Camille Bauer LINAX PQ5000MOBCL MULTI-PQ User manual

System handbook
LINAX PQ5000MOBCL MULTI-PQ
Operating instructions (2023-03)
Camille Bauer Metrawatt AG
Aargauerstrasse 7
CH-5610 Wohlen / Switzerland
Phone: [phone]
Telefax: [phone]
E-Mail: [e-mail]
https://www.camillebauer.com

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 2/60
Contents
0. Legal information ........................................................................................................................................................... 3
1. Purpose of this document ............................................................................................................................................. 3
2. Scope of supply.............................................................................................................................................................. 4
3. Device overview.............................................................................................................................................................. 5
3.1 Short description ....................................................................................................................................................... 5
3.2 System overview ....................................................................................................................................................... 5
3.3 Operation and evaluation .......................................................................................................................................... 6
3.4 Measurement data .................................................................................................................................................... 6
3.5 Device usage............................................................................................................................................................. 6
4. Preparation of the measurement application............................................................................................................... 7
4.1 Connecting to the measurement device .................................................................................................................... 7
4.1.1 Connection via LAN interface .......................................................................................................................... 7
4.1.2 Connection via WLAN interface ..................................................................................................................... 10
4.1.3 Resetting the network settings....................................................................................................................... 11
4.2 Parameterization of the device functionality ............................................................................................................ 12
4.2.1 Configuration manager .................................................................................................................................. 12
4.2.2 Device configuration ...................................................................................................................................... 13
4.3 Security system ....................................................................................................................................................... 15
4.3.1 RBAC management....................................................................................................................................... 15
4.3.2 User log in / out via website ........................................................................................................................... 18
4.3.3 Whitelisting clients ......................................................................................................................................... 19
4.3.4 Secure communication using https ................................................................................................................ 19
4.3.5 Audit log (SYSLOG)....................................................................................................................................... 20
4.4 PQ monitoring ......................................................................................................................................................... 22
4.4.1 PQ events ...................................................................................................................................................... 22
4.4.2 PQ statistic..................................................................................................................................................... 23
4.4.3 Provision of PQ data...................................................................................................................................... 24
5. Safety instructions ....................................................................................................................................................... 25
6. Electrical connections ................................................................................................................................................. 27
6.1 Connecting the base unit......................................................................................................................................... 27
6.2 Voltage connections base unit................................................................................................................................. 27
6.3 Current connection Current Link.............................................................................................................................. 28
6.4 Operating LED of the Current Module 3P / 3PN...................................................................................................... 30
6.5 GPS time synchronization ....................................................................................................................................... 31
6.6 Power supply........................................................................................................................................................... 32
7. Performing the measurement...................................................................................................................................... 33
7.1 Device start ............................................................................................................................................................. 33
7.2 Installation check..................................................................................................................................................... 33
7.3 Measurement data reset.......................................................................................................................................... 35
7.4 Start / stop data recording ....................................................................................................................................... 36
8. Evaluation of recorded data ........................................................................................................................................ 37
8.1 Available long-term recordings ................................................................................................................................ 37
8.1.1 Periodical data ............................................................................................................................................... 38
8.1.2 PQ events ...................................................................................................................................................... 39
8.1.3 PQ statistic..................................................................................................................................................... 41
8.1.4 PQ-Easy compliance report ........................................................................................................................... 43
8.2 Measurement files ................................................................................................................................................... 45
9. Service, maintenance and disposal ............................................................................................................................ 46
9.1 Calibration and new adjustment .............................................................................................................................. 46
9.2 Cleaning .................................................................................................................................................................. 46
9.3 Battery..................................................................................................................................................................... 46
9.4 Disposal................................................................................................................................................................... 46
10. Technical data............................................................................................................................................................... 47
11. Dimensional drawings ................................................................................................................................................. 51
Annex.................................................................................................................................................................................... 52
ADescription of measured quantities............................................................................................................................ 52
A1 Basic measurements............................................................................................................................................... 53
A2 Harmonics and interharmonics................................................................................................................................ 54
A3 System imbalance ................................................................................................................................................... 55
A4 Mean-values............................................................................................................................................................ 56
A5 Meters ..................................................................................................................................................................... 57
BNetwork settings in Windows...................................................................................................................................... 58
Index ..................................................................................................................................................................................... 60

