Issue Where are the reports of fixed issues/bugs for the various product lines located? Product Line TAC Vista, TAC INET, Andover Continuum, Satchwell MicroNet, Satchwell Sigma, TAC IA Series, EcoStruxure Building Operation, EcoStruxure Building Expert, Access Expert, Security Expert Environment Technical Product Announcements Cause TPAs contain information of changes made per version of the different product lines. A TPA may report enhancements and/or broken functionality. Resolution Navigate to Exchange Extranet to view all TAC Vista documents tagged as TPA. The documents will be listed in reverse chronological order. Log in to view these documents. See Register for The Exchange Download Center for more information on registration.

Issue Where to go to download the Access Expert Device Administrator application. Product Line Access Expert Environment Server 2012 SQL 2012 and above Premise Install V2 Hosted V2 Applet V3 Cause There is no documentation on where to go to download the Device Administrator and how to program the SSC to communicate with the selected application. Resolution The following steps describe where to go and download the software and how to use it to program an SSC: Go to the EcoBuilding Exchange In the search field type Device Administrator Select the Access Expert Device Administrator and download to any location Browse to location and double click execute to run and install the program Accept Agreement and click next to continue installation Click Next to start installing the software Select the location where the file will be installed Successfully loaded software To complete installation, click on Finish Connect the device to a network switch that is open to the internet and launch the application by opening Access Expert device Administrator from the Schneider Electric group in All Programs Launch the application  Right click on the usb line or click on the green arrow to the top left to upgrade the software Once upgraded successfully, Right click again on the line and select properties then select the Ethernet 1 ConfigurationTab Select applicable choice whether it is DHCP or Static addressing being used and click on OK. Once the device comes back Online, select the DIP Switches Tab and check the box for Default User Using the IP address given from step number 13, open up IE and browse to that address Once opened, configure the SSC per Setting up an SSC (System Security Controller), EP1501 and EP1502 Mercury Controllers.

Issue How to find the IP address information on a PC? Product Line EcoStruxure Building Operation Environment Windows Operating Systems Cause Need to identify the IP address of the workstation (PC). Resolution For a Windows 95/98 PC, go to a DOS screen and run WINIPCFG. For a Windows including and after Windows7 run a COMMAND window and run IPCONFIG.  

Issue Sometimes as an administrator, you may need to kill a service which is stuck at starting or stopping in order to avoid having to reboot a server in the middle of the day. Or even after the reboot, the service will not start. Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Enterprise Central Building Operation Licensing Server Security Expert Windows Services Access Expert Windows Services (on-premise only) Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Sometimes the service times out and gets stuck in a loop due to fallback protocols within the service Resolution Find out the name of the service To do this, go into services and double click on the service which has stuck.   Make a note of the “Service Name”. Find out the PID of the service Open an elevated command prompt and type in: "sc queryex servicename" (where servicename is the name of the service you obtained from Step 1). Make note of the PID Kill the PID From the same command prompt type in: "taskkill /f /pid [PID]" (Where [PID] is the service number).   If it is successful you should receive the following message: "SUCCESS: The process with PID XXXX has been terminated."     Be careful of what you are killing though. If you kill a critical windows service you may end up forcing the machine to reboot on it own.   If the service returns back into this state you may need to increase the time allotment for the service to start.   Global (entire system): Open Windows Registry: Start -> Run -> regedit.exe File --> Export --> make a backup of the current registry Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ Right click on the right page ---> New ---> DWORD call the new DWORD "AutoStartDelay" Set AutoStartDelay in milliseconds (decimal). E.G. 240000 is 240 seconds. Per-service: Open Windows Registry: Start -> Run -> regedit.exe File --> Export --> make a backup of the current registry Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<servicename> To increase the default delay of 120 seconds, right click the registry key and add new key AutoStartDelay (DWORD (32-bit)) Set AutoStartDelay in milliseconds (decimal). E.G. 240000 is 240 seconds.

