Siemens SIMATIC RF1100 User manual

SIMATIC Ident
RFID systems
SIMATIC RF1100
Operating Instructions
08/2023
C79000-G8976-C698-02
Introduction 1
Security recommendations 2
Description 3
Installation 4
Connecting 5
Addressing and con󹪝guring 6
Con󹪝guring with the WBM 7
Programming 8
Error messages 9
Maintenance and service 10
Technical speci󹪝cations 11
Dimension drawings 12
Appendix A
Syslog messages B
Service & Support C

Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Quali󹪝ed Personnel
The product/system described in this documentation may be operated only by personnel quali󹪝ed for the speci󹪝c
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Quali󹪝ed personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance
are required to ensure that the products operate safely and without any problems. The permissible ambient
conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identi󹪝ed by ® are registered trademarks of SiemensAG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.
Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C698-02
Ⓟ 08/2023 Subject to change
Copyright © SiemensAG 2023.
All rights reserved

Table of contents
1 Introduction ........................................................................................................................................... 7
2 Security recommendations.................................................................................................................... 9
2.1 Protocols............................................................................................................................ 12
2.2 Security information .......................................................................................................... 13
2.3 Cell protection concept ...................................................................................................... 14
3 Description........................................................................................................................................... 15
3.1 Properties of the reader...................................................................................................... 15
3.2 Supported transponders and protocols ............................................................................... 17
3.3 User-speci󹪝c procedure ...................................................................................................... 18
4 Installation........................................................................................................................................... 21
5 Connecting .......................................................................................................................................... 25
5.1 Electrical design of the reader ............................................................................................ 26
5.2 24 V DC power supply........................................................................................................ 27
5.3 Power supply using Power over Ethernet (PoE) ................................................................... 28
6 Addressing and con󹪝guring ................................................................................................................ 29
6.1 Assign the IP address / device name.................................................................................... 29
6.2 Assigning the IP address / device name with SINEC PNI ....................................................... 29
6.3 Con󹪝guration via XML........................................................................................................ 30
6.4 Con󹪝guring via Modbus ..................................................................................................... 31
7Con󹪝guring with the WBM .................................................................................................................. 33
7.1 Starting WBM..................................................................................................................... 33
7.2 The WBM ........................................................................................................................... 35
7.3 The menu items of the WBM .............................................................................................. 40
7.3.1 The "Start page" menu item................................................................................................ 40
7.3.2 The "Settings - General" menu item .................................................................................... 42
7.3.3 The "Settings - Reader con󹪝guration" menu item ................................................................ 43
7.3.4 The "Settings - Network interface" menu item..................................................................... 46
7.3.5 The "Diagnostics - Log" menu item ..................................................................................... 49
7.3.6 The "Diagnostics - Service Log" menu item ......................................................................... 51
7.3.7 The "Diagnostics - Syslog logbook" menu item.................................................................... 52
7.3.8 The "Edit transponder" menu item...................................................................................... 53
7.3.9 The "User management" menu item................................................................................... 54
7.3.10 The "Certi󹪝cates" menu item .............................................................................................. 58
7.3.11 The "System - Device settings" menu item........................................................................... 60
7.3.12 The "Help" menu item ........................................................................................................ 62
SIMATIC RF1100
Operating Instructions, 08/2023, C79000-G8976-C698-02 3

