Siemens SIMATIC RF1000 Series Instruction sheet

SIMATIC RF1000
SIMATIC Ident
RFID systems
SIMATIC RF1000
Configuration Manual
07/2021
C79000
-G8976-C647-01
Introduction
1
General safety information
2
Description
3
Downloading and starting
software
4
Creating and transferring a
configuration
5
"RF1100T" configuration
card
6
Updating the firmware
7
Appendix A
A
Service & Support
B

Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
Ⓟ
07/2021 Subject to change
Copyright © Siemens AG 2021.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

SIMATIC RF1000
Configuration Manual, 07/2021, C79000-G8976-C647-01 3
Table of contents
1 Introduction ........................................................................................................................................... 5
2 General safety information ................................................................................................................... 7
2.1 Safety information............................................................................................................... 7
2.2 Security information ............................................................................................................ 8
3 Description............................................................................................................................................. 9
4 Downloading and starting software.................................................................................................... 11
5 Creating and transferring a configuration .......................................................................................... 13
5.1 Creating a configuration .................................................................................................... 16
5.1.1 Creating new project settings............................................................................................. 16
5.1.2 Opening and editing existing project settings..................................................................... 18
5.1.3 Creating new device settings ............................................................................................. 22
5.2 Testing and finalizing a configuration................................................................................. 25
5.3 Creating a configuration card............................................................................................. 27
5.4 Transferring a finalized configuration................................................................................. 28
6 "RF1100T" configuration card .............................................................................................................. 31
7 Updating the firmware ........................................................................................................................ 33
A Appendix A .......................................................................................................................................... 35
B Service & Support ................................................................................................................................ 37

Table of contents
SIMATIC RF1000
4Configuration Manual, 07/2021, C79000-G8976-C647-01

SIMATIC RF1000
Configuration Manual, 07/2021, C79000-G8976-C647-01 5
Introduction
1
Purpose of this document
This documentation describes how you create a configuration for the SIMATIC RF1000
readers, adapt it and transfer it to the readers. This manual is aimed at users, commissioning
engineers and configuration engineers who work with the SIMATIC RF1000 readers in the
areas of configuration, engineering and commissioning and who were trained on the
software components specified in the manual. Using this manual, you can adapt the standard
configuration of the SIMATIC RF1000 readers to your needs.
Note
Trained personnel
Note that this manual is aimed exclusively at personnel trained with the software
components specified in the manual.
Registered trademarks
The following and possibly other names not identified by the registered trademark sign ®are
registered trademarks of Siemens AG:
SIMATIC ®, SIMATIC RF ®, MOBY ®, RF-MANAGER ® and SIMATIC Sensors ®
Orientation in the documentation
You can find additional information on installing, connecting, commissioning and
programming, as well as the technical specifications of the RF1000 readers, in the operating
instructions "SIMATIC RF1000
(https://support.industry.siemens.com/cs/ww/en/ps/24223/man)".
The software components described in this manual are contained in the
"RF1000_ConfigTool.exe" file. In addition, you may need the demo application "RF1000R.exe"
("AccessControlDemo.exe"). You can find the two files on the pages of the Siemens Industry
Online Support (https://support.industry.siemens.com/cs/ww/en/ps/24223/dl).
Decommissioning
Decommission the device properly to prevent unauthorized persons from accessing
confidential data in the device memory.
To do this, restore the factory settings on the device.
You can find detailed information on this in the "SIMATIC RF1000" operating instructions.

Introduction
SIMATIC RF1000
6Configuration Manual, 07/2021, C79000-G8976-C647-01

SIMATIC RF1000
Configuration Manual, 07/2021, C79000-G8976-C647-01 7
General safety information
2
2.1 Safety information
NOTICE
Creation, saving and forwarding of configuration files created with the Config editor
Observe the following notes when creating, saving and forwarding configuration files
created with the Config editor:
•Always encrypt "*.balcfg" files with a password before forwarding these files. In this way,
you make sure that no unauthorized persons have access to the files.
•Only use passwords with a high password strength. Avoid weak passwords, e.g.
password1, 123456789, abcdefgh.
•Define rules for the assignment of passwords.
•Make sure that all passwords are protected and inaccessible to unauthorized personnel
and that you can always link the assigned passwords clearly to the associated
configuration files. This can be ensured with password manager software, for example.
•Make sure that you transfer the password via a different channel than the configuration
file (e.g. by SMS or telephone).
•Only forward configuration files to 3rd parties or to readers in productive operation as
"*.bec" files. "*.bec" files are encrypted to protect them from unauthorized access during
transfer to other devices.
•Do not pass on the Config Security Code generated automatically in the project to 3rd
parties. Make sure that all codes are protected and inaccessible to unauthorized
personnel. This can be ensured with password manager software, for example.

