APPENDIX B: PART-B

6.12 APPENDIX B1. (SUMMARY OF RTU SPECIFICATION)

SUMMARY OF RTU SPECIFICATION

Comply
Sl.No Parameter Technical Data Remarks
(Yes/No)
Operating temperature &
1 -10 to 70 deg C & 0-100% Yes
Humidity
IP 68 installation inside the Suggest to
IP rating of Connector and
2 chamber/ IP 65 for installation No install inside
Housing
outside the chamber chamber
Battery Powered for
installation inside the chamber
Need external
/ Mains & Solar Powered with
3 Power supply Yes power supply
external battery backup for
accessory
installation outside the
chamber
Minimum 5 Year Continuous
Operation for each 15 minutes
4 Battery life ?
uploads including report on
exemption
12/24V @ 250 mA output for
5 Loop Power output No
external sensors
Inbuilt GPRS/3G modem with
Expendable
high gain antenna configurable
6 GPRS/3G communication Yes GPRS/3G
to communicate with 4 clients
modem
simultaneously.
Minimum 2 nos. of Ethernet
port capable to communicate
simultaneously through two
7 No. of Ethernet Ports Yes
different communication
network (For Type-B RTU
only)
Minimum 4 nos. of logical port
No. of Logical ports per Software
8 configurable to communicate Yes
Ethernet port support
with 4 clients simultaneously.
Communication protocol IEC60870-5-104 IEC-
9
with Master stations /WITS/DNP3/MODBUS TCP Yes 104/DNP3/Mo
dbus TCP
Communication Protocol
10 MODBUS RTU Yes
with Flow Transmitters
As per IEC 62351 and IEC-
11 Cyber Security Standard No
62443
Serial communications
12 RS-232/485 Yes
standard
13 No. of Input channels 4 Digital, 2 Analog (4-20 ma) Yes

14 Accuracy of analog inputs ± 0.025% FS ±0.2% or better

No of FSR
(Current)
15 Pulse input frequency 0 to 1 kHz No
RFX: 2131700020 SDMS(W) – Confidential and Proprietary of DEWA Page 179 of 185
 Resolution of 0.1 sec and
16 Real-time clock Yes
accurate to 1 minute
17 Clock synchronization Required Yes
Programmable from 1 min to
118 Sampling time Yes
24 hours
Through Built in GPRS
module with High gain
19 Data Transmission antenna. With added Ethernet Yes
port for RTU installed outside
the chamber
100,000 data with date and
20 Data storage Yes
time stamped values
21 Buffer FIFO ？ Which buffer

RFX: 2131700020 SDMS(W) – Confidential and Proprietary of DEWA Page 180 of 185
 6.13 APPENDIX B2 (TECHNICAL QUESTIONS AND COMPLIANCE STATEMENT)

RTU TECHNICAL QUESTIONNAIRE

Sl. Contractor's
Technical Questions Other Comments
No. Response

Make, Model No and country of origin of Advantech

1 ADAM-3600
the RTU:
COO Taiwan
Is the complete RTU hard ware solely
2 manufactured by the vendor? if no, please Advantech
provide the details:

Whether the RTU application software,

firmware and other related software’s are
3 Advantech
developed and maintained by the vendor? If
no, please provide the details:

Degree of protection (IP rating.), Operating Temperature: -

temperature range (degree centigrade), 40~70°C
4
relative humidity range % & operating Detail please refer
voltage level of the RTU: to datasheet
Type of operating system and Native RT-Linux v3.12
5 IEC-
protocol of the RTU:
104/DNP3.0/Modb
us

6 Please specify the battery life of the RTU: 2 years

Please specify whether the RTU is capable

7 of driving any loop-powered transmitter i.e.
pressure, flow etc. from an internal battery:

Is the RTU Complies with the Cyber

8 security standard IEC 62351 and IEC- No
62443:
Please specify the memory capacity of the It depends on the
days or months
9 RTU that can store the data logged at 15
data stored
minute intervals:
Please specify the minimum and maximum Minimum 1ms
10 sampling rates that can be configured in the sampling rate for
RTU: meters and
maximum
1000000000 ms
Please specify whether the RTU firmware Firmware update
11 can be updated remotely via GPRS/FO by GPRS network
network:

RFX: 2131700020 SDMS(W) – Confidential and Proprietary of DEWA Page 181 of 185
 Does RTU comply all the requirements
12 specified in the RTU specs. Please provide Yes
detailed deviation if any:

Does the RTU have any other additional

13 features as specified in RTU specification
Please provide details if any:

Availability of local support in UAE. Please

14
provide the details:

Service history of the RTU in the gulf region

15
and other part of the world:

