Control System Retrofit: Migrating S5 and S7-300/400 to TIA Portal

S5 or S7 Classic: program, hardware and HMI move to an S7-1500 or S7-1200 with WinCC Unified — often without rebuilding the control cabinet, with a downtime window of days rather than weeks.

for the engineering, after the site survey
Fixed price
replaced — cabinet & wiring remain
CPU + I/O
of downtime instead of weeks — known in advance
A few days
Schematic · Component retrofit S5 → S7-1500
Component retrofit schematic of an existing cabinet (before/after): old S5 rack replaced, new S7-1500 on the DIN rail — terminals, contactors and wiring remain

In short

Whether the plant runs SIMATIC S5 or S7 Classic, meaning S7-300/400 with STEP 7 V5.x and WinCC flexible, we migrate both starting points to TIA Portal. The target is an S7-1500 or S7-1200 with WinCC Unified, usually in the existing cabinet. S5 spare parts ended in 2020; the S7-300 has been spare-part-only since October 2025. Testing happens on real target hardware before your plant stops.

Why now?

For the S5 the deadline has already passed; for the S7-300 it is running. These points set the schedule:

  • The S5 has been at the end of its product life cycle since 30 September 2020 — no spare parts or repairs from Siemens.
  • The S7-300 has been phased out: since 1 October 2025, S7-300 and ET 200M modules are available only as spare parts or through repair. Siemens states availability until 2033.
  • The EU Machinery Regulation 2023/1230 applies from 20 January 2027 with no transition period — anyone who completes and documents their retrofit in 2026 is still assessed under the familiar rules of the old directive.
  • New plant equipment relies on PROFINET and OPC UA — the S5 supports neither, and the S7-300 connects to them only to a limited extent or via additional modules.

Two starting points, one target: TIA Portal

The route into TIA Portal depends on what is in the cabinet today. CPU and I/O are replaced in both cases; the difference lies in the software:

  • From S5: the STEP 5 program is backed up from the CPU or EPROM module, along with the assignment list if it still exists. The S5/S7 converter in STEP 7 V5.x turns it into a STEP 7 project; what it cannot convert is reworked by hand. The error-free project is then migrated to TIA Portal and switched to the S7-1500 — or, for heavily grown programs, rebuilt in a structured way.
  • From S7-300/400: the consistent STEP 7 V5.x project is migrated to TIA Portal — as of TIA Portal V21 via the Migration Tool and TIA Portal V20. PLC migration moves the program to the S7-1500, the hardware configuration is set up anew, open points appear in the migration log. STL keeps running on the S7-1500; the S7-1200 supports only LAD, FBD and SCL. WinCC flexible cannot be carried straight over to WinCC Unified — the HMI is rebuilt, and texts can partly be transferred with tool support.

No offline project left? Reverse engineering and re-documentation

On legacy plants the original project is often lost — the company that wrote it no longer exists, and all that remains is the online upload from the CPU. It contains neither symbols nor network comments, and without the SCL sources the editor shows nothing but raw STL. On S5 systems the assignment list is often missing as well. Migrating such a program 1:1 would only preserve its unreadability. Instead, a clean new program base is created:

  • Reverse engineering before the rebuild: call structure, cross-references and data blocks are analysed and documented as a functional description — checked against the running plant.
  • Symbols from the circuit diagram: the symbol table is reconstructed from your schematics — even from scanned PDFs, extracted with AI support and structured to a consistent naming convention.
  • The logic stays, readability returns: the online upload serves as the reference for the proven plant logic, and the program is rebuilt throughout in FBD — with network comments and meaningful data block names.
  • Afterwards, the next maintenance technician understands again what the plant is doing — extensions and troubleshooting are no longer guesswork.
Before/after comparison from a real retrofit without an offline project (anonymized): raw STL code without symbols from the online upload on the left (FC55, FC170), the same blocks after the rebuild in TIA Portal on the right — FBD with symbols, network titles and meaningful data block names

Component retrofit instead of a complete rebuild

If the control cabinet is mechanically and electrically sound, only the automation level is replaced: CPU, I/O modules and operator device. Terminals, line protection and wiring stay in place. A real example from the Saar-Lor-Lux region: S7-300 out, S7-1200 including a Unified Basic Panel in — in the existing cabinet, on the existing wiring, with updated circuit diagrams. From a single source and considerably cheaper than any complete-rebuild offer.

