Conditions; Connection Password; Confirmation Id - Siemens SIPROTEC 5 Operation Manual

10.4

Conditions

Connection Password

10.4.1
The connection password is NERC-CIP-compliant. The password must contain lower case and upper case
letters, digits and special characters (for example, %, &, $, etc.). The connection password must be at least 8
characters long and may include a maximum of 24 characters. This rule is verified by DIGSI 5 during entry. The
connection password is not set by default. To enter a new password, the existing characters are concealed by
asterisks. You must enter the connection password twice to confirm. This confirmation prevents erroneous
entries. An empty text box is prevented. You can deactivate the query of the connection password in DIGSI 5
under Security in the Password for secure connection section by removing the check mark.
NOTE
i
i
Deactivation of the connection password means that a user has access to the device through DIGSI 5. If you
wish to hinder this, set the connection password in the device.
[scaktvor-210311-01.tif, 1, en_US]
Figure 10-2
After entering a new connection password, the password is automatically transferred to the device (an empty
text box will not be accepted). Initialization of the connection password is possible only via the front USB inter-
face or via an Ethernet interface.
Further access to the device after connection is possible only if you have entered the connection password in
the DIGSI 5 dialog and communication with the device has been established. This procedure prevents unau-
thorized access. Siemens recommends that the connection password be checked after initialization.
A connection password is not copied from one device to another device. You must enter the password in
offline mode from DIGSI 5 for every individual device of a project.
You can change the connection password online via an Ethernet connection. After entering the previous pass-
word and entering and repeating the new password, the device accepts the change. This change is always
encrypted and tamper-resistant.
10.4.2

Confirmation ID

The confirmation ID consists of 6 digits, see
safety-critical actions, the query also protects against undesirable actions during operation. Use only DIGSI 5 to
set the confirmation IDs. After initialization of the confirmation ID with DIGSI 5, the query is saved in the
device.
Change the confirmation ID as follows.
•
Double-click the Security menu item in the project tree.
•
Click the Change button in the action column (see
SIPROTEC 5, Operation, Manual
C53000-G5040-C003-7, Edition 06.2016
Setting Window for the Connection Password and the Confirmation ID
Table 8-8. If DIGSI 5 is online with the device and you execute
Figure 10-2).
Security Settings in the Device

10.4 Conditions

205