CHAPTER 5: SETTINGS PRODUCT SETUPD30 LINE DISTANCE PROTECTION SYSTEM – INSTRUCTION MANUAL 5-235Example: If this setting is enabled and an attempt is made to change settings or upgrade the firmware, the UR devicedenies the settings changes or denies upgrading the firmware. If this setting is disabled, the UR device accepts settingschanges and firmware upgrade.This role is disabled by default.FACTORY SERVICE MODE — When Enabled, the device can go into factory service mode. For this setting to become enabled aSupervisor authentication is necessary. The default value is Disabled.SUPERVISOR ROLE — When Enabled, the Supervisor role is active. To Disable this setting a Supervisor authentication isnecessary. If disabled, the Supervisor role is not allowed to log in. In this case, the Administrator can change the settingsunder the Supervisory menu.If enabled, Supervisor authentication is required to change the settings in the Supervisory menu. If the Supervisor disablestheir role after authentication, the Supervisor session remains valid until they switch to another role using MMI or until theyend the current Supervisor session if using communications.This role is disabled by default.SERIAL INACTIVITY TIMEOUT — The role logged via a serial port is auto logged off after the Serial Inactivity timer times out. Aseparate timer is maintained for RS232 and RS485 connections. The default value is 1 minute.Self-testsSETTINGS PRODUCT SETUP SECURITY SUPERVISORY SELF TESTSFAILED AUTHENTICATE — If this setting is Enabled then the number of failed authentications is compared with the SessionLockout threshold. When the Session Lockout threshold is exceeded, this minor alarm indication comes up.FIRMWARE LOCK — If this setting is Enabled, then any firmware upgrade operation attempt when the Lock Relay setting isenabled brings up this self test alarm.SETTINGS LOCK — If this setting is Enabled then an unauthorized write attempt to a setting for a given role activates this selftest.SETTINGS PRODUCT SETUP SECURITY SUPERVISORY SELF TESTS FAILED AUTHENTICATECyberSentry setupWhen first using CyberSentry security, use the following procedure for setup.1. Log in to the relay as Administrator by using the VALUE keys on the front panel to enter the default password"ChangeMe1#". Note that the Lock Relay setting needs to be disabled in the Security > Supervisory menu. When thissetting is disabled, configuration and firmware upgrade are possible. By default, this setting is disabled.2. Enable the Supervisor role if you have a need for it.3. Make any required changes in configuration, such as setting a valid IP address for communication over Ethernet.4. Log out of the Administrator account by choosing None.5. Next, Device or Server authentication can be chosen on the login screen, but the choice is available only in EnerVista.Use Device authentication to log in using the five pre-configured roles (Administrator, Supervisor, Engineer, Operator,Observer). When using a serial connection, only Device authentication is supported. When Server authentication isrequired, characteristics for communication with a RADIUS server must be configured. This is possible only in theEnerVista software. The RADIUS server itself also must be configured. The appendix called RADIUS Server at the end ofthis instruction manual gives an example of how to set up a simple RADIUS server. Once both the RADIUS server and SELF TESTS FAILED AUTHENTICATESee below FIRMWARE LOCK:EnabledRange: Enabled, Disabled SETTINGS LOCK:EnabledRange: Enabled, Disabled FAILED AUTHENTICATE FAILED AUTHENTICATE:EnabledRange: Enabled, Disabled