Label: EcoStruxure Access Expert - Building Automation Knowledge Base

Issue This is a project to support integration with the Schindler PORT system. It should be deployed on a customer site to directly connect to the Schindler PORT firewall and be configured to connect to the customer instance on the Access Expert (AX) side to add, update, or remove people from Schindler PORT based on which access levels they belong to in AX.  Product Line EcoStruxure Access Expert Environment Access Expert Hosted software Cause Please read all the instructions to properly deploy and configure this service. Resolution Card formats The Schindler reader produces a 16-digit hexadecimal value after reading a card and sends it to the Schindler Port system for validation. The value from the Schindler reader is a different value from what is entered as the encoded card number in AX. Therefore, there needs to be an additional entry of the hexadecimal value in AX in the Hex Value field of a card assignment. The Hex Value will be sent to the Schindler Port system as the card number so that it matches with the Schindler reader value to get access.   To find out what the Hex Value needs to be, the process was to send Schindler 10 cards from a particular project then they get back to us with the correct hexadecimal representation of those cards. This will need to be done between you and Schindler for your project.   Prior to version 22.3.1 of the AX Schindler service, the service was used to encode the Encoded Card Number from AX using a 16-digit value of 0100000020000000, then replace the zeroes at the end with the hexadecimal representation of the Encoded Card Number. The service will still do that if no Hex Value is specified for a card but that may not be the correct encoding for your project.   In short, you need to enter the Hex Value of a card assignment in AX as the value that is generated by the Schindler card reader. Deployment The Schindler service is deployed using Docker. If you are using Windows, we recommend having WSL2 installed and enabled for Docker. The installer needs to pull the images for both Seq (for logging) and the Schindler service from the Docker hub.   The installer also needs to create a Docker network called ax-net. To create the network, execute: docker network creates ax-net To get the Seq image: docker pull datalust/seq To get the Schindler service: docker pull feenics/feenics-keep-schindler To install Seq (replace /path/to/seq/data with the actual path of a directory on disk, this is the linux notation): docker run -d --name seq --restart unless-stopped --network keep-net -e ACCEPT_EULA=Y -v /path/to/seq/data:/data -p 5341:80 datalust/seq To install Schindler (env.txt is in the same directory where you are executing the docker run in this case): docker run -d --name feenics-keep-schindler --restart unless-stopped --network ax-net --env-file env.txt feenics/feenics-keep-schindler Environment configuration The following environment variables can be specified in a file (env.txt in the example above) that is passed to the container when launching it from Docker. In the file, each of these properties will be followed by an equal sign then its value. ClientInstance= ClientUsername= ClientEncryptedPassword= ClientWSS= ClientAddress= Company= TagName= SchindlerServerIp= SchindlerServerPort=   Below is the description of each property: ClientInstance - the name of the client instance ClientUsername - the username to login the client instance ClientEncryptedPassword - the encrypted password obtained from the service password utility ClientWSS - the address of the MQTT event publisher (for USA: wss://keepevents.feenicshosting.com/mqtt) ClientAddress - the address of the API (for USA: https://keepapi.feenicshosting.com) Company - the company name as configured in the PORT system TagName - the tag name that will be assigned to the Schindler access levels in Access Expert SchindlerServerIp - IP address of the Schindler PORT firewall SchindlerServerPort - Port to use to connect to the Schindler PORT firewall Password The password in the environment configuration needs to be encrypted. The service has an embedded encryption utility. If you start the service with an additional parameter called "password", it will run the password encryption utility instead. Copy the encrypted password and add it to the configuration. To run it, execute the following: docker run --rm -it --name feenics-schindler-utility feenics/feenics-keep-schindler password The --rm will remove this container after it exists so you do not have to delete it manually.   Permissions The service user needs to have permission to read access levels, read people, read event messages and publish all Schindler event types. This is done by creating a group that has those permissions and assigning that group to the service user in Access Expert. The service will monitor the changes in the current instance and all the instances below it in the hierarchy.   Operation The Schindler PORT integration limits the configuration capabilities that can be performed from AX. We are able to add, update, or remove people from profiles in PORT. The Schindler PORT system has profiles defined with particular access to certain floors. These profiles need to have access levels in AX with the exact same name as the profile in order to add, update, or remove people from these profiles in PORT automatically. An access level matching a profile needs to be tagged with a tag name agreed upon and configured in the Schindler service (TagName). A person can only be in ONE profile in the Schindler system. This means that a person can only be in one access level tagged for Schindler sync. If a person is in more than one Schindler tagged access level, only one of the access levels will be chosen. If a person needs to have access to additional Schindler access levels, this needs to be performed from the Schindler system by defining a profile with all the required access and then adding an access level in AX with that profile name and Schindler tag. The Schindler service listens to changes in people and checks if they belong to a Schindler tagged access level then sends an update to Shindler PORT (first name, last name, 3 card assignments, profile name, start and expiry date) PORT only supports one start and expiry date for all three cards so we take the union of the three The Schindler service also listens to changes in access levels that have the defined TagName, whether a Schindler tag was added or removed to either send or remove the people in that access level from the Schindler system Warning: DO NOT delete an access level that has a Schindler tag. You need to remove the tag first in order for the service to know which updates it needs to send to PORT. Schindler command and response numbers (logged in Seq) The first three numbers in the command are an index, it is incremented with each command sent, and the PORT systems reply with the same command index. The next two numbers are the command type or the reply type as follows: SendAlive = "00" SendAliveSuccess = "01" ChangeInsertPerson = "06" ChangeInsertPersonSuccess = "03" ChangeInsertPersonError = "07" DeletePerson = "08" DeletePersonSuccess = "05" DeletePersonError = "09"   Important Add a permission restriction that an access level tagged with the Schindler tag cannot be deleted. This is important because we need to remove the people in Schindler PORT before deleting the access level. The workflow would be to delete the Schindler tag first, then you are allowed to delete the access level.   Recommendations The enterprise should review all access levels tagged with the Schindler tag to audit the entities that are giving elevator access. The enterprise creates the profile (access level) in the PORT system. If the tenant has a shared instance, the enterprise informs the tenant of the access level name and the Schindler tag to automatically send their people to the PORT system.

