Learn Siemens automation the way the CPU actually works — not a pile of dragged contacts. Real machines as teachers (a level crossing, a bottling line, a robot cell), live simulations you can break on purpose, and the Siemens-specific machinery — OBs, optimized blocks, SCL, F-CPUs, PROFINET — laid bare.
How a Siemens CPU decides when your code runs — the startup pass, the main cycle, and the interrupt OBs that preempt it. Taught on a live railway level crossing, with a logic-analyzer view of the CPU itself and the optimized-vs-standard DB trap.
Where data actually lives. PLC tags vs local variables, the process image, the address areas (%I inputs, %Q outputs, %M bit memory), absolute vs symbolic addressing, and why optimized access changed the rules for good.
The same logic written four ways, side by side. Ladder for the electricians, FBD for the gates, SCL when the maths gets real, and GRAPH when the machine is a sequence of steps — and the honest guidance on when to reach for each.
The four block types and what each is for: organization blocks the OS calls, functions with no memory, function blocks with an instance DB, and global DBs for shared data. Single vs multi-instance, and the library discipline that keeps a fleet on one codebase.
Stop juggling loose tags. Define a User-Defined Type once, version it, and stamp it across DBs, FB interfaces and HMI — so one edit ripples everywhere. Structs, arrays of UDTs, and the tag-table hygiene that separates a tidy project from a swamp.
Give the machine a face. WinCC Unified vs Comfort panels, binding screen objects to PLC tags, the alarm system, trends & recipes, and the faceplate pattern that makes one screen object reusable across every motor on the line.
How the CPU reaches the real world. IO-controller and IO-devices, the GSDML, device names & the topology view, distributed I/O with ET 200, and RT vs IRT — why some traffic gets a guaranteed slot on the wire and some doesn't.
Safety Integrated, demystified. Why the safety program is a protected world of its own, F-blocks & the F-runtime group, PROFIsafe telegrams over the same wire, F-addresses & the passivation/reintegration dance, and SIL/PL with the lifecycle.
Where logic finally moves a servo. Technology Objects, configuring a positioning axis, the PLCopen-style MC_ instructions (Power, MoveAbsolute, MoveJog), homing, and what the S7-1500T adds for cams and gearing.
The capstone skill: going online, monitoring blocks live, watch & force tables, the diagnostic buffer that timestamps every event, system & supervision diagnostics, the Trace tool, and the built-in web server for eyes on the CPU from anywhere.
Structured Control Language end to end: declarations & #temp variables, IF/CASE/FOR/WHILE, REGION folding, calling FBs & FCs from code, slice access (%MW10.%X0), and the patterns that make SCL beat ladder for anything with maths or loops.
The memory-layout deep dive: how optimized access packs and reorders variables for speed, why there are no byte offsets, the cost of standard access & absolute addressing, retentivity, and migrating an old standard-DB project without breaking every HMI tag.
Under the hood of the network: the provider/consumer model, the bus cycle & update times, RT vs IRT scheduling, the GSDML file, assigning device names & the DCP protocol, and reading a topology mismatch from the diagnostics.
How a safety telegram stays trustworthy over an ordinary network: the F-message wrapper, the consecutive number & CRC, the F-monitoring time & watchdog, F-destination/source addresses, and the passivation that trips on the first hint of doubt.
Reuse with discipline: master copies vs types, the project & global libraries, versioned types and what a version bump ripples through, deploying a corporate library across a fleet, and keeping twenty machines on one source of truth.
The hardware deep dive: who's who in the cabinet — S7-1200, S7-1500 and its fail-safe F variant, the ET 200SP/pro distributed controllers, the S7-1500 Software Controller on a PC, and legacy S7-300/400 — plus a choose-your-controller ladder to match a CPU to a machine.
The bigger picture: TIA Portal as one integrated framework for PLC (STEP 7), HMI (WinCC), drives, safety and networks — one project, shared tags — and how the pieces fit together with an interactive integration map.
How a safety program becomes demonstrably safe: the collective F-signature as a tamper-evident fingerprint (edit an F-block live and watch it break), the acceptance test you run fault by fault, the Safety Administration editor, and the change-management rules — who re-tests what, and who signs.
Zoom all the way into the two blocks you write code in: FC vs FB and the memory line between them, why Siemens' built-in instructions (TON, MOVE, SCALE_X…) are themselves FCs & FBs, and an interactive tour of every interface section — Input, Output, InOut, Static, Temp, Constant & Return — and how each becomes a pin.
The deep dive that turns Track 08's safety program into a defensible claim: break the collective F-signature live, run a six-step acceptance test with measured stop times, and learn the change-management rules that keep the protocol honest. Now live — open it →