Troubleshooting STEP 7 V5.5 PROFINET Assign Device Name Failures
The legacy PROFINET device-name assignment utility inside SIMATIC STEP 7 V5.5 (Classic) is reached through PLC > Ethernet > Assign Device Name. Under specific host operating-system conditions the dialog opens, the network adapter is selected, but the device list returns zero entries. No error message is raised and the application does not log a fault in the Windows Event Viewer. The PROFINET IO device (ET 200S IM 151-3PN, ET 200M IM 153-4 PN, ET 200pro IM 154-8 PN, ET 200MP IM 155-5 PN, SCALANCE switches, SINAMICS drives) is physically reachable and replies to ping, yet remains invisible to the STEP 7 discovery service.
This silent failure pattern is a documented compatibility symptom between the SIMATIC NET PC software stack shipped with STEP 7 V5.5 and Microsoft Windows XP Professional SP3. The same STEP 7 V5.5 installation functions normally on Windows 7 SP1, and the older STEP 7 V5.4 functions normally on Windows XP SP3, which isolates the regression to a single OS / STEP 7 version pair.
1. Affected System Configurations
| STEP 7 Version | Operating System | Discovery Behavior | Notes |
|---|---|---|---|
| V5.4 + SP8 | Windows XP Professional SP3 | Devices enumerated | Baseline reference |
| V5.5 (no SP) | Windows XP Professional SP3 | Empty list, no fault | Confirmed failure |
| V5.5 + SP1 | Windows XP Professional SP3 | Empty list, no fault | Hotfix required |
| V5.5 + SP2 | Windows XP Professional SP3 | Empty list, no fault | Hotfix required |
| V5.5 (any SP) | Windows 7 SP1 (32/64) | Devices enumerated | Recommended host |
| V5.5 + SP4 | Windows 7 SP1 / Windows 10 | Devices enumerated | Production target |
| TIA Portal V13 / V14 / V15 / V16 / V17 | Windows 7 SP1 / Windows 10 | Devices enumerated | Modern replacement |
The combination STEP 7 V5.5 + Windows XP SP3 is the diagnostic fingerprint. Any matching pair without a Siemens-issued hotfix reproduces the symptom.
2. Root Cause Analysis
2.1 PROFINET Discovery Mechanism in STEP 7 V5.5
PROFINET device-name assignment relies on the Discovery and Configuration Protocol (DCP), defined in IEC 61158-6-10. DCP uses Layer-2 multicast frames to 01-0E-CF-00-00-00 (Identify Request) so that a station can locate all DCP-capable nodes on the same Ethernet segment. The STEP 7 V5.5 client sends Identify Requests, waits 1.5 seconds (default DCP timeout in the SIMATIC NET stack), and lists all Identify Responses it receives.
DCP operates strictly at Layer 2; IP configuration on the engineering station is not required for discovery. The engineering PC only needs a working Ethernet adapter bound to the SIMATIC NET protocol stack and a connection to the PROFINET subnet. A missing IP address on the engineering station does not prevent discovery, but a misconfigured subnet mask, a firewall dropping DCP multicast, or a NIC driver that filters unknown multicast groups will all silently suppress the Identify Responses.
2.2 Windows XP SP3 Multicast and Firewall Behavior
Windows XP Service Pack 3 introduced stricter inbound handling for unsolicited multicast frames, even when the Windows Firewall is reported as Off. The default netsh firewall policy in SP3 still blocks inbound UDP frames from non-bound ports, and the Link Layer Topology Discovery (LLTD) responder behaves differently than on Windows Vista / 7. The SIMATIC NET stack used by STEP 7 V5.5 binds DCP to a Windows socket using a Winsock catalog that pre-dates these SP3 changes; under SP3 the binding succeeds but the multicast receiver buffer is closed before Identify Responses are collected.
This is why the symptom is silent and why disabling third-party antivirus or Windows Firewall does not resolve it: the issue lives in the SP3 socket layer, not in user-configurable firewall rules.
2.3 SIMATIC NET Stack Regression Between V5.4 and V5.5
STEP 7 V5.5 ships with SIMATIC NET PC Software 2008 SP2 (or later), which rebuilt portions of the PROFINET discovery service to integrate with WinCC flexible 2008 SP2 and the new S7-PCT integration. The rebuilt discovery path is the component that fails on Windows XP SP3. STEP 7 V5.4 used SIMATIC NET 2006/2007, which had its own socket handling that tolerated SP3, and is unaffected.