Issue When transitioning Continuum access control to Security Expert or Access Expert the Continuum power supply may need to be configured for auxiliary IO power mode.  Product Line Security Expert Access Expert Environment Continuum AC-1 IO Module Security Expert Controller Access Expert Controller Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Cause The UPS versions of the 120/240 AC Continuum power supply include two status signals that are meant for use by a CPU module. When connecting directly to an I/O module you must disable these signals. If signals are left enabled they will cause communication issues between the AC-1 IO modules and the Security Expert or Access Expert controller. Resolution This applies  ONLY to the UPS models of the Continuum power supplies (PS 120/240 AC 50-U, AC 65-U and AC 85-U)   Remove power from the unit. On the Continuum power supply, press both cover removal tabs inward simultaneously and pull up. Locate the Mode switch using the diagram below. *** With the tip of a small screwdriver, carefully slide the switch to the AUX position. Replace the cover.   NOTE: On older versions of the power supply, instead of a switch, two jumper components must be removed from the printed circuit board.  

Issue Introducing a previously commissioned Continuum IOU module such as an AC-1 to an Access Expert or Security Expert site can cause communication issues in the LON bus due to duplicated node id. Product Line Andover Continuum, EcoStruxure Security Expert, EcoStruxure Access Expert Environment Continuum AC-1 Continuum Net Controller Continuum Net Controller II Access Expert Controller Security Expert Controller Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Cause When IOU modules are commissioned in a Continuum system, the Net Controller assigns each module a Node ID, this is in addition to the LON Module ID that is unique to each module hardware, the purpose of the Node ID, is to decouple the identifier used by Continuum for communication from the specific piece of hardware, this in order to facilitate the replacement of a failed module without the need to change its Continuum identifier. The module stores the Node ID in nonvolatile memory so that it persists across power loss. If a Continuum IOU module is introduced to a LON network (Security Expert SP-AC1 or Access Expert AX-SSC) without clearing its Node ID, there is a risk of creating a duplicate Node ID condition that will prevent the LON network from operating properly. IMPORTANT This should not be an issue during the normal transition of Continuum site to Security Expert or Access Expert, as all the modules on the running LON bus should have unique Node IDs, this is only a problem when adding a module, or replacing a module with one that has been used before. Resolution In order to signal its presence on the LON network, each module will transmit on resetting its status network variable. If upon receiving this message, the Net Controller determines that the module is NOT in its local database, the controller will decommission the module by setting its Node ID to zero. Before introducing a Continuum IOU module that has been previously commissioned to the LON network of an SP-AC1 or SX-SSC controller, decommission the IOU module using the steps below: Attach the module to an empty Net Controller that is powered down with its battery removed. For a Net Controller II, in order to be absolutely sure that the Net Controller has an empty database, you may need to clear its backup in flash from a browser or by the use of the reset IP switch. See LL on how to use the controller's reset IP switch to clear its flash backup https://community.se.com/t5/Building-Automation-Knowledge/How-to-clear-the-controller-flash-backup-from-the-hardware-using/ta-p/5877 Power up the Net Controller Once the CPU led on the Net Controller starts blinking, press the 'Reset' button on the IOU module. Wait 30 seconds to make sure the decommissioning process has completed. Power down the Net Controller Remove the IOU module