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 3/60
0. Legal information
Warning notices
In this document warning notices are used, which you have to observe to ensure personal safety and to prevent
damage to property. Depending on the degree of danger the following symbols are used:
If the warning notice is not followed death or severe personal injury
will result.
If the warning notice is not followed damage to property or severe
personal injury may result.
If the warning notice is not followed the device may be damaged or
may not fulfill the expected functionality.
Qualified personnel
The product described in this document may be handled by personnel only, which is qualified for the respective task.
Qualified personnel have the training and experience to identify risks and potential hazards when working with the
product. Qualified personnel are also able to understand and follow the given safety and warning notices.
Intended use
The product described in this document may be used only for the application specified. The maximum electrical
supply data and ambient conditions specified in the technical data section must be adhered. For the perfect and safe
operation of the device proper transport and storage as well as professional assembly, installation, handling and
maintenance are required.
Disclaimer of liability
The content of this document has been reviewed to ensure correctness. Nevertheless, it may contain errors or
inconsistencies and we cannot guarantee completeness and correctness. This is especially true for different language
versions of this document. This document is regularly reviewed and updated. Necessary corrections will be included
in subsequent version and are available via our webpage https://www.camillebauer.com.
Feedback
If you detect errors in this document or if there is necessary information missing, please inform us via e-mail to:
[e-mail]
1. Purpose of this document
This document describes the universal power quality analysis device LINAX PQ5000MOBCLM (PQ5000-
MOBILE CURRENT LINK MULTI-PQ) combined with the current modules 3P and 3PN. It is intended to
be used by:
•Installation personnel and commissioning engineers
•Service and maintenance personnel
•Planners
Scope
This handbook is valid for all hardware versions of the devices. Some of the functions described in this
document are available only, if the necessary optional components are included in the device.
Required knowledge
A general knowledge in the field of electrical engineering is required. For assembly and installation of the
device knowledge of applicable national safety regulations and installation standard is required.

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 4/60
2. Scope of supply
Upon receive of delivery check device and supplied accessories for completeness and integrity.
The scope of supply depends on the ordered variant.
Image No. Description o.k.
1 Power quality analyzer PQ5000MOBCLM with 5 test leads for
voltage inputs in carrying bag 
1
Accessory bag inside the PQ5000MOBCLM with
•5 plug-on dolphin clamps
•WLAN Access Point Dongle
•System handbook
•IP67 protected Ethernet cable (RJ45), 5m

1
Carrying bag with accessories in the ordered quantity
•≤ 9 Current modules 3P
•≤ 9 Current modules 3PN
•≤ 10 SMA connection cables
•Power adapter 300V OVC IV

1 Optional: GPS receiver 16x-LVS 

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 5/60
3. Device overview
3.1 Short description
The system LINAX PQ5000-MOBILE CURRENT LINK Multi-PQ is designed for power quality and load
flow analysis in power distribution systems. The voltage is measured centrally in the PQ5000MOBCLM
base unit. The current measurement of up to 9 feeders with up to 36 current channels is done using
Current Modules, which are arranged in a ring topology, the so-called Current Link, providing the current
information for the 3 or 4 channel feeders. For each feeder the present status and load flow can be
determined and power quality can be assessed. This current measurement is synchronized with the
central voltage measurement to ensure that the power is correctly determined.
The functionality of the basic device can be parameterized directly via a web browser. This measurement
solution supports campaigns for repeated measurements at the same locations. For that, a configuration
manager can handle up to 20 different device settings. The device can also have a WLAN access point
for connecting mobile devices and provides all data for evaluation via its own website. In order to be able
to validate the power quality at the measuring location, the duration of the measurement should be at
least 7 full days.
The products of the LINAX PQ5000 series are independently certified Class A devices according to IEC
61000-4-30 Ed. 3. They provide reliable and comparable information for regulatory authorities,
negotiations with energy suppliers or internal quality control.
By means of continuous monitoring, incidents can be analyzed immediately and their causes permanently
eliminated. In addition, long-term acquisition permits the early recognition of changes in order to improve
supply security and thus system availability.
The flexible approach without any software excels both in autarchy and flexible software integration
options. It is based on standardized interfaces, generates power quality compliance reports directly via the
device website and excels with a comprehensive cyber security concept.
3.2 System overview
The base unit LINAX PQ5000MOBCLM monitors centrally the power quality of the distribution system and
collects, synchronized to the voltage, the current information of the current modules for state monitoring
and load flow analysis of the individual feeders.
Using the current modules 3P and 3PN three or four currents of the feeders in a TNC or TNS low-voltage
system are measured and transferred to the base unit via Current Link. The modules can measure normal
operating currents and short-circuit currents up to a few kA.
PQ5000MOBCLM with connected Current Modules 3PN and 3P

