Siemens SIMATIC IPC227G User manual

Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
SIMATIC
Industrial PC
Firm
ware/BIOS description
SIMATIC IPC227G, IPC277G,
IPC327G, IPC377G
Operating Instructions
09/2021
A5E50059883
-AB
Important information
Using the firmware
selection menu
1
Configure firmware
2
Update firmware
3
Booting from USB stick
4
Enable Trusted Platform
Module (TPM)
5
Automatic switching on of
the device
6

Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
A5E50059883-AB
Ⓟ
09/2021 Subject to change
Copyright © Siemens AG 2021.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
Operating Instructions, 09/2021, A5E50059883-AB 3
Important information
Basic knowledge requirements
This firmware / BIOS description is intended for the following qualified personnel:
•Programmers and testers who commission the device themselves and connect it to an
automation system.
•Service and maintenance technicians who install enhancements or conduct fault analyzes.
A solid background in personal computers is required to understand this manual. General
knowledge in the field automation control engineering is recommended.
Scope of validity
This firmware/BIOS description applies to the following SIMATIC IPCs:
•SIMATIC IPC227G
•SIMATIC IPC277G
•SIMATIC IPC327G
•SIMATIC IPC377G
History
The following versions of this firmware/BIOS description have been published previously:
Edition
Comment
05/2021
First Edition
09/2021
Add SIMATIC IPC327G and SIMATIC IPC377G configuration information
Firmware/BIOS
The firmware (BIOS) is located in a FLASH block on the motherboard.
The firmware selection menu can be opened after the device has been started. You can then
configure the firmware settings of your device.

Important information
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
4Operating Instructions, 09/2021, A5E50059883-AB
Change firmware settings
The firmware settings are preset for working with the included software. You should only
change the default firmware settings if technical changes to your device require other
settings.
NOTICE
Malfunctions can occur with running software CPU
If a PC firmware/BIOS update is being performed while a SIMATIC software controller, such
as a SIMATIC WinAC, is running, the software CPU can malfunction, resulting in
communication interruptions or failures, among other things. Other actions that put a
heavy load on the PC hardware, for example, running hardware tests such as benchmarks,
can result in malfunctions of the software CPU.
Do not run a firmware/BIOS update or other actions that would put a heavy load on the
hardware during operation of a software CPU.
Switch the software CPU to "STOP" before you run a firmware/BIOS update or perform other
critical actions.
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected
to an enterprise network or the internet if and to the extent such a connection is necessary
and only when appropriate security measures (e.g. firewalls and/or network segmentation)
are in place.
For additional information on industrial security measures that may be implemented, please
visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customers' exposure to
cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under (https://www.siemens.com/industrialsecurity).

Important information
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
Operating Instructions, 09/2021, A5E50059883-AB 5
Disclaimer for third-party software updates
This product includes third-party software. Siemens AG only provides a warranty for
updates/patches of the third-party software, if these have been distributed as part of a
Siemens software update service contract or officially released by Siemens AG. Otherwise,
updates/patches are undertaken at your own risk. You can find more information about our
Software Update Service offer on the Internet at
(https://new.siemens.com/global/en/products/automation/topic-areas/simatic/licenses.html).

Important information
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
6Operating Instructions, 09/2021, A5E50059883-AB

Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
Operating Instructions, 09/2021, A5E50059883-AB 7
Table of contents
Important information........................................................................................................................... 3
1 Using the firmware selection menu ...................................................................................................... 9
1.1 Open firmware selection menu ............................................................................................ 9
1.2 Firmware selection menu options ...................................................................................... 10
2 Configure firmware ............................................................................................................................. 11
2.1 Starting the Setup Utility.................................................................................................... 11
2.2 Keyboard inputs in Setup Utility ......................................................................................... 11
2.3 "Main" tab.......................................................................................................................... 12
2.4 "Advanced" tab .................................................................................................................. 13
2.4.1 "Boot Configuration" .......................................................................................................... 13
2.4.2 "Peripheral Configuration".................................................................................................. 13
2.4.3 "USB Configuration" ........................................................................................................... 16
2.4.4 "Miscellaneous Configuration"............................................................................................ 16
2.4.5 "Video Configuration" ........................................................................................................ 17
2.4.6 "M.2 Configuration" ........................................................................................................... 17
2.4.7 "Memory Configuration" .................................................................................................... 18
2.5 "Security" tab ..................................................................................................................... 19
2.6 "Power" tab........................................................................................................................ 21
2.6.1 Advanced CPU Control ....................................................................................................... 23
2.7 "Boot" tab .......................................................................................................................... 24
2.7.1 "EFI"................................................................................................................................... 25
2.8 "Exit" tab............................................................................................................................ 25
3 Update firmware.................................................................................................................................. 27
4 Booting from USB stick ........................................................................................................................ 29
5 Enable Trusted Platform Module (TPM)............................................................................................... 31
6 Automatic switching on of the device................................................................................................. 33
Index .................................................................................................................................................... 35

