What is TIA Portal?
TIA Portal (Totally Integrated Automation Portal) is the integrated engineering platform from Siemens in which you program PLCs, build HMI and SCADA screens, configure drives and networks and set up safety functions, all in a single project. It is the standard development environment for the S7-1200 and S7-1500, for WinCC panels and for SINAMICS drives in industrial automation and process automation. Because every discipline shares the same project data and tags, you only need to define a signal once. That makes TIA Portal both powerful and an attractive target within OT networks.
🧠 What does TIA Portal do and what does it consist of?
TIA Portal is not a single program but a framework in which several Siemens products run as one application. Which functions you see depends on the licences installed.
| Component | Function | Variants |
|---|---|---|
| STEP 7 | PLC programming and hardware configuration | Basic (S7-1200 only), Professional (S7-300, S7-400, S7-1200, S7-1500, ET 200 CPUs, software controllers) |
| WinCC | HMI and SCADA engineering | Basic, Comfort, Advanced, Professional and Unified |
| STEP 7 Safety | Fail-safe programming | Safety Basic and Safety Advanced |
| Startdrive | Commissioning of SINAMICS drives | Basic and Advanced |
| PLCSIM | Simulating a PLC on the engineering PC | PLCSIM and PLCSIM Advanced |
| Openness | Programming interface (.NET) for automated engineering | Part of the installation |
| Multiuser Engineering | Several engineers working in one project at the same time | Server plus clients |
The defining feature is the shared database: a PLC tag you create in STEP 7 can be linked straight to a
WinCC screen or alarm, without export files or manual address lists. A project is stored as a folder with a project
file (.ap plus the version number, for example .ap20) and can be archived as a
compressed .zap file.
🕰️ How did TIA Portal come about and which versions exist?
Siemens presented TIA Portal in November 2010 at the SPS/IPC/Drives fair in Nuremberg, with STEP 7 V11 and WinCC V11 as its first components. It gradually replaced the classic SIMATIC Manager (STEP 7 V5.x), which is still used for many S7-300/400 installations and for PCS 7. For several years now a new major version has been released around November.
| Version | Year | Key innovation |
|---|---|---|
| V11 | 2011 | First generally available TIA Portal with STEP 7 and WinCC |
| V12 | 2012 | Support for the new S7-1500 |
| V16 | 2019 | Introduction of WinCC Unified |
| V17 | 2021 | Secure PG/PC and HMI communication with TLS and PLC certificates |
| V19 | 2023 | Virtual S7-1500V controller, managed via Industrial Edge on a server |
| V20 | 2024 | CPU 1508S software controller |
| V21 | 2025 | Git-friendly export format, redundant WinCC Unified servers, choice of on-premises, subscription or cloud |
Projects are upward compatible: you can open a V18 project in V19 after an upgrade, but you cannot then open it in V18 again. Several major versions can be installed side by side on one engineering PC, which is necessary in practice because plants often stay on the version they were commissioned with for years.
🔧 Which programming languages does TIA Portal support?
TIA Portal follows the languages of IEC 61131-3 but uses Siemens’ own names. Not every language is available on every CPU family.
| Siemens name | IEC 61131-3 | Typical use | Availability |
|---|---|---|---|
| LAD | Ladder Logic | Discrete logic, interlocks | All S7 CPUs |
| FBD | FBD | Logic and control in block form | All S7 CPUs |
| SCL | ST | Calculations, loops, data handling | All S7 CPUs |
| STL | Instruction List | Legacy code from S7-300/400 | Not on S7-1200 |
| GRAPH | SFC | Step sequences | S7-300/400 and S7-1500, not S7-1200 |
| CEM | None | Cause and effect matrix for interlocks | S7-1500 |
Code lives in blocks: organisation blocks (OB) called by the operating system, such as the cyclic OB1; functions (FC) without memory; function blocks (FB) with an instance data block; and data blocks (DB) for global data. With PLC data types (UDTs) and versioned libraries you build reusable standards for valves, pumps or motors, for example.
⚙️ What does a typical TIA Portal project look like?
