Literature Careers Products Services Contact Home Home
Products for Protection, Monitoring, Control, Automation, and Metering


SEL-3021-2

Serial Encrypting Transceiver

Use serial encryption to protect serial data links against intrusion.

Serial encryption
UL CSA CE

Choose Your Level of Security. The new Message Authentication Protocol (MAP) secures byte-oriented data packets, such as those found on Modbus® or DNP SCADA networks, with encryption and/or authentication algorithms. Authentication of the data packets ensures the data are from a trusted source and not modified en route. Encryption not only adds greater security, but it also provides privacy. This is especially important if the data find their way onto publicly accessible networks, such as spread spectrum radios or telephone infrastructures.

Cipher Protocol Encryption Authentication
Suite 1 128-bit AES HMAC SHA-256
Suite 2 128-bit AES HMAC SHA-1
Suite 3 None HMAC SHA-256
Suite 4 None HMAC SHA-1

 

Phase in Security With Mixed-Mode Functionality. The new option also provides mixed-mode functionality for multiple cipher suites to operate on the same serial multidrop network. It even allows for legs of the serial network to operate with no security. In this way, security system architects can phase in security by adding SEL-3021-2 devices to the unsecured legs later.

 

Satisfy NERC/ERO CIP Network and Security Requirements by Logging Access Attempts. Logging allows 1,024 volatile SER logs and 512 nonvolatile history logs. Log access attempts, remote operators, operation data, length of sessions, and time/date stamps enhance the security of SCADA, metering, and protection systems.

 

Set and Analyze Your Security System Without Removing it From Service Through Secure, Nonintrusive Setup and Monitoring. With SEL-5809 Settings and Diagnostic Software, perform SEL-3021-2 configuration and status monitoring via a simple graphical user interface. There are two order options for this interface: USB or Wi-Fi (IEEE 802.11b). This operator interface is secured by cryptographic session authentication and AES encryption. The wireless option has the addition of WEP protection.

 

Applications

Secure Ethernet Communications for Legacy Serial Devices. Combine SEL-2890 Ethernet Transceivers with SEL-3021-2 Serial Encrypting Transceivers to communicate with an SEL-351 Directional Overcurrent and Reclosing Relay over the Ethernet.  The SEL-2890 devices create a serial-to-Ethernet tunnel, while the SEL-3021-2 devices provide security through data encryption and authentication.   

Combine multiple SEL-2890 Serial to Ethernet Transceivers with SEL-3021 Encrypting Transceivers
Click for larger image

The SEL-3021-2 and SEL-2890 enhance the security of critical infrastructure systems with encryption, authentication, and logging for legacy serial devices.

 

Price
Budgetary Retail, Quantity 1: $540

(Prices displayed are for planning purposes and are subject to change. Contact your SEL sales representative today for a quote on configurations and quantities to meet your needs.)

 

  SEL-3021-1 SEL-3021-2 SEL-3022
Application
Secure serial SCADA and EMS links
Secure remote or engineering access
Convert wired to wireless access
Low Latency
Yes
No
No
CIP Logging
No
Yes
No
Encryption
Yes
Yes
Yes
Authentication
No
Yes
Yes
Mixed Mode
No
Yes
No
FIPS 140-2
Yes
No
No

 

SEL-3021-2 application figure

 

Get Adobe Reader Some of the following documents require the use of Adobe® Reader®
 Get the free reader here.
 
Model Option Tables
 

 

 

Datasheets

Instruction Manual

SEL-3021-2 Instruction Manual

 

 

 

 

Making Electric Power Safer, More Reliable, and More Economical
Schweitzer Engineering Labs
2350 NE Hopkins Court - Pullman, WA 99163 – USA
Phone: +1.509.332.1890 - Fax: +1.509.332.7990