Table of contents
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
8Operating Instructions, 09/2021, A5E50059883-AB

Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
Operating Instructions, 09/2021, A5E50059883-AB 9
Using the firmware selection menu
1
1.1 Open firmware selection menu
Procedure
1. Switch on the device or restart the device.
2. Immediately after switching on the device, press the <Esc> button and hold it down.
Open firmware selection menu manually
Note
Windows®
10 operating systems: Alternative procedure for opening the firmware
selection menu
If you do not open the firmware selection menu after starting the device with the
<Esc> key,
follow these steps:
1.
Start Windows®10.
2.
Press the <Shift> key and keep it pressed.
3.
Select "Restart".
The "Choose an Option" window opens.
4.
Select the "Troubleshoot" option.
5.
Select "UEFI / Firmware Settings".
6.
Click "Restart".
Result
The "Main Page" with the options of the firmware selection menu (Page 10) is open.

Using the firmware selection menu
1.2 Firmware selection menu options
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
10 Operating Instructions, 09/2021, A5E50059883-AB
1.2 Firmware selection menu options
The number of available options in the firmware selection menu depends on your device
version.
The following options are available:
Option
Function
Continue
Exit firmware selection menu
Continue the boot procedure.
Boot Manager Specify the boot media from which to start, for example:
•Windows Boot Manager
•EFI USB Device
Device Manager
When the network stack is enabled, the network device name that can be
configured are listed.
Boot From File
Boot from an *.EFI file.
Administer Secure Boot
Configure device startup in "Secure Boot Modus".
Setup Utility
Start firmware configuration menu.
BIOS Update
Perform BIOS update.
You can find more detailed information under "Update firmware (Page 27)".

Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
Operating Instructions, 09/2021, A5E50059883-AB 11
Configure firmware
2
2.1 Starting the Setup Utility
You configure important firmware settings of your device using the firmware configuration
menu "Setup Utility".
Procedure
1. Open the firmware selection menu (Page 9).
2. Select the "Setup Utility" option on the "Main Page" with the arrow keys.
3. Confirm your selection with the <Enter> button.
2.2 Keyboard inputs in Setup Utility
Button
Function
<F1>
Call help function.
<F5> or <F6>
Change firmware settings.
The <F5> key is used to take the previous setting possibility or value.
The <F6> key is used to take the next setting possibility or value.
<F9>
Load Optimal Defaults:
The firmware settings are reset to the safe default values.
The delivery state is restored.
NOTICE:
All current firmware settings are overwritten.
<F10>
Exit Saving Changes:
All changes are saved. The device is restarted with the changed firmware
settings.
<Enter>
A submenu previously selected with the arrow keys opens. The value of a
firmware setting previously selected with the arrow keys can be changed.
[←] [→]
Navigate to a tab.
[↑] [↓]
Navigate to a submenu or a firmware setting. Confirm your selection with the
<Enter> button.
<Esc> A submenu or tab or the Setup Utility is exited. If the Setup Utility is closed after
the confirmation prompt, changes to the firmware settings are discarded.

