Authorization. ABB Relion 611 Series, REU611 2.0 IEC, Voltage Protection, Application, Relion, REU611

Section 2

REU611 overview

2.6

16

1MRS758335 D

Name Description

Rejecting changes

Showing context sensitive help messages

Error icon

Clearing events

Triggering the disturbance recorder manually

Saving values to TXT or CSV file format

Freezing the values so that updates are not displayed

Receiving continuous updates to the monitoring view

Deleting the disturbance record

Deleting all disturbance records

Saving the disturbance record files

Viewing all fault records

Clearing all fault records

Importing settings

Exporting settings

Selecting all

Clearing all selections

Refreshing the parameter list view

Authorization

Four user categories have been predefined for the LHMI and the WHMI, each with different rights and default passwords.

The default passwords in the protection relay delivered from the factory can be changed with Administrator user rights.

User authorization is disabled by default for LHMI but WHMI always uses authorization.

REU611

Application Manual

1MRS758335 D

2.6.1

REU611

Application Manual

Section 2

REU611 overview

Table 6:

Username

VIEWER

OPERATOR

ENGINEER

ADMINISTRATOR

Predefined user categories

•

•

•

•

User rights

Read only access

Selecting remote or local state with

Changing setting groups

Controlling

Clearing indications

(only locally)

•

•

•

•

•

•

•

•

•

Changing settings

Clearing event list

Clearing disturbance records

Changing system settings such as IP address, serial baud rate or disturbance recorder settings

Setting the protection relay to test mode

Selecting language

All listed above

Changing password

Factory default activation

For user authorization for PCM600, see PCM600 documentation.

Audit trail

The protection relay offers a large set of event-logging functions. Critical system and protection relay security-related events are logged to a separate nonvolatile audit trail for the administrator.

Audit trail is a chronological record of system activities that allows the reconstruction and examination of the sequence of system and security-related events and changes in the protection relay. Both audit trail events and process related events can be examined and analyzed in a consistent method with the help of Event List in LHMI and WHMI and Event Viewer in PCM600.

The protection relay stores 2048 audit trail events to the nonvolatile audit trail.

Additionally, 1024 process events are stored in a nonvolatile event list. Both the audit trail and event list work according to the FIFO principle. Nonvolatile memory is based on a memory type which does not need battery backup nor regular component change to maintain the memory storage.

Audit trail events related to user authorization (login, logout, violation remote and violation local) are defined according to the selected set of requirements from IEEE

1686. The logging is based on predefined user names or user categories. The user audit trail events are accessible with IEC 61850-8-1, PCM600, LHMI and WHMI.

17

Section 2

REU611 overview

1MRS758335 D

Table 7: Audit trail events

Audit trail event

Configuration change

Firmware change

Firmware change fail

Attached to retrofit test case

Removed from retrofit test case

Setting group remote

Setting group local

Control remote

Control local

Test on

Test off

Reset trips

Setting commit

Time change

View audit log

Login

Logout

Password change

Firmware reset

Audit overflow

Violation remote

Violation local

Description

Configuration files changed

Firmware changed

Firmware change failed

Unit has been attached to retrofit case

Removed from retrofit test case

User changed setting group remotely

User changed setting group locally

DPC object control remote

DPC object control local

Test mode on

Test mode off

Reset latched trips (TRPPTRC*)

Settings have been changed

Time changed directly by the user. Note that this is not used when the protection relay is synchronised properly by the appropriate protocol (SNTP, IRIG-B, IEEE 1588 v2).

Administrator accessed audit trail

Successful login from IEC 61850-8-1 (MMS), WHMI, FTP or

LHMI.

Successful logout from IEC 61850-8-1 (MMS), WHMI, FTP or

LHMI.

Password changed

Reset issued by user or tool

Too many audit events in the time period

Unsuccessful login attempt from IEC 61850-8-1 (MMS),

WHMI, FTP or LHMI.

Unsuccessful login attempt from IEC 61850-8-1 (MMS),

WHMI, FTP or LHMI.

PCM600 Event Viewer can be used to view the audit trail events and process related events. Audit trail events are visible through dedicated Security events view. Since only the administrator has the right to read audit trail, authorization must be used in

PCM600. The audit trail cannot be reset, but PCM600 Event Viewer can filter data.

Audit trail events can be configured to be visible also in LHMI/WHMI Event list together with process related events.

To expose the audit trail events through Event list, define the

Authority logging level parameter via Configuration/

Authorization/Security . This exposes audit trail events to all users.

18 REU611

Application Manual