Form: KMS-3098

Revision: A
Overhead Medium Voltage Systems Date: 17.05.13

QUALITY SYSTEM DOCMENT

Title: Fusesaver Release Notice Doc.Number: KFS-7118
Prepared by: Hank Wheeler Date: 10th Jan 2020

1 Release Scope
This release notification covers the following:
Fusesaver Firmware: FW1402 (available from https://sosdmc.siemens.cloud)
RELEASE CLASSIFICATON: MAINTENANCE

2 Coverage
Region: WORLD-WIDE
Customers: ALL
Applicable Fusesaver Types: All (3AD82**, 3AD84**)

3 Release Description
The Fusesaver firmware version covered in this release (FW1402) primarily resolves bug
fixes, listed in Section 4 below.
For convenience, we have indicated all the changes/fixes implemented over the last year.
Siemens recommends updating all devices to the latest firmware to ensure the most
reliable/consistent performance.

4 Resolved Firmware Bugs and Vulnerabilities

The following bugs/vulnerabilities have been addressed in this release:
V345, V352, FW1401 FW1402
Firmware:
V353 (June ’19) (This Release)
4.1 - Pseudo Trip Loop High Severity Resolved Resolved
4.2 - Save State Bug Medium Severity Medium Severity Resolved
4.3 - Unintended Protection
Low Severity Resolved Resolved
Mode Change Event

Unrestricted Page 1 of 9
 Form: KMS-3098
Revision: A
Overhead Medium Voltage Systems Date: 17.05.13

QUALITY SYSTEM DOCMENT

Title: Fusesaver Release Notice Doc.Number: KFS-7118
Prepared by: Hank Wheeler Date: 10th Jan 2020
4.1 Pseudo Trip Loop (Vulnerability Resolved in FW1401, FW1402)

Description:
The pseudo-three phase trip and synchronous reclose function has a vulnerability in how it
handles corrupted message rejection which may result in unexpected operations.
We have determined that this vulnerability may affect sites which:
· Are a multi-phase installation,
And
· Have open-close-open (OCO) functionality enabled
And
· Have Fusesaver Firmware older than FW1401

Probability of Occurrence: Low

We have had three reported cases of this malfunction over our entire install base (<300ppm)
since the pseudo three phase trip and reclose feature was released.

Severity: High
Although this bug is not considered a safety risk, upon occurrence it is a major functionality
non-conformity which may greatly impact customer and has the potential to damage
equipment.

Resolution:
To resolve this issue, preventing the unintended trip-close loop, the latest firmware must be
installed on the Fusesaver and Communications Module:
· Fusesaver => FW1402 or later
· Communication Module => FW1601 or later

Unrestricted Page 2 of 9
 Form: KMS-3098
Revision: A
Overhead Medium Voltage Systems Date: 17.05.13

QUALITY SYSTEM DOCMENT

Title: Fusesaver Release Notice Doc.Number: KFS-7118
Prepared by: Hank Wheeler Date: 10th Jan 2020

4.2 Save State Corruption Bug (Vulnerability Resolved in FW1402)

Description:
We have found that prior Firmware (FW1401 and older) has a vulnerability where the save
state data stored in the Fusesaver may (on rare occasions) become corrupted during the
following scenarios:
· Updating the firmware (Comms Module or Fusesaver) when the Fusesaver has no
line current.
· Removing and Attaching the Comms module.
The symptoms of this bug include:
· Resetting the Operations Count to zero.
· Incorrectly setting the VI expired flag (Resulting in VI Life showing as 0%)
· Unintentionally setting a Remote Protection Mode.

Probability of Occurrence: Medium

Updating firmware to FW1401 had the highest occurrence of this vulnerability, with some
customers experiencing up to 10% corruption rate.
Occurrences during Removing and replacing Comms modules has proven to be very rare (~
500ppm)

Severity: Medium
This vulnerability is considered a medium severity, as it is easy to detect and can be
resolved by reconfiguring or running a maintenance utility.

Resolution:
To resolve this issue, preventing save-state corruption, the latest firmware must be installed
on the Fusesaver and Communications Module:
· Fusesaver => FW1402 or later
· Communication Module => FW1601 or later

Unrestricted Page 3 of 9
 Form: KMS-3098
Revision: A
Overhead Medium Voltage Systems Date: 17.05.13

QUALITY SYSTEM DOCMENT

Title: Fusesaver Release Notice Doc.Number: KFS-7118
Prepared by: Hank Wheeler Date: 10th Jan 2020

4.3 Unintended Protection Mode Change due to Battery Test (Resolved in

FW1401, FW1402)

Description:
We have found that Firmware V353 and older will log a protection change event (toggles
protection mode to and back from the de-energised line mode) during the battery test which
is programmed to run monthly. These events have caused confusion in analysing Fusesaver
Event and during remote SCADA monitoring.