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 6/60
3.3 Operation and evaluation
No software is required for the parameterization of the device or the evaluation of the measurement
results. The WEB interface of the device provides all required functions. These can be used via mobile
phone, tablet or laptop via the LAN or WLAN interface.
•Measurement data visualization
•Status bar for network LAN + WLAN, alarms, data recording
•Service functions
•PQ Easy-Report for compliance reports
•Complete device parameterization
•Support for measurement campaigns (up to 20 configurations)
•Data export in CSV format (load profiles, waveform, event lists)
•Data transfer to evaluation software (e.g. PQIS software) using CSV files
3.4 Measurement data
The device provides various measurement data via device website:
Instantaneous
values
Present TRMS values including phasor diagram, phase sequence
check and evaluation of energy direction for each feeder monitored via
a current module
Energy Provides data about the time-related energy consumption (load profile)
and the total energy consumption per feeder
Harmonics Present data about harmonics, interharmonics, THD and TDD of all
voltages as well as for the current of a selectable current module
Waveform Waveform of all voltages and the currents of a selectable current
module
Events Chronological lists of all PQ and ripple control events
PQ statistic
Data of the statistical power quality analysis, with which the user can
create conformity reports, e.g. according to EN 50160, and visualize
the chronological progression of the monitored variables
3.5 Device usage
The planning of the device usage, performing the measurement and then evaluating the recorded data is
described in the following chapters.
A) Preparation of the measurement application (Chap. 4): Using the website the device
functionality can be configured via LAN or WLAN interface
B) Connecting the device on-site (Chap. 6)
C) Installation check (Chap. 7.2)
D) Performing the measurement (Chap. 7)
E) Evaluation of recorded data (Chap. 8)

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 7/60
4. Preparation of the measurement application
4.1 Connecting to the measurement device
4.1.1 Connection via LAN interface
Before devices can be connected to an existing Ethernet network, you have to ensure that they
will not disturb the normal network service. The rule is:
None of the devices to connect is allowed to have the same IPv4/6 address
than another device already installed
This also applies if the network only consists of a PC and the measuring device.
The device supports both IPv4 and IPv6 communication. IPv4 communication is activated by default; IPv6
can be activated additionaly via configuration.
As soon as PC and measurement device are in the same
network, the website of the device may be accessed
using a browser. The assignment of the network settings
of a PC is shown in Annex B.
The recommended browsers are
Google-Chrome and Firefox.
For configuring via Webbrowser you have to display the device website using:
•IPv4 communication: http://IPv4_addr, e.g. http://192.168.1.101
•IPv6 communication: http://[IPv6_addr], e.g. http://[ fd2d:bb44:97f1:3976::1]
If the secure communication via https is activated and the root certificate installed, you have to use https
instead of http for displaying the website
If, for example, a device needs to be integrated into an existing network, the network settings can be
modified via the menu Settings | Communication | Ethernet. The corresponding parameters are described
on the next page.
If the IP address of the Ethernet interface is changed and the configuration stored in the
device, the website of the device must be reloaded via the new IP address.
Hint: The device supports up to 20 different configurations, but the Ethernet settings are the
same for all of them.

