At a Glance

Safety CPUs include a safe area password protection function, which is accessible from the Properties screen of the project. This function is used to help protect project elements located within the safe area of the safety project.

NOTE: When the safe area password protection function is active, the safe parts of the application cannot be modified

Modifications to the following safe area parts are not permitted when safe area password protection is enabled:

Safe Part

Forbidden action (offline AND online)

Configuration

Modify CPU characteristics

Add, Delete, Modify a Safety module in the rack

Modify Safety Power supply

Types

Create, Delete, Modify a Safe DDT

Change a DDT attribute: from not safe->safe

Change a DDT attribute: from safe->not safe

Create, Delete, Modify a Safe DFB

Change a DFB attribute: from not safe->safe

Change a DFB attribute: from safe->not safe

Program-SAFE

Any Change under the Variables an FB instances node

Create Task

Import Task

Modify Task

Create Section

Delete Section

Import Section

Modify Section

Project Settings

Modify SAFE project settings

Modify COMMON project settings

Encryption

The safe area password uses the standard encryption SHA-256 with a salt.

Safe Area Password Function versus Safety Project User Rights

The activation of the safe area password and the implementation of user rights created in the Security Editor are mutually exclusive security functions, as follows:

  • If the user launching Control Expert has been assigned a user profile, that user can access the safe areas of the safety application if the user knows the safe area password and has been granted access rights in the Security Editor.

  • If user profiles have not been assigned, a user can access the safe areas of the safety application by knowing the safe area password.

Visual Indicators in Control Expert

The state of the safe area protection function can be visibly detected by viewing the Program-SAFE node in the Project Browser :

  • A locked padlock indicates a safe area password has been created and activated.

  • An unlocked padlock indicates a safe area password has been created but not activated.

  • No padlock indicates a safe area password has not been created.

NOTE: If a safe area password has been created but not activated, and the safety application is closed then re-opened, the safe area password is automatically activated on re-opening. This behavior serves as a precaution if the safe are password was unintentionally not re-activated.

Compatibility

The safe area password function exists for Control Expert V14.0 or later, for M580 safety CPUs with firmware 2.80 or later.

NOTE:

  • Application program .STU, .STA, and .ZEF files, which are created in Control Expert V14.0 or later, cannot be opened in Unity Pro V13.1 and earlier.

  • Replacing an M580 safety CPU in a Control Expert v14.0 application has the following effect:

    • Upgrading from firmware 2.70 to 2.80 (or later) adds the safe area password functionality to the Program & Safety Protection tab of the Project > Properties window.

    • Downgrading from firmware 2.80 (or later) to 2.70 removes the safe area password functionality.

Activating Protection and Creating Password

Procedure for activating the protection of sections and creating the password:

Step

Action

1

In the project browser right-click Project.

2

Select Properties command from the popup menu.

Result: The Properties of Project window appears.

3

Select the Program & Safety Protection tab.

4

In the Safety area, activate the protection by checking the Protection active box.

Result: The Modify Password dialog box appears.

5

Enter a password in the Entry field.

6

Enter the confirmation of the password in the Confirmation field.

7

Click OK to confirm.

8

Click OK or Apply in the Properties of Project window to confirm all changes.

If you click Cancel in the Properties of Project window, all changes are canceled.

Changing the Password

Procedure for changing the project sections protection password:

Step

Action

1

In the project browser right-click Project.

2

Select Properties command from the popup menu.

Result: The Properties of Project window appears.

3

Select the Program & Safety Protection tab.

4

In the Safety area, click Change password ....

Result: The Modify Password dialog box appears:

5

Enter previous password in the Old password field.

6

Enter the new password in the Entry field.

7

Enter the confirmation of the new password in the Confirmation field.

8

Click OK to confirm.

9

Click OK or Apply in the Properties of Project window to confirm all changes.

If you click Cancel in the Properties of Project window, all changes are canceled.

Deleting the Password

Procedure for deleting the project sections protection password:

Step

Action

1

In the project browser right-click Project.

2

Select Properties command from the popup menu.

Result: The Properties of Project window appears.

3

Select the Program & Safety Protection tab.

4

In the Safety area, click Clear password....

Result: The Access control dialog box appears:

5

Enter the previous password in the Password field.

6

Click OK to confirm.

7

Click OK or Apply in the Properties of Project window to confirm all changes.

If you click Cancel in the Properties of Project window, all changes are canceled.