A machine or plant project usually goes through these steps:
- Hardware and network - you place the CPU, I/O, O and drives in the device and network view, assign IP addresses and ProfiNET device names and define the topology. Older sections sometimes still run on Profibus.
- Program - you write the logic in LAD, FBD, SCL or GRAPH and reuse library blocks.
- Visualisation - you build HMI screens in WinCC and link tags and alarms directly.
- Safety - on an F-CPU you program the safety functions separately (see below).
- Drives and motion - with Startdrive you set up variable frequency drives and servos; S7-1500T CPUs control axes, cam profiles and kinematics over PROFINET IRT, which often makes a separate motion controller unnecessary.
- Simulation and testing - with PLCSIM or PLCSIM Advanced you test the code without hardware, also coupled to a digital twin for virtual commissioning, followed by the FAT and SAT.
- Handover and maintenance - you archive the project, record versions and manage modifications through change management.
During commissioning and troubleshooting you rely on the diagnostic functions: online monitoring of blocks and tags, the trace function for recording signal curves, network and device diagnostics, and comparing the offline and online program. In WinCC you also set up trending, recipe management and user management. This is why TIA Portal is used across very different sectors, from automotive production lines and food and beverage batch processes to pumping systems in water treatment.
For V21, the minimum engineering PC is an Intel Core i3 with 8 GB of RAM and 20 GB of free disk space. Siemens recommends 16 GB of RAM (32 GB for large projects), an SSD with at least 50 GB free, a 1920 x 1080 display and a 1 Gbit network for Multiuser Engineering. Supported systems are 64-bit Windows 10 Enterprise, Windows 11 Pro and Enterprise, and Windows Server 2022 and 2025.
🛡️ How does safety engineering work in TIA Portal?
With STEP 7 Safety Basic or Safety Advanced you program a fail-safe CPU (S7-1200F, S7-1500F or ET 200SP F) in the same environment as the standard logic. Safe I/O communicates via PROFIsafe over PROFINET or PROFIBUS. TIA Portal calculates a signature over the safety program (the collective F-signature), so you can demonstrate during acceptance and audits that the safety logic has not changed. The F-CPUs are certified for applications up to SIL 3 according to IEC 61508 and IEC 62061 and Performance Level e according to ISO 13849. In the process industries you use them within a safety lifecycle according to IEC 61511.
🌐 How does TIA Portal fit into IT/OT convergence?
TIA Portal is moving towards software-defined automation and Industry 4.0, with several touchpoints with IT:
- OPC UA - the S7-1500 has a built-in OPC UA server and client that you configure in TIA Portal, including certificates, for connections to MES, historians and a Unified Namespace.
- Openness - through the .NET API you generate hardware, code and screens from templates or Excel lists, which saves many engineering hours for series-built machines.
- Version control - since V21 you can export LAD, FBD and SCL code, data blocks and PLC data types in a format that suits Git, enabling continuous integration and parallel development.
- Modular plants - for S7-1500 modules, TIA Portal can export a Module Type Package for process orchestration.
- Virtualisation - the S7-1500V and the CPU 1508S run PLC logic on servers and industrial PCs, close to edge computing.
Classic protocols remain important: S7 Comm for older CPUs, S7 Comm Plus for the S7-1200/1500 and open TCP and UDP communication for links with other systems.
🔐 How do you secure TIA Portal and the engineering workstation?
Anyone with access to an engineering workstation running TIA Portal can modify and download PLC logic. Stuxnet showed in 2010 how that goes wrong: the worm abused the classic STEP 7 environment (SIMATIC Manager) and WinCC to inject code into S7-300 PLCs and hide it from operators. TIA Portal itself had only just been launched, but the attack pattern still applies in full. Siemens ProductCERT publishes security advisories every month, including for TIA Portal, and as a manufacturer of products with digital elements Siemens must comply with the Cyber Resilience Act.
| Measure | Purpose |
|---|---|
| Network segmentation and a jump server | Engineering only from a trusted zone |
| MFA and personal accounts | No shared engineering logins |
| Application Whitelisting | Only approved software on the workstation |
| Patch management | Apply TIA Portal updates and firmware in time |
| Access levels and secure communication | PLC passwords, know-how protection and TLS from V17 |
| Logging and project comparison | Detect unauthorised changes |
| Backup of projects and archives | Fast recovery after an incident or failure |
Following the zones and conduits model of IEC 62443, place engineering workstations in a dedicated, tightly controlled zone. If your organisation falls under the Dutch Cybersecurity Act, the national implementation of NIS2, access control, logging and patching of engineering workstations are also part of your duty of care.