Configure firmware
2.3 "Main" tab
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
12 Operating Instructions, 09/2021, A5E50059883-AB
2.3 "Main" tab
Calling "Main" tab
Select: "Setup Utility (Page 11)" > "Main".
Device information
You can find important device information at the top of the "Main" tab.
Device information
Explanation
Product
Device version
BIOS Version
Current firmware version
BIOS Number
Article number of the current firmware version
Processor Type
CPU type.
Cache RAM
L2 cache size total
Total Memory
Total memory size
CPU Stepping
Number of processors
Microcode Rev
Microcode Revision
IGFX GOP Version
Version of the Graphics Output Protocol (GOP) driver
Memory RC Version
Version of the Memory Reference Code
Intel CSE Version / SKU
PMC FW Version
CPB Version
Super IO Version
Calling "System Time" and "System Date"
Date and time settings.
Select: "Setup Utility (Page 11)" > "Main" > "System Time" and "System Date".
Firmware setting
Explanation
System Time
Set current device time in the format [Hour:Minute:Second].
System Date
Set current device date in the format [Month/Day/Year].
Key functions for setting the numeric time and date values
Button
Function
<Enter>
Switch between the setting options within a firmware setting, e.g. from hour
to minute.
[+] [-]
Increase or decrease desired value.
[0] - [9]
Enter desired value.

Configure firmware
2.4 "Advanced" tab
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
Operating Instructions, 09/2021, A5E50059883-AB 13
2.4 "Advanced" tab
2.4.1 "Boot Configuration"
Basic display and input options during the boot procedure
Calling "Boot Configuration"
Select: "Setup Utility (Page 11)" > "Advanced" > "Boot Configuration".
Firmware setting Value Setting in delivery
state
Meaning
IPC227G
IPC277G
IPC327G
IPC377G
Numlock
Off
Numerical keypad is switched off after starting the device.
On
x
x
Numerical keypad is switched on after starting the device.
POST Errors
Never halt on
errors
Continue the booting process when errors occur.
Halt on all
errors
Cancel the booting process when any errors occur
All without
keyboard
x
x
Cancel the booting process if errors occur, except for
keyboard errors.
2.4.2 "Peripheral Configuration"
Configuration of the interfaces.
Calling "Peripheral Configuration"
Select: "Setup Utility (Page 11)" > "Advanced" > "Peripheral Configuration".
Firmware setting Value Setting in delivery
state
Meaning
IPC227G
IPC277G
IPC327G
IPC377G
Peripheral Configuration
COM Port 1(X30)
Enabled
x
x
Enables the serial port. You can then set the I/O base
address and the interrupt.
Disabled
Disables the serial port. This releases the resources it
used.
Base I/O Address
3F8h/2F8h/3E8h/2E
8h/338h/228h/220h/
238h
2F8h
2F8h
The I/O base address is pre-assigned and also
recommended.
Interrupt
IRQ3/IRQ4/IRQ5/IRQ6
/IRQ7/IRQ10/IRQ11
IRQ3
IRQ3
The interrupt is pre-assigned and also recommended.

Configure firmware
2.4 "Advanced" tab
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
14 Operating Instructions, 09/2021, A5E50059883-AB
Firmware setting Value Setting in delivery
state
Meaning
Peripheral Type
RS232
x
x
Non-isolated connection for short distances in
interference-free environment.
RS485/RS422 Full
Duplex
Isolated connection for environment with EMC load,
transmitting and receiving at the same time.
RS485 Half Duplex
Isolated connection for environment with EMC load.
Loopback
Mode for testing the hardware.
COM Port 2(X31)
Enabled
x
x
Enables the serial port. You can then set the I/O base
address and the interrupt.
Disabled
Disables the serial port. This releases the resources it
used.
Base I/O Address 3F8h/2F8h/3E8h/2E
8h/338h/228h/220h/
238h
3F8h 3F8h The I/O base address is pre-assigned and also
recommended.
Interrupt IRQ3/IRQ4/IRQ5/IRQ6
/IRQ7/IRQ10/IRQ11
IRQ4 IRQ4 The interrupt is pre-assigned and also recommended.
Peripheral Type
RS232
x
x
Non-isolated connection for short distances in
interference-free environment.
RS485/RS422 Full
Duplex
Isolated connection for environment with EMC load,
transmitting and receiving at the same time.
RS485 Half Duplex
Isolated connection for environment with EMC load.
Loopback
Mode for testing the hardware.
COM Port 3(X32)
Only with:
IPC327G
IPC377G
Enabled
x
Enables the serial port. You can then set the I/O base
address and the interrupt.
Disabled
Disables the serial port. This releases the resources it
used.
Base I/O Address
Only with:
IPC327G
IPC377G
3F8h/2F8h/3E8h/2E
8h/338h/228h/220h/
238h
2E8h The I/O base address is pre-assigned and also
recommended.
Interrupt
Only with:
IPC327G
IPC377G
IRQ3/IRQ4/IRQ5/IRQ6
/IRQ7/IRQ10/IRQ11
IRQ5
The interrupt is pre-assigned and also recommended.
Peripheral Type
Only with:
IPC327G
IPC377G
RS232
x
Non-isolated connection for short distances in
interference-free environment.
COM Port 4(X33)
Only with:
IPC327G
IPC377G
Enabled
x
Enables the serial port. You can then set the I/O base
address and the interrupt.
Disabled
Disables the serial port. This releases the resources it
used.
Base I/O Address
Only with:
IPC327G
IPC377G
3F8h/2F8h/3E8h/2E
8h/338h/228h/220h/
238h
3E8h
The I/O base address is pre-assigned and also
recommended.