Issue Proper configuration of supervised inputs, Mercury IO modules (i.e MR52) versus Continuum IO modules (AC1/AC1Plus) for transitioned Continuum sites. Product Line EcoStruxure Access Expert Environment Access Expert Controller Access Expert Reader Interface Access Expert Premise Software Access Expert Hosted Software Continuum AC-1 IO Module Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Cause Guidance is needed on the proper configuration of Access Expert custom EOL resistor tables in order to achieve full supervision of inputs associated with readers/doors. Full supervision in this context means not only being able to detect normal input operation (activation/deactivation) but also detection of attempts to tamper with the input's circuit (short circuit, open circuit, grounding, the introduction of foreign voltages, etc.) Please note that not all resistor configurations can detect all the various circuit issues, for example, a NO Series resistor configuration can't detect a cut in the wire given that the open circuit is the normal state for the Deactivated value of the input. The resistor configuration that provides the most supervision is the Series/Parallel configuration, using 2 resistors is possible to detect both short and open circuits. Resolution Continuum supported a fixed 10K Ohms resistance for supervised inputs, furthermore, Continuum IO modules (AC1/AC1Plus) transitioned to Access Expert under an AX-SSC controller continue to operate with Continuum firmware, this means that they do not support the custom EOL tables in Access Expert, the only configuration that is possible for AC1/AC1Plus modules is the mode of connection of the resistor (parallel, series or both).   Also, when using 2 resistor configuration, the placement of the resistor is different in Continuum compared to Mercury hardware   CONTINUUM When the switch is open only the resistor on the left is seen by the input. When the switch is closed, the two resistors are presented to the input in parallel with each other resulting in the input reading half the sum of the total resistance value.   SECURITY EXPERT       When the switch is open, the two resistors will be presented to the input in series with each other resulting in the input reading the sum of the two resistors value.  When the switch is closed only one resistor is presented to the input   For the above reasons, Continuum transitions sites where the AC1/AC1Plus has been replaced with Mercury hardware like the MR52 for example, need to configure one or more custom EOL table(s) for 10K resistors.   *** The sample tables provided below contain resistance values calculated to take into account wide variations in total supervised loop resistance due to wire distance, gauge etc., supervised loops should be installed in accordance to distance and gauge guidelines for wires as well as recommended resistor tolerance. It may be necessary to make adjustments to the resistance values in the tables on a site by site basis.   See below sample tables for all six possible 10K resistor configurations   Normally Open Parallel (10K-NO-P) Normally Closed Parallel (10K-NC-P) Normally Open Series (10K-NO-S) Normally Closed Series (10K-NC-S) Normally Open Series/Parallel (10K-NO-SP) Normally Closed Series/Parallel (10K-NC-SP)+ 1. Normally Open Parallel (10K-NO-P) 2. Normally Closed Parallel (10K-NC-P) 3. Normally Open Series (10K-NO-S) 4. Normally Closed Series (10K-NC-S) 5. Normally Open Series/Parallel (10K-NO-SP) 6. Normally Closed Series/Parallel (10K-NC-SP)+

Issue Access Expert SSC and Mercury controllers require firmware updates Product Line EcoStruxure Access Expert Environment Access Expert V3 Hosted Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause SSC and Mercury controller firmware needs to be updated for a fix or feature change Resolution Overview Mercury Controllers operate based on their firmware version and programmed configuration within Keep. It is necessary to update the Mercury firmware on occasion to ensure the most recent features, bug fixes and security upgrades are on the Mercury panel.    Updating Firmware Mercury controllers can be updated using the Keep by Feenics software. Before updating the controller, confirm the controller is powered on and connected to a Keep by Feenics instance. It is important to have a stable internet connection throughout the entire firmware update process. The duration of the firmware update will depend on the network bandwidth but typically will take between 5 to 10 minutes for a complete update. Users can issue multiple firmware updates to different intelligent controllers at the same time, but not downstream devices.   Updating the Firmware on a Controller To update the firmware on a controller: Open the controller page.  Beside the Version field, click on the "Update Firmware" button. Open the Live Monitoring window and set the priority to 0. In the Live Monitor, you will see the "Downloading Firmware Event". Once the controller has completed the firmware update, it will reboot.  After, close and re-open the controller page to see the updated firmware version. EP Controller Firmware The EP Series controller's current version is 1.29.1.633 and was released on 2020/01/31. Due to the controllers being End of Life, no new versions of firmware will be released for the EP series controllers.   On-Premise Deployments Note: On-Premise Deployments are no longer supported. All sites will convert to hosted. The previous process to upgrade firmware for On-premise deployments (servers managed on-site): They can have their firmware updated out of band by placing the latest Mercury CRC files in the appropriate directory. Once the files are in place users can proceed with the update steps outlined in this article. The default directory for firmware files can be found at C:\Program Files (x86)\Feenics\Mercury Service\MercuryFirmware. 