General safety information
2.2 Security information
SIMATIC RF1000
8Configuration Manual, 07/2021, C79000-G8976-C647-01
2.2 Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected
to an enterprise network or the internet if and to the extent such a connection is necessary
and only when appropriate security measures (e.g. firewalls and/or network segmentation)
are in place.
For additional information on industrial security measures that may be implemented, please
visit
https://www.siemens.com/industrialsecurity.
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customer’s exposure to
cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
https://www.siemens.com/industrialsecurity.

SIMATIC RF1000
Configuration Manual, 07/2021, C79000-G8976-C647-01 9
Description
3
Companies have been using RFID-based identification card systems for years to control access
to buildings. With the increasing need for security and growing requirements for
documentation, solutions are demanded with which access to machines and plants can be
controlled on a user-specific basis. The SIMATIC RF1000 readers provide the option of using
employee identification cards also when operating machines. The readers can adapt flexibly
to your security requirements. This allows a finely graded access concept to be implemented
or user-specific information and instructions to be stored – all with one card.
Figure 3-1 Product photos of the SIMATIC RF1000 reader
Configuration of the readers
The following sections describe how you install software required to configure the SIMATIC
RF1000 readers and create a configuration, adapt it and transfer it to the readers.

Description
SIMATIC RF1000
10 Configuration Manual, 07/2021, C79000-G8976-C647-01

SIMATIC RF1000
Configuration Manual, 07/2021, C79000-G8976-C647-01 11
Downloading and starting software
4
The software for configuring the SIMATIC RF1000 readers and the associated transponders or
card types consists of the following components:
•Config editor
•Uploader
Both software components are contained in the "RF1000_ConfigTool.exe" file, which you can
download from the pages of the Siemens Industry Online Supports
(https://support.industry.siemens.com/cs/ww/en/ps/24223/dl). This file also contains a sample
configuration for configuring your RF1000 readers (see also section "Appendix A (Page 35)").
Downloading and starting the software
Follow these steps to download and start the configuration software:
1. Download the "RF1000_ConfigTool.exe" file to your PC.
2. Run the file and save it under the desired target directory.
It is a self-extracting ZIP file.
3. Start the application by double-clicking on the file "config_editor.exe".
Result: The configuration software is started.
Note
Functional scope of configuration software
The procedure for creating, adapting and transferring a configuration using the configuration
software is described below. All other functions of the configuration software that are not
described in more detail are not supported by the SIMATIC RF1000 reade
rs or should only be
used by trained personnel.

Downloading and starting software
SIMATIC RF1000
12 Configuration Manual, 07/2021, C79000-G8976-C647-01

SIMATIC RF1000
Configuration Manual, 07/2021, C79000-G8976-C647-01 13
Creating and transferring a configuration
5
Via the configuration, you define the entire behavior of the reader within your project. In
most cases, you can conveniently create the configuration yourself with our Config editor
and Uploader software components and transfer it to the readers. If you prefer to receive the
configuration cards with preconfigured, customer-specific configurations, contact Service &
Support.
A configuration typically consists of two components:
•Project settings (RFID Interface)
They define how the reader interacts with the transponder or the access card.
•Device settings (Host Interface)
They define how the reader interacts with the host system and the user
(transponder/access card owner) (e.g. feedback via LED and beeper).

Creating and transferring a configuration
SIMATIC RF1000
14 Configuration Manual, 07/2021, C79000-G8976-C647-01
Basic procedure
The basic procedure to create a configuration and transfer it to the reader is described below.
This overview helps you to follow the individual steps. The subsequent sections contain a
more detailed description of these steps.
1. Create a configuration
–Create project settings.
You can create new settings using the Config editor or open them via an existing
configuration.
–Create device settings.
You can create new settings using the Config editor or open them via an existing
configuration.
Figure 5-1 Creating a configuration
2. Test and finalize your configuration.
Figure 5-2 Testing a configuration
Figure 5-3 Finalizing a configuration

Creating and transferring a configuration
SIMATIC RF1000
Configuration Manual, 07/2021, C79000-G8976-C647-01 15
3. Transfer your finalized configuration to the reader.
You can transfer this using the Uploader or a configuration card.
Figure 5-4 Transferring a configuration via computer and Uploader
Figure 5-5 Transferring a configuration via configuration card and demo application
Creating project settings
In the project settings ("Extend Configuration > Add ..."), you define how the reader interacts
with the transponder or the access card (depending on the card type). This includes, for
example, which data should be read from the transponder/card and how it is converted.
Creating device settings
In the device settings ("Extend Configuration > Settings > Device Settings"), you define how
the reader interacts with the host system and the user. This includes the protocol via which
the reader communicates with the host system. If you have already received a configuration
(e.g. from your host system provider), this part is usually already covered. You can optionally
define the feedback of the reader (e.g. LED and beeper).
If the factory device settings meet your requirements fully, you can skip this step.
Testing, finalizing and transferring the configuration
Before you use the configuration on productive readers, we recommend that you test it in a
test environment. If you have tested your configuration and it is ready, you can prepare it for
use by finalizing the configuration ("File > Save As...(Finalize)"). During finalization, a file is
also generated for productive use.