Configure firmware
2.4 "Advanced" tab
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
Operating Instructions, 09/2021, A5E50059883-AB 15
Firmware setting Value Setting in delivery
state
Meaning
Interrupt
Only with:
IPC327G
IPC377G
IRQ3/IRQ4/IRQ5/IRQ6
/IRQ7/IRQ10/IRQ11
IRQ6
The interrupt is pre-assigned and also recommended.
Peripheral Type
Only with:
IPC327G
IPC377G
RS232
x
Non-isolated connection for short distances in
interference-free environment.
Onboard Ethernet
1 (LAN 1, X1 P1)
control
own by NONE
The onboard Ethernet interface "X1 P1" is disabled.
own by PSE(ARM)
The onboard Ethernet interface "X1 P1" is controlled by
PSE.
own by PCH(x86) x x The onboard Ethernet interface "X1 P1" is controlled by
PCH.
Onboard Ethernet
1 Address:
The Onboard Ethernet 1 address is defined with this
value.
Onboard Ethernet
2 (LAN 2, X2 P1)
control
own by NONE
The onboard Ethernet interface "X2 P1" is disabled.
own by PSE(ARM)
The onboard Ethernet interface "X2 P1" is controlled by
PSE.
own by PCH(x86)
x
x
The onboard Ethernet interface "X2 P1" is controlled by
PCH.
Onboard Ethernet
2 Address:
The Onboard Ethernet 2 address is defined with this
value.
Onboard Ethernet
3 (LAN 3, X3 P1)
control
Only with:
IPC227G
IPC277G
Enabled
x
The onboard Ethernet interface "X3 P1" is enabled.
Disabled
The onboard Ethernet interface "X3 P1" is disabled.
Onboard Ethernet
3 Address:
Only with:
IPC227G
IPC277G
The Onboard Ethernet 3 address is defined with this
value.
*The Ethernet addresses are merely an example.

Configure firmware
2.4 "Advanced" tab
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
16 Operating Instructions, 09/2021, A5E50059883-AB
2.4.3 "USB Configuration"
Calling "USB Configuration"
Select: "Setup Utility (Page 11)" > "Advanced" > "USB Configuration".
Firmware setting Value Setting in delivery
state
Meaning
IPC227G
IPC277G
IPC327G
IPC377G
USB Per-Port
Control
Enabled
Each USB port can be controlled individually.
Disabled
x
x
All the USB ports cannot be controlled.
2.4.4 "Miscellaneous Configuration"
Calling "Miscellaneous Configuration"
Select: "Setup Utility (Page 11)" > "Advanced" > "Miscellaneous Configuration".
Firmware setting Value Setting in delivery
state
Meaning
IPC227G
IPC277G
IPC327G
IPC377G
HPET - HPET
Support
Enabled
x
x
The High Precision Event Timer can be used by operating
system.
Disabled
The High Precision Event Timer cannot be used by operating
system.
State After power
failure
Only with:
IPC327G
IPC377G
S0 State
x
After voltage failure and subsequent voltage restoration, the
device switches on automatically.
S5 State After voltage failure and subsequent voltage restoration, the
device remains switched off.
Last State If the device is switched on when the power fails, the device
will switch back on when the power returns. Otherwise, the
device remains switched off.
HD Audio
Only with:
IPC327G
IPC377G
Enabled
x
The onboard High Definition Audio Controller is enabled.
Disabled
The onboard High Definition Audio Controller is disabled.