Issue Instructions needed to perform a Factory Reset for Upstream Mercury Controllers Product Line EcoStruxure Access Expert Environment Access Expert software Hosted V3 Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Instruction steps are needed to reset Upstream Mercury controllers to Factory Default settings Resolution Bulk Erase Configuration Memory: The bulk erase function can be used for the following purposes: Erase all configuration and cardholder database (sanitize board) Update OEM default parameters after OEM code has been changed Recover from database corruption causing the board to continuously reboot   Bulk Erase Steps (Factory Reset): Do not remove power during steps 1-8   Set S1 DIP switches to: 1 & 2 "ON", 3 & 4 "OFF" (see DIP switch location and diagram below) Apply power to the board Watch for LEDs 1 & 2 and 3 & 4 to alternately flash at a 0.5 second rate Within 10 seconds of powering up, change switches 1 or 2 to "OFF". If these switches are not changed, the board will power up using the OEM default communication parameters LED 2 will flash indicating that the configuration memory is being erased Full memory erase takes up to 60 seconds When complete, only LEDs 1 & 4 will flash for 8 seconds The board will reboot 8 seconds after LEDs 1 & 4 stop flashing (no LEDs are on during this time)  All other switch settings are unassigned and reserved for future use. Factory Default Communication Parameters: Network: static IP address: 192.168.0.251 Subnet Mask: 255.255.0.0 Default Gateway: 192.168.0.1 DNS Server: 192.168.0.1 Host port: IP server, no encryption, port 3001, communication address: 0

Issue Instructions needed for batch importing Users into Access Expert Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Steps are needed to import Users from another system Resolution Batch Import   When converting a site, all user records and information needs to be imported into the new system. For Access Expert here are the steps in order to accomplish this:   Log on to the instance Once it opens up select the Access Control Tab and choose the Batch icon When this editor opens up select the Download Default Example file This will give a sample of the format that is expected when the Upload CSV is needed From the original application, if there is a dump file (Continuum) or an existing csv, copy and paste into an excel file or use the template and rename it accordingly. Choose the relevant columns to match from the list. Once satisfied with all the entries and fields, save the file then return to AccessXpert and select the Upload CSV as mentioned in Step 3. Select the file to open and once completed, all the users will then be displayed.

