SIMATIC S7 Block Privacy

V1.0 SP4
Security Information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.

In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement - and continuously maintain - a holistic, state-of-the-art industrial
security concept. Siemens' products and solutions only form one element of such a concept.

Customer is responsible to prevent unauthorized access to its plants, systems, machines

and networks. Systems, machines and components should only be connected to the
enterprise network or the internet if and to the extent necessary and with appropriate
security measures (e.g. use of firewalls and network segmentation) in place.

Additionally, Siemens' guidance on appropriate security measures should be taken into

account. For more information about industrial security, please visit

http://www.siemens.com/industrialsecurity

Siemens' products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends to apply product updates as soon as available and to
always use the latest product versions. Use of product versions that are no longer
supported, and failure to apply latest updates may increase customer's exposure to cyber
threats.

To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under

http://www.siemens.com/industrialsecurity

General Notes

The SIMATIC S7 Block Privacy application is used to encrypt and decrypt blocks and
sources.

S7 Block Privacy
 is installed in the STEP 7 folder (in the S7BLP folder) and can be started in
the SIMATIC Manager from the shortcut menu of a block folder.
 encrypts blocks that can then be loaded on a CPU (the CPU must have a
suitable firmware version to be able to process the blocks correctly).
 1 Notes on Installation
1.1 Requirements

S7 Block Privacy can only be installed with STEP 7, V5.5 or higher.

1.2 Installation

S7 Block Privacy 1.0 SP4 is installed by running Setup.exe.

Please follow the instructions of the Setup program.
The S7 Block Privacy application is only available in the menu languages German and
English.

2 Notes on Usage
2.1 General Notes

 The call for the S7 Block Privacy application is integrated in the SIMATIC Manager. It
is always called in the shortcut menu of the block folder (menu command "Block
Privacy..."), this means that the STEP 7 project and the S7 program are specified for the
called S7 Block Privacy instance. If an S7 Block Privacy instance exists when you call S7
Block Privacy for a different S7 program, the new parameters (STEP 7 project and S7
program) are passed to the running program.
 S7 Block Privacy supports function blocks (FB) and functions (FC).
 The CPU/PLC must have at least the following version:
o CPU 3xx: firmware version V3.2 or higher
o CPU 4xx: firmware version V6.0 or higher
o SINUMERIK PLC: version V4.7 or higher
 You can encrypt blocks for SIMATIC systems, SINUMERIK systems or both systems
together. The protection of the MC7 block is, however, ideal if you select only one
of the two systems.
 Following encryption, the encrypted blocks/sources are available in the databases of
a STEP 7 project.
 Encrypted blocks/sources cannot be processed with earlier versions STEP 7 (call,
instantiation etc.).
 The S7 Block Privacy application works only in conjunction with the SIMATIC
Manager. Exiting the SIMATIC Manager also exits S7 Block Privacy.
 Encrypted blocks cannot be simulated with S7-PLCSIM.

1.1 What's New in V1.0 SP4?

The 64 bit operating systems MS Windows 10 Pro and Enterprise MS Windows Server 2012
and MS Windows Server 2016 are supported.

2.2 Online Help

While the application is running, you open the online help with detailed information on S7
Block Privacy as normal in Windows with F1 or the help button.