Tiza Group

Home / Guides / Protection / Relays by model

How to connect to a protective relay: ports and software

How to connect a laptop to a protective relay: front USB, Ethernet or serial port, each vendor's software, drivers, access levels and risks in service.

By Shadai García, electrical engineer, founder and CEO of Tiza Group. Reviewed by the Tiza Group engineering team · .

linerelayfront USB / serial / Ethernetswitchfirewallserver(jump host)remote accessconnect to the relay1 · port recognized2 · driver and firmware match3 · access level acceptedread sessionwrite: needs the settings levelthe attempt is logged1port recognized2driver · firmware version3access level: readread session: settings, events, metering4write: needs settings levelrecorded in the security logeach level has its password: IEC 62351-8 · IEEE 1686ConnectionPortDriverFirmwareAccessRecord© tizagrp.comlinerelayfront USB / serial / Ethernetswitchfirewallserver(jump host)remote accessconnect to the relay1 · port recognized2 · driver and firmware match3 · access level acceptedread sessionwrite: needs the settings levelthe attempt is logged1port recognized2driver · firmware version3access level: readread session: settings, events, metering4write: needs settings levelrecorded in the security logeach level has its password: IEC 62351-8 · IEEE 1686ConnectionPortDriverFirmwareAccessRecord© tizagrp.com
Connecting to a protective relay: port, driver, firmware and access level. Location in the system, operating principle and IEC 61850. Illustrative: actual values come from the nameplate and the manufacturer's manual.
Short answer

To connect to a protective relay, three things must match: the port (front USB, serial or Ethernet, or the rear port over the substation network), the manufacturer's software and driver or device package in a version that supports the relay firmware, and the right access level. On an in-service relay, the connection must be authorized, and you read before you write.

What you need to connect to a relay

A numerical protective relay is an industrial computer with its own operating system, its ports and its own way of authenticating whoever connects. To read or configure it from a laptop, three things must match:

  1. A physical port and its parameters: the type of connection the relay has and the configuration of that port (baud rate on serial, IP address on Ethernet).
  2. The manufacturer’s software with the right driver: each brand has its tool and, inside it, a driver or package per model and firmware version.
  3. An access level: the account or password that allows reading, operating or changing settings.

If any of the three fails, the symptom is the same: the program does not see the relay. That is why it pays to check them in that order.

Relay ports

PortWhere it isWhat it is used forWhat to know
Front USBFront panelLocal engineering with the laptopNeeds the manufacturer’s USB driver installed in Windows
Front serial (EIA-232)Front panel, on older-generation relays and many current onesLocal engineeringNeeds a USB-to-serial converter; the port baud rate must match
Front EthernetFront panel, on several recent familiesLocal engineering over a point-to-point linkThe laptop must be on the same subnet as the port
Rear EthernetRear, toward the substation switchSCADA, IEC 61850, engineering over the networkCarries protection and control traffic: it is not a service port
Rear serial (EIA-232 or EIA-485)RearProtocols such as Modbus, DNP3 (IEEE 1815) or IEC 60870-5-103Usually taken by the control system

In practice:

  • SEL keeps front serial ports on much of its line and adds USB or Ethernet depending on the model.
  • Siemens SIPROTEC 5 uses the front USB port for the local connection with DIGSI 5, in addition to the rear communication modules.
  • ABB and Hitachi Energy Relion use the front service port for PCM600 and the rear ports for the substation network.
  • Schneider MiCOM and Easergy and GE Vernova Multilin combine front ports (serial or USB) with rear Ethernet depending on the family.

The rear port on the substation network is the one used by the bay controller and the SCADA system. Plugging a laptop in there means entering the protection and control network: it is done only with authorization and following the site’s secure remote access rules.

Each brand’s software and driver

Each manufacturer has its tool, and each tool needs to know the relay model and firmware version. What each program does is summarized in relay configuration software by brand:

  • SEL: AcSELerator QuickSet, with the driver for each device; SEL Compass keeps software and drivers up to date.
  • Siemens: DIGSI 4 for SIPROTEC 4 and DIGSI 5 for SIPROTEC 5, with the device packages of the project.
  • ABB and Hitachi Energy: PCM600 with the connectivity package for each family and version.
  • Schneider: Easergy Studio for MiCOM, Easergy Pro for Easergy P3 and SFT2841 for Sepam.
  • GE Vernova: EnerVista UR Setup or 8 Series Setup, depending on the Multilin family.

