5-22 L60 Line Phase Comparison System GE Multilin5.2 PRODUCT SETUP 5 SETTINGS5Example: If this setting is "Yes" and an attempt is made to change settings or upgrade the firmware, the UR device deniesthe setting changes and denies upgrading the firmware. If this setting is "No", the UR device accepts setting changes andfirmware upgrade.This role is disabled by default.Factory Service Mode: When enabled (i.e., "Yes" is selected) the device can go into factory service mode. For this set-ting to become enabled a Supervisor authentication is necessary. The default value is Disabled.Supervisor Role: When enabled (i.e., "Yes" is selected) the Supervisor role is active. When "No" is selected this role is dis-abled. To disabled this setting a Supervisor authentication is necessary. If disabled, the Supervisor role is not allowed to logon. In this case the Administrator can change the settings under the Supervisory menu.If enabled, Supervisor authentication is required to change the settings in the Supervisory menu. If the Supervisor disableshis role after authentication, the Supervisor session remains valid until he switches to another role using MMI or until heends the current Supervisor session if using communications.This role is disabled by default.Serial Inactivity Timeout: The role logged via a serial port is auto logged off after the Serial Inactivity timer times out. Aseparate timer is maintained for RS232 and RS485 connections. The default value is 1 minute.a) SELF TESTSPATH: SETTINGS PRODUCT SETUP SECURITY SUPERVISORY SELF TESTSFailed Authentications: If this setting is Enabled then the number of failed authentications is compared with the Sessionlockout threshold. When the Session lockout threshold is exceeded, this minor alarm indication comes up.Firmware Lock: If this setting is Enabled then any firmware upgrade operation attempt when the “LOCK FIRMWAREUPGRADE” setting is set to “Yes” brings up this self test alarm.Settings Lock: If this setting is Enabled then an unauthorized write attempt to a setting for a given role activates this selftest.PATH: SETTINGS PRODUCT SETUP SECURITY SUPERVISORY SELF TESTS FAILED AUTHENTICATECYBERSENTRY SETUPWhen first using CyberSentry security, use the following procedure for set up.1. Log in to the relay as Administrator by using the Value keys on the front panel to enter the default password"ChangeMe1#". Note that the "Lock relay" setting needs to be disabled in the Security > Supervisory menu. Whenthis setting is disabled, configuration and firmware upgrade are possible. By default, this setting is disabled.2. Enable the Supervisor role if you have a need for it.3. Make any required changes in configuration, such as setting a valid IP address for communication over Ethernet.4. Log out of the Administrator account by choosing None.Next, device or server authentication can be chosen on the login screen, but the choice is available only in EnerVista. Usedevice authentication to log in using the five pre-configured roles (Administrator, Supervisor, Engineer, Operator,Observer). When using a serial connection, only device authentication is supported. When server authentication isrequired, characteristics for communication with a RADIUS server must be configured. This is possible only in the EnerV-ista software. The RADIUS server itself also must be configured. The appendix called RADIUS Server gives an example ofhow to setup a simple RADIUS server. Once both the RADIUS server and the parameters for connecting UR to the serverhave been configured, you can choose server authentication on the login screen of EnerVista. SELF TESTS FAILED AUTHENTICATE See belowMESSAGE FIRMWARE LOCK:EnabledRange: Enabled, DisabledMESSAGE SETTINGS LOCK:EnabledRange: Enabled, Disabled FAILED AUTHENTICATEFAILED AUTHENTICATE:EnabledRange: Enabled, Disabled
