Siemens SIMATIC RF166C User manual

SIMATIC RF166C
SIMATIC Ident
RFID systems
SIMATIC RF166C
Operating Instructions
12/2019
C79000
-G8976-C578-01
Introduction
1
Security recommendations
2
Description
3
Mounting
4
Connecting
5
Configuring
6
Configuration using the
WBM
7
Programming via SIMATIC
controller
8
Programming via OPC UA
9
Service and maintenance
10
Technical specifications
11
Dimensional drawings
12
Appendix
A
Syslog messages
B
Service & Support
C

Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
Ⓟ
11/2019 Subject to change
Copyright © Siemens AG 2019.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

SIMATIC RF166C
Operating Instructions, 12/2019, C79000-G8976-C578-01 3
Table of contents
1 Introduction............................................................................................................................................. 7
2 Security recommendations...................................................................................................................... 9
3 Description............................................................................................................................................ 15
3.1 Properties of the communications modules............................................................................15
3.2 User-specific procedure..........................................................................................................16
3.3 Design.....................................................................................................................................18
4 Mounting............................................................................................................................................... 21
4.1 Installation dimensions and position .......................................................................................21
4.2 Mounting the communications module ...................................................................................22
4.3 Use at altitudes over 2,000 m .................................................................................................24
5 Connecting ........................................................................................................................................... 27
5.1 Operation of the CM on grounded/ungrounded power supply ...............................................29
5.2 Electrical design of the CM .....................................................................................................32
5.3 Connecting CM to functional ground ......................................................................................34
5.3.1 Connecting CM to functional ground ......................................................................................34
5.3.2 Mounting the CM on a conductive base .................................................................................34
5.3.3 Mounting the CM on a non-conductive base ..........................................................................36
5.4 Connecting the communications module................................................................................38
5.5 Loop-through of the supply voltage and PROFIBUS..............................................................43
5.6 Effect of cable length on the supply voltage ...........................................................................44
5.7 Setting the PROFIBUS DP address .......................................................................................45
6 Configuring ........................................................................................................................................... 49
6.1 Assigning IP address via DHCP .............................................................................................49
6.2 Configuration via PROFIBUS .................................................................................................51
6.3 Configuration via OPC UA ......................................................................................................54
7 Configuration using the WBM................................................................................................................ 55
7.1 Starting WBM..........................................................................................................................55
7.2 The WBM ................................................................................................................................57
7.3 The menu items of the WBM ..................................................................................................61
7.3.1 The "Start page" menu item....................................................................................................61
7.3.2 The "Settings - General" menu item .......................................................................................64
7.3.3 The "Settings - Reader Interface" menu item .........................................................................65
7.3.4 The "Settings - Communication" menu item ...........................................................................69
7.3.5 The menu command "Diagnostics - Hardware diagnostics"...................................................78