🔄 How does TIA Portal compare with other engineering environments?
| Environment | Vendor | Main difference |
|---|---|---|
| TIA Portal | Siemens | One project for Siemens PLC, HMI, drives and safety |
| SIMATIC Manager | Siemens | Predecessor, still used for S7-300/400 and PCS 7 |
| Studio 5000 | Rockwell Automation | Engineering for Allen-Bradley Logix controllers |
| TwinCAT | Beckhoff | Integrated into Visual Studio, PLC as software on an IPC |
| CODESYS | CODESYS Group | Vendor-independent, used by hundreds of hardware brands |
Note two Siemens exceptions: LOGO! is programmed with LOGO! Soft Comfort, and the PCS 7 process control system with SIMATIC Manager. Its successor PCS neo has its own web-based engineering.
⚠️ What are the limitations of TIA Portal?
- Vendor lock-in - projects can only be opened in TIA Portal and only run on Siemens hardware.
- Versions of the software itself - you need the right major version, and often the right update, to go online, which means several installed versions for older plants.
- Heavy software - large projects with many HMI screens and tags need plenty of memory and long compile times.
- Licence management - licences live in the Automation License Manager, which needs attention when replacing laptops or using virtual machines.
Include TIA Portal versions explicitly in your lifecycle management and asset register.
❓ Frequently asked questions
Is TIA Portal free to use?
TIA Portal is commercial Siemens software that requires licences per component, such as STEP 7 Basic or Professional and a WinCC variant. Siemens does offer trial licences for a limited period. With V21 Siemens also offers a free choice between on-premises, a subscription or use in the cloud.
Can you program an S7-300 or S7-400 in TIA Portal?
Yes, STEP 7 Professional in TIA Portal supports the S7-300 and S7-400 alongside the S7-1200 and S7-1500. Many existing S7-300/400 projects are still maintained in the classic SIMATIC Manager, however, because migrating to TIA Portal requires retesting. PCS 7 and LOGO! are not programmed in TIA Portal.
What is the difference between STEP 7 Basic and STEP 7 Professional?
STEP 7 Basic is intended for the compact S7-1200 and simple panels. STEP 7 Professional also supports the S7-300, S7-400, S7-1500, ET 200 CPUs and software controllers, plus languages such as STL and GRAPH. For larger machines and plants, Professional is the usual choice in TIA Portal.
Can you open a project in an older version of TIA Portal?
No, a TIA Portal project that has been upgraded to a newer version can no longer be opened in the older version. That is why engineers often install several TIA Portal versions side by side and work in the version the plant was commissioned with. Store the version used and the firmware level with every archive.
What is the difference between PLCSIM and PLCSIM Advanced?
PLCSIM simulates an S7 PLC on the engineering PC for testing logic inside TIA Portal. PLCSIM Advanced simulates an S7-1500 with a full network interface and an API, so external simulation software and a digital twin can communicate with it. That makes PLCSIM Advanced the basis for virtual commissioning.
Why is TIA Portal a cybersecurity risk?
TIA Portal can modify and download PLC programs, so a compromised engineering workstation gives an attacker direct influence over the physical process. Segmentation, strong authentication, current patches and secure PLC communication therefore belong on every workstation running TIA Portal. Under IEC 62443 you therefore place engineering workstations in their own zone with strict access rules.
📌 In summary
TIA Portal is Siemens’ integrated engineering environment in which you design, test and maintain PLCs, HMIs, drives and safety functions in one project with shared tags. Since its launch in 2010 it has become the standard for the S7-1200 and S7-1500, with a growing set of IT features such as OPC UA, the Openness API and Git export. Manage the software versions deliberately and secure engineering workstations strictly, because whoever controls TIA Portal controls the plant.
