required. The highest role for the username is automatically
selected by the protection relay. Performing the Restore Factory
settings operation in IED Users in PCM600 restores user accounts
to the factory user accounts.
3.3.1 Audit trail
The protection relay offers a large set of event-logging functions. Critical system
and protection relay security-related events are logged to a separate nonvolatile
audit trail for the administrator.
Audit trail is a chronological record of system activities that allows the
reconstruction and examination of the sequence of system and security-related
events and changes in the protection relay. Both audit trail events and process
related events can be examined and analyzed in a consistent method with the help
of Event List in LHMI and Event Viewer in PCM600.
The protection relay stores 2048 audit trail events to the nonvolatile audit trail.
Additionally, 1024 process events are stored in a nonvolatile event list. Both the
audit trail and event list work according to the FIFO principle. Nonvolatile memory
is based on a memory type which does not need battery backup nor regular
component change to maintain the memory storage.
Audit trail events related to user authorization (login, logout) are defined according
to the selected set of requirements from IEEE 1686. The logging is based on
predefined user names or user categories. The user audit trail events are accessible
from Event Viewer in PCM600.
Table 14: Audit trail events
Event ID
Audit trail event Description
1110 Login Successful login from LHMI and PCM600
1210 Logout Successful logout from LHMI, PCM600 or
IEC 61850
1130 Login failure Login failed for using the wrong user
credentials
13200 Configuration transfer Configuration transferred successfully to
the device
1380 Parameter change Parameter changed successfully
1460 Parameter change fail Parameter change failed
1520 Software update Software updated successfully
1610 Software update fail Software update failed
2210 Password change User password changed successfully
2220 Password change fail User password change failed
5270 System startup Software reset
6110 Test on Test mode started
Table continues on next page
Section 3 2NGA000823 A
REX610 overview
22 REX610
Operation Manual
To Next Page
Loading...
