Authentication, Connection Password, And Confirmation Id During Operation - Siemens SIPROTEC 5 Operation Manual

Security Settings in the Device

10.5 Authentication, Connection Password, and Confirmation ID During Operation

10.5 Authentication, Connection Password, and Confirmation ID During
Operation
The 1st sequence between DIGSI 5 and the device is an authentication procedure in which secure codes are
exchanged between DIGSI 5 and the device. This procedure ensures that only DIGSI 5 can have technical
access to a SIPROTEC 5 device. If other applications wish to gain access without authorization, they are
blocked. If a protocol such as IEC 61850 is sent via the same Ethernet interface, this protocol is not blocked
and the specific security settings of the protocol are relevant.
If you access the 1st device online, the connection password is queried by the SIPROTEC 5 device, provided
that you have set the password within the device. Correct entries in DIGSI 5 allow you read access to the
device. Wrong entries are recorded in the security log of the device and a warning can be issued through a
contact. If you make 3 wrong entries, access to the device is blocked for several minutes. You must acknowl-
edge other safety-relevant operations by entering the specific confirmation ID. These operations are recorded
in the device as well.
For 30 minutes a session manager in DIGSI 5 monitors all passwords and entries relevant for the identification.
If, for example, the following actions take place within this time, you need not reenter the connection pass-
word or the confirmation ID.
•
If you switch another device online.
•
If you carry out the same safety-relevant operations for the same or another device.
The session manager prevents unnecessary entries with one or more devices during an online session. If you
isolate the devices from DIGSI 5, the session manager is deleted. A connection password or a confirmation ID
is not saved on the DIGSI PC.
If you trigger safety operations with the on-site operation panel (keyboard, key switch), the same confirmation
IDs as in DIGSI 5 are used for the same activities. Enter the confirmation ID via the device keypad of the on-site
operation panel. There is no connection password for the on-site operation panel.
208 SIPROTEC 5, Operation, Manual
C53000-G5040-C003-7, Edition 06.2016