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 8/60
Network settings (Communication | Ethernet)
The following settings have to be arranged with the network administrator:
•
IPv4/6:
IP address
Must be unique, i.e. may be assigned in the network only once
•IPv4: Subnet mask Defines how many devices are directly addressable in the IPv4 network. This
setting is equal for all the devices. Examples
•IPv4/6: Gateway address Is used to resolve addresses during communication between different networks. It
should contain a valid address within the directly addressable network
•IPv4/6: DNS-Server x Is used to resolve a domain name into an address, if e.g. a name (pool.ntp.org) is
used for the NTP server. Further information
•IPv6: Prefix length Is comparable to the subnet mask in IPv4 networks; it is the number of the leftmost
bits of the site prefix which need to be identical for direct communication.
•Hostname
Individual designation for each device. Via the hostname the device can be
uniquely identified in the network. Therefore for each device a unique name should
be assigned.
•NTP-Server x NTP servers are used as base for time synchronization
If a USB to Ethernet adapter is used, the IP
address of this local network can be assigned
to an address in the network of the LAN
interface of the measurement device, e.g.
192.168.1.100. This way the standard interface
of the device does not need to be changed.
IPv4: Subnet mask
For a direct communication between device and PC both devices need to be in the same network when
the subnet mask is applied:
Example 1
decimal binary
IP address
192.168. 1.101
11000000 10101000 00000001 01100101
Subnet mask
255.255.255.224
11111111 11111111 11111111 11100000
variable range
xxxxx
First address
192.168. 1. 96
11000000 10101000 00000001 01100000
Last address
192.168. 1.127
11000000 10101000 00000001 01111111
►The device 192.168.1.101 can access directly the devices 192.168.1.96 … 192.168.1.127
Example 2
decimal binary
IP address
192.168. 57. 64
11000000 10101000 00111001 01000000
Subnet mask
255.255.252. 0
11111111 11111111 11111100 00000000
variable range
xx xxxxxxxx
First address
192.168. 56. 0
11000000 10101000 00111000 00000000
Last address
192.168. 59.255
11000000 10101000 00111011 11111111
►The device 192.168.57.64 can access directly the devices 192.168.56.0 ... 192.168.59.255
In private networks only reserved IP address ranges may be used, with subnets being most common in
the 192.168.x.x/16 network (see examples above). Alternative private networks are: 10.0.0.0/8 or
172.16.0.0/12 (used by the WLAN access point).

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 9/60
Time synchronization via NTP protocol
For the time synchronization of devices via Ethernet NTP (Network Time Protocol) is the standard.
Corresponding time servers are used in computer networks, but are also available for free via Internet.
Using NTP it's possible to hold all devices on a common time base.
Two different NTP servers may be defined. If the first server is not available the second server is used for
trying to synchronize the time.
If a public NTP server is used, e.g. “pool.ntp.org”, a name resolution is required. This normally happens
via a DNS server. So, the IP address of the DNS server must be set in the communication settings of the
Ethernet interface to make a communication with the NTP server, and thus time synchronization, possible.
Your network administrator can provide you the necessary information.
The time synchronization of the standard interface can be performed via a GPS receiver (Chap. 6.5) as
well.
Time synchronization via NTP or GPS is an elementary requirement for class A power
quality measuring devices.
Only with a correct time reference is it possible to evaluate the
power quality and analyze disruptions in the network.
TCP ports
The TCP communication is done via so-called ports. The number of the used port allows determining the
type of communication. As a standard Modbus/TCP communication is performed via TCP port 502, NTP
uses port 123. However, the port for the Modbus/TCP communication may be modified. You may provide
a unique port to each of the devices, e.g. 503, 504, 505 etc., for an easier analysis of the communication
traffic. Independent of these setting a communication via port 502 is always supported. The device allows
at least 5 connections to different clients at the same time.
Firewall
Due to security reasons, nowadays each network is protected by means of a firewall. When configuring
the firewall, you have to decide which communication is desired and which have to be blocked. The TCP
port 502 for the Modbus/TCP communication normally is considered to be unsafe and is often disabled.
This may lead to a situation where no communication between networks (e.g. via Internet) is possible.
MAC address
For uniquely identifying Ethernet connections in a network, a unique MAC address is assigned to each
connection. Compared to the IP address, which may be modified by the user at any time, the MAC
address is static. The MAC address of the LAN interface is given on the nameplate.