Table of contents
SIMATIC RF166C
4Operating Instructions, 12/2019, C79000-G8976-C578-01
7.3.6 The "Diagnostics - Log" menu item........................................................................................ 82
7.3.7 The "Diagnostics - Service Log" menu item .......................................................................... 83
7.3.8 The "Diagnostics - Syslog logbook" menu item ..................................................................... 86
7.3.9 The "Edit transponder" menu item ......................................................................................... 87
7.3.10 The "User management" menu item...................................................................................... 89
7.3.11 The menu command "System - System settings".................................................................. 92
7.3.12 The menu command "System - Reader firmware" ................................................................ 95
7.3.13 The "Help" menu item ............................................................................................................ 95
8 Programming via SIMATIC controller .................................................................................................... 97
9 Programming via OPC UA .................................................................................................................... 99
9.1 Supported methods/functions .............................................................................................. 100
9.2 OPC UA variables................................................................................................................ 105
9.2.1 Description of the variables.................................................................................................. 105
9.2.2 ExecuteScan ........................................................................................................................ 105
9.2.3 SimaticIdentModelVersion ................................................................................................... 106
9.2.4 CommonSettings.................................................................................................................. 106
9.2.5 RfidSettings.......................................................................................................................... 107
9.2.6 Diagnosis ............................................................................................................................. 109
9.3 OPC UA events.................................................................................................................... 116
9.3.1 Description of the events ..................................................................................................... 116
9.3.2 AutoIdPresenceEvent .......................................................................................................... 117
9.3.3 RfidLastAccessEvent ........................................................................................................... 117
9.3.4 AutoIdLastLogEntryEvent .................................................................................................... 122
10 Service and maintenance.....................................................................................................................123
10.1 Diagnostics........................................................................................................................... 123
10.1.1 Diagnostics via the LED display........................................................................................... 124
10.1.2 Diagnostics via SNMP ......................................................................................................... 127
10.1.3 Diagnostics using the WBM ................................................................................................. 127
10.1.4 Diagnostics using the TIA Portal (STEP 7 Basic / Professional) ......................................... 128
10.1.5 Diagnostics over OPC UA.................................................................................................... 130
10.1.6 Parameterization of the diagnostics..................................................................................... 131
10.1.7 Diagnostics via S7 controller................................................................................................ 132
10.2 Error messages.................................................................................................................... 134
10.2.1 Error messages of the communications module.................................................................. 134
10.2.2 Reading out error messages using the WBM ...................................................................... 142
10.2.3 OPC UA error messages ..................................................................................................... 142
10.3 Firmware update .................................................................................................................. 145
10.3.1 Updating the firmware via WBM .......................................................................................... 145
10.3.2 Update firmware via TIA Portal (STEP 7 Basic / Professional) ........................................... 146
10.3.3 Updating the firmware of the reader via WBM..................................................................... 147
10.3.4 Updating firmware of the readers using the TIA Portal (STEP 7 Basic / Professional) ....... 148
10.4 Factory settings.................................................................................................................... 150
10.4.1 Restoring the factory settings via WBM............................................................................... 150
10.4.2 Restoring the factory settings manually............................................................................... 151

Table of contents
SIMATIC RF166C
Operating Instructions, 12/2019, C79000-G8976-C578-01 5
10.5 Module replacement .............................................................................................................152
10.5.1 Backup configuration data ....................................................................................................153
10.5.2 Replacing a module ..............................................................................................................154
11 Technical specifications ...................................................................................................................... 157
12 Dimensional drawings ......................................................................................................................... 159
A Appendix............................................................................................................................................. 161
A.1 System planning ...................................................................................................................161
A.2 Connecting cables ................................................................................................................162
A.2.1 Standard cables ....................................................................................................................162
A.2.2 Custom assembled cables....................................................................................................163
A.3 Ordering data ........................................................................................................................164
A.4 Certificates & approvals........................................................................................................167
B Syslog messages................................................................................................................................ 169
B.1 Structure of the Syslog messages ........................................................................................169
B.2 Variables in Syslog messages..............................................................................................170
B.3 List of Syslog messages .......................................................................................................171
C Service & Support ............................................................................................................................... 175

Table of contents
SIMATIC RF166C
6Operating Instructions, 12/2019, C79000-G8976-C578-01

SIMATIC RF166C
Operating Instructions, 12/2019, C79000-G8976-C578-01 7
Introduction
1
Purpose of these operating instructions
The information provided in these operating instructions enables you to operate the RF166C
communication module on a PROFIBUS controller.
Basic knowledge required
These operating instructions assume general knowledge of automation engineering and
identification systems.
Scope of validity of this documentation
These operating instructions are valid for the RF166C communication modules as of product
version "01" and delivery date as of 12/2019.
Trademarks
The following and possibly other names not identified by the registered trademark sign ® are
registered trademarks of Siemens AG:
SIMATIC ®, SIMATIC RF ®, MOBY ®, RF MANAGER ®, SIMATIC Sensors ®
Orientation in the documentation
In addition to these operating instructions, you require the operating instructions for the S7-
300, S7-400, S7-1200 or S7-1500 controller used. When using an S7 controller, you can find
information on programming the module and a complete error description in the description
of the "Ident profile and Ident blocks" function blocks, the RFID standard profile and the
FB 45.
You can find information on the readers and optical readers to be connected in the intrinsic
safety manual of the respective product family (RF200, RF300, RF600, MV400 and MV500).
Further information on the PROFIBUS can be found in the "PROFIBUS Network Manual".
You can find the current versions of the various manuals on the pages of the Siemens
Industry Online Support (https://support.industry.siemens.com/cs/ww/en/ps/14970/man).

