Siemens SIPROTEC 5 Replacement and Upgrade Guide

After replacement, the frequency tracking abnormality did not activate the frequency tracking group. In the protection function group attribute, enable frequency tracking and assign all devices on the same line to the same tracking group

After Network Security Lockdown Role Access Control (RBAC) is activated, the engineering account is locked for emergency access function (resetting security settings through device panel or USB connection)

Part 5: Advanced Topic - Hybrid Operations and Redundant Communication for Protecting Interfaces

5.1 Hybrid differential protection topology of SIPROTEC 4 and SIPROTEC 5

When the A end of a line is still SIPROTEC 4 and the B end has been replaced with SIPROTEC 5, differential protection can still work normally. Key requirements:

Both ends must use the same protection interface type (synchronous HDLC)

The signal list in the communication mapping needs to be consistent (such as sending start signals, trip commands)

Supports up to 6 terminals, differential algorithm automatically adapts under mixed configuration

SIPROTEC 5 provides enhanced communication capabilities, such as:

Hot standby redundant link: When the primary fiber is interrupted, it automatically switches to the backup path with a switching time of less than 20ms.

Ring network self-healing: In a ring topology, a single point fiber breakage will be converted to a chain topology within 20ms, and differential protection will not be interrupted.

IEEE C37.94 Direct Connection: Can connect to SDH/MPLS networks without the need for external converters.

5.2 Analyze the behavior of the replaced system using a fault recorder (7KE85)

The 7KE85 fault recorder in the SIPROTEC 5 platform is a powerful tool for later validation of replacement projects. Its characteristics:

Up to 16kHz sampling rate, capable of capturing transient processes

Support continuous wave recording (Slow scan) and event triggered wave recording (Fast scan)

Can be triggered through IEC 61850 GOOSE and recorded synchronously with protection actions

The recorded waveform file complies with the COMTRADE 2013 standard and can be analyzed using SIGRA software for dual end distance measurement

In the trial operation phase after replacement, it is recommended to configure a waveform recorder to capture a typical fault (or simulate a short circuit manually), compare the timing of the new and old protection actions, and confirm that the difference in protection outlet time is within the allowable range (the minimum tripping time of SIPROTEC 5 can reach 9ms, which is about 40% shorter than SIPROTEC 4).

Part 6: Best Practices for Network Security and Operations

6.1 Activation of Role Access Control (RBAC)

In the era of SIPROTEC 4, simple password protection is commonly used, while SIPROTEC 5 supports RBAC that complies with NERC CIP and BDEW white paper requirements. After replacement, it should:

Configure a Radius server or Microsoft Active Directory for centralized user authentication

Assign minimum permission roles (such as read only, operator, administrator)

Enable security event logging (Syslog sent to central server)

6.2 Firmware Signature and Secure Boot

All SIPROTEC 5 firmware files are digitally signed by Siemens, and the device's built-in encryption chip only loads legally signed firmware, effectively preventing malicious tampering. During the replacement process, it is essential to download the latest firmware (V8.40 and above) from Siemens official and verify the hash value.

6.3 Utilizing SIPROTEC Dashboard for Remote Monitoring

The replaced SIPROTEC 5 device can be connected to the MindSphere cloud platform through the OPC UA PubSub protocol, using the SIPROTEC Dashboard application:

Map view displays the geographical distribution of all protected devices

Fault records automatically uploaded to the cloud, supporting remote analysis

Wear statistics of circuit breaker contacts (∑ I ² t) and monitoring of transformer hot spot temperature

Global comparison of firmware versions to promptly identify devices that have not been upgraded

For cross regional power grid companies, this feature significantly shortens the fault response time.