Password Security - GE Multilin 350 Series Instruction Manual

S1 RELAY SETUP

Password security

6–8
Courtesy of NationalSwitchgear.com
IRIG-B:
Range: Disabled, Enabled
Default: Disabled
This setting enables the IRIG-B signal for time stamp synchronization.
1. Set the IRIG-B to "Enabled" if the IRIG-B device is connected to the relay IRIG-B
terminals. The relay will display the message "IRIG-B failure" in the case of either no
IRIG-B signal from the connected IRIG-B device, or when the signal cannot be
decoded.
2. Set the date and time per the specified date and time format.
3. Set the start time of the Daylight Saving (DLS) time, by selecting the Month, the Week
of the month, and the Weekday defining the beginning of the Daylight Saving time.
4. Set the end of the Daylight Saving time, by selecting the Month, the Week of the
month, and the Weekday defining the end of the Daylight Saving time.
The clock has a super-capacitor back-up, so that time, date, and events will be kept for up
to 3 days in cases of loss of relay control power.
Password security features are designed into the relay to provide protection against
unauthorized setpoint changes and control. The relay has programmable passwords for
both Local and Remote access, which can be used to allow setpoint changes and
command execution from both the front panel and the communications ports. These
passwords consist of 3 to 10 alphanumeric characters. The Local and the Remote
passwords are initially set after entering in a Master Reset Password (MRP). The Master
Reset Password (MRP) is set to "NULL" when the relay is shipped from the factory. When the
MRP is programmed to "NULL" all password security is disabled. The remote user may
choose to allow the local user to change the local passwords.
Each interface (RS485, Ethernet, USB, and front panel keypad) is independent of one
another, meaning that enabling setpoint access on one interface does not enable access
for any of the other interfaces (i.e., the password must be explicitly entered via the
interface from which access is desired).
The EnerVista SR3 Setup software incorporates a facility for programming the relay's
passwords as well as enabling/disabling setpoint access. For example, when an attempt is
made to modify a setpoint but access is restricted, the program will prompt the user to
enter the password and send it to the relay before the setpoint can actually be written to
the relay. If a SCADA system is used for relay programming, it is up to the programmer to
incorporate appropriate security for the application.
Aside from being logged out of security, which allows the user to read setpoints and actual
values only, three levels of security access are provided: Setpoint Level, Control Level, and
Master Level. The Setpoint and Control Levels can be attained either locally using the Local
passwords (USB port and keypad), or remotely using the Remote passwords (RS485 and
Ethernet ports). The user can have either Setpoint or Control Level active, but not both
simultaneously from the same interface. The Master Level is used for setting and resetting
of passwords, and includes all Setpoint and Control Level access rights. The Master Level
cannot be attained from the keypad. The Master Reset Password must be 8 to 10
characters in length, and must contain at least 2 letters and 2 numbers. The Master Level
can define whether the local user is permitted to change Local Passwords without having
to enter the Master Level. The Master Reset Password is encrypted, and is not viewable
from the keypad. If the Master Reset Password is lost, the user should contact the factory
to decrypt the Master Reset Password.
350 FEEDER PROTECTION SYSTEM – INSTRUCTION MANUAL
CHAPTER 6: SETPOINTS