Put back M580 to factory reset

[CCM]

As this subject is locked 
https://community.se.com/t5/Modicon-PAC-Forum/How-to-Reset-a-M580-CPU/td-p/378726 

We locked a BEMP585040 CPU with filtered engineering mode bad configuration.

We load this configuration with USB cable.

- With Engineering mode "filtered", you can't anymore reload application by USB.

- IP address of the access control is out of the range of the IP adress of the card so we can't connect with Ethernet port (no default gateway exist on our network).

the funny thing is we have all the passwords, but we can't connect physically in engineering mode.

We use control expert 16.0 and CPU Firmware is 4.2.

So let's go back to this topic. we did not success to execut this operation to factory reset our CPU.

- Does it still work (my engineer execute this operation with  CPU V3.x when he get trainned and it worked 2 year ago) ?

- Does there is an update of this procedure?

Thanks in advance.

[ciupol]

You can try to press Reset button on the power supply. It should clear the controller.

[EnrikeP]

Firmware 4.2 has a ton of issues generated by the technical team, seeking to protect the CPU as much as possible for cybersecurity. It's no longer possible to connect with UnityLoader. They've released another tool, EADM, but it's not yet fully operational.
I've been experiencing issues with this firmware version for six months.
It's already scaled to the maximum level, and the answer is that they'll release a fix sometime in 2025.
My advice is to downgrade to firmware 3.2 if you have a CPU running 4.2.

[Trinxs1]

When connecting to the PLC use the appropriate driver to connect. 
With PLC security enabled in "filtered" or "enforced" mode use the "HTTPS via USB" driver setting for a USB connection or "HTTPS" for connection via ethernet.   In "filtered" mode it is possible to connect in monitor only mode via "Modbus TCPIP" or "Modbus TCP via USB". 
In either case the CPU must be registered in the Security whitelist (using its Main CPU IP address), you must be using ECE V16 .0 or later, you will need to know the application password to access the project file and the CPU when connecting for the first time online.

There is no specific setting for the USB address in the whitelist.   

I may not have covered any existing or unknown issues but hopefully this explains the basics for connection to the PLC.  The alternative may be to reset the PLC and start again.  If you do not know the password, when the window appears to enter the password press the SHIFT+F2 button.  This should reveal a string of characters that can be sent to technical support.  Typically overnight on a work week the level 3 support should be able to provide a one off password that will allow connection to the PLC for you to upload the application or download a new application over the top of the existing with a password that you know.

[CCM · Accepted solution]

we used a solution based on this and it worked. To resume:

1) we known the password

2) our IT team give us a blanck Laptop without any windows policy who can block us.

3) we installed Control expert and security editor.
then, we follow L2 expert recommendations as :
Since the Engineering Link mode is set to "Filtered" the connection mode for "Programming" reasons should be through secure drivers (HTTPS or HTTPS via USB).

To connect via HTTPS, you must create a valid certificate. This can be achieved by using the "Security Editor" to create a new certificate for the PLC's IP address. Use the three-dot button next to "valid" to install the certificate in the trusted folder. As seen in the attached Image_SecurityEditor (Use the PLC's IP address; the address provided is for illustrative purposes only).

After this, restart your PC and try connecting via the HTTPS.

Please note that if you haven't used the Security Editor application, it will prompt you to create a username and password when you run it for the first time. I recommend saving these credentials in a safe place, as the only way to reset them is to reinstall Control Expert.

You can find the Security Editor manual at the following link:
https://download.schneider-electric.com/files?p_Doc_Ref=EIO0000004105&p_enDocType=User+guide&access=...

Also you can find the detailed procedures of configuring a secure connection in page 108 in the below link:
https://download.schneider-electric.com/files?p_enDocType=User+guide&p_File_Name=EIO0000001999-12_Mo....

hope it will help people in the same case as us.
If you don't have password, i still did not find any way to go back to factory reset.