Yes, support
Is RTU supports VPN and data encryption.
16 OpenVPN &
If yes please specify:
AES256
encryption
Is the RTU configuration and associated
17 software is open source or licensed. Please Bundle with RTU
specify:

Please specify whether the RTU has inbuilt

18 No
GPRS modems:

Please specify whether the RTU supports

Yes, maximum
19 data archiving and event storage function if
64GB SD card
yes specify the storage capacity:

Please specify whether the archives and

20 events stored in RTU can be retrieved Yes
locally using diagnostic tool:
Please specify the name and type of TagLink Studio/
21
configuration & diagnostic tools: Putty

Please specify whether RTU configuration

22 Yes
supports online changes:

Please specify whether the program backup

23 Yes
can be download from the RTU:

Please specify whether the RTU is fully

24 supporting all the inter-operability features Yes
of the protocols as specified

RFX: 2131700020 SDMS(W) – Confidential and Proprietary of DEWA Page 182 of 185
 PROCESS CONTROL/TELEMETRY SECURITY REQUIREMENTS

Sl. Compliance
Cyber Security Features Requirements
No. Statement/Remarks
Should not have Embedded
master passwords, diagnostic Password could be change
1 Password defeat mechanism
routines, hardware bypass of by root users
passwords
2 Number of individual users Minimum ten (10) Yes
One uppercase/one lower case
letter
Password construction (Set
3 At least one number Yes
Policy)
At least one non-alpha numeric
character (e.g. @, %, &,*)
Ability to assign authorization to
Authorization levels by
4 utilize one or more RTU
Password
functions
Authorization using role-
based access control
(RBAC) on followings:
View Operational Data
View Configuration Settings
Force Values Capability to define at least four
5 user-defined roles with the Yes
Configuration change defined functions
Firmware change
ID/Password or RBAC
management
Audit Trail (view/download)
Only User ID's can be displayed
6 Password Display on screens, logs etc. It shall not Yes
be possible to display passwords
7 Access timeout Automatic log out for users Yes
Provision a sequential circular
Buffer (FIFO) with minimum
4096 events. There shall be no
8 Audit Trail Yes
capability to erase or modify the
audit trail as it shall keep full
integrity for audit purposes.

RFX: 2131700020 SDMS(W) – Confidential and Proprietary of DEWA Page 183 of 185
 Event record number
Time and date
User identification
Log in
Manual log out
Timed log out
Value forcing
Configuration Access
Cyber Security system logs
9 Configuration change YES
Requirement
Firmware change
ID/password creation or
modification, Password
detection
Audit log access
Time/date change
Alarm incident
Hardware Changes
Web service: HTTPS Yes
Shell Access: SSH Web service: HTTPS Shell
Secure Tunnel: IPSEC, TLS Access: SSH
10 cryptographic features TLS (SHA-256, AES - 256)
(SHA-256, AES - 256)
Network Time: NTP v3/4 or
SNTP 3/4
The techniques used may be one
or more of the following:
- Block Ciphers, Block cipher
modes
- Digital signatures
11 Cryptographic techniques - Entity authentication YES
- Key derivation functions
- Message authentication
- Random number generation
- Secure Hashing
- Key establishment
All remote access through serial NO, Only depends on
Encrypting serial communication if any shall be protocol
12
communications encrypted in accordance with
IEEE 1711
Protocol-specific security Security controls for specific Yes, Depends on protocol
13
features protocols shall be implemented.
RTU shall have a mechanism to
RTU Software authenticate the configuration
14 Yes
Authentication software. Two factor
authentication is preferred
The RTU firmware and
15 Digital signature configuration shall be digitally Yes
signed to ensure security
The RTU configuration software
16 ID/password control Yes
shall be ID/Password controlled

RFX: 2131700020 SDMS(W) – Confidential and Proprietary of DEWA Page 184 of 185
 RTU Features and functions
ID/password controlled
17 shall be linked to roles of the Yes
features
users
In view mode data shall not be
18 View configuration data Yes
modified
Full Access Mode: All changes
19 Change configuration data shall be possible with change No
tracking and logging

20 Full access Provide Full access in this mode Yes

Change tracking to be
21 Change tracking No
mandatory
All communication ports
(physical/logical) shall have the
22 Communications port access Yes
capability to be
enabled/disabled.
Firmware quality assurance
23 Firmware quality control shall be implemented. (e.g. Yes
IEEE C37.231)
24 Denial of service Yes

Darren Chen
Regional Sales Manager
Advantech Co., Ltd

RFX: 2131700020 SDMS(W) – Confidential and Proprietary of DEWA Page 185 of 185