8 Programming ....................................................................................................................................... 63
8.1 Programming via XML........................................................................................................ 63
8.2 Programming via Modbus .................................................................................................. 63
8.2.1 Register overview .............................................................................................................. 64
8.2.2 RFID functions ................................................................................................................... 65
8.2.2.1 Read UID/tag 󹪝elds ............................................................................................................. 65
8.2.2.2 Detecting the presence of a transponder ............................................................................ 65
8.2.2.3 Reading/writing user data via tag 󹪝elds............................................................................... 66
8.2.2.4 Reading/writing user data via address and length ............................................................... 66
8.2.2.5 De󹪝ne LED behavior........................................................................................................... 67
8.2.3 Register ............................................................................................................................. 67
8.2.3.1 Status ................................................................................................................................ 67
8.2.3.2 Tag 󹪝eld name ................................................................................................................... 68
8.2.3.3 VHL File ID ......................................................................................................................... 68
8.2.3.4 Address Hi ......................................................................................................................... 68
8.2.3.5 Address Lo ......................................................................................................................... 69
8.2.3.6 Length............................................................................................................................... 69
8.2.3.7 Command.......................................................................................................................... 69
8.2.3.8 Result ................................................................................................................................ 71
8.2.3.9 Data .................................................................................................................................. 71
8.2.3.10 LED Control........................................................................................................................ 72
9 Error messages .................................................................................................................................... 73
9.1 Reading out error messages using the WBM ....................................................................... 73
9.2 XML/Modbus error messages.............................................................................................. 73
10 Maintenance and service .................................................................................................................... 75
10.1 Diagnostics........................................................................................................................ 75
10.1.1 Diagnostics via the LED display........................................................................................... 75
10.1.2 Diagnostics via SNMP......................................................................................................... 75
10.1.3 Diagnostics using the WBM ................................................................................................ 76
10.1.4 Diagnostics via XML ........................................................................................................... 76
10.2 Updating the 󹪝rmware via WBM ......................................................................................... 77
10.3 Factory settings ................................................................................................................. 77
10.3.1 Restoring the factory settings via WBM............................................................................... 78
10.3.2 Reset the factory setting with SINEC PNI............................................................................. 78
10.3.3 Restoring the factory settings via XML................................................................................ 79
10.3.4 Restoring the factory settings for the hardware .................................................................. 79
10.4 Module replacement.......................................................................................................... 80
10.4.1 Backup con󹪝guration data.................................................................................................. 80
10.4.2 Replacing a module ........................................................................................................... 81
11 Technical speci󹪝cations ....................................................................................................................... 83
11.1 Technical speci󹪝cations of SIMATIC RF1100 ........................................................................ 83
11.2 Technical speci󹪝cations of the license card ......................................................................... 85
Table of contents
SIMATIC RF1100
4Operating Instructions, 08/2023, C79000-G8976-C698-02

12 Dimension drawings............................................................................................................................ 87
A Appendix.............................................................................................................................................. 89
A.1 Certi󹪝cates & approvals...................................................................................................... 89
A.2 Encryption methods (ciphers) ............................................................................................ 91
A.3 Ordering data .................................................................................................................... 92
B Syslog messages .................................................................................................................................. 93
B.1 Structure of the Syslog messages ....................................................................................... 93
B.2 Variables in Syslog messages.............................................................................................. 94
B.3 List of Syslog messages...................................................................................................... 95
C Service & Support ................................................................................................................................ 99
Table of contents
SIMATIC RF1100
Operating Instructions, 08/2023, C79000-G8976-C698-02 5

Table of contents
SIMATIC RF1100
6Operating Instructions, 08/2023, C79000-G8976-C698-02

Introduction 1
Purpose of this documentation
This documentation provides you with an overview of the installation and programming of the
SIMATIC RF1140R and RF1170R readers. The operating instructions are intended for users and
programmers involved in con󹪝guration, commissioning and servicing of SIMATIC RF1100
readers.
Basic knowledge required
These operating instructions assume general knowledge of automation engineering and
identi󹪝cation systems.
Scope of validity of this documentation
These operating instructions are valid for the SIMATIC RF1140R and RF1170R readers as of
product version "01" and delivery state as of 08/2023, as well as 󹪝rmware version V1.0.
Trademarks
The following and possibly other names not identi󹪝ed by the registered trademark sign ® are
registered trademarks of Siemens AG:
SIMATIC ®, SIMATIC RF ® and MOBY ®
Orientation in the documentation
Detailed information on creating and customizing con󹪝gurations as well as their transfer to the
SIMATIC RF1000 reader is available in the con󹪝guration manual "SIMATIC RF1000". You can 󹪝nd
all relevant information for XML con󹪝guration and programming in the "XML Programming for
SIMATIC Ident" manual.
You can 󹪝nd the current versions of the various manuals on the pages of the Siemens
Industry Online Support (https://support.industry.siemens.com/cs/ww/en/ps/14970/man).
Recycling and disposal
The products are low in harmful substances, can be recycled and meet the requirements of
the Directive 2012/19/EU for disposal of waste electrical and electronic equipment (WEEE).
Do not dispose of the products at public disposal sites.
For environmentally compliant recycling and disposal of your electronic waste, please
contact a company certi󹪝ed for the disposal of electronic waste or your Siemens
representative.
Adhere to the various country-speci󹪝c regulations.
SIMATIC RF1100
Operating Instructions, 08/2023, C79000-G8976-C698-02 7

