plc.myforum.ro

mark11 · Member Joined: 30 Mar 2014 Posts: 114

Notes on Microsoft Updates 2018-01 (Meltdown and Specter)
https://support.industry.siemens.com/cs/document/109754953/
On the 3rd and 08th of January 2018 Microsoft has released updates for the Windows operating systems to close the vulnerabilities, which are grouped under the name Meltdown and Specter.

There are compatibility issues with these updates, see e.g. the notes in the Windows Server 2012 R2 Update
https://support.microsoft.com/en-us/help/4056895/windows-81-update-kb4056895
http://www.catalog.update.microsoft.com/Search.aspx?q=KB4056895

Siemens says:
According to current knowledge, these compatibility problems also affect SIMATIC products. For this reason, we recommend that you do not install these security updates.

List of currently known affected Windows Updates:

KB4056888 https://support.microsoft.com/kb/4056888
KB4056890 https://support.microsoft.com/kb/4056890
KB4056891 https://support.microsoft.com/kb/4056891
KB4056892 https://support.microsoft.com/kb/4056892
KB4056893 https://support.microsoft.com/kb/4056893
KB4056894 https://support.microsoft.com/kb/4056894
KB4056895 https://support.microsoft.com/kb/4056895
KB4056896 https://support.microsoft.com/kb/4056896
KB4056897 https://support.microsoft.com/kb/4056897
KB4056898 https://support.microsoft.com/kb/4056898
KB4056899 https://support.microsoft.com/kb/4056899
KB4054173 https://support.microsoft.com/kb/4054173
KB4054178 https://support.microsoft.com/kb/4054178
KB4055229 https://support.microsoft.com/kb/4055229

My recommendation is to apply these updates sequentially no matter where you are as long as Siemens do not know at this ocazie what pending software is affected.

The first level for applying these updates must be computers at a higher level in Enterprise which has directly connection with Internet. It's a must.
On the plant Level apply the SIEMENS security and sequentially Microsoft updates without affecting the Production Process.

mark11 · Member Joined: 30 Mar 2014 Posts: 114

As I said before you must install all the updates from Microsoft.
After nearly 2 months Siemens waked up and put this:

Which Microsoft Updates have been tested for compatibility with SIMATIC PCS 7?
https://support.industry.siemens.com/cs/document/18490004/

We recommend installing all the available updates of the named classifications to ensure that the system is protected. says Siemens today....

However, we cannot say anything about the compatibility of updates that we have not tested. Therefore, we recommend installing all the updates in the separate project-specific test environment prior to rolling out the updates in the productive environment.

Excel file in compliance with IEC 62443-2-3
https://support.industry.siemens.com/cs/attachments/18490004/security_patches_iec.xls

Packed XML and model files in compliance with IEC 62443-2-3
https://support.industry.siemens.com/cs/attachments/18490004/security_patches_iec.zip

Again I have to warn you to install secquentially to see what is and what is not affected just in case.
As I can provide today you can install all the updates...

grig100 · Member 3 Joined: 01 Jan 2015 Posts: 752

What effects can a Windows 10 Update, version 1709 have on Setups?
https://support.industry.siemens.com/cs/document/109755067/

Fall: Prevention of possible errors
When meeting the following criteria your Setup to be installed in the future might result in an error, because the necessary settings in the Windows firewall cannot be made.
Operating system: Windows 10
Update: Version 1709 "Fall Creators Update"
Change in the Windows firewall through an arbitrary Setup
However, apart from the settings in the Windows firewall, the installation proceeds correctly.
The incident is not only limited to Setups of the SIMATIC software.

Remedy
In this case you install the SeCon Patch, which in most cases will prevent the occurrence of such errors in the future. Here you follow the instructions menu as usual.
Download SeCon Patch V2.5
Siemens_SeconFix_V2.5.exe.zip (6.9 MB)
https://support.industry.siemens.com/cs/attachments/109755067/Siemens_SeconFix_V2.5.exe.zip

Note
SeCon Patch can also be found in this directory:
C:\Program Files\Siemens\Automation

After new Setups you should restart the Security Controller application and repeat the settings in the Windows firewall.

Case: Clearing of a an error that has occurred in conjunction with Windows 10, version 1709
If the installation of your Setup has ended with an error, then the installation has usually run correctly except for the settings of the Windows firewall.
Remedy
Install the SeCon Patch again.
Run the Security Controller.
Make the corresponding settings again in the Windows firewall.
Warning
Please note that settings made manually in the Window firewall might possibly be overwritten.

Note
It is recommended generally to install the cumulative November update for Windows 10 version 1709 or a more recent cumulative update.
Information about existing incompatibilities between Windows 10 Update and WinCC is available at the following link:
https://support.industry.siemens.com/cs/document/109749283/

Note on the Windows 10 Update Version 1703
As part of the Windows 10 Update, Microsoft.Net Framework 4.7 is either installed as part of the update Version 1703 or installed manually.
The Version Microsoft.Net Framework 4.7 is not compatible with WinCC (TIA Portal) V14 SP1.
Instead you use Microsoft.Net Framework Version 4.6.2.

