEP 7 V5.5 for the S7-300/S7-400 CPU family while continuing to operate an XP SP3 engineering laptop inherited this regression. Replacing STEP 7 with V5.4 is not a viable workaround because V5.4 cannot open V5.5 projects without cross-conversion.

3. Diagnostic Workflow

Run the following sequence before assuming a hardware fault. Each step isolates one possible cause. Stop at the first step that fails and apply the matching remedy.

  1. Verify physical connectivity. Confirm link LEDs on the IO device port, on the SCALANCE switch, and on the engineering PC NIC. Replace any crossover assumption with a known-good patch cable.
  2. Verify Layer-2 reachability with a packet capture. Start Wireshark on the engineering PC NIC with capture filter ether proto 0x8892 (PROFINET RTC) or dcp. Trigger PLC > Ethernet > Assign Device Name in STEP 7 V5.5. If no Identify Requests appear, the SIMATIC NET protocol binding is broken. If Identify Requests appear but no Identify Responses return, the issue is on the IO device side or on the switch fabric.
  3. Confirm DCP Identify Responses from the IO device. A healthy IO device returns an Identify Response within 1.5 s containing its MAC address, vendor ID (0x002A for Siemens), device ID, and current device name (default is empty).
  4. Confirm Windows Firewall and third-party security suites are off. Disable Windows Firewall via netsh firewall set opmode disable. Disable third-party suites fully (not just the real-time component).
  5. Verify the SIMATIC NET protocol is bound to the active NIC. Open SIMATIC NET Configuration > Settings > PC Station and confirm the active PROFINET interface is assigned. The configuration must match the NIC selected in STEP 7 (Options > Set PG/PC Interface).
  6. Confirm the same PG/PC interface is selected in STEP 7. Use S7ONLINE (STEP7) -> <NIC>, never a virtual interface or a TAP-Win32 adapter.
  7. Cross-test with STEP 7 V5.4. If V5.4 enumerates the same devices, the OS layer is healthy and the regression is confirmed in the V5.5 stack.
  8. Cross-test with the engineering laptop booted to Windows 7. If V5.5 enumerates on Windows 7 but not on XP SP3, the OS-level incompatibility is confirmed and a hotfix or OS migration is required.

4. Solution Paths

4.1 Solution A - Apply the Siemens-Issued Hotfix

Siemens released a stack hotfix addressing the XP SP3 socket regression. At the time of issue, Hotfix 3 was withdrawn by Siemens because it triggered false-positive alarms in some virus scanners. Hotfix 4 was the published replacement. Acquire the hotfix as follows:

  1. Open Siemens Industry Online Support and search for entry ID 49749244 (search term: STEP 7 V5.5 PROFINET XP SP3 hotfix).
  2. Download the package matching the installed STEP 7 version (V5.5 base, V5.5 SP1, V5.5 SP2 have separate binaries).
  3. Stop the S7oiehsx and SIMATIC NET services via services.msc.
  4. Run the hotfix installer with administrator credentials.
  5. Reboot the engineering PC.
  6. Repeat step 2 of the diagnostic workflow. Discovery should return devices within 1.5 s.
Hotfix caveat: the hotfix replaces s7oiehsx.exe and s7otbxdx.dll. After installation, re-apply any antivirus exclusions covering the C:\Program Files\Siemens\Automation tree. Some antivirus suites flag the updated DLL on first scan after the hotfix.

4.2 Solution B - Migrate the Engineering Host to Windows 7 SP1 or Windows 10

If the hotfix is not available for the installed STEP 7 SP level, the most reliable long-term remediation is to retire the Windows XP SP3 platform. Windows 7 SP1 (32-bit) preserves the S7-PCT and SIMATIC NET compatibility that XP provided, and Windows 10 (1809 LTSC or later) is supported by STEP 7 V5.5 SP4 and TIA Portal V16/V17.

Migration procedure:

  1. Capture the STEP 7 V5.5 installation media and license keys (License Key Disk or Automation License Manager export).
  2. Install the same STEP 7 V5.5 SP level on the new host. Do not attempt an in-place upgrade from XP to Windows 7/10; install fresh.
  3. Restore the project archive from the XP host.
  4. Re-bind the PROFINET interface under Set PG/PC Interface.
  5. Verify the discovery function returns devices before connecting to any live PLC.