Introduction
SIMATIC RF1100
8Operating Instructions, 08/2023, C79000-G8976-C698-02

Security recommendations 2
To prevent unauthorized access, observe the following security recommendations when
working with the reader and WBM (Web Based Management).
General
• Check regularly that the device complies with these recommendations and/or other internal
security policies.
• Evaluate your plant as a whole in terms of security. Use a cell protection concept with suitable
products.
• Keep the software up to date. Always use the latest 󹪝rmware/software version of the device.
Check regularly for security updates of the products and use them. After the release of a new
version, previous versions are no longer supported and are not maintained.
Information regarding product news and new software versions is available at the following
address:
Link (https://support.industry.siemens.com/cs/ww/en/ps/24224)
• Do not connect the device directly to the Internet. Operate the device within a protected
network area. Use a 󹪝rewall to connect the internal, protected network to external networks
and con󹪝gure it with restrictive rules.
• For data transmission via a non-secure network, use additional security components that
provide an encrypted VPN tunnel (IPsec, OpenVPN).
• Terminate connections correctly (e.g. logout in WBM).
• Use the device only for system access control (and not for physical access control).
Physical access
• Restrict physical access to the device to quali󹪝ed and authorized personnel.
Security functions
• Only enable protocols and functions that you actually need to use the device. Note that, in
the factory setting, all protocols/functions can be used and all transponders and card types
listed below are recognized. However, while the device has established a connection via a
protocol, all other protocols are disabled.
• The XML/Modbus protocols are sent unencrypted. Take suitable measures to ensure that the
XML/Modbus communication is tap-proof.
• For optimal security, use SNMPv3 authentication and encryption mechanisms. SNMPv1 is
classi󹪝ed as non-secure and should only be used when absolutely necessary.
• Use the latest Web browser version compatible with the product to ensure you are using the
most secure encryption methods available.
SIMATIC RF1100
Operating Instructions, 08/2023, C79000-G8976-C698-02 9

• Limit access to the device using an external device through a 󹪝rewall or rules in an access
control list (ACL). The 󹪝rewall and access list can only be con󹪝gured via an external device.
• The device has protection against brute force attacks to protect the system against trying out
di󹪜erent passwords. Restrict the maximum possible number of permitted failed login
attempts.
• The device has an automatic disconnect function ("Session Timeout"). Enter the interval after
which the connection to the device will be terminated automatically.
•Con󹪝guration 󹪝les can be downloaded from the device. Make sure that the con󹪝guration
󹪝les are adequately protected. You can, for example, digitally sign and encrypt the 󹪝les, store
them at a safe location or transfer con󹪝guration 󹪝les only via secure communication
channels.
• The device provides options for backing up and restoring the con󹪝guration. For security
reasons, neither the IP address of the network interface nor data of the local user
administration are backed up. We recommend that you use the network management
system "SINEC NMS" to manage this data.
Authentication
Note
Accessibility risk - Risk of data loss
Do not lose the passwords for the device. Access to the device can only be restored by resetting
the device to factory settings, which completely removes all con󹪝guration data.
• Always use the user management and create new user pro󹪝les.
• Replace the default passwords for all user accounts, access modes and applications (if
applicable) before you use the device.
•De󹪝ne rules for using devices and assigning passwords.
•De󹪝ne password policies.
• Use passwords with a high password strength. Avoid weak passwords, (e.g. "Password1",
"123456789", "abcdefgh") or recurring characters (e.g. "abcabc"). This recommendation also
applies to symmetrical passwords/keys con󹪝gured on the device.
• Make sure that all passwords are protected and inaccessible to unauthorized personnel.
• Do not use the same password for di󹪜erent users and systems.
• Store the passwords in a safe location (not online) to have them available if they are lost.
• Change passwords and keys regularly to improve security.
• A password must be changed if it is known or suspected to be known by unauthorized
persons.
Security recommendations
SIMATIC RF1100
10 Operating Instructions, 08/2023, C79000-G8976-C698-02

