Skip to main content

Why PM-LOGON?

PM-LOGON complements manual login with the simple and secure use of the company ID card. This saves time, minimizes errors during registration and ensures complete traceability – exactly where it matters.

The use of the company ID card makes even complex password rules manageable within the framework of increased security requirements, also with Two-factor authentication by using a PIN.

The image shows the PM‑LOGON self-service portal. Various RFID login options have been configured for a user.

Optimized and faster system access

PM-LOGON enables quick and easy user login using RFID tokens. This significantly speeds up access to SIMATIC HMI systems and reduces the manual effort required to enter login credentials.

One system for all – SIMATIC Logon and UMC combined

With PM-LOGON, Active Directory and UMC users are consolidated into a single instance – only a central PM‑LOGON server is needed to utilize both environments. This simplifies the operation of heterogeneous system environments.

Self-Service-Portal

With the built-in self-service, users can manage their own RFID tokens, passwords and PINs – without needing an administrator’s assistance. This reduces the workload on the IT department and significantly simplifies the process.

Featured capabilities

Login via RFID – fast, secure and convenient

With PM-LOGON, operators log on to SIMATIC HMI systems with their RFID token, e.g. the company ID card. PM‑LOGON automatically determines the corresponding user and enables an optional PIN to be requested. This makes the login process faster and more secure – especially in environments where frequent user changes at shared terminals are commonplace.

Icon for logging in via an RFID reader

Flexible Login Management

PM-LOGON integrates seamlessly into existing IT infrastructures: The local Windows user administration, Active Directory and UMC can be used as a user database. For heterogeneous systems, the integrated PM‑LOGON repository is available. Existing assignments of company ID cards can be easily imported to save administration time.

System architecture with various WinCC computers and RFID readers.

Central administration: PM‑LOGON Server

The PM-LOGON Server bundles any number of RFID readers and connects them to several target systems at the same time via freely configurable logon mappings. PM‑LOGON Runtime instances can both receive and forward login data. This means that a login is automatically transferred to other workstations – especially useful in complex systems with several stations.

System architecture consisting of various WinCC computers and RFID readers connected to the PM‑LOGON server.

RFID login directly on the panel

PM-LOGON enables RFID-based user login directly at SIMATIC Comfort and Unified Comfort Panels. The login information is securely transferred to the panel's user management system – without having to manually enter a password on the device. This means that operators at decentralized HMI stations also benefit from fast, safe and convenient user changes.

The image shows a panel with an RFID reader connected to it, which is used for logging in with a company ID card.

Modern authentication with FIDO2

In addition to logging in using RFID tokens, PM‑LOGON supports the FIDO2 standard. Use Windows Hello, your mobile device or other FIDO compatible devices for password free and convenient authentication on SIMATIC HMI systems, by means of, for example, fingerprint or facial recognition. Setup is fast and easy – without any IT effort via the integrated self-service portal.

Frequently asked questions