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 10/60
Communication tests
Via the service menu on the device website you may check if the selected network structure is valid. The
device must be able to reach the DNS server via gateway. The DNS server then allows resolving the URL
of the NTP server to an IP address. The Standard Ethernet interface serves as interface for the
communication tests.
•Ping: Connection test to any network device (initial: gateway address)
•DNS: Test, if the name resolution via DNS works (initial: URL of NTP server)
•NTP: Test, if the selected NTP-Server is in fact a time server (stratum x)
•SFTP: Test, if access to SFTP server works. A test file will be copied to the base directory of the
server.
NTP server test
4.1.2 Connection via WLAN interface
Via the WLAN dongle up to 10 devices (mobile phone, tablet, laptop or similar) can be connected
wireless.
For devices with camera the QR code on the
nameplate can be used for joining directly the network
of the measurement device. Depending on the mobile
device used, an App for scanning the QR code may
be required. Shown example: iPhone.
All other devices can be connected to the
measurement device by establishing a connection to
the WLAN access point given on the nameplate
(PQmobclm:29:xx:xx).
Call the device website via http://<ip_addr>. The default setting of the device IP address is 172.16.0.1.
If the IP address of the WLAN interface is changed and the configuration stored in the
device, the website of the device must be reloaded via the new IP address.
Hint: The device supports up to 20 different configurations, but the WLAN settings are
the same for all of them.

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 11/60
4.1.3 Resetting the network settings
If the communication settings of the communication interface are no longer known or an activated whitelist
prevents access to the device, they can be reset to the default settings via the keys on the device.
Function Procedure and result
•Resetting the WLAN interface to the
default setting 172.16.0.1
Press <RESET> for at least 3 seconds:
The assigned LED flashes. The reset is finished, as
soon as the LED shows the state before the reset
again.
•Resetting the LAN interface to the
default settings of IPv4 and IPv6
•Deactivating an active whitelist.
Press <RESET> and <RECORD> for at least 3
seconds:
The assigned LEDs flash. The reset is finished, as
soon as the LEDs show the state before the reset
again.

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 12/60
4.2 Parameterization of the device functionality
4.2.1 Configuration manager
This measurement solution supports campaigns for repeated measurements at the same locations. For
that, a configuration manager can handle up to 20 different device settings.
The administration of the device configurations is done via the configuration manager.
•The active configuration is marked with (active) and also visible in the status bar
•<empty memory slot> means, that this configuration hasn’t been used yet\
•If the active configuration is selected, the menu is available
- Download: Save the active configuration as XML file on the PC
•If a none active configuration is selected, the menu changes to
- Activate configuration: This configuration is activated in the device
- Delete: The selected configuration will be deleted and then display as <empty memory slot>
Hint: The active configuration cannot be deleted
- Download: Save the selected configuration as XML file on the PC
•If an empty configuration is selected, the menu changes to
Upload: You may upload a configuration (XML file) from the PC
Each device configuration (chap. 4.2.2) is created via the Settings menu.
For the subsequent data analysis, the used configuration during data recording
must be reactivated in the device
ATTENTION: If the configuration used during data recording has been changed
or is no longer available, an evaluation of the data may no longer be possible.

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 13/60
4.2.2 Device configuration
A full parameterization of all functions of the device can be performed via the settings menu on the
website.
Upload a configuration from computer
The configuration data of the selected file will be directly loaded
into the device. At the same time the active configuration in the
configuration manager is updated. You can select, if the
parameters shown in the below picture should be overwritten or
retained by the values in the file to load.
Save current settings
You have to select the slot of the configuration manager to
overwrite. The settings will be activated in the device as well.
Store configuration on computer
Subgroups of the settings menu
•Country and clock: display language, date format, time zone, clock synchronization, time/date (only if
there is no time synchronization via NTP or GPS)
Hint: Although changing the language has immediate effect on the display, such a change must be saved in the device.
•Communication: Settings of the communication interfaces Ethernet (4.1.1) and WLAN (4.1.2).
Further settings:
- SFTP server to send user defined data files to.
- Syslog server that collects security-realted messages
Hint: The communication settings are valid for all configurations
•Measurement: Rated values of voltage / current / frequency
Hints
U / I transformer: The primary to secondary ratio is used only for converting the measured secondary to primary values, so e.g.
16’000 / 100 is equivalent to 160 / 1. The values do not have any influence on the display format of the measurements.
Nominal voltage: Is used as the 100% reference for monitoring power quality events and corresponds to the declared input
voltage Udin in accordance with IEC 61000-4-30
Maximum demand current: Reference value for scaling the harmonic content TDD of the currents
Maximum primary values U/I: These values are used only for fixing the display format of the measurements. This way the
resolution of the displayed values can be optimized, because there is no dependency to installed transformers.
Synchronous sampling: yes=sampling is adjusted to the measured system frequency to have a constant number of samplings
per cycle; no=constant sampling based on the selected system frequency
Reference channel: The measurement of the system frequency is done via the selected voltage input
•Current modules: To each current module a description, a rated current, a system type and an
amplification factor for both phase currents and neutral current can be assigned. The amplification
factor allows the measured current to be scaled if, for example, only one of three parallel cables of a
phase can be measured.