Introduction
SIMATIC RF166C
8Operating Instructions, 12/2019, C79000-G8976-C578-01
Abbreviations and naming conventions
The following terms/abbreviations are used synonymously in this document:
Transponder, tag
Data medium, mobile data storage (MDS)
Communication module (CM)
Interface module (ASM)
Recycling and disposal
The products are low in harmful substances, can be recycled and meet the requirements of
the Directive 2012/19/EU for disposal of waste electrical and electronic equipment (WEEE).
Do not dispose of the products at public disposal sites.
For environmentally compliant recycling and disposal of your electronic waste, please
contact a company certified for the disposal of electronic waste or your Siemens
representative.
Adhere to the various country-specific regulations.

SIMATIC RF166C
Operating Instructions, 12/2019, C79000-G8976-C578-01 9
Security recommendations
2
To prevent unauthorized access, observe the following security recommendations when
working with the communication module and WBM (Web Based Management).
General
●Check regularly that the device complies with these recommendations and/or other
internal security policies.
●Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products.
●Do not connect the device directly to the Internet. Operate the device within a protected
network area.
Physical access
●Restrict physical access to the device to qualified personnel.
●Lock unused physical ports (e.g. Ethernet ports) on the device. Unused ports can be used
to access the system without authorization.
Software (security functions)
●Keep the software up to date. Keep yourself informed regularly about safety updates for
the product.
You can find information about this at Link (http://www.siemens.com/industrialsecurity).
●Activate only protocols that you actually need to use the device.
●Limit access to the device using a firewall or rules in an access control list (ACL).
●The configuration files are available in XML format for simple use. Make sure that the
configuration files outside the device are suitably protected. You can, for example,
encrypt the files, store them at a safe location and transfer them only via secure
communication channels.

Security recommendations
SIMATIC RF166C
10 Operating Instructions, 12/2019, C79000-G8976-C578-01
Passwords
●Activate user management and create new user profiles.
●Change all default passwords for users before operating the device.
●Only use passwords with high password strength. Avoid weak passwords, e.g.
password1, 123456789, abcdefgh.
●Define rules for using devices and assigning passwords.
●Make sure that all passwords are protected and inaccessible to unauthorized personnel.
●Do not use the same password for different users and systems.
●Update passwords and keys regularly to improve security.
Keys and certificates
This section deals with the security keys and certificates that you need to set up SSL.
●We urgently recommend creating your own SSL certificates and making them available.
Preset certificates and keys are present in the device.
The preset and automatically created SSL certificates are self-signed. We recommend
using certificates signed either by a reliable external certification authority or an internal
certification authority.
The device has an interface via which you can import certificates and keys.
●We recommend using certificates with a key length of at least 2048 bits.
●If protocols support both certificates and keys, you should favor certificates.
●The following certificate formats are supported for the import:
Certificate
Supported formats
HTTPS
OPC UA server
*.p12
*.pfx
*.pem 1)
*.cer
*.cert
*.der
OPC UA client
OPC UA CA
OPC UA issuer
*.pem 1)
*.cer
*.cert
*.der
1) May contain a private key.

Security recommendations
SIMATIC RF166C
Operating Instructions, 12/2019, C79000-G8976-C578-01 11
●The following algorithms are supported for encryption:
Protocol
Supported
signature algorithms
Supported key
and size
Web browser SHA1
SHA256 with RSA
SHA384 with RSA
SHA512 with RSA
RSA 2048 bit
RSA 4096 bit
OPC UA SHA256 with RSA
SHA384 with RSA
SHA512 with RSA
RSA 2048 bit
RSA 4096 bit
●The following cipher suites are supported for HTTPS:
OpenSSL name
Value
Browser
ECDHE-RSA-AES128-GCM-SHA256
0x2F
Chrome, Firefox
ECDHE-RSA-AES256-GCM-SHA384
0x30
Chrome, Firefox
ECDHE-RSA-AES128-CBC-SHA256
0x27
Internet Explorer 11
ECDHE-RSA-AES256-CBC-SHA384
0x28
Internet Explorer 11
Firmware encryption
The firmware itself is signed and encrypted. This ensures that only authentic firmware can be
downloaded to the device.
Secure/non-secure protocols
●Check whether it is necessary to use SNMPv1. SNMPv1 is classified as non-secure.
Make use of the possibility to prevent write access. The product offers corresponding
settings for this.
●If SNMP is activated, change the community names. If unrestricted access is not
necessary, limit access via SNMP.
●Use secure protocols if access to the device is not protected by means of physical
safeguards.
The following protocols provide secure alternatives:
HTTP →HTTPS
●To prevent unauthorized access to the device or network, set up appropriate safeguards
against non-secure protocols.
●Enable only the services (protocols) that will actually be used on the device. The same
applies to the installed interfaces/ports. Unused ports could be used to access the
network downstream from the device.