Issue The Zenitel integration to Access Expert provides the ability to add Zenitel ICX-500 controllers and stations for interaction with intercom devices and monitoring Zenitel events. In the Access Expert Windows Client, Zenitel Exchanges are accessible from the Intercom tab within the Hardware Provisioning section. The associated list of stations will appear when selecting and opening an Exchange. Product Line EcoStruxure Access Expert Environment Access Expert Hosted software Cause While trying to integrate a Zenitel intercom system to Access Expert there are some very specific steps that need to be followed Resolution Zenitel Exchanges Exchanges are used to group together and connect a specific set of Zenitel Stations. Through the Exchanges list, the following functionalities and properties are accessible: Add an Exchange: To add an Exchange, navigate to the Exchanges list and click “Create Exchange” in the upper left-hand corner. A dialogue will appear, prompting for a Display Name and MAC Address. Additional properties and information are available for viewing on the Exchange document once it’s been added. Note: It is important that the MAC address is valid. This is how the stations connect and populate in the instance. Note: The MAC address is not editable in the Exchange document after creation. Stations List: Each Exchange document has a read-only list of Stations connected to it. The system automatically populates the list based on Stations with a connecting MAC Address. This list is automatically updated with the most current available stations.   Zenitel Stations Stations are used to make calls. Stations can be accessed via the Exchange to which it’s connected, the global search bar, or the hardware tree. The Station contains the following properties: Display Name (Editable): This is the editable display name associated with the station. Connected To (Read-Only): Display name of the connected Exchange Configured Name (Read-Only): This is the non-editable original display name of the station configured by the ICX-500. Exchange Number (Read-Only): Number of the associated Exchange. Directory Number (Read-Only): Number to dial to reach this station. Connected Reader (Editable): Reader associated with the Station. Users may specify a reader in case they need to perform actions on surrounding hardware. Cameras/Views (Editable): Multiple cameras and views may be added via the Cameras tab. Reader functionality: Within the Stations form, users may specify a connected reader. Associated functionality to the reader is accessible directly through the “Actions” dropdown list or in the context menu when right-clicking a station that has a connected reader attached.   Functionalities for the associated readers include: Pulse Connected Reader Turn Connected Reader to Online Mode Unlock Connected Reader Lock Down Connected Reader Reset Connected Reader Floor Plans Edit Floor Plan: Stations may be added to floor plans. In the left-hand list of Available Hardware, all stations within the current instance will appear and may be added using the plus button to the right. At the top of the available hardware, a station icon exists for filtering.   View Floor Plan: When viewing a floor plan with connected stations, the station's alarm status will appear in real-time. The appropriate statuses and line states of the stations are also displayed and changes occurring with the stations are updated on the floor plan accordingly.   Hardware Tree Stations can be accessed via the hardware tree and can be filtered from the top of the list via its icon. The color of the Station object is used to determine its state (Green for Online, Red for Offline). Status is also viewable via an icon that appears on the Station (Black “X” indicating that a station is busy, grey phone symbol indicating that a station is in a call). Since a standalone list of all stations is not available via the Windows client, the hardware tree is the only place all stations within the current instance can be viewed at once.   Licensing Licensing of the Zenitel integration is based on the number of stations. Instances may be licensed for any number of specified Stations and thus, the system will not allow Stations within the instance to exceed the amount in which it’s licensed. If the instance is not licensed for any stations, the “Intercom” section in the Hardware Provisioning tab will not be visible.