How your retrofit works

Six steps from the legacy system to a modern controller:

  1. Site survey — the PLC program is the source of truth; the circuit diagrams are checked against it. If the offline project is missing, the online upload is secured and the symbols are reconstructed from the circuit diagrams.
  2. Hardware mapping — every module gets its successor; any intervention in safety functions is flagged before the order, so your safety assessment doesn't reopen afterwards.
  3. Program in TIA Portal — symbolic names and blocks to standard rather than a 1:1 carry-over; the proven plant logic is preserved.
  4. HMI rebuild — WinCC Unified with a consistent screen concept and web access instead of carried-over WinCC flexible screens.
  5. End-to-end test — the complete system runs beforehand in the test setup on real target hardware; every button, every message, every sensor.
  6. Commissioning & handover — with revised circuit diagrams, symbol tables, HMI documentation and the safety records from the software side.

Affordable through structure and tools

One person in charge instead of many departments, AI-accelerated engineering for the legwork — you pay for the work that requires experience. Importantly: no AI runs in the controller itself. The PLC works with deterministic, tested logic — exactly as safety and standards require. As a bonus, OPC UA gives the plant a standardized, read-only data interface — the foundation for monitoring and analysis.

Frequently Asked Questions

Who migrates S5 and S7-300 to TIA Portal as an external service provider?

We cover both starting points: S5 as well as S7-300/400 with STEP 7 V5.x and WinCC flexible, targeting an S7-1500 or S7-1200 with WinCC Unified. The scope covers site survey, re-documentation of undocumented legacy programs, program and HMI in TIA Portal, testing on target hardware, commissioning and handover. Based in Luxembourg; core area Saar-Lor-Lux and Switzerland, projects across the DACH region, commissioning worldwide.

Can an S5 program be transferred directly to TIA Portal?

Not in a single step. The route goes via STEP 7 V5.x: the S5/S7 converter turns the STEP 5 program into a STEP 7 project, and instructions it cannot convert are reworked by hand. Only then can the project be migrated to TIA Portal and switched to an S7-1500 — for heavily grown programs, a structured rebuild often makes more sense.

What does the S7-300 phase-out mean for our plant?

The plant keeps running, but spare parts are getting scarcer. Since 1 October 2025, Siemens has supplied S7-300 and ET 200M modules only as spare parts or through repair, with availability stated until 2033. No need to rebuild immediately — but time to plan the migration rather than rush it after a failure.

Will our STL code keep running on the S7-1500?

Essentially yes — the S7-1500 supports STL. A few constructs no longer exist there, such as the master control relay or the ENT and LEAVE instructions; the migration log lists them, and they are adapted by hand. The S7-1200 has no STL, so the blocks are rewritten in LAD, FBD or SCL.

What does a control system retrofit cost?

A component retrofit usually costs considerably less than building a complete new control cabinet, because the cabinet and wiring stay in place. The site survey sets the specific frame: after it, we quote the engineering at a fixed price, while commissioning is usually billed on a time basis, because it depends on the mechanical and electrical work being ready. Only the automation level is replaced; how large the scope turns out depends on the existing installation. That is why every project starts with the site survey, before any estimate.

How long will my plant be down?

Programming and the complete system test run beforehand in the test setup — at the plant it is only a matter of rebuilding, testing and starting up. The downtime window is therefore typically an extended weekend to a few days, and it is known before the rebuild.

We no longer have an offline project, only the running plant — is a retrofit still possible?

Yes — this case is more common than you might think. The online program is uploaded from the CPU; it provides the plant logic even though symbols, comments and SCL sources are missing. The symbol table is reconstructed from the circuit diagrams, and the program is then rebuilt in readable FBD instead of being carried over unreadable. Strictly speaking this is no longer a migration but a re-engineering — with the advantage that your plant ends up with a documented, maintainable software base again.

Does the control cabinet have to be replaced?

In most cases, no: the automation level is replaced, the cabinet and its wiring stay in place. If the cabinet really is at the end of its life, a control-cabinet-building partner company handles the new build — software, visualization and commissioning remain from a single source.

What documentation do I receive at handover?

Revised circuit diagrams showing the plant's real final state, complete symbol tables and block documentation, HMI operating documentation and training for operators and maintenance. For failsafe programs, the safety records from the software side are added: documented safety functions, achieved performance level, F-parameters and test records. What we don't take on is the CE assessment itself — we provide software and engineering services and don't place machinery on the market. Conformity assessment and declaration remain with the operator or the machine manufacturer; our documents feed in there as evidence. All details on the process are in the retrofit guide on the blog.

A site survey instead of gut feeling

Module risk list, program and documentation check, a reliable cost framework — as a standalone, manageable service before any commitment.

Request a site survey

✓ Non-binding initial consultation✓ Response time < 24h on business days