Security recommendations
SIMATIC RF166C
12 Operating Instructions, 12/2019, C79000-G8976-C578-01
List of available protocols
All available protocols and their ports that are used with SIMATIC RF166C are listed below.
Table 2- 1 List of available protocols
Service/
Protocol
Protocol/
Port number
Preset port
status
Port configura-
ble
Port number
configurable
Authentication
Encryption
DHCP
UDP/68
Open
✓
--
No
No
HTTP
TCP/80
Open
--
--
No
No
HTTPS
TCP/443
Open
--
--
Yes
Yes
NTP UDP/123 Closed ✓-- No No
SNMP
UDP/161
Closed
✓
--
No
No
OPC UA TCP/4840 Open ✓✓Yes (simple,
when config-
ured)
Yes (when
configured)
Syslog
UDP/514
Open
✓
--
No
No
Explanation of the table:
●Authentication
Specifies whether authentication of the communication partner takes place.
●Encryption
Specifies whether the transfer is encrypted.

Security recommendations
SIMATIC RF166C
Operating Instructions, 12/2019, C79000-G8976-C578-01 13
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be
connected to an enterprise network or the internet if and to the extent such a connection is
necessary and only when appropriate security measures (e.g. firewalls and/or network
segmentation) are in place.
For additional information on industrial security measures that may be implemented, please
visit
Link: (https://www.siemens.com/industrialsecurity)
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customers’ exposure
to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
Link: (https://support.industry.siemens.com/cs/ww/en/ps/15247/pm)

Security recommendations
SIMATIC RF166C
14 Operating Instructions, 12/2019, C79000-G8976-C578-01

SIMATIC RF166C
Operating Instructions, 12/2019, C79000-G8976-C578-01 15
Description
3
3.1 Properties of the communications modules
Area of application
The SIMATIC RF166C communication modules are designed for use in all areas of
automation. It covers all areas in which SIMATIC Ident RFID readers and optical readers are
operated. The application takes place in the field level via a controller. Thanks to the
Ethernet interface, diagnostic data, such as processed transponder data or log entries, can
be transferred to higher-level systems via OPC UA parallel to regular operation.
Figure 3-1 SIMATIC RF166C communication module
Due to the high degree of protection, mounting without a protective enclosure is possible
directly near the RFID read points. The small mounting surface of the communication
module facilitates installation in confined spaces.
Two connections each for PROFIBUS DP and power supply enable configuration in a line
structure. The L-coded M12 connectors for the power supply allow a high feed-through
current in a line structure. In addition to the familiar configuration types via TIA Portal and
GSD, this communication module also feature integrated Web Based Management (WBM),
which enables the device to be set via a standard browser. The WBM supports you during
commissioning, diagnostics and servicing. It also displays information about the connected
readers and enables the reading/writing of transponder data.
You can find additional information on the various RFID devices and optical readers on the
Internet on the "Siemens Industry Online Support
(https://support.industry.siemens.com/cs/ww/en/ps/14970/man)" page.

