Password Strengthening; Password Validation - GE MiCOM P40 Agile Technical Manual

Cyber Security
MiCOM P40 Agile P441, P442, P444
• FPort AccessLvl2
• RPrt1 AccessLvl1
• RPrt1 AccessLvl2
• RPrt2 AccessLvl1
• RPrt2 AccessLvl2
Where HMI is the Human Machine Interface.
Each pair of DDB signals indicates the access level as follows:
• Lvl 1 off, Lvl 2 off = 0
• Lvl 1 on, Lvl 2 off = 1
• Lvl 1 off, Lvl 2 on = 2
• Lvl 1 on, Lvl 2 on = 3
4.2

Password Strengthening

NERC compliant passwords result in a minimum level of complexity, and include these
requirements:
• At least one upper-case alpha character
• At least one lower-case alpha character
• At least one numeric character
• At least one special character (%,$...)
• At least six characters long
4.3

Password validation

The IED checks for NERC compliance. If the password is entered through the front panel
then this is reflected on the panel Liquid Crystal Display (LCD) display.
If the entered password is NERC compliant, the following text is displayed
The IED does not enforce NERC compliance. It is the responsibility of the user to ensure that
compliance is adhered to as and when necessary. In the case that the password entered is
not NERC-compliant, the user is required to actively confirm this, in which case the non-
compliance is logged.
If the entered password is not NERC compliant, the following text is displayed:
On confirmation, the non-compliant password is stored and the following acknowledgement
message is displayed for 2 seconds.
If the action is cancelled, the password is rejected and the following message displayed for 2
seconds.
If the password is entered through a communications port using Courier or Modbus protocols
the IED will store the password, irrespective of whether it is or isn't NERC-compliant, and
NERC COMPLIANT
P/WORD WAS SAVED
NERC COMPLIANCE
NOT MET CONFIRM?
NON-NERC P/WORD
SAVED OK
NON-NERC P/WORD
NOT SAVE
P44x/EN CS/Hb6
(CS) 15-13