Creating and transferring a configuration
5.1 Creating a configuration
SIMATIC RF1000
16 Configuration Manual, 07/2021, C79000-G8976-C647-01
The following options are available to prepare the configuration for use:
•Transfer the finalized configuration file to the reader using a computer and the Config
editor.
•Alternatively, you can create a configuration card on which you save the finalized
configuration file. Using the configuration card and the demo application
("RF1000R.exe"/"AccessControlDemo.exe"), you can then transfer the configuration to
permanently installed readers.
5.1 Creating a configuration
5.1.1 Creating new project settings
The creation of a new project setting ("Extend Configuration > Add...") is described below.
Requirements
•The Config editor has been installed on your computer.
•An RF1000 reader that you can connect to your computer.
•A transponder or an access card.
Creating a project setting
Follow these steps to create a new project setting:
1. Open the Config editor by double-clicking the "config_editor.exe" file.
2. In the popup window, click the "New" button.
Response: The "Administrative Information" page opens.
3. Enter the administrative information of your project.
This information will facilitate you in the identification, assignment and management of
your projects.
–Enter a name for your project.
For example, the name of the building or the department in which the reader is to be
installed.
–Do not select the check box "Follow Baltech Naming Convention".
–Add a description of the project.
For example, a brief summary of the intended behavior of the reader.

Creating and transferring a configuration
5.1 Creating a configuration
SIMATIC RF1000
Configuration Manual, 07/2021, C79000-G8976-C647-01 17
4. To add new components to the project, click the "Extend Configuration > Add ..." button on
the left.
In this area, you can define the response of the reader to the different transponder types.
No other settings are necessary to work with the ISO transponders of the SIMATIC Ident
product family (ISO 15693 / MDS D and ISO 14443 / MDS E).
Note: As soon as the first configuration of a project has been created, a Config Security
Code is assigned to the project.
5. Make sure that no error messages are displayed in the "Validation Errors and Messages" area.
If error messages are displayed, resolve them.
6. To save the project setting, click the icon ("Save current configuration").
The configuration is saved as draft. It is advisable to retain the suffix "-DRAFT" as part of
the file name. This suffix will help you to maintain an overview of your versions later.
When the project is finalized later, the suffix is automatically deleted or replaced.
Result: The configuration setting has been created and saved on the PC as "*.balcfg" file. This
file format is used for all editable files of a project.
Note
Meaning of the
"Draft Version" note
The "Draft Version (Must not be distributed)" note, highlighted in yellow, is displayed under
the menu bar in the Config editor. This note shows you that the currently open configuration
file has not yet been saved or has been saved as
draft version ("*.-
DRAFT.balcfg" file). As soon
as the file has been finalized, the note has a green background.
Note
Protect configuration with a password
With the "File > Set Password..." menu, you have the option to assign a password to
encrypt
the "*.balcfg" file. Note that you need to then save the file again for the password to be
activated.
Always use a password if you want to send the file to another person for further editing,
especially if you have already added project or security
settings. Make sure that you transfer
the password via a different channel than the configuration file (e.g. by SMS or telephone).
Specific project settings
Configuration Components
All components assigned to the project are displayed in the "Configuration Components" list.
You can add new components to a project with the "Extend Configuration" button. You can
rename or delete existing components using the right mouse button.