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 14/60
•Power Quality (Chap. 4.4): Definition of parameters for monitoring the PQ events and settings for the
statistical power quality assessment. The default values of the trigger thresholds and hystereses are
set to the common values of the EN50160 for a public low-voltage distribution system.
User-specific limits for the evaluation of the PQ statistic can also be set.
•Mean values: The interval time for the predefined power mean values can be defined here; typical
interval: 15 min
•Meters: A resolution (displayed unit) can be assigned to the meters, see meter scaling (annex A.5), as
well as a reading interval for the meter logger.
•Security system: Definition of the security system (RBAC, https, whitelist)
Hint: An activated security system is valid for all configurations
•Device description: Definition of different texts1) mainly used for report generation, such as device tag,
document title, device location and others.
1) In user-defined event and description texts all Unicode characters (UTF8) are allowed with the
exception of the following:
ASCII control characters (0x00 - 0x1F)
The quotation mark "(0x22)
The character &(0x26)
The apostrophe '(0x27)
The asterisk *(0x2A)
The slash /(0x2F)
The colon : (0x3A)
The «less than» character <(0x3C)
The «bigger than» character >(0x3E)
The question mark ?(0x3F)
The backslash \(0x5C)
The vertical line |(0x7C)

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 15/60
4.3 Security system
There are several security mechanisms implemented in the device which can be activated to provide a
comprehensive access protection to all device data.
The role-based access control (RBAC) system allows restricting the access to measured data,
configuration settings and service functions to the rights granted to the present user. For access via
website this is done by reducing the available menus and / or providing only read access rights to
specific services. For accessing data via external applications an API (Application Programming
Interface) key is required, which needs to be implemented as a special user.
HTTPS provides encrypted communication using TLS (Transport Layer Security)
Via client whitelist access to the device can be restricted to specific clients with definable IP
addresses
Communication blocking: Communication services, such as Modbus/RTU, Modbus/TCP or
SYSLOG are blocked by default and must be actively enabled via configuration. This way
unauthorized access may be prevented and possible intruding points eliminated.
Audit log: The device stores all security related messages in a separate list accessible via the
service menu. The content of this list can also be transferred to a central log-server using the
SYSLOG protocol for security auditing.
If the device is equipped with a display, restrictions defined in the security system also take effect when
operating the device via the local display. It is also possible to restrict users to local access only.
4.3.1 RBAC management
Each access to device data via website, local display or external software applications can be
comprehensively protected using the role-based access control (RBAC) system. This way, access to
measured value information, the change of configuration parameters or the resetting / deletion of
measurement data can be individually adapted to the role of the active user.
Note: All settings of the security system are stored in the device in encrypted form only; login credentials
are never transmitted in plain text.
A maximum of 8 users is supported
2 pre-defined standard users
•admin: A user with administrator rights (Default setting password: „CBM_1234“)
•anonymous: The standard user for access via device website. Its permissions determine what can
be displayed or changed via the website without a user having to log in.
Up to 6 definable users or API keys
Users or API keys may be created by each user with write access to the settings of the security
system. In any case, each user with a web login can change the password of its own account.
Application programming interface (API) keys are used to allow applications to access device data via
REST interface (communication via http/https protocol). Such keys are timely unlimited and have
either read-only permissions, all permissions or all permissions except security.
The pre-defined administrator or any other user with full access rights to the settings of the security
system can:
•Change its own credentials (user name and/or password)
•Change the credentials (user name and/or password) of any other user
•Freely define the permissions of the standard user anonymous
•Create new users up to a maximum of 6
•Restrict users to local operation only (no login via website)