3. Diagnostic Workflow
Run the following sequence before assuming a hardware fault. Each step isolates one possible cause. Stop at the first step that fails and apply the matching remedy.
- Verify physical connectivity. Confirm link LEDs on the IO device port, on the SCALANCE switch, and on the engineering PC NIC. Replace any crossover assumption with a known-good patch cable.
-
Verify Layer-2 reachability with a packet capture. Start Wireshark on the engineering PC NIC with capture filter
ether proto 0x8892(PROFINET RTC) ordcp. TriggerPLC > Ethernet > Assign Device Namein STEP 7 V5.5. If no Identify Requests appear, the SIMATIC NET protocol binding is broken. If Identify Requests appear but no Identify Responses return, the issue is on the IO device side or on the switch fabric. - Confirm DCP Identify Responses from the IO device. A healthy IO device returns an Identify Response within 1.5 s containing its MAC address, vendor ID (0x002A for Siemens), device ID, and current device name (default is empty).
-
Confirm Windows Firewall and third-party security suites are off. Disable Windows Firewall via
netsh firewall set opmode disable. Disable third-party suites fully (not just the real-time component). -
Verify the SIMATIC NET protocol is bound to the active NIC. Open
SIMATIC NET Configuration > Settings > PC Stationand confirm the active PROFINET interface is assigned. The configuration must match the NIC selected in STEP 7 (Options > Set PG/PC Interface). -
Confirm the same PG/PC interface is selected in STEP 7. Use
S7ONLINE (STEP7) -> <NIC>, never a virtual interface or a TAP-Win32 adapter. - Cross-test with STEP 7 V5.4. If V5.4 enumerates the same devices, the OS layer is healthy and the regression is confirmed in the V5.5 stack.
- Cross-test with the engineering laptop booted to Windows 7. If V5.5 enumerates on Windows 7 but not on XP SP3, the OS-level incompatibility is confirmed and a hotfix or OS migration is required.
4. Solution Paths
4.1 Solution A - Apply the Siemens-Issued Hotfix
Siemens released a stack hotfix addressing the XP SP3 socket regression. At the time of issue, Hotfix 3 was withdrawn by Siemens because it triggered false-positive alarms in some virus scanners. Hotfix 4 was the published replacement. Acquire the hotfix as follows:
- Open Siemens Industry Online Support and search for entry ID 49749244 (search term:
STEP 7 V5.5 PROFINET XP SP3 hotfix). - Download the package matching the installed STEP 7 version (V5.5 base, V5.5 SP1, V5.5 SP2 have separate binaries).
- Stop the
S7oiehsxandSIMATIC NETservices viaservices.msc. - Run the hotfix installer with administrator credentials.
- Reboot the engineering PC.
- Repeat step 2 of the diagnostic workflow. Discovery should return devices within 1.5 s.
s7oiehsx.exe and s7otbxdx.dll. After installation, re-apply any antivirus exclusions covering the C:\Program Files\Siemens\Automation tree. Some antivirus suites flag the updated DLL on first scan after the hotfix.
4.2 Solution B - Migrate the Engineering Host to Windows 7 SP1 or Windows 10
If the hotfix is not available for the installed STEP 7 SP level, the most reliable long-term remediation is to retire the Windows XP SP3 platform. Windows 7 SP1 (32-bit) preserves the S7-PCT and SIMATIC NET compatibility that XP provided, and Windows 10 (1809 LTSC or later) is supported by STEP 7 V5.5 SP4 and TIA Portal V16/V17.
Migration procedure:
- Capture the STEP 7 V5.5 installation media and license keys (License Key Disk or Automation License Manager export).
- Install the same STEP 7 V5.5 SP level on the new host. Do not attempt an in-place upgrade from XP to Windows 7/10; install fresh.
- Restore the project archive from the XP host.
- Re-bind the PROFINET interface under
Set PG/PC Interface. - Verify the discovery function returns devices before connecting to any live PLC.
4.3 Solution C - Use TIA Portal as the PROFINET Naming Client
If a TIA Portal license is available, TIA Portal V13 through V17 includes a PROFINET device-name editor that does not depend on the STEP 7 V5.5 SIMATIC NET stack. This option keeps the engineering laptop on Windows 7 / Windows 10 and avoids the legacy stack entirely.
Procedure:
- Open the TIA Portal project.
- Navigate to Devices & Networks and select the PROFINET IO system.