4.3 Solution C - Use TIA Portal as the PROFINET Naming Client

If a TIA Portal license is available, TIA Portal V13 through V17 includes a PROFINET device-name editor that does not depend on the STEP 7 V5.5 SIMATIC NET stack. This option keeps the engineering laptop on Windows 7 / Windows 10 and avoids the legacy stack entirely.

Procedure:

  1. Open the TIA Portal project.
  2. Navigate to Devices & Networks and select the PROFINET IO system.
  3. Right-click the IO device, select Assign PROFINET device name.
  4. Confirm the device list enumerates the connected IO devices.

For S7-1500 / ET 200MP with TIA Portal V17, refer to the official Siemens step-by-step procedure for assigning the device name within the safety configuration sequence:

  1. Step 7: Assign device name - SIMATIC S7-1500 / ET 200MP Manual Collection (TIA Portal V17)

The same procedure applies to non-safety PROFINET IO. Device naming from inside TIA Portal uses the TIA PROFINET stack rather than the legacy SIMATIC NET stack, so the XP SP3 regression does not apply.

4.4 Solution D - Use Siemens PRONETA

Siemens PRONETA is a free, standalone PROFINET analysis tool that performs device discovery, topology discovery, and device name assignment without requiring STEP 7 or TIA Portal. PRONETA 2.x or later runs on Windows 7 SP1 and Windows 10 (32/64-bit) and is independent of the STEP 7 V5.5 SIMATIC NET stack. It is the fastest field tool for confirming whether an IO device responds to DCP at all.

Use PRONETA when:

  • The fault isolation is between STEP 7 V5.5 and the IO device.
  • A second, independent tool is required to confirm device reachability.
  • The engineer needs a topology map to locate the faulty segment.

4.5 Solution E - Direct DCP Assignment with pronettool

For S7-300 / S7-400 work that must remain on Windows XP SP3 and where none of the above options are available, an unsupported but documented path is to use the PST (Primary Setup Tool) primary tool or the older pronettool command-line utility. PST was the original Siemens PROFINET commissioning tool and is independent of the STEP 7 V5.5 SIMATIC NET stack. It can assign PROFINET device names from a Windows XP SP3 host without triggering the V5.5 regression.

Use only as an interim measure. PST is end-of-life and is not shipped with current STEP 7 media. It is referenced here for legacy site recovery, not for new installations.

5. PROFINET Device Naming Protocol Reference

PROFINET device naming follows the DCP protocol (IEC 61158-6-10 / IEC 61784-2). The key identifiers used during device-name assignment are:

Field Width Example Notes
Device Name 1-240 octets et200s-1 Station name unique on subnet
Vendor ID 2 octets 0x002A Siemens default
Device ID 4 octets 0x0301 Per GSD file
MAC Address 6 octets 00-0E-8C-xx-xx-xx Burned-in address
DCP Multicast 6 octets 01-0E-CF-00-00-00 Identify Request target
Response Timeout - 1.5 s SIMATIC NET default

A device name is stored in non-volatile memory on the IO device (or the field-switch / drive that supports PROFINET device naming). The name persists across power cycles. Replacement of an IO device requires assigning a fresh name because the new device ships with an empty name.

6. Verification Checklist

After applying any solution path, perform the following to confirm a clean fix:

  1. Open STEP 7 V5.5 PLC > Ethernet > Assign Device Name.
  2. Confirm the correct NIC is bound to the SIMATIC NET protocol.
  3. Click Assign Name; the device list should populate within 2 seconds.
  4. Select the target IO device, enter the configured PROFINET name, and confirm.
  5. Power-cycle the IO device and re-read the name to confirm persistence.
  6. Download the STEP 7 hardware configuration and verify the IO device comes online without diagnostic interruption.
  7. Open the online diagnostic view (PLC > Diagnostics/Settings > Hardware Diagnostics) and confirm the device status is green (no fault) and the PROFINET name matches the configured value.