Issue Creating an email notification within Access Expert can be challenging if the correct steps are not followed.  Product Line EcoStruxure Access Expert Environment Access Expert Premise Software Cause If you don't follow specific steps, email notifications can be very difficult to write. Following the steps below, you can use pre-canned expressions which help to automate your notifications based on specific parameters. Resolution *Note* though you can add the Expressions tab by customizing the ribbon, no expressions can be found or used without following the process below. If you need to edit the notification to add more parameters then you will need to create a new template as editing an existing one will not expose the expressions. Trigger an event or alarm for what you would like a notification on. Right-click on the event or alarm in Event Viewer or Live Monitoring and select Add Email Template This will open up the template editor for you where you then will be able to select the necessary expressions based on your needs  Type the email message you would like to receive when the alarm triggers, click save    Type in the name you would like to use for the template and what you would like in the subject line of the notification you receive        Click on Alarm Actions, Add Alarm Action, and then Notification  Within the next dialogue box: Create a label for the notification Check the box next to "Send Email" Select the appropriate template Select Add Recipient Type in the name of the recipients you would like to receive the notification Click Save

Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Issue Proper configuration of supervised inputs, Mercury IO modules (i.e MR52) versus Continuum IO modules (AC1/AC1Plus) for transitioned Continuum sites. Product Line EcoStruxure Access Expert Environment Access Expert Controller Access Expert Reader Interface Access Expert Premise Software Access Expert Hosted Software Continuum AC-1 IO Module Cause Guidance is needed on the proper configuration of Access Expert custom EOL resistor tables in order to achieve full supervision of inputs associated with readers/doors. Full supervision in this context means not only being able to detect normal input operation (activation/deactivation) but also detection of attempts to tamper with the input's circuit (short circuit, open circuit, grounding, the introduction of foreign voltages, etc.) Please note that not all resistor configurations can detect all the various circuit issues, for example, a NO Series resistor configuration can't detect a cut in the wire given that the open circuit is the normal state for the Deactivated value of the input. The resistor configuration that provides the most supervision is the Series/Parallel configuration, using 2 resistors is possible to detect both short and open circuits. Resolution Continuum supported a fixed 10K Ohms resistance for supervised inputs, furthermore, Continuum IO modules (AC1/AC1Plus) transitioned to Access Expert under an AX-SSC controller continue to operate with Continuum firmware, this means that they do not support the custom EOL tables in Access Expert, the only configuration that is possible for AC1/AC1Plus modules is the mode of connection of the resistor (parallel, series or both).   Also, when using 2 resistor configuration, the placement of the resistor is different in Continuum compared to Mercury hardware   CONTINUUM When the switch is open only the resistor on the left is seen by the input. When the switch is closed, the two resistors are presented to the input in parallel with each other resulting in the input reading half the sum of the total resistance value.   SECURITY EXPERT       When the switch is open, the two resistors will be presented to the input in series with each other resulting in the input reading the sum of the two resistors value.  When the switch is closed only one resistor is presented to the input   For the above reasons, Continuum transitions sites where the AC1/AC1Plus has been replaced with Mercury hardware like the MR52 for example, need to configure one or more custom EOL table(s) for 10K resistors.   *** The sample tables provided below contain resistance values calculated to take into account wide variations in total supervised loop resistance due to wire distance, gauge etc., supervised loops should be installed in accordance to distance and gauge guidelines for wires as well as recommended resistor tolerance. It may be necessary to make adjustments to the resistance values in the tables on a site by site basis.   See below sample tables for all six possible 10K resistor configurations   Normally Open Parallel (10K-NO-P) Normally Closed Parallel (10K-NC-P) Normally Open Series (10K-NO-S) Normally Closed Series (10K-NC-S) Normally Open Series/Parallel (10K-NO-SP) Normally Closed Series/Parallel (10K-NC-SP)+ 1. Normally Open Parallel (10K-NO-P) 2. Normally Closed Parallel (10K-NC-P) 3. Normally Open Series (10K-NO-S) 4. Normally Closed Series (10K-NC-S) 5. Normally Open Series/Parallel (10K-NO-SP) 6. Normally Closed Series/Parallel (10K-NC-SP)+

