GE G30 Instruction Manual page 35

2 PRODUCT DESCRIPTION
• Password security — Basic security present in the default offering of the product
• EnerVista security — Role-based access to various EnerVista software screens and configuration elements. The fea-
ture is available in the default offering of the product and only in the EnerVista software.
• CyberSentry security — Advanced security options available as a software option. When purchased, the options are
automatically enabled, and the default Password security and EnerVista security are disabled.
Changing the password, or any other setting, does not take the relay out of service. The relay is taken out of service when
a settings file is written to it.
a) ENERVISTA SECURITY
The EnerVista security management system is a role-based access control (RBAC) system that allows an administrator to
manage the privileges of multiple users. This allows for access control of UR devices by multiple personnel within a substa-
tion and conforms to the principles of RBAC as defined in ANSI INCITS 359-2004. The EnerVista security management
system is disabled by default to allow the administrator direct access to the EnerVista software after installation. It is recom-
mended that security be enabled before placing the device in service.
Basic password or enhanced CyberSentry security applies, depending on purchase.
b) PASSWORD SECURITY
Password security is a basic security feature present in the default offering of the product.
Two levels of password security are provided: command and setting.
The following operations are under command password supervision:
• Changing the state of virtual inputs
• Clearing the event records
• Clearing the oscillography records
• Changing the date and time
• Clearing energy records
• Clearing the data logger
• Clearing the user-programmable pushbutton states
The following operations are under setting password supervision:
• Changing any setting
• Test mode operation
The G30 supports password entry from a local or remote connection. Local access is defined as any access to settings or
commands via the faceplate interface. This includes both keypad entry and the through the faceplate RS232 port. Remote
access is defined as any access to settings or commands via any rear communications port. This includes both Ethernet
and RS485 connections. Any changes to the local or remote passwords enables this functionality.
When entering a settings or command password via EnerVista or any serial interface, the user must enter the correspond-
ing connection password. If the connection is to the back of the G30, the remote password must be used. If the connection
is to the RS232 port of the faceplate, the local password applies.
Password access events are logged in the Event Recorder.
GE Multilin G30 Generator Protection System
2.1 INTRODUCTION
2
2-5