Certi󹪝cates and keys
• There is a preset SSL/TLS certi󹪝cate for access to the WBM. Replace this certi󹪝cate with a user-
created, high-quality certi󹪝cate with key.
Use a certi󹪝cate signed by a reliable external or internal certi󹪝cation authority.
• Use a certi󹪝cation authority including key revocation and management to sign the
certi󹪝cates.
• Use certi󹪝cates in the format "PKCS #12".
• Use certi󹪝cates with a key length of 4096 bits.
• Make sure that user-de󹪝ned private keys are protected and inaccessible to unauthorized
persons.
• If there is a suspected security violation, change all certi󹪝cates and keys immediately.
• Verify certi󹪝cates based on the 󹪝ngerprint on the server and client side to prevent "man in the
middle" attacks. Use a second, secure transmission path for this.
• Before sending the device to Siemens for repair, replace the current certi󹪝cates and keys with
temporary disposable certi󹪝cates and keys, which can be destroyed when the device is
returned.
• If protocols support both certi󹪝cates and keys, you should favor certi󹪝cates.
• The following encryption algorithms are supported:
Protocol Supported
encryption algorithms
Supported key
and size
Web browser SHA1
SHA256 with RSA
SHA384 with RSA
SHA512 with RSA
RSA 2048 bit
RSA 4096 bit
• You can 󹪝nd information on the 󹪝le formats supported by the various certi󹪝cate types in
section "The "Certi󹪝cates" menu item (Page58)".
• You can 󹪝nd information on the encryption methods supported by the device in section
"Encryption methods (ciphers) (Page91)".
• Make sure that the data stored on the transponders/cards is encrypted and that decryption/
encryption of the data takes place on the connected devices.
Firmware/software
The 󹪝rmware itself is signed and encrypted. This ensures that only 󹪝rmware created by Siemens
can be downloaded to the device.
Check regularly for new 󹪝rmware/software versions or security updates and install them.
After the release of a new version, previous versions are no longer supported and are not
maintained.
Security recommendations
SIMATIC RF1100
Operating Instructions, 08/2023, C79000-G8976-C698-02 11