Issue Instructions on how to configure a Bosch Integration on Version 3. Product Line Access Expert Environment Access Expert Version 3 Microsoft Windows 8.1 and above Access Expert Hosted software with Bosch integration Access Expert Premise with Bosch integration Cause Configuring a Bosch Integration on Version 3 to communicate to Access Expert. There are certain settings that need to be configured from both the Access Expert side and Bosch so that the integration can be seamless and function as designed. Resolution One of the first things when doing this Integration is to have the Bosch Appliance ordered and installed on the Network where the Bosch Panel resides. The device comes pre-configured from Feenics and all that is needed is to make the necessary changes in Access Expert using the following steps: 1. Verify that the connected instance does have the Bosch Services Enabled by going to the Hardware Provisioning and looking at the Bosch Services.  2. Click on the Bosch Services. 3. This entry would come up automatically as it was preconfigured into the Hosted Instance by Feenics. 4. Click on the Panels label and add the Bosch Panel Type from the dropdown. 5. Enter the necessary values on the various fields that correspond to the Bosch Panel, the Password must match what the Bosch Panel is using. 6. Import the Configuration and then save and close. 7. On the Bosch Panel verify that the Port is set for Port 7700, Automation Mode is set to 2 and the Firmware is 2.0 or greater If changes need to be made, you need to first connect to the Panel from RPS > make the changes > sync to the panel > disconnect from the panel Go into the appliance and stop/restart the Feenics Bosch Service within Windows Services 8. Make the necessary changes if needed then save and recycle power 9. Bring up the Hardware Tree and verify that the Panel is Online and communicating 10. All preconfigured Areas, Points, and Outputs will show up in Green, indicating that everything is working properly.

Issue OEM conversions allow for a non-Access Expert/Feenics Mercury board to be converted to an Access Expert board. This is only applicable to the IP level controllers and the AX-OEMC codes are not needed for the downstream controllers.  The process will change the OEM code within the Device info page of the controller. This allows the board to receive the correct firmware and operate within Access Expert.  Product Line EcoStruxure Access Expert Environment Access Expert Controller Cause Not all controller boards are compatible with Access Expert by default Resolution To perform the OEM conversion on an intelligent controller, an AX-OEMC code is needed per IP Controller connected to your system.  These are ordered through iPortal and will require some specific information from the customer's site.  With your order, please include (both are located on the white sticker located on the actual controller: Model of controller Serial number Email address for recipient The OEM flash code will be emailed to the person whose email address is used in the order as the recipient.  To convert the controller: Using IP Server. Connect directly to the controller with an ethernet cable Locate the IP address of the controller (The default IP address can also be used). Go to the 'Host Comm' section of the configuration manager. Set the connection type to 'IP Server'. Take note of the Port Data Security should be set to none or TLS if Available Save and apply changes. Open the OEM & firmware utility. Download Here Set the controller connection type of the utility to 'Server'. Enter the MAC address of the controller. Enter the IP address of the controller. Enter the TCP port used by the controller. Select 'Connect'. Once connected, enter the Authorization code provided by Schneider Electric. Select 'Convert'.   OEM conversion complete. Once the conversion has been completed, the panel will need to be set back to the IP client to connect to the Access Expert Mercury Communication Servers. See the Configuring Controllers for IP Client page for instructions.  