7. Troubleshooting Matrix

Symptom Likely Cause First Verification Resolution
Empty device list, no error XP SP3 + STEP 7 V5.5 stack regression Cross-test with V5.4 Apply Hotfix 4 or migrate host OS
Empty device list, NIC not listed SIMATIC NET protocol not bound Set PG/PC Interface Reinstall SIMATIC NET
Device list shows old entries only DCP cache not refreshed Restart S7oiehsx Stop/start the S7ONLINE service
Device list times out at 30 s Switch blocking multicast Port mirror capture Enable DCP multicast on switch
Device visible but name greyed out Read-only DCP mode on device Reset to factory Factory reset IO device
Name assigned but PLC reports "device not found" Name mismatch between STEP 7 HW config and device Compare names Re-assign exact name
Multiple devices with same name Duplicate name on subnet PRONETA scan Reassign unique names
Discovery works on V5.5/Win7 but not on V5.5/XP Confirmed XP regression OS version check Apply hotfix or migrate OS

8. Field Commissioning Best Practices

  • Standardize the engineering host. Pick Windows 7 SP1 (32-bit) or Windows 10 LTSC for all STEP 7 V5.5 / TIA Portal engineering stations. Avoid mixed environments.
  • Document the PROFINET naming convention. Use a site-wide scheme such as <area>-<line>-<station>, e.g. pa01-l03-pn12. A consistent scheme makes troubleshooting far easier.
  • Maintain a PROFINET name backup. Store the configured PROFINET name alongside the STEP 7 hardware configuration. A field replacement must restore both.
  • Exclude SIMATIC NET from antivirus. Add C:\Program Files\Siemens\Automation and C:\Program Files\Siemens\SIMATIC NET to the antivirus exclusion list before commissioning.
  • Keep a known-good engineering laptop on each site. A second, pre-configured host avoids commissioning downtime when a single laptop fails.
  • Avoid XP SP3 in new installations. Windows XP SP3 has been out of extended support since 2014. New plants must standardize on Windows 7 SP1 / Windows 10 LTSC for STEP 7 V5.5 SP4+ or TIA Portal V16+.

9. Migration Path Recommendations

For sites still on STEP 7 V5.5 + Windows XP SP3, plan a controlled migration in three waves:

  1. Wave 1 - Engineering host refresh. Replace XP SP3 laptops with Windows 7 SP1 or Windows 10 LTSC. Keep STEP 7 V5.5 SP4. This removes the regression without changing the project base.
  2. Wave 2 - TIA Portal coexistence. Deploy TIA Portal V16 or V17 alongside STEP 7 V5.5 for new projects. S7-300/S7-400 can be imported into TIA Portal using the TIA migration tool; the original STEP 7 V5.5 project remains the master record.
  3. Wave 3 - Native TIA Portal. New machines are engineered exclusively in TIA Portal. STEP 7 V5.5 is retained for legacy service only.

Waves 1 and 2 do not require any change to the running automation. Wave 3 is optional and depends on the plant's long-term controller refresh plan.

10. Cross-Reference with Siemens Documentation

11. Frequently Asked Questions

Why does STEP 7 V5.5 fail to discover PROFINET devices on Windows XP SP3 but not on Windows 7?

The SIMATIC NET PC stack shipped with STEP 7 V5.5 binds the DCP discovery socket in a way that conflicts with the SP3 inbound multicast handling. Windows 7 does not enforce the same restriction, so the same STEP 7 V5.5 installation works. Apply Siemens Hotfix 4 or migrate the engineering host to Windows 7 SP1 / Windows 10.

Disabling the Windows Firewall did not restore device discovery. What now?

The XP SP3 regression is below the user-configurable firewall layer and is independent of third-party suites. Disable firewall, antivirus, and LLTD responder, then apply the Siemens hotfix or move to a supported OS. Verify with a Wireshark capture on ether proto 0x8892 or dcp.

Can I downgrade from STEP 7 V5.5 to V5.4 to recover device naming?

V5.4 cannot natively open V5.5 projects; it would require cross-conversion of every project. The supported path is to keep V5.5 and apply the hotfix, or migrate to TIA Portal V16 / V17 and import the S7-300/S7-400 projects.

What is the default DCP multicast address used by STEP 7 V5.5?

STEP 7 V5.5 sends DCP Identify Requests to the Layer-2 multicast 01-0E-CF-00-00-00. The SIMATIC NET stack waits 1.5 seconds for Identify Responses before displaying the device list.

Does assigning a PROFINET device name require an IP address on the engineering PC?

No. DCP operates at Layer 2. The engineering PC only needs a working Ethernet adapter bound to the SIMATIC NET protocol. The IO device gets its IP address later from the PROFINET IO controller during AR (Application Relationship) establishment.

After assigning the name, the IO device still shows "device not found" in the online view. Why?

The name assigned via PLC > Ethernet > Assign Device Name must match exactly the name configured in the STEP 7 hardware configuration. Open the PROFINET interface properties of the IO device in HW Config and compare. Re-assign the name if there is any discrepancy, including invisible whitespace.

Back to blog