Decommissioning
Decommission the device properly to prevent unauthorized persons from accessing
con󹪝dential data in the device memory.
Reset the device to factory settings for this purpose.
2.1 Protocols
Secure/non-secure protocols
• Use only secure protocols, if possible. Avoid or disable non-secure protocols and services. If
you need non-secure protocols and services, ensure that the device is operated in a protected
network area.
The following protocols provide secure alternatives:
– HTTP → HTTPS
HTTPS is activated at the factory. HTTP is classed as non-secure, but can be activated again
at a later time if necessary.
– SNMPv1 → SNMPv3
SNMPv1 is enabled in the factory setting in order to facilitate operation of the device in
a PROFINET environment. Check whether it is necessary to use SNMPv1. SNMPv1 is
classi󹪝ed as non-secure. Make use of the possibility to prevent write access. The product
o󹪜ers corresponding setting options.
If SNMPv1 is enabled, change the community names. If no unrestricted access is
necessary, restrict access over SNMP.
• Only activate services/protocols that you require to use the system, including the built-in
interfaces/ports. Unused ports could be used to access the network downstream from the
device.
• Restrict the services and protocols available to the outside to a minimum.
• DCP is classi󹪝ed as non-secure. Check whether it is necessary to use DCP. If DCP is required,
enable the "Read Only" mode for the DCP function after commissioning.
List of available protocols
All available protocols and their ports that are used with SIMATIC RF1100 readers are listed
below.
Table 2-1 List of available protocols
Service/
Protocol
Protocol/
Port number
Preset port sta‐
tus
Port status
con󹪝gurable
Port number
con󹪝gurable
Authentica‐
tion
Encryption 1)
DHCP UDP/68 Open ✓ -- -- --
HTTP TCP/80 Closed ✓ -- -- --
HTTPS TCP/443 Open ✓ -- ✓ ✓
NTP UDP/123 Closed ✓ -- -- --
SNMP UDP/161 Closed ✓ -- ✓ (when con󹪝g‐
ured)
✓ (when con󹪝g‐
ured)
Security recommendations
2.1Protocols
SIMATIC RF1100
12 Operating Instructions, 08/2023, C79000-G8976-C698-02

Service/
Protocol
Protocol/
Port number
Preset port sta‐
tus
Port status
con󹪝gurable
Port number
con󹪝gurable
Authentica‐
tion
Encryption 1)
Modbus/TCP TCP/502 Open ✓ ✓ -- --
XML TCP/10001 Open ✓ ✓ -- --
Syslog UDP/
49152-65535
Closed ✓ 2) -- -- --
1) You can 󹪝nd more information on the encryption methods used in the appendix.
2) Only outgoing, when con󹪝gured.
Explanation of the table:
• Authentication
Speci󹪝es whether authentication of the communication partner takes place.
• Encryption
Speci󹪝es whether the transfer is encrypted.
2.2 Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected
to an enterprise network or the internet if and to the extent such a connection is necessary
and only when appropriate security measures (e.g. 󹪝rewalls and/or network segmentation)
are in place.
For additional information on industrial security measures that may be implemented, please
visit
https://www.siemens.com/industrialsecurity.
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customer’s exposure
to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
https://www.siemens.com/cert.
Security recommendations
2.2Security information
SIMATIC RF1100
Operating Instructions, 08/2023, C79000-G8976-C698-02 13

2.3 Cell protection concept
The following graphic shows an example of a cell protection concept for the RF1100 readers.
Enterprise Network
SCALANCE
SC-600
SCALANCE
SC-600
Cell 1
Aggregation Layer 1
Redundat
OT Firewall
Industrial Ethernet
Enterprise IT
Office
DC Firewall External Firewall WAN / Internet
Cloud
Service Technician
SCALANCE XR-500
SIMATIC
S7-1200
SIMATIC
RF650R
Cell 2
SCALANCE
XC-200
SCALANCE
XC-200
SCALANCE
XC-200
SIMATIC
MV500
Cell 3
SIMATIC
S7-1500
SIMATIC HMI
TP1200
SIMATIC HMI
MTP1900
SIMATIC
IPC
SCALANCE
SC-600
WIN CC
(PM LOGON)
UMC Active
Directory
...
SIMATIC
RF1140R
SIMATIC
RF1170R
SIMATIC
RF1170R
OT Firewall
SCALANCE XC-200
SCALANCE XM-400
Backbone LayerAggregation LayerCell Layer
Industrial Network
Enterprise
Datacenter
Industrial Data Center
SIMATIC
RF188CI
SIMATIC
MV320
SIMATIC
RF220R
SIMATIC
RF240R
SIRIUS ACT
SIMATIC ET200SPSCALANCE
XC-200
Robot
PROFINET Safety
Figure2-1 Schematic display of a cell protection concept for the RF1100 readers
Security recommendations
2.3Cell protection concept
SIMATIC RF1100
14 Operating Instructions, 08/2023, C79000-G8976-C698-02