Configure firmware
2.4 "Advanced" tab
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
Operating Instructions, 09/2021, A5E50059883-AB 17
2.4.5 "Video Configuration"
Calling "Video Configuration"
Select: "Setup Utility (Page 11)" > "Advanced" > "Video Configuration".
Firmware setting Value Setting in delivery
state
Meaning
IPC227G
IPC327G
IPC277G
IPC377G
Boot prime display
control
GOP Default
x
Set as current GOP setting.
DPP(X71)
DisplayPort video is used.
DPP(X70)
DisplayPort video is used.
Panel Only
1
x
Display on the panel.
Rotate Screen
Disabled
x
The rotate screen feature is disabled.
90
Support rotating screen 90 degrees clockwise.
270
Support rotating screen 270 degrees clockwise.
1: Only visible on the panel PC.
2.4.6 "M.2 Configuration"
Calling "M.2 Configuration"
Select: "Setup Utility (Page 11)" > "Advanced" > "M.2 Configuration".
Firmware setting Value Setting in delivery
state
Meaning
IPC227G
IPC277G
IPC327G
IPC377G
M.2 Port 1 (X100)
Configure the M.2 Port 1
•PCIE bus:devic:function
Present
The PCIE bus device function is present.
Not Present
x
x
The PCIE bus device function is not present.
•PCIe Express Port
Enable
Enabled
x
x
The PCIe Express Port is enabled.
Disabled
The PCIe Express Port is disabled.
•PCIe Max Link Speed
Auto
x
x
Maximum possible link speed.
Gen1
The link speed is limited to GEN 1.
Gen2
The link speed is limited to GEN 2.
Gen3
The link speed is limited to GEN 3.
M.2 Port 2 (X101)
Configure the M.2 Port 2
•PCIE bus:devic:function
Present
The PCIE bus device function is present.
Not Present
The PCIE bus device function is not present.
•PCIe Express Port
Enable
Enabled
x
x
The PCIe Express Port is enabled.
Disabled
The PCIe Express Port is disabled.

Configure firmware
2.4 "Advanced" tab
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
18 Operating Instructions, 09/2021, A5E50059883-AB
Firmware setting Value Setting in delivery
state
Meaning
•PCIe Max Link Speed
Auto
x
x
Maximum possible link speed.
Gen1
The link speed is limited to GEN 1.
Gen2
The link speed is limited to GEN 2.
Gen3
The link speed is limited to GEN 3.
M.2 Port 3 (X102 / X103) 1
Configure the M.2 Port 3
•SATA Controller(s)
Enabled
x
x
The SATA port is enabled.
Disabled
The SATA port is disabled.
•Serial ATA Port 0 [Empty]/[Seri
al ATA Port 0
TOSHIBA…]
Show the SSD information which is read from SSD.
Software
Preserve
•PCIE bus:devic:function
Present
The PCIE bus device function is present.
Not Present
The PCIE bus device function is not present.
•PCIe Express Port
Enable
Enabled
x
x
The PCIe Express Port is enabled.
Disabled
The PCIe Express Port is disabled.
•PCIe Max Link Speed
Auto
x
x
Maximum possible link speed.
Gen1
The link speed is limited to GEN 1.
Gen2
The link speed is limited to GEN 2.
Gen3
The link speed is limited to GEN 3.
1：For IPC227G or IPC277G, the Firmware setting is "M.2 Port 3 (X102)"; but for IPC327G or
IPC377G, the Firmware setting is "M.2 Port 3 (X103)".
2.4.7 "Memory Configuration"
Configure of the memory.
Calling "Memory Configuration"
Select: "Setup Utility (Page 11)" > "Advanced" > "Memory Configuration".
Firmware setting Value
Setting in delivery state
Meaning
IPC227G
IPC277G
IPC327G
IPC377G
In-Band ECC
Enabled
In-Band ECC(Error Correction Code) is enabled.
Disabled
x
x
In-Band ECC is disabled.
The following options show only when "In-Band ECC" = Enabled.
•In-Band ECC Operation
Mode
0
x
x
Functional mode protects requests based on the
address range.
1
Makes all request protected and ignore range
checks.
•IBECC Protect Region 0
Enabled
In-Band ECC for Region 0 is enabled.
Disabled
x
x
In-Band ECC for Region 0 is disabled.

