When you download a project to a PNOZmulti base unit (e.g., PNOZ m B0, m B1, m B16), you can set a device password. This prevents unauthorized users from uploading the program from the hardware to a PC.
If you search online, you may find references to an older password often used in training environments or early firmware versions:
Pilz1987 (case-sensitive)
Let’s be explicit: Pilz1987 (with a capital P and no spaces) has been documented in some legacy Pilz support forums as a factory default for certain base unit memory cards or project protections. However, Pilz has never officially published a universal default password for the modern PNOZmulti Configurator (Version 10 and above). Relying on this is risky.
Introduction The PNOZmulti series from Pilz is a cornerstone of modern industrial safety automation, enabling configurable, modular safety systems for machinery worldwide. Central to its operation is the PNOZmulti Configurator software, which allows engineers to design safety circuits using function blocks. While the software and hardware offer robust safety features, a recurring operational security concern is the handling of the default password used to protect project files and hardware against unauthorised modifications. This essay examines the nature of this default credential, the risks it introduces, and the critical need for its immediate change.
The Nature of the Default Password
By default, a newly created PNOZmulti project is not necessarily encrypted with a unique user-defined password. Instead, the system relies on a well-known, manufacturer-defined default password (historically often documented as Pilz or a similar simple string, depending on firmware and software version). This password is intended to allow initial access during commissioning. However, because this information is publicly available in Pilz manuals, online forums, and support documentation, it ceases to be a security measure and instead becomes a standard key accessible to anyone—from maintenance staff to external attackers.
Security Implications The primary risk of leaving the default password active is unauthorised access to the safety logic. A PNOZmulti system controls emergency stops, light curtains, safety gates, and two-hand controls. If an operator or malicious actor can connect to the device using the default password, they could:
Unlike IT systems, where a breach might lead to data theft, a breach in a safety PLC can lead directly to physical harm, machine damage, or regulatory non-compliance with standards like ISO 13849 and IEC 62061.
Contrast with Physical Safety It is vital to distinguish between functional safety (the ability of the system to respond correctly to a hazard) and security (preventing unauthorised modification). A PNOZmulti base unit will still execute its last valid program even if the default password is unchanged—functional safety is not immediately lost. However, the integrity of that safety function is compromised if an attacker can alter the logic. Thus, the default password represents a gap in security that directly undermines safety integrity over time.
Mitigation and Best Practice The solution is straightforward and explicitly stated in Pilz documentation: Change the default password during project finalisation. Best practices include: pnozmulti configurator default password
Conclusion The PNOZmulti Configurator’s default password is a necessary convenience for initial setup but a critical vulnerability if left untouched. In industrial safety, where the convergence of cybersecurity and functional safety is now recognised by standards like IEC 62443, ignoring default credentials is no longer acceptable. Engineers must treat changing the default password with the same seriousness as testing a safety relay or verifying a stop category. A safety system is only as secure as its weakest configuration element—and a default password is an invitation for preventable failure.
Note: For current specific default password values, always refer to the latest PNOZmulti Configurator manual from Pilz, as defaults may vary by firmware version. The essay focuses on the principle rather than a single static credential.
Understanding PNOZmulti Configurator Passwords When working with the Pilz PNOZmulti Configurator, managing passwords is a critical step for machine safety and configuration. Unlike many industrial devices that ship with a single factory-default login, the PNOZmulti system uses a multi-level password structure that is typically defined by the user during the initial project setup. Common Default Passwords
While there is no universal factory default for every project, certain "standard" credentials are often used for testing, sample projects, or by system integrators during commissioning.
Sample Projects: Official sample projects from Pilz frequently use the following defaults: Level 1: 1 Level 2: 2 Level 3: 3
Common Industry Defaults: If the project was commissioned without custom high-security credentials, integrators sometimes use: pilz (all lowercase) Sequential numbers (e.g., 1234) The Three Password Levels
The PNOZmulti Configurator utilizes three distinct access levels to maintain safety integrity. Each level must have a unique password, and they cannot be the same.
Level 1 (Full Access): Allows users to modify logic, save changes, and transfer projects to the hardware.
Level 2 (Read-Only): Allows users to view the program and diagnostics but prevents any modifications or saving. When you download a project to a PNOZmulti base unit (e
Level 3 (Limited Modification): Often reserved for commissioning; allows changes to specific blocks that may need field adaptation without opening the entire safety logic for editing. Password Recovery and Resets
If you have forgotten your password or inherited a locked system, the options for recovery are limited by design to ensure safety.
Check Documentation: The original program designer is required to document passwords during the safety validation process.
Contact the OEM: Reach out to the original equipment manufacturer (OEM) or machine builder who commissioned the system; they typically keep backups of the original project files.
Hardware Reset: If the project file is completely inaccessible and the password is lost, you may need to return the base unit to Pilz Technical Support for a factory reset. This will wipe the existing safety program.
Note: Always change default passwords immediately after the first login to prevent unauthorized manipulation of safety-related parameters. Sample projects PNOZmulti Configurator - Pilz US
Pilz PNOZmulti Configurator , the default password depends on the specific project type you are accessing. Default Passwords General Level 1 Password: Sample Projects (Factory Defaults): Quick Guide to Password Levels
The software uses three levels of access to manage security and prevent unauthorized changes: Level 1 (Full Access): Allows you to modify and save the safety project. Level 2 (Read-Only): Allows you to the logic and configuration but prevents any modifications. Level 3 (Limited Edits):
Allows changes to specific blocks that may need adjustment during commissioning (e.g., timer values). How to Enter/Change Passwords Opening a Project: When prompted, click the Select level field and choose the desired access level. Enter the password (e.g., Enter password field and click Configuring New Passwords: To set or change passwords for a new project, go to the menu in the menu bar at the top of the interface. Configuration Basics Hardware Setup: Unlike IT systems, where a breach might lead
Define your base unit (e.g., MB0 for small projects, MB1 for larger ones) and any expansion I/O modules. Logic Creation: Drag and drop Function elements (E-STOP, safety gates) and Logic elements from the palettes onto the workspace.
Once the logic is complete and certified within the software, transfer the project to the hardware via the LC Automation For detailed technical documentation, you can refer to the PNOZmulti Technical Catalogue RS Components , such as an Emergency Stop? Modular Safety System PNOZmulti - LC Automation
Configure logic elements. Connect elements with each other. Transfer project to the PNOZ m1p. LC Automation Sample projects PNOZmulti Configurator - Pilz INT
What are the passwords for the sample projects in the PNOZmulti Configurator? Software small controllers. Password - - Level 2. 2.
Understanding and Configuring PNOZmulti with its Default Password
In the realm of industrial automation and safety, the PNOZmulti series by Pilz stands out as a comprehensive solution for safety controllers. These controllers are designed to ensure the safety of personnel and machinery in various industrial applications. The PNOZmulti configurator is a crucial tool for setting up and programming these safety controllers. However, users often encounter a common challenge: accessing the configurator due to forgotten or unknown default passwords.
This article aims to guide you through the process of understanding the PNOZmulti configurator, its default password, and how to reset it if necessary. We will also provide insights into the configuration process, ensuring that you can make the most out of your PNOZmulti safety controller.
Some PNOZmulti units use a removable memory card. The card can be password-protected independently.
PNOZmulti is a range of safety controllers from Pilz, a renowned manufacturer in the field of safety technology. These controllers are used to monitor safety functions in machinery and plants, ensuring that operations are conducted safely. The PNOZmulti series offers a modular design, allowing for flexible configuration to meet the specific safety requirements of different applications.