Warnings, Cautions, and Notes as used in this publication
Warnings
WARNING!Warning notices are used in this publication to emphasize that hazardous voltages,
currents, or other conditions that could cause personal injury exist in this equipment or may be
associated with its use.
Warning notices are also used for situations in which inattention or lack of equipment knowledge
could cause either personal injury or damage to equipment.
Cautions
CAUTION:Caution notices are used for situations in which equipment might be damaged if care is
not taken.
Notes
NOTE:Notes call attention to information that is especially significant to understanding and
operating the equipment.
This document is based on information available at the time of its publication. While efforts have been
made to ensure accuracy, the information contained herein does not cover all details or variations in
hardware and software, nor does it provide for every possible contingency in connection with
installation, operation, and maintenance. Features may be described in here that are not present in all
hardware and software systems. GE Consumer & Industrial assumes no obligation of notice to holders
of this document with respect to changes subsequently made.
GE Consumer & Industrial makes no representation or warranty, expressed, implied, or statutory, with
respect to, and assumes no responsibility for the accuracy, completeness, sufficiency, or usefulness of
the information contained herein. No warrantees of merchantability or fitness for purpose shall apply.
Entellisys™, EntelliGuard™, and FlexLogic™ are trademarks of the General Electric Company.
Modbus RTU is a registered trademark of AEG Schneider Automation.
Please have your Entellisys System Summary # and Sub # ready when calling. This information can be
found on the Entellisys HMI on the System Health screen by clicking the Job Info button.
Post Sales Service
GE Switchgear
510 Agency Road
West Burlington, IA 52655
Phone (toll free): 1-888-437-3765
Additional information:
www.entellisys.com/support
For Option Upgrades and CPU Replacement needs only, e-mail us at entellisys.lvs.pss@ge.com.
The Entellisys™ Low Voltage Switchgear system requires a System Administrator for oversight
of critical functions. Those critical functions are described in this guide.
Chapter 1 provides an overview of the roles and responsibilities.
The following chapters describe how to perform the functions, in detail.
1.1 Security Champion
The most important role of the System Administrator is to control the access to the system.
There are several forms of access:
• HMI Login Access: Entellisys provides programmable permissions and passwords. The
System Administrator determines who needs what permissions and assigns login names
and passwords.
• Modbus
®
Settings and Control Access.
1
• Remote Access to the Switchgear over a company network.
Security Reminders
• Limit the access level handed out to only the required permissions.
• Stress the importance of keeping passwords secret.
• If you believe passwords have been compromised, change them immediately.
• Always log out before leaving the local HMI, or leave the system logged in as Guest.
Alternatively, the switchgear can be configured to automatically log out after a time period.
(For details, on the Main Menu, click User Settings, and then click HMI Preferences.)
1.1.1 System Maintenance
The System Administrator is also responsible for system maintenance as described in this
document.
Security Champion7
1
System administrator roles and responsibilities8
2Pre-programming settings prior to
switchgear arrival
Entellisys provides a method for users to work on the system settings before the switchgear
arrives. Once the gear is installed and control power is applied, the saved settings can be written
to the system.
To pre-program Settings, the “Entellisys Remote HMI – User Interactive version” must be
purchased. GE will ship the Remote HMI software, System Administrator Manual (this manual),
and a System Archive when the switchgear ships from the factory.
The following steps should be performed to begin pre-programming:
• Step 1: Install the “Entellisys Remote HMI – User Interactive version” software.
See Installing and configuring remote HMI software
• Step 2: Install the System Archive provided by GE.
See Restoring an archive
• Step 3: Change to Offline Mode.
See Offline mode
• Step 4: Set User Settings.
on page 29 for instructions and for offline mode capabilities.
on page 38 for instructions.
on page 25 for instructions.
2
See DEH-231 Entellisys Low Voltage Switchgear System User Manual.
• Step 5: Install and Commission the Switchgear.
See Commissioning the switchgear
• Step 6: Configure the System for Remote Communications.
See Configuring the switchgear for remote communications
• Step 7: Write saved Settings to System.
See Writing settings to a live system
on page 11 for instructions.
on page 21 for instructions.
on page 33 for instructions.
9
22
Pre-programming settings prior to switchgear arrival10
3Commissioning the switchgear
Installing and starting up the switchgear is an important event for the System Administrator. The
following steps must be followed when commissioning the switchgear.
• Step 1: Reset Passwords.
3
See Passwords
• Step 2: Set User Settings.
See DEH-231 Entellisys Low Voltage Switchgear System User Manual.
• Step 3: Set Local HMI flags.
See Local HMI
• Step 4: Set System T ime Synchronization.
See Time synchronization
• Step 5: Configure System for Remote Communications.
See Configuring the switchgear for remote communications
on page 13.
on page 17.
on page 19.
on page 21.
11
3
Commissioning the switchgear12
4Passwords
4.1 HMI permissions and passwords
The Entellisys HMI requires a login name and password. This login sets the permissible actions
for the session. Each user's permissions are programmable to provide flexibility. Only the
Administrator can set permissions, login names, and passwords.
CAUTION:Enabling Group Permissions for features that allow the changing of settings and/or
access to control functions must be restricted to accounts for qualified personnel only. As a
reminder, users with such privileges will be presented with the following screen upon initial login:
Figure 4-1 Initial login Caution screen
4
4.1.1 Setting HMI login permissions and passwords
A Group defines the permission categories for a type or group of users. By default,
Administrator, Operator, and Guest groups are defined with preset permissions as examples.
Additional groups may be created with programmable permissions.
Figure 4-2 Programmable permissions screen
HMI permissions and passwords13
Once Groups are established, individual Users can be created. Users can have individual login
names and passwords.