Remedy
Proceed as follows if .Net Framework V4.7 is already installed.
Uninstall .NET Framework V4.7 via the Control Panel on your computer.
[b] Install .NET Framework V4.6.2
https://www.microsoft.com/en-us/download/details.aspx?id=53344[/b]
Recompile your project with "Rebuild all".
The following KBs are affected.
https://support.industry.siemens.com/cs/attachments/109749283/109749283_security_patches_failed_WinCC_TIAP.xlsx

Microsoft .NET Framework V4.7
https://www.microsoft.com/en-us/download/details.aspx?id=55167

grig100 · Member 3 Joined: 01 Jan 2015 Posts: 752

What are the incompatibilities between Windows and WinCC (TIA Portal)?
Loading Windows updates might impair the function of the software.
https://support.industry.siemens.com/cs/document/109749283/

Remedy for Windows 7, Windows 8, Windows Server 2008, Windows Server 2012 R2
Proceed as follows if .Net Framework V4.7 is already installed:
Uninstall .NET Framework V4.7 via the Control Panel on your computer.
Install .NET Framework V4.6.2.
(Download)
https://www.microsoft.com/en-us/download/details.aspx
Recompile your project with "Rebuild all".

Note on the Windows 10 Update Version 1703
As part of the Windows 10 Features Update, Microsoft.Net Framework 4.7 is either installed as part of the update Version 1703 or installed manually.
The Microsoft.Net Framework Version 4.7 is not compatible with WinCC (TIA Portal) 14 SP1.
Instead you use Microsoft.Net Framework Version 4.6.2.

Important note on Windows 10 Update Version 1709 "Fall Creators Update"
After installing Windows 10 Version 1709 "Fall Creators Update", there are currently problems with the installation and operation of WinCC (TIA Portal) V13 SP2, V14 SP1 and other SIMATIC software products.
What effects can a Windows 10 Update, version 1709 have on Setups?
https://support.industry.siemens.com/cs/document/109755067/
Fall: Prevention of possible errors
When meeting the following criteria your Setup to be installed in the future might result in an error, because the necessary settings in the Windows firewall cannot be made.
Operating system: Windows 10
Update: Version 1709 "Fall Creators Update"
Change in the Windows firewall through an arbitrary Setup
However, apart from the settings in the Windows firewall, the installation proceeds correctly.
The incident is not only limited to Setups of the SIMATIC software.
Remedy
In this case you install the SeCon Patch, which in most cases will prevent the occurrence of such errors in the future. Here you follow the instructions menu as usual.
Download SeCon Patch V2.5
https://support.industry.siemens.com/cs/attachments/109755067/Siemens_SeconFix_V2.5.exe.zip
Note
SeCon Patch can also be found in this directory:
C:\Program Files\Siemens\Automation
After new Setups you should restart the Security Controller application and repeat the settings in the Windows firewall.

Case: Clearing of a an error that has occurred in conjunction with Windows 10, version 1709
If the installation of your Setup has ended with an error, then the installation has usually run correctly except for the settings of the Windows firewall.
Remedy
Install the SeCon Patch again.
Run the Security Controller.
Make the corresponding settings again in the Windows firewall.
Warning
Please note that settings made manually in the Window firewall might possibly be overwritten.
Note
It is recommended generally to install the cumulative November update for Windows 10 version 1709 or a more recent cumulative update.

Information about existing incompatibilities between Windows 10 Update and WinCC is available at the following link:
Updates (KBs) The following KBs are affected.
https://support.industry.siemens.com/cs/attachments/109749283/109749283_security_patches_failed_WinCC_TIAP.xlsx

Further Information
Handling of Microsoft updates
https://support.industry.siemens.com/cs/document/109754089/handling-of-microsoft-updates
What effects can a Windows 10 Update, version 1709 have on Setups?
https://support.industry.siemens.com/cs/document/109755067/
Which Microsoft Patches ("Security Patches" and "Critical Patches") have been tested for compatibility with SIMATIC WinCC? (current: Meltdown and Spectre)
https://support.industry.siemens.com/cs/document/18752994/

Microsoft Links
Microsoft .NET Framework V4.7
https://www.microsoft.com/en-us/download/details.aspx
Microsoft .NET Framework V4.6.2
https://www.microsoft.com/en-us/download/details.aspx
Information on Installing/Uninstalling .NET Framework
https://msdn.microsoft.com/en-us/library/hh925569 (v=vs.110).aspx

grig100 · Member 3 Joined: 01 Jan 2015 Posts: 752

Automation Firewall classic - V1 Microsoft Updates
https://support.industry.siemens.com/cs/document/109756901/
There is an issue with two Windows Updates for Windows Server 2008R2. With the Installation of the Updates the appliances can lose the network configuration. A patch is availalble.
With the Automation Firewall classic - V1 an issue exists with two Windows Updates for Windows Server 2008R2.
With the installation of the following updates the appliances can los the network configuration:
KB4088875
KB4088878
Microsoft has released an update, which shall be installed prior to the implementaiton of the two KBs:
https://support.microsoft.com/en-us/help/4099950/nic-settings-are-replaced-or-static-ip-address-settings-are-lost-after

We are recommending to create a backup prior to the installation of the updates and to foolow the instructions of the aforementioned article.
In case of questions, kindly contact the SIMATIC hotline.

2iko.07 · Junior Joined: 25 Mar 2020 Posts: 5

someone give me the link for Siemens SeCon patch please ! i don't have a siemens account , and explain to me how to install it and fix the error plz !!
i have windows 10 1909

kribb · Junior Joined: 09 Nov 2018 Posts: 7

https://support.industry.siemens.com/cs/document/109755067/what-effects-can-a-windows-10-creators-update-versions-1709-1803-1809-or-enterprise-2019-ltsc-have-on-setups

https://vshare.is/x3k3t8k4o4/Siemens_SeconFix_V2.5.exe_zip

2iko.07 · Junior Joined: 25 Mar 2020 Posts: 5