Issue Cannot generate a report from Access Expert V2. Getting an error when attempting to generate the report "Could not load file or assembly Microsoft.ReportViewer.WebForms, Version=11.0.0.0"   Product Line EcoStrucure Access Expert Environment Version 2 Report Viewer Windows Cause The ReportViewer files that are from Feenics's website contain version 11. Microsoft does have older and newer versions of the file (i,e 10 and 12) so there is a potential that these files will not work. Resolution To resolve this issue 1. Download the Microsoft Report Viewer (Feenics Training> Web App V2> Miscellaneous Downloads) http://www.feenics.com/Downloads/ReportViewer.zip 2. On the Access Expert application PC (Not the SQL Server PC in a 2 PC system)     Uninstall all versions of Report Viewer and SQLClrTypes from Windows> Control Panel> Programs and Features 3. Stop the Feenics Keep Render Service 4. Unzip the Download files (Report Viewer.msi  and SQLClrTypes.msi) and install both of them 5. Restart the Feenics Keep Render Service Test Reports 6. If they are still not working, reboot the Access Expert PC and test again. If this is still not working, contact your local country support.

Issue How to configure Custom 37-Bit as well as Infinity 37-Bit Card Format Product Line Access Expert Environment Access Expert Server 2012 and Above Version 2 Version 3 Hosted  Premise Cause When configuring Custom 37-Bit as well as Infinity 37-Bit Card Formats, the settings are different based on the Facility Code, Card Length and Card Formats. The HEX code generated in Live Monitoring can be deciphered to get the correct set of values required to make this work for your application. If you are unable to do so, please contact PSS and open a ticket so that they can help. Resolution The following settings on the screen shots show how to configure Custom, HID Formats and Infinity 37-Bit Formats, please pay attention to the one that will work for your specific application: Open and log on to the respective Access Expert Instance Select the tab Access Configuration to create a new Card Format Name the format accordingly in the description field, this can be used for Infinity 37-Bit if so desired Add the card range by clicking on the page Icon on the Number Range There is a Standard, HID Managed 37-Bit (not Infinity 37) in the drop down in the Card Format Presets This can be used by default but if you have a Custom 37-Bit Format and the Facility Code is known, however the Start Bit and Length will be different. An Infinity 3 Bit Format will use the Parity Bits Create the new format per the screen shots and configure accordingly. Once complete, click on Save or Save and Close, reboot the controller.

Issue Permissions are set with multiple tags as the following:      When the user logs into Access Expert and looks at the hardware tree, they are able then to see all the hardware on the instance rather than just those with the matching tags. Product Line EcoStruxure Access Expert Environment Access Expert Hosted Software Access Expert Premise Software Cause The tags are meant to be on separate permissions and shouldn't be used on the same individual permission Resolution Tags and permissions should be set up as illustrated:

Issue General use of the Wireshark program. Product Line Access Expert, Andover Continuum, EcoStruxure Building Expert, EcoStruxure Building Operation, Pelco, Satchwell MicroNet, Satchwell Sigma, TAC IA Series, TAC INET, TAC Vista Environment Ethernet Networks Cause General Information on using WireShark. Resolution Wireshark is an Ethernet packet analysis programme, Which can be downloaded from: Latest version available from Wireshark Locally stored version 1.0.9 Installing Wireshark If necessary, unzip the WireShark executable file to a suitable location on the PC/Laptop you wish the programme to be installed on. Run the executable file and follow the on-screen instructions. Rules for capturing LAN traffic using Wireshark: Do not use a switch or router to connect the LAN capture PC to the network as these will filter important network activity that you will need to see. You will want to capture everything that is passing over the network at the point of concern. Usually, this means tapping into the ethernet at the Controller or controllers, that is having an issue. midBit-Technologies-LLC-10-100 is an example of a device that can be used to easily tap into the network to take the capture. The monitoring PC must see all traffic from the controller's point of view. The monitoring PC can be connected in either two ways: Connected to the network at the controller The customers IT department can mirror all the network traffic from the controllers port to another port the PC can be connected to. If connected to the network at the controllers, the connection must be made through a true ethernet hub. A hub will not selectively filter important network traffic as a switch or a router will do. More information on what a "true ethernet hub" can be found at http://wiki.wireshark.org/HubReference There are however some switches that feature port mirroring, please see How to Configure a NETGEAR Prosafe Plus Switch for Mirroring. If connected to a mirrored port, the port must mirror 100% of the network traffic to and from the controller. No filtering should be done. Once a complete capture file has been obtained it can be filtered after the fact using WireShark or EtherReal. Using Wireshark Run WireShark Start a trace by choosing the "Capture" menu and then select "Interfaces" Choose the appropriate interface. Generally, this can be identified by its IP Address, but if not, then the packets increasing are an indication. Press the "Start" button. The trace will start and will be similar to the following screenshot. After an appropriate time, the trace can be stopped by selecting "Capture" menu and "Stop" To save the capture file, choose "File" menu and "Save As".