Passwords consist of 3-20 alphanumeric characters. Both login names and passwords are
case-insensitive.
NOTE:There are three predefined Groups that cannot be modified. Beneath those Groups are
two Users that are fixed and cannot be modified. The passwords for all can be changed. The
1. On the Main Menu, click the User Administration button. Only Administrators can access
User Administration. For all others, the button will not appear on the Main Menu.
2. Click the desired user group to edit or click the Add Group button to define a new type of
user.
3. Change the permissions by selecting the appropriate check boxes in the permission list.
User will be granted this permission.
User will not have this permission.
4. Change the permissions by selecting the appropriate check boxes in the permission list.
Passwords14
To change a password
1. On the Main Menu, click the User Administration button. Only Administrators can access
User Administration. For all others, the button will not appear on the Main Menu.
2. Select the desired user group on the left-side pane. Expand the group by clicking the +
symbol and click a user name.
3. Enter the new password in the New Password field.
4. Confirm your password by re-entering the new password in the Confirm Password field. Click OK to save your new password (or click Cancel to exit).
5. In the right-side pane you can see “Permission”, “Contact Information”, and “Authentication”
details.
To verify the password change:
1. On the Main Menu, click the Change Users icon in upper right-hand corner.
Figure 4-4 Change Users icon
2. Enter the user name in the Login field.
4
3. Enter the new password in the password field.
4. Click Go. If successful, the Main Menu will display.
4.1.2 Resetting forgotten HMI passwords
Administrators have access permission to change passwords for all users in all groups.
NOTE:It is very important for the System Administrator to keep the Administrator password in
a safe location. Losing the Administrator password will require a GE Field Service visit to reset it.
GE offers an optional service to store the Administrator password at the request of customers.
In the event the password is lost, GE can provide the password to the customer over the phone,
without requiring a site visit.
Contact GE Post Sales Service for help (see How to contact us
on page 2).
HMI permissions and passwords15
4.2 Modbus® security
4.2.1 Control and settings passwords
The CPUs require extra passwords to change settings (i.e., Short Time pickup delay setting) and
4
to send commands (i.e., Open Breaker command). These passwords apply to all clients that
access the Entellisys system through Modbus communications including the Entellisys HMI,
SCADA, or Building Automation, etc.
NOTE:The system ships with default CPU Modbus Settings and Command passwords. The
System Administrator should change these passwords for added security.
The HMI can be configured to transparently send the passwords whenever needed or it can be
configured to require all users to re-enter the password when the action is attempted.
Figure 4-5 Modbus Security screen in the HMI
Passwords16
To change the Settings and/or Command passwords
1. On the Main Menu, click the Maintenance button. The button will only be displayed if access
is allowed with the current login permissions.
2. Click the Modbus Security tab. The Modbus Security screen has options to change both
CPU A and CPU B Command and Settings passwords.
NOTE:It is recommended that the passwords in CPU A and CPU B be set to the same value.
3. Enter the new commands password in the New Password field.
4. Re-enter the password in the Confirm Password field.
5. Click the Change button to download the password.
6. Select the desired Auto Send option.
NOTE:For added security, it is recommended the Auto Send option be disabled. This will
require an additional password to be entered each time a command is performed.
4.2.2 Local HMI
An Entellisys system may have multiple HMI stations running. There are some functions that
should be performed by one HMI only. The “Local HMI” flag is provided to designate one HMI for
special functions.
4
Indicates the Auto Send option will transparently send the password each time a
command is sent to the CPU.
Disables the Auto Send option.The user will be prompted to enter the password (for the
CPU that is currently the default) each time a command is sent.
The “Local HMI” flag affects the following functions:
• E-mail on Alarms is only sent from the HMI with the Local HMI flag set.
• Time Synchronization is only performed by the HMI with the Local HMI flag is set.
• “Block other HMIs” can be enabled/disabled only by the HMI with the Local HMI flag set. This
allows a user on the Local HMI to block all other HMIs from issuing control commands (i.e.,
Breaker Open), which may be desired during maintenance. For details on circuit breaker
control, see DEH-231 Entellisys Low Voltage Switchgear System User Manual, Chapter 3,
Basic Control.
Modbus® security17
Figure 4-6 Breaker Control screen
4
• The CPU reserves a communication port for the HMI with the Local HMI flag set. The CPUs
can support up to 8 simultaneous communication ports for Modbus clients. Once the limit is
exceeded, clients will be blocked until a port is free. The Local HMI flag has special ports
reserved for its use to prevent other clients from locking it out.
NOTE:All In-Gear and Near-Gear Touchscreen HMIs should have the “Local HMI” set.
To set an HMI as a local HMI
1. On the Main Menu, click the Maintenance button. The button will only be displayed if access
is allowed with the current login permissions.
2. Click the Modbus Security tab.
3. Select the Local HMI check box as shown in Figure 4-5.
4. Click the OK button to save changes (or click Cancel to cancel changes).
Passwords18
5Time synchronization
In the Entellisys System, time is recorded when events occur for diagnostic purposes. Events are
generated from both the HMI and the CPU components and the time stamps used are derived
from time set in the component.
One HMI in the system will be configured to synchronize time with the CPUs. Periodically, the
HMI will synchronize time to ensure the time in the two CPUs is consistent.
Time synchronization configuration is done by GE during the system start up.
NOTE:The System Administrator should periodically check the date and time set on all local
HMIs to ensure the event time stamps are accurate. It is especially important on the HMI
configured to time synch the CPUs.
5.0.1 Setting time in the HMI
To set time, log into the HMI Operating System with Administrator access (see Administrator
access to the operating system on page 61.) Double-click the Clock icon on the taskbar to set
date, time, and time zone. Restart the computer to revert to normal run mode with limited OS
access.
5
19
Loading...
+ 43 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.