- Right-click the IO device, select Assign PROFINET device name.
- Confirm the device list enumerates the connected IO devices.
For S7-1500 / ET 200MP with TIA Portal V17, refer to the official Siemens step-by-step procedure for assigning the device name within the safety configuration sequence:
The same procedure applies to non-safety PROFINET IO. Device naming from inside TIA Portal uses the TIA PROFINET stack rather than the legacy SIMATIC NET stack, so the XP SP3 regression does not apply.
4.4 Solution D - Use Siemens PRONETA
Siemens PRONETA is a free, standalone PROFINET analysis tool that performs device discovery, topology discovery, and device name assignment without requiring STEP 7 or TIA Portal. PRONETA 2.x or later runs on Windows 7 SP1 and Windows 10 (32/64-bit) and is independent of the STEP 7 V5.5 SIMATIC NET stack. It is the fastest field tool for confirming whether an IO device responds to DCP at all.
Use PRONETA when:
- The fault isolation is between STEP 7 V5.5 and the IO device.
- A second, independent tool is required to confirm device reachability.
- The engineer needs a topology map to locate the faulty segment.
4.5 Solution E - Direct DCP Assignment with pronettool
For S7-300 / S7-400 work that must remain on Windows XP SP3 and where none of the above options are available, an unsupported but documented path is to use the PST (Primary Setup Tool) primary tool or the older pronettool command-line utility. PST was the original Siemens PROFINET commissioning tool and is independent of the STEP 7 V5.5 SIMATIC NET stack. It can assign PROFINET device names from a Windows XP SP3 host without triggering the V5.5 regression.
5. PROFINET Device Naming Protocol Reference
PROFINET device naming follows the DCP protocol (IEC 61158-6-10 / IEC 61784-2). The key identifiers used during device-name assignment are:
| Field | Width | Example | Notes |
|---|---|---|---|
| Device Name | 1-240 octets | et200s-1 |
Station name unique on subnet |
| Vendor ID | 2 octets | 0x002A |
Siemens default |
| Device ID | 4 octets | 0x0301 |
Per GSD file |
| MAC Address | 6 octets | 00-0E-8C-xx-xx-xx |
Burned-in address |
| DCP Multicast | 6 octets | 01-0E-CF-00-00-00 |
Identify Request target |
| Response Timeout | - | 1.5 s | SIMATIC NET default |
A device name is stored in non-volatile memory on the IO device (or the field-switch / drive that supports PROFINET device naming). The name persists across power cycles. Replacement of an IO device requires assigning a fresh name because the new device ships with an empty name.
6. Verification Checklist
After applying any solution path, perform the following to confirm a clean fix:
- Open STEP 7 V5.5
PLC > Ethernet > Assign Device Name. - Confirm the correct NIC is bound to the SIMATIC NET protocol.
- Click Assign Name; the device list should populate within 2 seconds.
- Select the target IO device, enter the configured PROFINET name, and confirm.
- Power-cycle the IO device and re-read the name to confirm persistence.
- Download the STEP 7 hardware configuration and verify the IO device comes online without diagnostic interruption.
- Open the online diagnostic view (
PLC > Diagnostics/Settings > Hardware Diagnostics) and confirm the device status is green (no fault) and the PROFINET name matches the configured value.
7. Troubleshooting Matrix
| Symptom | Likely Cause | First Verification | Resolution |
|---|---|---|---|
| Empty device list, no error | XP SP3 + STEP 7 V5.5 stack regression | Cross-test with V5.4 | Apply Hotfix 4 or migrate host OS |
| Empty device list, NIC not listed | SIMATIC NET protocol not bound | Set PG/PC Interface | Reinstall SIMATIC NET |
| Device list shows old entries only | DCP cache not refreshed | Restart S7oiehsx | Stop/start the S7ONLINE service |
| Device list times out at 30 s | Switch blocking multicast | Port mirror capture | Enable DCP multicast on switch |
| Device visible but name greyed out | Read-only DCP mode on device | Reset to factory | Factory reset IO device |
| Name assigned but PLC reports "device not found" | Name mismatch between STEP 7 HW config and device | Compare names | Re-assign exact name |
| Multiple devices with same name | Duplicate name on subnet | PRONETA scan | Reassign unique names |
| Discovery works on V5.5/Win7 but not on V5.5/XP | Confirmed XP regression | OS version check | Apply hotfix or migrate OS |
8. Field Commissioning Best Practices
- Standardize the engineering host. Pick Windows 7 SP1 (32-bit) or Windows 10 LTSC for all STEP 7 V5.5 / TIA Portal engineering stations. Avoid mixed environments.
