GE N60 Instruction Manual page 139

CHAPTER 5: SETTINGS
— When Enabled, the device can go into factory service mode. For this setting to become enabled a
FACTORY SERVICE MODE
Supervisor authentication is necessary. The default value is Disabled.
— When Enabled, the Supervisor role is active. To Disable this setting a Supervisor authentication is
SUPERVISOR ROLE
necessary. If disabled, the Supervisor role is not allowed to log in. In this case, the Administrator can change the settings
under the Supervisory menu.
If enabled, Supervisor authentication is required to change the settings in the Supervisory menu. If the Supervisor disables
their role after authentication, the Supervisor session remains valid until they switch to another role using MMI or until they
end the current Supervisor session if using communications.
This role is disabled by default.
— The role logged via a serial port is auto logged off after the Serial Inactivity timer times out. A
SERIAL INACTIVITY TIMEOUT
separate timer is maintained for RS232 and RS485 connections. The default value is 1 minute.
Self-tests
SETTINGS  PRODUCT SETUP  SECURITY  SUPERVISORY  SELF TESTS
 SELF TESTS

— If this setting is Enabled then the number of failed authentications is compared with the Session
FAILED AUTHENTICATE
Lockout threshold. When the Session Lockout threshold is exceeded, this minor alarm indication comes up.
— If this setting is Enabled, then any firmware upgrade operation attempt when the Lock Relay setting is
FIRMWARE LOCK
enabled brings up this self test alarm.
— If this setting is Enabled then an unauthorized write attempt to a setting for a given role activates this self
SETTINGS LOCK
test.
SETTINGS  PRODUCT SETUP  SECURITY  SUPERVISORY  SELF TESTS  FAILED AUTHENTICATE
 FAILED
 AUTHENTICATE
CyberSentry setup
When first using CyberSentry security, use the following procedure for setup.
1. Log in to the relay as Administrator by using the
"ChangeMe1#". Note that the Lock Relay setting needs to be disabled in the Security > Supervisory menu. When this
setting is disabled, configuration and firmware upgrade are possible. By default, this setting is disabled.
2. Enable the Supervisor role if you have a need for it.
3. Make any required changes in configuration, such as setting a valid IP address for communication over Ethernet.
4. Log out of the Administrator account by choosing None.
5. Next, Device or Server authentication can be chosen on the login screen, but the choice is available only in EnerVista.
Use Device authentication to log in using the five pre-configured roles (Administrator, Supervisor, Engineer, Operator,
Observer). When using a serial connection, only Device authentication is supported. When Server authentication is
required, characteristics for communication with a RADIUS server must be configured. This is possible only in the
EnerVista software. The RADIUS server itself also must be configured. The appendix called RADIUS Server at the end of
this instruction manual gives an example of how to set up a simple RADIUS server. Once both the RADIUS server and
the parameters for connecting the UR to the server have been configured, you can choose Server authentication on
the login screen of EnerVista.
N60 NETWORK STABILITY AND SYNCHROPHASOR MEASUREMENT SYSTEM – INSTRUCTION MANUAL
 FAILED

 AUTHENTICATE
FIRMWARE LOCK:

Enabled
SETTINGS LOCK:

Enabled
FAILED AUTHENTICATE:

Enabled
keys on the front panel to enter the default password
VALUE
See below
Range: Enabled, Disabled
Range: Enabled, Disabled
Range: Enabled, Disabled
PRODUCT SETUP
5
5-23