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 16/60
Adding users / API keys
In addition to the 2 predefined users a maximum of 6 users or API keys may be created. To do so, use
“Add user / API key” and select the type of user to be created.
Users: During password definition the requirements for a secure password are checked and the result is
displayed. Each new user can be created based on the permission template of an already existing user,
but all of these permissions may be changed later.
When defining / changing passwords the following restrictions must be considered:
- Password length 8 up to 32 characters
- At least three different types of characters must be used (uppercase, lowercase, numbers,
special characters)
CAUTION: If login credentials (user name and / or password) of users with
write access to the security system are changed, this information must be
kept safe. For security reasons resetting the RBAC system can only be done
at the factory, no backdoor is implemented.
API key: Along with the key name you have to define the permissions to be granted to the application
using the key via REST interface. The resulting access rights cannot be changed afterwards.

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 17/60
Once the API key is created it can be displayed using “Show API key”
When the application wants to communicate via REST interface with the device, it has to provide the API
key and the session token via the cookie field in the request header, e.g.:
Further information is provided in the document “http interface SINEAX PQx000”
Assignment of user rights
The assignment of the user rights granted for operation is done via the menu Settings | Security system |
Users and permissions:
Measurements or settings can be
displayed
Measurements or settings cannot
be displayed
Settings can be changed
Settings cannot be changed
Field not selectable
Change a user’s login credentials
Overview of the access rights of each possible user

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 18/60
4.3.2 User log in / out via website
a) If “anonymous” has no granted permissions
Via website Remarks
1) Enter user name and password
2) Press <ENTER> or select “Login”
If successful, depending on the permissions of the user
logged in, the appropriate website is displayed
b) If “anonymous” has granted permissions
Via website Remarks
1) Click on the symbol
2) Enter user name and password. On first login use the
default settings admin / CBM_1234.
3) Press <ENTER> or select “Login”
If successful, depending on the permissions of the user
logged in, the appropriate website is displayed
c) If another user is already logged in
Via website Remarks
Log out the current user by selecting “Logout”
1) Click on the symbol
2) Enter user name and password
3) Press <ENTER> or select “Login”
If successful, depending on the permissions of the user
logged in, the appropriate website is displayed

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 19/60
4.3.3 Whitelisting clients
It is possible to define a list of IPv4 and/or IPv6
addresses of up to 10 clients allowed to have
access to the device. All other clients will be
blocked. Enable the whitelist via the Settings of
the Security system in the item Whitelist.
If a DHCP server is used in the system,
clients may get different IP addresses
on each startup, losing this way access
to the device.
If a device is no longer accessible you
can reset its IP address (LAN),
deactivating the whitelist at the same
time.
4.3.4 Secure communication using https
According to Enel specifications https communication is activated by default. This protocol provides
encrypted communication using TLS (Transport Layer Security). Such as bidirectional encryption of
communications between a client and server protects against eavesdropping and tampering of the
communication, by creating a secure channel over an insecure network.
Before HTTPS communication can be used a root certificate needs to be installed. The user can either
use a Camille Bauer certificate (default setting) or its own customer certificate. This may be changed
when defining the Settings of the Security system.
Camille Bauer certificate
Source: https://camillebauer.com/
Once the certificate is downloaded to the local computer the certificate can be installed manually. Just
double-click on the file. Install certificate, then select Place all certificates in the following store,
Browse and select Trusted Root Certification Authorities. Finish the Import Wizard.

PM 1002825 000 00 System handbook PQ5000MOBCL-MultiPQ 20/60
The imported certificate is valid for all devices of the PQ, AM, DM and CU series.
Agree to install the certificate if the below security warning appears:
Customer certificate
You may also use a customer server certificate with a private key, but for that you first need to change the
Settings of the Security system in the item Web Security.
You may use https communication also by ignoring any browser warning and establishing an
unsecure connection to the device. However, for security reasons you should not work like
that in the intended network environment.
4.3.5 Audit log (SYSLOG)
Security related events, such as …
•a computer establishing a connection to the device
•a user logged in /out
•a failed login attempt
•each changing of the device configuration
•the view of the security log by a user
•etc.
are logged in a security log accessible via the service menu.