Unlock CPU311 Keylock Active on IC693PRG300 HHP

Unlocking Keylock Active on IC693PRG300 Handheld Programmer with CPU311

Field engineers often encounter a "Keylock Active" message when connecting the IC693PRG300 Hand-Held Programmer (HHP) to a Series 90-30 CPU311. This status usually means the OEM has enabled protection inside the PLC. Therefore, the HHP cannot read program logic or configuration data until a specific reset sequence is performed. The following guidance draws on GE Fanuc documentation GFK-0402G and verified field practice in industrial automation environments.

How the Keylock Protection Works

Security State, Not a Fault

The "Keylock Active" display reflects an active security state. It is not a hardware fault. The CPU311 supports four standard password levels plus a separate OEM protection key. When OEM protection is locked, read and write privileges are denied to end users regardless of password level. Moreover, the HHP works as a passive terminal. It draws power from the CPU programming port and relies on the CPU for all logic processing. As a result, the unlock action must target CPU memory, not the HHP hardware.

Why the HHP Cannot Bypass Protection

The handheld unit has no internal logic engine. It simply displays CPU responses. Therefore, technicians should focus on the PLC memory state rather than the programmer itself. This distinction matters in factory automation troubleshooting, where teams often replace the HHP before checking the CPU.

Primary Unlock Method: Power-Up Key Sequence

Clearing SRAM with CLR and M/T

A factory reset sequence during power-up clears the SRAM contents of the CPU311. This action removes the OEM protection key along with configuration data. First, connect the HHP to the CPU311 programming port using cable IC693CBL303. Then press and hold the CLR and M/T keys together. While these keys remain depressed, apply power to the PLC. Hold the keys until the HHP screen shows the mode selection prompt, typically after the ROM CHECK OK and RAM CHECK OK messages clear. Field reports confirm that holding both keys for an additional 2 to 3 seconds after power-up ensures the reset completes reliably.

Timing and Expected Duration

The entire sequence takes approximately 5 to 8 seconds. Upon release, the CPU311 returns to its out-of-box configuration state. The flash memory program remains intact, but it will execute with default parameters. In addition, the CPU loses real-time clock settings and runtime reference values stored in SRAM. A complete reconfiguration may be necessary if the original program relied on specific data table initializations.

Verification and Post-Unlock Behavior

Confirming the OEM Lock Is Cleared

After the reset sequence, the HHP should no longer display "Keylock Active." Instead, the default access level is presented. The technician should verify successful unlocking by entering Configuration mode or pressing the RUN/STOP toggle. If these actions execute without a "PROTECT" or "DAT ERR" message, the OEM lock has been cleared. According to field data, the success rate for this method on CPU311 units exceeds 95 percent when the key sequence is timed correctly.

What Persists and What Is Lost

The flash program persists through this procedure. However, runtime values and clock settings do not. Therefore, maintenance teams should document data table initializations before performing the reset. This practice supports control systems reliability and reduces unplanned downtime.

Alternative Considerations for Persistent Protection

When the Power-Up Sequence Fails

If the power-up sequence fails to clear the keylock, the OEM protection may reside in non-volatile memory that survives SRAM resets. In such cases, a battery disconnect method is sometimes suggested. Nevertheless, this approach requires opening the PLC enclosure and allowing 8 to 12 hours for capacitor discharge. That duration is impractical for most maintenance windows. Consequently, the HHP reset sequence remains the preferred field solution.

Cable and Power Checks

Technicians should also verify that the HHP cable is fully seated. A loose connection can cause the power-up sequence to be ignored by the CPU. The IC693PRG300 draws 80 to 150 milliamps from the CPU port during normal operation. If the HHP backlight illuminates but the display remains blank, the cable may be faulty rather than the CPU being locked. Moreover, a faulty cable is a common root cause in factory automation service calls.

Compatibility Notes for CPU311 and HHP

Supported CPU Models

The CPU311 belongs to the early Series 90-30 family that fully supports the IC693PRG300 HHP. Higher CPU models, specifically the 350 and above, do not support the HHP or its memory card interface. Therefore, the procedure described here applies exclusively to CPU311 through CPU341 models.

Plug-and-Play Field Advantages

The HHP communicates via an RS-422 compatible port and requires no baud rate or protocol configuration. This plug-and-play characteristic makes the HHP uniquely suited for field recovery when a laptop running Logicmaster is unavailable. The 42-key sealed keypad and two-line by 16-character LCD remain legible in most plant environments. These hardware specifications ensure that the unlock sequence can be performed without additional diagnostic equipment.

Author Insight: Why This Procedure Still Matters

Legacy PLCs in Modern Plants

Many production lines still rely on Series 90-30 controllers for packaging, material handling, and utility monitoring. As a result, field technicians need fast recovery methods that do not depend on engineering laptops. The HHP reset sequence offers a practical example of experience-based troubleshooting in industrial automation. In my view, teams should document this sequence in their maintenance SOPs and keep a known-good IC693CBL303 cable on site.

Balancing Security and Serviceability

OEM protection protects intellectual property, but it can also slow down emergency repairs. Therefore, plant owners should record unlock procedures and password policies during commissioning. This step improves both control systems security and serviceability. Moreover, it supports a balanced approach to factory automation governance.

Application Case: Packaging Line Recovery

Scenario and Outcome

A packaging line using a CPU311 stopped after a program download attempt. The HHP displayed "Keylock Active," and the OEM had enabled protection. The technician connected the IC693PRG300, held CLR and M/T, and cycled power. Within 8 seconds, the mode prompt appeared. The team then reloaded default parameters and restored data table values from a backup. The line returned to service in under 30 minutes. This case shows how a simple reset sequence can support factory automation uptime when a laptop is unavailable.

Recommended Field Checklist

Before starting, confirm the cable is fully seated. Next, verify the HHP backlight is on. Then perform the key sequence and hold for the full duration. Finally, test RUN/STOP and Configuration mode. This checklist reduces errors and improves first-time success rates in industrial automation maintenance.

Frequently Asked Questions

1. Is "Keylock Active" a fault code on the CPU311?

No. It indicates that OEM protection is enabled. The CPU is functioning, but read and write access is restricted.

2. Will the power-up reset erase the flash program?

No. The flash program remains intact. However, SRAM data, runtime values, and clock settings are lost.

3. Which keys must I hold during PLC power-up?

Press and hold the CLR and M/T keys together. Keep them depressed until the mode selection prompt appears.

4. Does this procedure work on CPU350 and higher models?

No. The IC693PRG300 HHP supports CPU311 through CPU341 models. Higher CPUs do not support the HHP interface.

5. What should I check if the reset sequence fails?

Check the cable seating first. A loose IC693CBL303 connection can cause the CPU to ignore the key sequence. Also verify the HHP backlight.

Contact Information

Inquiries: sales@nex-auto.com | +86 153 9242 9628

Partner NexAuto Technology Limited: https://www.nex-auto.com/

Check below popular items for more information in AutoNex Controls