GE MiCOM P40 Agile, Technical Manual, Page: 619 / 962

4.3.2 PASSWORD VALIDATION
The IED checks for NERC compliance. If the password is entered through the front panel, this is briefly displayed on
the LCD.
If the entered password is NERC compliant, the following text is displayed.
NERC COMPLIANT
P/WORD WAS SAVED
If the password entered is not NERC-compliant, the user is required to actively confirm this, in which case the non-
compliance is logged.
If the entered password is not NERC compliant, the following text is displayed:
NERC COMPLIANCE
NOT MET CONFIRM?
On confirmation, the non-compliant password is stored and the following acknowledgement message is displayed
for 2 seconds.
NON-NERC P/WORD
SAVED OK
If the action is cancelled, the password is rejected and the following message is displayed for 2 seconds.
NON-NERC P/WORD
NOT SAVE
If the password is entered through a communications port using Courier or Modbus protocols, the device will store
the password, irrespective of whether it is NERC-compliant or not. It then uses appropriate response codes to
inform the client of the NERC-compliancy status. You can then choose to enter a new NERC-compliant password
or accept the non-NERC compliant password just entered.
4.3.3 PASSWORD BLOCKING
You are locked out temporarily, after a defined number of failed password entry attempts. Each invalid password
entry attempt decrements the 'Attempts Remain' data cell by 1. When the maximum number of attempts has been
reached, access is blocked. If the attempts timer expires, or the correct password is entered before the 'attempt
count' reaches the maximum number, then the 'attempts count' is reset to 0.
An attempt is only counted if the attempted password uses only characters in the valid range, but the attempted
password is not correct (does not match the corresponding password in the IED). Any attempt where one or more
characters of the attempted password are not in the valid range will not be counted.
Once the password entry is blocked, a 'blocking timer' is started. Attempts to access the interface while the
'blocking timer' is running results in an error message, irrespective of whether the correct password is entered or
not. Once the 'blocking timer' has expired, access to the interface is unblocked and the attempts counter is reset to
zero.
P446SV Chapter 22 - Cyber-Security
P446SV-TM-EN-1 587