BLOG / DRIVES

The SINAMICS Web Server: Diagnostics From a Browser, Rules for Using It Safely

17 January 2024 SINAMICSWeb ServerDiagnosticsSecurity

Modern SINAMICS control units ship with a web server: faults, alarms, parameter access and trend-style monitoring from any browser on the network. For service work it is quietly excellent — with two sharp edges to respect.

What it is good for

  • First-look triage: active faults and history with timestamps, without a laptop that has the right Portal version — a phone on the maintenance WLAN suffices.
  • Live values: current, torque, DC bus, temperatures — enough to characterize “it feels weak” complaints while the machine runs.
  • Guided support: an operator reads values to a remote engineer, or the remote engineer views directly through the plant’s remote-access solution.
  • Documentation: parameter snapshots exported during audits.

The sharp edges

First: credentials. Default passwords on drive web servers are a genuine attack surface the moment the machine network touches anything. Set real passwords at commissioning, per role (monitor vs administer), and record them in the machine dossier. Second: write access. Browsers make parameter changes frictionless — frictionless is not what production parameter sets want. Our policy: web access read-only in normal operation; write enabled deliberately, per intervention, and the deviation list updated afterwards like any other change.

FAQ

Does the web server load the drive? Negligibly for monitoring use. Avoid leaving high-rate trend sessions connected permanently; that is what the PLC and proper condition monitoring are for.

Is HTTPS supported? Recent firmware supports secure access — use it, and disable the plain variant where the version allows.


Zone Otomasyon configures drive web access with role passwords as part of every commissioning. Secure-by-default machines.