-
Document the PROFINET naming convention. Use a site-wide scheme such as
<area>-<line>-<station>, e.g.pa01-l03-pn12. A consistent scheme makes troubleshooting far easier. - Maintain a PROFINET name backup. Store the configured PROFINET name alongside the STEP 7 hardware configuration. A field replacement must restore both.
-
Exclude SIMATIC NET from antivirus. Add
C:\Program Files\Siemens\AutomationandC:\Program Files\Siemens\SIMATIC NETto the antivirus exclusion list before commissioning. - Keep a known-good engineering laptop on each site. A second, pre-configured host avoids commissioning downtime when a single laptop fails.
- Avoid XP SP3 in new installations. Windows XP SP3 has been out of extended support since 2014. New plants must standardize on Windows 7 SP1 / Windows 10 LTSC for STEP 7 V5.5 SP4+ or TIA Portal V16+.
9. Migration Path Recommendations
For sites still on STEP 7 V5.5 + Windows XP SP3, plan a controlled migration in three waves:
- Wave 1 - Engineering host refresh. Replace XP SP3 laptops with Windows 7 SP1 or Windows 10 LTSC. Keep STEP 7 V5.5 SP4. This removes the regression without changing the project base.
- Wave 2 - TIA Portal coexistence. Deploy TIA Portal V16 or V17 alongside STEP 7 V5.5 for new projects. S7-300/S7-400 can be imported into TIA Portal using the TIA migration tool; the original STEP 7 V5.5 project remains the master record.
- Wave 3 - Native TIA Portal. New machines are engineered exclusively in TIA Portal. STEP 7 V5.5 is retained for legacy service only.
Waves 1 and 2 do not require any change to the running automation. Wave 3 is optional and depends on the plant's long-term controller refresh plan.
10. Cross-Reference with Siemens Documentation
- Siemens Industry Online Support - entry search for STEP 7 V5.5 hotfixes and PROFINET device naming tools.
- SIMATIC S7-1500 / ET 200MP Manual Collection - Step 7: Assign device name - canonical TIA Portal V17 procedure for PROFINET device-name assignment within a safety configuration.
- SIMATIC NET PC Software Documentation - reference for the PROFINET IO Base interface and the S7ONLINE access point.
11. Frequently Asked Questions
Why does STEP 7 V5.5 fail to discover PROFINET devices on Windows XP SP3 but not on Windows 7?
The SIMATIC NET PC stack shipped with STEP 7 V5.5 binds the DCP discovery socket in a way that conflicts with the SP3 inbound multicast handling. Windows 7 does not enforce the same restriction, so the same STEP 7 V5.5 installation works. Apply Siemens Hotfix 4 or migrate the engineering host to Windows 7 SP1 / Windows 10.
Disabling the Windows Firewall did not restore device discovery. What now?
The XP SP3 regression is below the user-configurable firewall layer and is independent of third-party suites. Disable firewall, antivirus, and LLTD responder, then apply the Siemens hotfix or move to a supported OS. Verify with a Wireshark capture on ether proto 0x8892 or dcp.
Can I downgrade from STEP 7 V5.5 to V5.4 to recover device naming?
V5.4 cannot natively open V5.5 projects; it would require cross-conversion of every project. The supported path is to keep V5.5 and apply the hotfix, or migrate to TIA Portal V16 / V17 and import the S7-300/S7-400 projects.
What is the default DCP multicast address used by STEP 7 V5.5?
STEP 7 V5.5 sends DCP Identify Requests to the Layer-2 multicast 01-0E-CF-00-00-00. The SIMATIC NET stack waits 1.5 seconds for Identify Responses before displaying the device list.
Does assigning a PROFINET device name require an IP address on the engineering PC?
No. DCP operates at Layer 2. The engineering PC only needs a working Ethernet adapter bound to the SIMATIC NET protocol. The IO device gets its IP address later from the PROFINET IO controller during AR (Application Relationship) establishment.
After assigning the name, the IO device still shows "device not found" in the online view. Why?
The name assigned via PLC > Ethernet > Assign Device Name must match exactly the name configured in the STEP 7 hardware configuration. Open the PROFINET interface properties of the IO device in HW Config and compare. Re-assign the name if there is any discrepancy, including invisible whitespace.