Description 3
3.1 Properties of the reader
Area of application
Companies have been using RFID-based identi󹪝cation card systems for many years. With the
increasing need for security and growing requirements for documentation, solutions are
demanded with which access to machines and plants can be controlled on a user-speci󹪝c basis.
You can implement these requirements in access-secured areas by using the SIMATIC RF1140R
and RF1170R readers and an employee ID card so that machines and plants must be released
with an employee ID before they can be operated. With an appropriate con󹪝guration, the data
on the transponders/cards can be encrypted and read only by those devices that have the
appropriate key. You can adapt the readers to your security requirements as needed. This allows
a 󹪝nely graded access concept to be implemented or user-speci󹪝c information and instructions
to be stored – all with one card.
For security reasons, you should only operate the readers within a protected area. Make sure
that the PoE interface is not openly accessible after installation.
Figure3-1 Product photos of the SIMATIC RF1100 reader
The SIMATIC RF1100 readers are designed for connection to a computer or a Modbus client.
Connection is via Ethernet.
SIMATIC RF1100
Operating Instructions, 08/2023, C79000-G8976-C698-02 15

Reader-speci󹪝c di󹪜erences
In contrast to the RF1170R, the RF1140R reader can read and edit 125 kHz transponders in
addition.
Features
The following table provides an overview of the characteristics of the RF1100R readers.
Table 3-1 Features of the communication modules
Features RF1140R RF1170R
Operating frequency 125 kHz,
13.56 MHz
13.56 MHz
Transmit power
(max.)
125 kHz: < 50 mW,
13.56MHz: 250mW
200mW
Ethernet interface PoE
Transmission speed: 100 Mbps
Degree of protection IP67
Con󹪝guration/
diagnostic options
WBM (Web browser)
Application protocols XML, Modbus
Integration
The following graphics show examples of some of the integration options of the readers.
4*."5*$4XJUI.PECVT1$1(XJUICSPXTFS5SBOTQPOEFS3'3*OEVTUSJBM&UIFSOFU
Figure3-2 Readers in an automation environment with S7 controller
-0(0XJUI.PECVT1$1(XJUICSPXTFS4XJUDI5SBOTQPOEFS*OEVTUSJBM&UIFSOFU3'3
Figure3-3 Readers in an automation environment with LOGO! controller
Description
3.1Properties of the reader
SIMATIC RF1100
16 Operating Instructions, 08/2023, C79000-G8976-C698-02

1$1(XJUICSPXTFSBOE9.-BQQMJDBUJPO4XJUDI5SBOTQPOEFS*OEVTUSJBM&UIFSOFU3'3
Figure3-4 Readers in an IT environment
3.2 Supported transponders and protocols
The following table provides an overview of the transponders and protocols supported by the
readers.
Table 3-2 Supported transponders
 SIMATIC RF1140R SIMATIC RF1170R
MDS D100, D124, D126, D324,
E600, E611
✓ ✓
MDS D200 ✓ ✓
MDS D400, D424, D426, D524,
D526
✓ --
✓: Reading the serial number as well as reading and writing the user memory area
Table 3-3 Supported protocols and card types
 SIMATIC RF1140R SIMATIC RF1170R
ISO 14443 A/B general Serial number Serial number
ISO 15693 general ✓ ✓
LEGIC prime -- ✓ 2)
LEGIC advant (ISO 14443 A) 1) Serial number ✓ 2)
LEGIC advant (ISO 15693) 1) Serial number ✓ 2)
MIFARE Classic, EV1 1)
(1k, 4k, Mini)
✓ ✓
MIFARE DESFire, EV1/EV2 1)
(2k, 4k, 8k)
✓ ✓
MIFARE Plus, EV1 1)
(S, X, L1, L2, L3)
✓ Serial number
MIFARE Ultralight / C / EV1 ✓ ✓
HID iClass, Inside PicoPass Serial number Serial number
NXP NTAG21x Serial number Serial number
FeliCa Serial number Serial number
EM4100/EM4102, Casi-Rusco Serial number --
Description
3.2Supported transponders and protocols
SIMATIC RF1100
Operating Instructions, 08/2023, C79000-G8976-C698-02 17