Creating and transferring a configuration
5.1 Creating a configuration
SIMATIC RF1000
18 Configuration Manual, 07/2021, C79000-G8976-C647-01
Config Security Code (CSC)
The Config Security Code (CSC) is intended to ensure that a reader cannot be reconfigured,
i.e. manipulated, for example through contactless reconfiguration of the reader by a
potential attacker using a configuration card. For this reason, a CSC is assigned to each
project by means of a random generator as soon as a project setting has been created for the
first time. If an existing configuration is opened and a change is made to it, i.e. a new version
is created, the CSC remains the same as that of the previous version. This ensures that
updates of the configuration are accepted by the reader.
In the factory state, no CSC is set in the reader. This ensures that any configuration of the
reader can be loaded once at the beginning. If the loaded configuration has then set a CSC,
afterwards you can only load configurations that have the same CSC into the reader.
Logically, this is only possible if you know the CSC or you have the configuration file in
"*.balcfg" format, in which the correct CSC was stored.
If you want to configure the reader for another project, you need to perform a Factory Reset,
which restores the factory configuration and deletes the CSC.
In principle, it is possible to edit the CSC manually in the Config editor. However, you should
only do this before the first versioning of a project configuration. If the CSC changes between
two versions, this has the result that you can no longer update the reader, among other
consequences. Direct transfer of a configuration file ("*.balcfg") to a reader connected to the
computer is still possible, however, because the CSC is not checked in this case.
Note that the CSC cannot be read out of the reader, a "*.bec" file or the configuration card. It
can only be read out of the "*.balcfg" file in plain text.
5.1.2 Opening and editing existing project settings
There are various scenarios where it makes sense to open existing (finalized) configurations.
For example, in order to:
•Update an existing configuration
If you want to update an existing configuration, you can create a new version of it.
•Use an existing configuration as template
If you wish to use an existing configuration as template for another configuration, you can
create a copy and edit it as required.
•Import configuration component(s) from an existing configuration
This is useful, for example, in complex applications when you wish to add the same
configuration component (e.g. project or device settings) to multiple configuration files.
In this case, you can create the component in one configuration file and then import it
into another.
These three scenarios for opening and editing an existing configuration are described below.

Creating and transferring a configuration
5.1 Creating a configuration
SIMATIC RF1000
Configuration Manual, 07/2021, C79000-G8976-C647-01 19
Requirements
•The Config editor has been installed on your computer.
•An RF1000 reader that you can connect to your computer.
•A transponder or an access card.
Update an existing configuration
Follow these steps to open an existing configuration and adapt it:
1. Open the Config editor by double-clicking the "config_editor.exe" file.
2. In the popup window, click the "Open..." button and select the configuration file ("*.balcfg")
of which you want to create a new version.
Note that the selected configuration file needs to be finalized, i.e. it cannot be a "DRAFT"
version.
3. Click the "Create New Version" button.
Response: A new draft version of the configuration is created.
4. Make the desired changes to the configuration.
–To edit an existing component, click on the corresponding entry on the left.
–To delete an existing component, right-click on the corresponding entry on the left.
–To add a new component, click the "Extend Configuration" button.
In this area, you can define the response of the reader to the different transponder
types.
5. In the "Administrative Information" in the "Description of Changes for this Version" field,
enter a description of which changes were made compared to the previous version.
6. To save the configuration, click the icon ("Save as...(Draft)").
The configuration with the imported components is saved as draft. It is advisable to retain
the suffix "-DRAFT" as part of the file name. This suffix will help you to maintain an
overview of your versions later. When the project is finalized later, the suffix is
automatically deleted or replaced.
Result: The configuration has been created and saved on the PC as "*.-Draft.balcfg" file. This
file format is used for all editable files of a project.
Note
Retain the standard versioning of file names
The version information that is automatically added to the file name helps you to maintain an
overview of your configuration versions. The "DRAFT" files are always so
-called "work in
progress" files, while files with version numbers have a defined state.
This versioning system ensures unique naming of the configuration versions, because it
prevents two competing versions with the same version number from being created.

Creating and transferring a configuration
5.1 Creating a configuration
SIMATIC RF1000
20 Configuration Manual, 07/2021, C79000-G8976-C647-01
Use an existing configuration as template
Follow these steps to open an existing configuration and adapt it:
1. Open the Config editor by double-clicking the "config_editor.exe" file.
2. In the popup window, click the "Open..." button and select the configuration file ("*.balcfg")
which you want to use as template.
Note that the selected configuration file needs to be finalized, i.e. it cannot be a "DRAFT"
version.
3. Click the "Derive Project" button.
If this option is not available, please finalize the configuration first, as described in section
"Testing and finalizing a configuration (Page 25)".
Response: A draft copy of the configuration is created. In this draft copy, the
administrative information was removed from the template configuration and a new
Config Security Code was created for the file.
4. Enter the administrative information of your project.
This information will facilitate you in the identification, assignment and management of
your projects or configurations.
–Enter a name for your project.
For example, the name of the building or the department in which the reader is to be
installed.
–Do not select the check box "Follow Baltech Naming Convention".
–Add a description of the project.
For example, a brief summary of the intended behavior of the reader.
5. To add new components to the project, click the "Extend Configuration" button on the left.
In this area, you can define the response of the reader to the different transponder types.
6. To save the configuration, click the icon ("Save as...(Draft)").
The configuration with the imported components is saved as draft. It is advisable to retain
the suffix "-DRAFT" as part of the file name. This suffix will help you to maintain an
overview of your versions later. When the project is finalized later, the suffix is
automatically deleted or replaced.
Result: The configuration has been created and saved on the PC as "*.-Draft.balcfg" file. This
file format is used for all editable files of a project.