Probability of Occurrence: High

This will occur on all units with firmware V353 or older.

Severity: Low
This issue is considered very low severity, as it does not affect the functionality of the device
but may cause some confusion when analysing events.

Resolution:
To resolve this issue, update the Fusesaver and Comms module to the latest firmware:
· Fusesaver => FW1402 or later
· Communication Module => FW1601 or later

Unrestricted Page 4 of 9
 Form: KMS-3098
Revision: A
Overhead Medium Voltage Systems Date: 17.05.13

QUALITY SYSTEM DOCMENT

Title: Fusesaver Release Notice Doc.Number: KFS-7118
Prepared by: Hank Wheeler Date: 10th Jan 2020

5 New and Enhanced Features

The Latest Feature Update Summary (with details below)
≤V345, V352, FW1401 FW1402
Firmware:
V353 (June ’19) (This Release)
5.1 - Supports Rechargeable
No Yes Yes
Comms Module
5.2 - Cold Load Pick Up No Yes Yes
5.3 - TCC Enhancements No Yes Yes
Permanent Permanent
5.4 - FPI Options Permanent Transient Transient
Detected Detected
5.5 - Manual Trip Delay No Yes Yes
5.6 - Fault Event Reporting
No Yes Yes
Enhancements
5.7 - Deenergised line
protection mode: Option to No Yes Yes
disable
5.8 - Lever Down Config
No Yes Yes
Name Changes
5.9 - Standardised Firmware
No Yes Yes
Numbering

5.1 Rechargeable Communications Module (Added in FW1401, FW1402)

A Rechargeable Communications Module (RCM) is now available and utilises rechargeable
batteries which can be recharged via the Fusesaver using the line current. The RCM
requires the latest available Fusesaver Firmware (FW1402 or later) to ensure correct
operation and charging.

Notice
If the rechargeable communications module is fitted to a
Fusesaver with older firmware (≤V353), then the LED will
continuously blink rapidly to notify the user that the
Fusesaver firmware requires updating.

5.2 Cold Load Pick-up (Added in FW1401, FW1402)

When a feeder with many thermostat-controlled loads is energised after an extended outage
there is a period of increased demand. A cold load pick-up protection element has been
implemented to support application of Fusesaver in this scenario.

Unrestricted Page 5 of 9
 Form: KMS-3098
Revision: A
Overhead Medium Voltage Systems Date: 17.05.13

QUALITY SYSTEM DOCMENT

Title: Fusesaver Release Notice Doc.Number: KFS-7118
Prepared by: Hank Wheeler Date: 10th Jan 2020
After a minimum outage period the protection pick-up threshold is increased by a cold load
multiplier which will remain in effect for a defined period of time. The network outage period,
cold load multiplier and application period are all configuration items in the policy file.
The cold load protection element is only available for Fusesaver configured with open-close-
open enabled.

5.3 Fusesaver time current curve modifier enhancements (Added in FW1401,

FW1402)
The Fusesaver protection time current curves have a number of configurable modifiers. The
resolution and allowable range for the modifiers as follows have been enhanced to allow
more precise protection curve grading:
Modifier Previous Setting Range New Setting Range
(FW≤353) (FW>353)
Minimum Time Element 0.1 to 1s in 0.1s increments 60 to 1000ms in 20ms increments
Maximum Time Element 0.1 to 10s in 0.1s increments 0.1 to 60s in 0.1s increments
Allowable Fuse Rating 1 to 100A 1 to 200A

The time current accuracy of the application of the instantaneous multiplier has been
improved.
The time current curve accuracy of the inverse curve for Fusesaver configured with partner
fuse has been improved.

5.4 Fault passage Indication Configuration Options (Extra Options Added in

FW1401, FW1402)
The Fusesaver fault passage indication function causes the LED on the communications
module to blink after a permanent fault. The triggering options for indicating a fault have
been expanded and made configurable via policy file setting to include:
· Permanent Fault Only
· Transient and Permanent Fault types
· Detected, Transient and Permanent Fault types

5.5 Manual Trip Delay Configuration Options (Added in FW1401, FW1402)

The delay for a manual trip after a lever press on the communications module is currently
hard coded for 60s. This duration has been a legacy constraint of the original open-close
Fusesaver functionality.
In this firmware release and for open-close-open Fusesaver application the manual trip delay
is now configurable via policy file setting with the following options:

Unrestricted Page 6 of 9
 Form: KMS-3098
Revision: A
Overhead Medium Voltage Systems Date: 17.05.13

QUALITY SYSTEM DOCMENT

Title: Fusesaver Release Notice Doc.Number: KFS-7118
Prepared by: Hank Wheeler Date: 10th Jan 2020
· ASAP* (As soon as possible) which is typically less than 3 seconds.
· 10 to 60s in 10s increments (synchronous operation maintained in multi-phase sites
with ganged manual operation enabled)
Application Notes:
· ASAP should be avoided in multi-phase sites as there may be reliability/synchronicity
issues.
· For multi-phase sites with RCU installed, it is recommended to use 30s as the
minimum to maximise reliability/synchronicity.

