612
D90
PLUS
LINE DISTANCE PROTECTION SYSTEM – INSTRUCTION MANUAL
PASSWORD SECURITY
CHAPTER 13: SECURITY
Password Access Events
Range: Enabled, Disabled
Default: Disabled
This setting enables and disables the logging of password access supervision events in
the sequence of events recorder.
The dual permission security access feature provides a mechanism for customers to
prevent unauthorized or unintended upload of settings to a device through the local or
remote interfaces. The following dual permission security access settings are available.
Local Setting Authorization
Range: selected operands (see description below)
Default: ON
This setting is used for local (front panel USB and RS485 interface) setting access
supervision. Valid operand values are either “ON” (default) or any physical contact input
value.
If this setting is “ON”, then local setting access functions as normal; that is, a local setting
password is required. If this setting value is any contact input operand, then the operand
must be asserted (set as on) prior to providing the local setting password to gain setting
access.
Remote Setting Authorization
Range: any communications operand or shared operand
Default: ON
This setting is used for remote (Ethernet and RS485) setting access supervision.
If this setting is “ON” (the default setting), then remote setting access functions as
normal; that is, a remote password is required). If this setting is “OFF”, then remote
setting access is blocked even if the correct remote setting password is provided. If this
setting is any other operand, then the operand must be asserted (set as on) prior to
providing the remote setting password to gain setting access.
Access Authorization Timeout
Range: 5 to 480 minutes in steps of 1
Default: 30 minutes
This setting specifies the timeout delay for setting access. This setting is applicable when
the
Local Setting Authorization
or
Remote Setting Authorization
settings are
programmed to any operand except “ON” or “OFF”. The states of any selected operands
are continuously monitored for an off-to-on transition. When this occurs, setting access
is permitted and the timer programmed with this setting value is started. When this
timer expires, setting access is immediately denied. If access is permitted and an off-to-
on transition of the selected operand is detected, the timeout is restarted. The status of
this timer is updated every five seconds.
Password Access Events
Range: Enabled, Disabled
Default: Disabled
This setting enables and disables the logging of dual permission security access events
in the sequence of events recorder.
Password security operation
By default, when an incorrect command or setting password has been entered three times
within a three-minute time span, the
ACCESS DENIED
operand will be asserted and the
D90
Plus
will not allow setting or command access for the next five minutes. The operand
will be de-asserted after the expiration of the five minute timeout.