Issue How to set up a Door on a controller for use as Read In/Out Access Environment Access Expert Windows 7 Server2012 R2 Server 2014 Cause There is no documentation on how to do this in Access Expert Resolution In order to do this, the following steps need to be followed: 1. Open up the site instance from IE 2. Log on to the system and Select the View All Hardware Icon 3. Select  the Interface that the door will be configured on 4. Uncheck the box  for Card In/ Free Out on Door Behavior 5. Click on the Save button on the bottom of the screen 6. Add a Reader to the interface and name accordingly for the IN Reader 7. Click on the Strike Button and verify that the Strike Relay is set to (Relay 1) 8. Click on the Door Switch button and select the proper setting for the Door Contact Tab 9. Click on Save and Close on the bottom 10. Click on the interface again and add a secondary Reader and make it a Slave Reader 11. Name accordingly as the Out Reader 12. If you notice this does not have any REX or Door Status Buttons to select from. 12. Click on Save 13. Restart the controller

Issue When adding a duplicate card into Access Expert, an error is generated. Environment Access Expert Hosted Instance (cloud) Premise Windows Server 2012 SQL 2012 R2 Version 2 Version 3 Cause Existing customers who may have multiple Tenants using multiple card formats and Facility Codes run into the the problem where there are duplicate cards that may have been ordered or handled differently. In Access Expert, when the card is added an error shows up indicating that the card is already assigned and cannot be added to another person. Card offsets can be introduced in order to ensure no overlapping card number values. Resolution In order to resolve this issue, the following steps need to be followed: 1. Create a new Card Format using the same Tenant Information 2. Add a card number offset, which is added to the original value. ie. a Card Offset of 1000 would make card 100 read as 10100.   3. Save and Close 4. Reboot the controller

Issue Prior to configuring and setting up an Access Expert system, it is imperative that the designated ports required be tested to ensure communications can be established. Product Line Access Expert Environment Premise Install Hosted Server 2012 Cause When configuring an Access Expert system to communicate to either a Hosted or Premise Instance, there are several ports that needs to be opened to establish communications to the server wherever it may be. If these are not opened then the system and the controller's statuses would not be able to be seen when opened from a web browser. Resolution To verify the port settings, please follow these steps: Download the Feenics Network Utility tester from Feenics Download. Note: You must be a registered subscriber of the Feenics website to access the files: https://www.feenics.com/training/lesson/v2-downloads/feenics-network-utility-firewall-port-tester/ Save and run the utility from respective media *** IMPORTANT Run the utility from a PC located in the same network as the AX-SSC, remember, we are trying to see if ports are open for communication between the AX-SSC and its server. Insert the Server address into the location and click on the Test button The results will indicate which ports are opened and which ones are not At least ports 3001 and 4502 need to be opened to get your AX-SSC online with the server. Notes for on premise setup: In the Server Address enter the name or IP address of the on premise server If the tool indicates the port is not opened, check that the Mercury Service is up and running at the server.

Issue Importing a .CSV file into Access Expert gives the following error: Product Line Access Expert Environment .CSV File Cause During the import the Excel doc holds the file open and causes a sharing violation in Access Expert. Resolution Close the Excel .CSV file during the import. This will happen with the sample file from Access Expert or one created manually with the appropriate fields.

Issue Gaining access to doors that are in Lockdown Mode Product Line Access Expert Environment Access Expert Win 8.1 and above SQl 2012 R2 SQL 2014 Cause When doors are in this mode, access cannot be granted to anyone without special privileges Resolution To resolve this issue, the following steps need to be followed: Create a Door Group called Lockdown Go to Sys Settings and select this for Lockdown Option Create a new trigger per the screen shot and save Reboot the system for it to take effect and test the procedure.