5.6 Fault Event Reporting Enhancements (Added in FW1401, FW1402)

The method of reporting fault data in the Fusesaver event log has been unified and
simplified with the following format used:
Protection Trip – AAA trip – Fault BBB A RMS – Maximum Recorded Peak CCC A –
Load DDD A RMS – Estimated Fault Duration EEEms
Where:
AAA = 1st or 2nd trip in protection sequence, or COF (COF = manual close onto fault)
BBB = RMS Value of fault or “Instant” if only a half cycle of fault current data is available
CCC = Maximum recorded peak current that was measured during the fault duration. This is
useful to determine the amount of DC offset in the fault waveform.
DDD = load current before fault or N/A for 2nd trip or COF trip
EEE = Estimated fault duration rounded up to nearest 10ms increment

For example;

5.7 De-energised line protection mode options (Added in FW1401, FW1402)

The de-energised line time configuration option has been expanded to include a “disabled”
option. When this configuration option is selected the Fusesaver protection will remain
unchanged when the line current is OFF, i.e. it will not transition to a “de-energised line
protection mode” and will remain in whatever was the “in-force” protection mode.

5.8 Lever down configuration option name changes (Added in FW1401,

FW1402)
The policy file settings relating to the effect of moving the external lever to the down position
have been renamed to improve understanding of their function

Unrestricted Page 7 of 9
 Form: KMS-3098
Revision: A
Overhead Medium Voltage Systems Date: 17.05.13

QUALITY SYSTEM DOCMENT

Title: Fusesaver Release Notice Doc.Number: KFS-7118
Prepared by: Hank Wheeler Date: 10th Jan 2020
5.8.1 Lever down manual inhibit
The configuration item “Lever down manual inhibit” has options ok/inhibit/kill. This created
confusion if an “ok” setting was chosen does this enable the manual inhibit. The
configuration item has been renamed to “Lever down manual operation” with the same
setting options. Now it is clear that a choice of “ok” is in fact enabling manual operation
whilst the lever is down.
5.8.2 Enable External Lever
The configuration item “Enable External Lever” was not adequately described in the
Fusesaver User Manual and the intended purpose of this setting is not evident in its name.
The configuration item has been renamed to “Lever down protection change” with setting
options enabled/disabled. Refer to KFS-2034 Fusesaver Configuration Guide for details on
the function of this setting.

5.9 Standardised Firmware Numbering (Implemented from FW1401)

Siemens have now standardised our Firmware Labelling & Numbering in policy KMS-0053
with the following structure:
<Type><Major Revision><Minor Revision><Maintenance / Service Packs>, where:
· <Type> = “FW” (Firmware) or “SW” (Software)
· <Major Revision> = single digit (1 – 9)
· <Minor Revision> = single digit (0 – 9)
· <Maintenance / Service Packs> = double digit (00 – 99)
All new firmware and software releases will be identified as major, minor or maintenance
releases and be numbered according to this system.

6 Compatibility
The following compatibility issues are valid:
· The Fusesaver firmware version in this release is compatible with all earlier versions
of the Fusesaver hardware. Some limitations of the newly added functionality may
occur with older hardware platforms.
· The Fusesaver firmware in this release is only compatible with Communication
Module firmware versions FW1601 or later.
· The Fusesaver firmware version in this release is not compatible with versions of
Siemens Connect prior to V4.0.0.5
· The Fusesaver firmware version in this release is not compatible with versions of
RCU firmware prior to V133
· The Fusesaver firmware version in this release is compatible with all previously
created policy files.

Unrestricted Page 8 of 9
 Form: KMS-3098
Revision: A
Overhead Medium Voltage Systems Date: 17.05.13

QUALITY SYSTEM DOCMENT

Title: Fusesaver Release Notice Doc.Number: KFS-7118
Prepared by: Hank Wheeler Date: 10th Jan 2020

7 Installation
· Download the firmware installers and documentation from the Siemens outdoor
systems data management cloud at https://sosdmc.siemens.cloud
· Follow the Firmware Installation Instructions: KMS-0018

8 Contact
Please contact your local Siemens office for support.
The global headquarters for Overhead Medium Voltage Solutions can be contacted via this
email address:
Fusesaver.au@siemens.com
Digitally signed by Wheeler Hank
DN: cn=Wheeler Hank,
o=Siemens,
email=hank.wheeler@siemens.com
Date: 2020.01.10 14:07:40 +10'00'

Unrestricted Page 9 of 9