 SIMATIC RF1140R SIMATIC RF1170R
EM4450/EM4550, EKS ✓ 3) --
HITAG 1, HITAG S ✓ --
HITAG 2 Serial number --
Keri 4) Serial number --
SecuraKey Serial number --
AWID Serial number --
ioProxy Serial number --
✓: Reading the serial number as well as reading and writing the user memory area
1) Transponder card must be formatted.
2) An identi󹪝cation card is required to access encrypted user memory areas (see section
"Commissioning").
3) Only for read access. Write access to the user memory area is not possible.
4) The license must be transferred to the reader with a license card (HID).
In addition to the speci󹪝ed protocols and card types, a variety of transponder cards are
generally supported by the readers. If you cannot 󹪝nd the card type that you use in the table,
you can ask Siemens Customer Support about the functionality.
Note that serial numbers (UIDs) of transponders that begin with the byte "0x08" are
always newly generated by the transponder. This makes an assignment of serial numbers
and transponders impossible. For transponders with a combo-chip (e.g. LEGIC CTC4096),
the serial number of the LEGIC Prime chip is always read and not that of the ISO chip
14443/15693. For transponders with two integrated chips (125 kHz / 13.56 MHz), you must
ensure which chip is addressed via the reader con󹪝guration.
The reader can be addressed and controlled by functions, for example to change the status of
the reader or to communicate with a transponder. With the aid of the functions, you can for
example control the three-color reader LED. The functions and their calls are described in this
manual.
3.3 User-speci󹪝c procedure
As described above, the readers are designed for di󹪜erent environments and requirements. If
you operate the communications modules in an XML or Modbus environment, they are
con󹪝gured and programmed from the perspective of an XML and Modbus user.
If you want to adapt the readers to your requirements, we recommend the following user-
speci󹪝c procedure:
Procedure as XML user
1. Connect the hardware
You can 󹪝nd information on this in the section "Connecting (Page25)".
2. Assign the IP address / device name
You can 󹪝nd information on this in the section "Assigning the IP address / device name with
SINEC PNI (Page29)".
Description
3.3User-speci󹪝c procedure
SIMATIC RF1100
18 Operating Instructions, 08/2023, C79000-G8976-C698-02

3. Con󹪝gure reader
You can 󹪝nd information on this in the section "Con󹪝guration via XML (Page30)" or
"Con󹪝guring with the WBM (Page33)".
4. Program reader commands
You can 󹪝nd information on this in the section "Programming via XML (Page63)".
Procedure as Modbus user
1. Connect the hardware
You can 󹪝nd information on this in the section "Connecting (Page25)".
2. Assign the IP address / device name
You can 󹪝nd information on this in the section "Assigning the IP address / device name with
SINEC PNI (Page29)".
3. Con󹪝gure reader
You can 󹪝nd information on this in the section "Con󹪝guring via Modbus (Page31)" or
"Con󹪝guring with the WBM (Page33)".
4. Program reader commands
You can 󹪝nd information on this in the section "Programming via Modbus (Page63)".
Orientation in the document
Later in the document, these symbols will help your orientation and will show you whether the
section is of interest to you or not. Only the sections with user-speci󹪝c content, in other words,
content that is interface-speci󹪝c, contain these symbols. Sections without these symbols are
general and relevant for all areas of application.
Description
3.3User-speci󹪝c procedure
SIMATIC RF1100
Operating Instructions, 08/2023, C79000-G8976-C698-02 19

Description
3.3User-speci󹪝c procedure
SIMATIC RF1100
20 Operating Instructions, 08/2023, C79000-G8976-C698-02