Issue Setting up a Lockdown Sequence in Access Expert Product Line Access Expert Environment Windows 7, Windows 8, Windows 10 SQL2012, R2 SQL2014 Cause Creating a Lockdown Schedule and it is not working because the Option in the Sys Settings need to be created first. Resolution The following steps need to be followed to get this to work properly:   1. In Access Expert, create a Door Group called lockdown for the necessary Doors in Access Configuration   2. Open up the General Configuration, System Settings, User Interface tab and select the Door Group Dropdown Option 3. Select the Door Group from Step 1 and save it   4. Reboot the system for it to take effect and test the Lockdown procedure

Issue Directions on how to commission an SSC and Mercury Controllers right out of the box. Product Line Access Expert Environment Windows 7 Windows 8 Windows Server 2012 Windows Server 2014 Version 2 Version 3 Cause No directions on setting up an SSC and Mercury Controllers to get it online. Resolution Commissioning the AX-SSC Here is a link to a video that describes how this should be done as well that can be accessed from the following link: Commissioning a new SSC 1. Connect the Access Expert Device Administrator to the SSC using USB cable then go to ‘Network settings’ to configure the device’s IP address etc. 2. In the ‘Ethernet 1 Configuration’ tab, configure the IP settings (In this example, we are using a static IP address). Make sure to configure the DNS so that the URL of your hosted instance can be resolved. Take note of the SSC’s MAC address which will have to be entered when adding the SSC in Access Expert. 3. Enable the default user in the SSC in order to be able to login with a web browser to configure additional communication parameters. NOTE: The default user will stay enabled for 5 minutes then the checkbox will automatically deselect. Once logged into the SSC you can create a new level 1 user so you don’t have to rely on the default user again. 4. Point a web browser to the SSC's IP address and login using the default user (admin/password). After logon, verify the IP settings configured from the Device Administrator, you can edit the settings here if necessary. 5. If using a Mercury EP1501 or EP1502 Controller, use the MAC address and connect to the device. Once logged in, go on to the next step 6. Go to the ‘Host Comm’ page. This is where you will configure the SSC to be able to communicate to the Access Expert database instance in the cloud. 7. Configure the connection type for ‘IP Client’. Enter the URL for your DB server instance or the hosted cloud server as shown in the above example. 8. For V3, the Host Name would be us.accessxpert.com (ax.accessxpert.com also works). If premise, then it would be the IP of the Server. 9. Note the port number used for communications and make sure this port is open; you can also configure an alternate host port as a backup. 10. Usually it is 3001, if that is blocked by the clients Network, then use Port 443. 11. Click Accept then ‘Apply Settings’ followed by ‘Apply Settings Reboot’.  

Issue When launching a Access Expert on a Premise install, an error "Unable to retrieve license. Please notify your Keep service provider" when trying to log on to the instance. Product Line Access Expert Environment Access Expert Wondows 7, SQL 2012 SQl 2014 Cause Keep does not have access to the database for license information. Resolution Install SQL Studio and give NT AUTHORITY\SYSTEM sysadmin rights. The following captures shows where to go to enable this in SQL. Connect to SQL, go to the Security Folder and expand it, select the Logins Folder and expand that then select the NT Authority When the tab opens select the Server Roles, then check the box for sysadmin.

Issue Sub Device unable to come online when added to an SSC Controller on a system. When the controller that is offline is selected the save option is not available. Product Line Access Expert Environment Access Expert in Cloud or Premise Installations Microsoft Windows 7, Windows 8, Server 2012, Server 2014 Cause The controller is not  configured correctly (MR50) The controllers IP address is incorrectly configured,  or is not saved or made active on the system. (MR 51E) Resolution To resolve this, the following steps need to be followed: Add the interface type to the SSC Configure the interface for DHCP, Static or MAC address (MR51e) Once complete, select Save or Save & Close to save to the controller If multiple devices are being added, follow previous steps 1-3 above then:  Open up the Live Monitoring Window to check the status of the controller If the devices show offline, Right Click on the controller and select Reboot The Live Monitoring Window will show what is actually being sent to the controller Once completed the status will change to reflect what state the controller is in If correct it will be Online (Green), if not check the configuration again

Issue Require directions on how to create an Access Level. Product Line Access Expert Environment Windows Server 2012 and Above Cause The steps are needed on how to create a new Access Level. Resolution To create a new Access Level in Access Expert, the following steps needs to be followed: 1. Select Access Configuration from the main headers, Add New Access Level 2. Name accordingly (7 X 7, Cleaners etc) 3. Assign Access Control Entry (drag and drop users from user list) 4. Use existing schedule or create a new one if needed 5. Use door group that has access to requested area or create accordingly 6. Click on Save