What each tool does, which files it produces and what is most often looked up is in the software guides for each brand, at the end of this page. The common rule is that the software and driver version must support the relay firmware: software older than the relay does not recognize it, and a settings file from another firmware version may not open, or may open with differences.

Why the program does not see the relay

The software does not communicate with the relay
  • Does the laptop's operating system recognize the port (USB or serial converter)?
    • NoInstall the manufacturer's USB or converter driver and try another cable
    • YesDoes the software have the driver or package for the model and its firmware version?
      • NoUpdate the software or install the matching device package
      • YesDo the port parameters match (baud rate, IP address and subnet)?
        • NoSet the laptop to match the relay port
        • YesCheck whether the port is disabled or the access level rejects the session

A frequent cause on Ethernet is the laptop itself: several active network adapters, a corporate VPN or a Windows firewall blocking the manufacturer’s protocol. On serial, the typical error is a USB converter without the proper driver, or assigned to another COM port.

Access levels and permissions

Connecting does not grant permission for everything, as explained in relay access levels and passwords. Relays separate reading, operation (open and close, reset) and changing settings into levels or roles, each with its own password or account. Default passwords must be changed when the relay is placed in service and recorded in a system controlled by the owner. IEEE 1686 describes the security functions the device must offer; we explain it in IEEE 1686: IED cybersecurity requirements.

Risks of connecting to an in-service relay

Reading is safe. Writing is not always. Before changing anything in an energized relay, keep in mind:

  • Read and save first. Download the settings as they are in the relay and compare them with the project file. The office file and the field file do not always match.
  • Sending a complete file restarts functions. In many relays, sending settings restarts the protection for a moment or changes the output logic.
  • Active settings group. Changing the active group changes the protection immediately.
  • Forcing outputs or inputs. Commissioning tools allow contacts to be forced; in service, a forced output can open a breaker.
  • Events and oscillography. Some maintenance operations erase records. If there was a recent trip, save them first, as explained in downloading relay events and oscillography.

We configure your relay remotely

At Tiza Group we configure protective relays, bay controllers and recloser controls of the main brands without traveling: through your substation’s remote access, or with a person on site who connects the laptop and gives us controlled access. We read the relay, compare it with the study, prepare the file and load it with your authorization. See remote relay configuration or the brand pages, such as SEL or Siemens SIPROTEC. If the work has to be done in the field, our team does it in medium, high and extra-high voltage substations and in industry, in Colombia, or elsewhere on request.

  • Siemens DIGSI 4 and DIGSI 5 software
  • ABB and Hitachi Energy PCM600, IET600 and ITT600 software
  • SEL AcSELerator QuickSet, Architect and Grid software
  • Schneider Easergy Studio, Easergy Pro and SFT2841 software
  • GE EnerVista UR Setup, 8 Series Setup and Launchpad software
  • Protective relays: types, functions and maintenance
  • Is remote relay configuration secure?
  • Resetting a relay after a trip: LEDs, 86 and records
  • Sequence of events (SOE/SER) and event reports

References

  • IEEE 1686-2022, Standard for Intelligent Electronic Devices Cyber Security Capabilities.
  • IEC 62351-8, Power systems management and associated information exchange - Data and communications security - Part 8: Role-based access control.
  • Siemens, DIGSI 5 and SIPROTEC 5 documentation (local USB connection).
  • SEL, AcSELerator QuickSet and SEL Compass documentation.
  • Hitachi Energy, PCM600 documentation and Relion connectivity packages.

Frequently asked questions

Why doesn't the software see the relay even though the cable is connected?

It is almost always one of four causes: the driver or connectivity package for the model is missing, the software version does not support the relay firmware, the port parameters do not match (baud rate, address or the laptop's network), or the port is disabled in the configuration. Check them in that order before suspecting the relay.

Can I connect to a relay that is in service?

Yes, to read: metering, events, settings and status. Connecting does not make the relay operate. The risk comes with writing: sending the wrong file, changing the active settings group or forcing outputs can trip the bay or leave it unprotected. Any write in service needs authorization, a prior backup and coordination with operations.

Can a relay be configured remotely without going to the substation?

Yes, if the substation has secure remote access (VPN, jump server and firewall) or if someone on site connects the laptop and gives us controlled access. That is how our remote relay configuration works: the engineer connects with the manufacturer's software and the client keeps control of the access.

WhatsApp