Cybersentry Security - GE G30 Instruction Manual

5.2 PRODUCT SETUP
The following settings are available through the remote (EnerVista UR Setup) interface only. Select the Settings > Product
Setup > Security menu item to display the security settings window.
The Remote Settings Authorized setting is used for remote (Ethernet or RS485 interfaces) setting access supervision. If
this setting is "On" (the default setting), then remote setting access functions as normal; that is, a remote password is
required). If this setting is "Off", then remote setting access is blocked even if the correct remote setting password is pro-
vided. If this setting is any other FlexLogic operand, then the operand must be asserted (set as on) prior to providing the
5
remote setting password to gain setting access.
The Access Authorized Timeout setting represents the timeout delay remote setting access. This setting is applicable
when the Remote Settings Authorized setting is programmed to any operand except "On" or "Off". The state of the Flex-
Logic operand is continuously monitored for an off-to-on transition. When this occurs, remote setting access is permitted
and the timer programmed with the Access Authorized Timeout setting value is started. When this timer expires, remote
setting access is immediately denied. If access is permitted and an off-to-on transition of the FlexLogic operand is detected,
the timeout is restarted. The status of this timer is updated every 5 seconds.
a) SETUP
This section applies if the CyberSentry option is included with your relay.
When first using CyberSentry security, use the following procedures for set up.
First, activate and log in.
1. Log in to the relay as Administrator by using the Value keys on the front panel to enter the default password
"ChangeMe1#". The "Lock relay" setting needs to be disabled in the Security > Supervisory menu. Disabling this set-
ting allows settings configuration and firmware upgrade.
2. Enable the Supervisor role if you have a need for it.
3. Log out the Administrator account, then log in as Observer.
Next, local or remote authentication can be used. Use local authentication to log in using the five pre-configured roles
(Administrator, Supervisor, Engineer, Operator, Observer). When using a serial connection, only local authentication is sup-
ported. For remote authentication, the RADIUS server requires configuration, as outlined here. A window opens when log-
ging in and allows you to choose the authentication mechanism. The choice of authentication type (server versus device)
and the capacity to configure server parameters are available only in the EnerVista software.
The use of local authentication for devices with 7.x firmware equipped with CyberSentry when com-
municating through an Ethernet-to-RS485 gateway is not supported. Because these gateways do not
support the secure protocols necessary to communicate with such devices, the connection cannot be
established. Use the device as a non-CyberSentry device.
5-12 G30 Generator Protection System
5 SETTINGS

5.2.2 CYBERSENTRY SECURITY

GE Multilin