Description
3.2 User-specific procedure
SIMATIC RF166C
16 Operating Instructions, 12/2019, C79000-G8976-C578-01
Features
The following features characterize the RF166C communication modules:
Table 3- 1 Features of the communication modules
Features
RF166C
Number of connectable
devices
2
Supported product
families
RF200, RF300, RF600, MV400, MV500
Reader interfaces RS422
Transfer speed: 19.2 ... 921.6 Kbaud
PROFIBUS interface RS485
Transfer speed: 9.6 Kbps ... 12 Mbps
Ethernet interface 1x M12
Transmission speed: 100 Mbps
Degree of protection
IP67
Application protocols PROFIBUS DP
OPC UA (restricted)
Configuration/
diagnostic options
STEP 7 (TIA Portal), GSD, WBM (Web browser)
Function blocks
Ident profile, FB 45, faceplate for PCS 7
Supported SIMATIC
controllers
S7-300, S7-400, S7-1200, S7-1500
Supported third-party
controllers
Source code of the Ident profile available. All controllers with PROFIBUS
and IEC61131 programming are supported.
3.2 User-specific procedure
As described in the previous section, the communication modules are designed for different
environments and requirements.
If you operate the communication modules in an automation environment, they are
configured and programmed from the perspective of an S7 user. If you also operate the
communication modules in an OPC UA environment, the extended configuration and
programming is performed from the perspective of an OPC UA user.
If you want to adapt the communication modules to your requirements, we recommend the
following user-specific procedure:
Note
Synchronize device time
Note that the time of the device clock corresponds to UTC time and cannot be adjusted to
time zones. It is recommended to synchronize the time with an NTP server to obtain uni
que
tim
e information.

Description
3.2 User-specific procedure
SIMATIC RF166C
Operating Instructions, 12/2019, C79000-G8976-C578-01 17
Procedure as S7 user
1. Connect the hardware
You can find information on this in the section "Connecting (Page 27)".
2. Assign the IP address if needed
This step is optional and is only required if you want to configure the communication
module using the WBM or read diagnostic information.
You can find information on this in the section "Assigning IP address via DHCP
(Page 49)".
3. Configure communication module
You will find information on this in the section "Configuration via PROFIBUS (Page 51)" or
"Configuration using the WBM (Page 55)".
4. Program reader commands
You can find information on this in the section "Programming via SIMATIC controller
(Page 97)".
Procedure as an OPC UA user
1. Connect the hardware
You can find information on this in the section "Connecting (Page 27)".
2. IP address
You can find information on this in the section "Assigning IP address via DHCP
(Page 49)".
3. Configure the communication module
You can find information on this in the section "Configuration using the WBM (Page 55)".
4. Reading diagnostic information
You can find information on this in the section "Programming via OPC UA (Page 99)".
Orientation in the document
Later in the document, these symbols will help your orientation and will show you whether
the section is of interest to you or not. Only the sections with user-specific content, in other
words content that is tool/interface-specific, contain these symbols. Sections without these
symbols are general and relevant for both areas of application.

Description
3.3 Design
SIMATIC RF166C
18 Operating Instructions, 12/2019, C79000-G8976-C578-01
3.3 Design
The following figure shows the basic design of the RF166C.
①
Status LEDs
⑥
PROFIBUS LED
②
Reader interfaces
(M12, 8-pin, A-coded)
⑦
2x interface for the power supply
(M12, 4-pin, L-coded)
③
Reader LEDs
⑧
2x interface for PROFIBUS
(M12, 5-pin, B-coded)
④
Ethernet interface
(M12, 4-pin, D-coded)
⑨
PROFIBUS address adjuster
⑤
Ethernet LED
⑩
Mounting holes and functional ground
Figure 3-2 Design of the communication module

Description
3.3 Design
SIMATIC RF166C
Operating Instructions, 12/2019, C79000-G8976-C578-01 19
Integration
The following figure shows an example of an RF166C connection to an automation system.
Figure 3-3 Configuration graphic RF166C
As of STEP 7 Basic/Professional V16, the RF166C communication module is integrated in
the TIA Portal. Integration into older STEP 7 versions and into 3rd-party systems is
performed via a GSD file. The communication module can then be configured via the TIA
Portal or another engineering system. The GSD file is stored on the communication module
and can be downloaded from it using a Web browser. You can also find the GSD file at the
website of Siemens Industry Online Support.

Description
3.3 Design
SIMATIC RF166C
20 Operating Instructions, 12/2019, C79000-G8976-C578-01