Configure firmware
2.5 "Security" tab
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
Operating Instructions, 09/2021, A5E50059883-AB 19
Firmware setting
Value
Setting in delivery state
Meaning
•Protect Region 0 BASE
[0]
The Base is the start of the region and its value is
multiples of 32MB in decimal.
•Protect Region 0 MASK [16128] The Mask is the size of the region and its value is
(0x4000 - multiples of 32MB) in decimal.
•IBECC Protect Region 1
Enabled
In-Band ECC for Region 1 is enabled.
Disabled
x
x
In-Band ECC for Region 1 is disabled.
•IBECC Protect Region 2
Enabled
In-Band ECC for Region 2 is enabled.
Disabled
x
x
In-Band ECC for Region 2 is disabled.
•IBECC Protect Region 3
Enabled
In-Band ECC for Region 3 is enabled.
Disabled
x
x
In-Band ECC for Region 3 is disabled.
•IBECC Protect Region 4
Enabled
In-Band ECC for Region 4 is enabled.
Disabled
x
x
In-Band ECC for Region 4 is disabled.
•IBECC Protect Region 5
Enabled
In-Band ECC for Region 5 is enabled.
Disabled
x
x
In-Band ECC for Region 5 is disabled.
•IBECC Protect Region 6
Enabled
In-Band ECC for Region 6 is enabled.
Disabled x x In-Band ECC for Region 6 is disabled.
•IBECC Protect Region 7
Enabled
In-Band ECC for Region 7 is enabled.
Disabled
x
x
In-Band ECC for Region 7 is disabled.
2.5 "Security" tab
Calling "Security" tab
Select: "Setup Utility (Page 11)" > "Security".
Firmware setting Value Setting in delivery
state
Meaning
IPC227G
IPC277G
IPC327G
IPC377G
Current TPM Device
1 Show the version of current TPM (Trusted Platform
Module) device.
TPM State
1
Show the status of TPM.
TPM Active PCR Hash
Algorithm
1
Show the name of TPM Active PCR Hash Algorithm.
TPM Hardware Support
Hash Algorithm
1
Show the name of TPM Hardware Support Hash
Algorithm.
TPM Availability
1
Available
x
x
The TPM (Trusted Platform Module) is visible in the
operating system.
Hidden
The TPM (Trusted Platform Module) is not visible in the
operating system.
TPM Operation 1
No Operation
x
x
Select one of the supported operation to change TPM2
state
Enabled
Disabled

Configure firmware
2.5 "Security" tab
Firmware/BIOS description SIMATIC IPC227G, IPC277G, IPC327G, IPC377G
20 Operating Instructions, 09/2021, A5E50059883-AB
Firmware setting Value Setting in delivery
state
Meaning
Clear TPM
1
[ ]
x
x
[X] Clear TPM, Removes all TPM context associated with a
specific Owner.
Supervisor Password
Not Installed
x
x
The "Supervisor Password" function is not installed.
User Password
Not Installed
x
x
The "User Password" function is not installed.
Set Supervisor
Password
Here you can set a general password for full access to the
firmware settings.
A password prompt then appears before the firmware is
opened. After correct entry of the general password, it
can be changed by entering a new one. If no password is
entered and only the <Enter> key is pressed, the
configured general password is deleted, thereby disabling
the password prompt again.
NOTICE:
If you lose the general password that you defined during
firmware setup, the device must be reset by the
manufacturer.
•Make a note of the general password and keep it in a
safe place.
•Protect the general password from unauthorized
access.
Enter New
Password
x
x
Here you define a "Supervisor Password".
Enter New
Password
Again
x
x
Here you enter the previously defined "Supervisor
Password" once again.
•Power-On Password
2
Enabled
A password prompt is displayed for every boot procedure.
The general password or a user password must be
entered.
Disabled
x
x
A password prompt appears only when the setup utility is
opened. The general password or a user password must
be entered.
•User Access Level 2
View Only
Only read access to Setup utility is permitted.
Firmware settings cannot be changed.
Limited
Restricted write access to Setup utility is permitted.
Only certain firmware settings can be changed.
Full
x
x
Unrestricted write access to the Setup utility is permitted.
All firmware settings except the general password
(Supervisor Password) can be changed.
•User Boot Manager
Access 2
Enabled
x
x
A user password is sufficient to start the Boot Manager.
Disabled The general password is required to enter the Boot
Manager.