Issue What steps are needed to configure and add Mercury Intelligent IP Controllers to Access Expert Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Instruction steps are needed to configure and add Mercury Intelligent IP Controllers to Access Expert Resolution Overview Intelligent Controllers synchronize with Access Expert in real time, but all access decisions are made locally and independently from the server. This means that the processing of events, actions, and alarms remains local and functional even if network connectivity is lost. Configuring a Controller for IP Client Power the controller with an external power supply or by PoE and connect the controller via Ethernet cable to the network. Make sure all DIP switches are set to the off position. Enter the IP address of the controller in the web address bar of Microsoft Edge or Internet Explorer. Set DIP switch 1 to the ON position to leverage the default username and password. Log into the controller within 5 minutes of setting DIP switch 1 to the ON position with these default credentials. Username: admin Password: password From the menu located at the left of the configuration manager page, click on the ‘Network’ button to visit the network settings page Ensure ‘Use the following DNS server address is checked and enter 8.8.8.8. This is a Google DNS server. We recommend utilizing this to maintain the best operation. Click on the Accept button in the ‘Network Settings’ page to save changes. Navigate to the menu and select the ‘Host Comm’ to open the page. Ensure the Primary Host Port is configured as follows. It should be noted the Alternate Host Port must be disabled: Communication Address: 0. Use IPv6: Unchecked. Connection Type: IP Client. Data Security: TLS if Available. Host IP/Host Name: connect.feenics.com. Port Number: 3001. Connection Mode: Continuous. Retry Interval: 20sec Click on the ‘Accept’ button in the ‘Host communication’ page to save changes. Navigate once again to the menu and select ‘Apply Settings’ to open the page. Click ‘Apply setting, Reboot’ (located at the top of the page). If a warning page appears, check both the ‘I understand' and 'wish to proceed’ boxes. Click 'Yes' to apply the changes and allow the controller to reboot. Adding Controllers to Access Expert Controllers are added to Feenics from the Hardware Provisioning tab. When adding a controller, you will need to select the controller type from the drop-down list. If the controller you are trying to add does not match one of the types listed, Access Expert does not support it. When adding a controller, a name must be given to identify the controller and the UNIQUE MAC address of the controller. The MAC address is used to identify the controller within the Feenics system. Duplicate MAC addresses will not be allowed.   When adding a controller, the MAC address is optional. If no MAC address is provided, the controller will be marked as disabled upon save. The controller can only be enabled by providing a valid MAC address.    Steps to add an IP Controller to Access Expert Select the ‘Hardware Provisioning’ Tab Click “Add Controller” and select your device type Enter a Display Name Enter the MAC Address in the correct format: “XX:XX:XX:XX:XX:XX” Select the time zone (This sets the Controller Time) (OPTIONAL) Assign Card Formats as needed (Can be added later) (OPTIONAL) Add Custom EOL Tables 8. Click “Save” or “Save & Close” The Port configurations will be grayed out initially until you commission Interfaces and Downstream Devices. At that point, the port configuration section will automatically be configured. Baud Rate is configurable but all devices on the bus must share a baud rate. ***Important Note: It is important to choose the correct controller type when adding a new controller.  

Issue There is an alarm showing after adding a downstream controller Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Cause Instructions needed to eliminate the power failure and  tamper alarms showing on newly added downstream devices Resolution When adding downstream devices, for example, An MR50, MR52 or MR16In/Out to an SSC, EP1501 or EP1502 controller, an alarm may show in the hardware tree. To get the controller out of this state, the following steps need to be taken: a. Locate the terminal block(TB) on the panel which contains the connections for CT (Cabinet Tamper) and BA (Power Fault) Note: You may need to consult the specific controller documentation since the TB#  with these connections are different on each board. It will look similar to the following: b. Remove the connector Cut two small pieces of wire, one for each Alarm Use the 2 wires to jumper each connection (CT and BA) to create a closed circuit. This assumes these contacts are not being used for their usual purpose. No resistors are required Place the connector back on the board The downstream devices no longer show alarms for the respective addresses.

Issue Access Expert LDAP agent unable to connect to Instance Product Line EcoStruxure Access Expert Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Environment Access Expert V3 Hosted LDAP agent installed OnPrem on-site server (Not the appliance installed by Feenics) Cause LDAP agent cannot connect because the Username/PW may be stored in a registry that is no longer valid Resolution Double-check the site setup documentation records that the Username/PW combination is correct Run the SEQ Log and see if there's an entry that indicates that the 'Ldap agent is not able to connect to the instance' Note: Earlier versions of the LDAP on-site installer did not remove all registry entries including username/pw, so an older username/pw combination may be used instead of an updated combination.  If the username or password was changed at some point or if alternate combinations were used for troubleshooting then an incorrect combination could be used by the LDAP agent to connect to the instance and it cannot. Check the login to Access Expert with one of the LDAP username/password combinations and if there are 2 (Users) listed in Access Expert, delete the username/pw combination that does not work in Access Expert. Regedit Backup and old Username/PW deletion To obtain a registry backup just in case before deleting an entry: https://support.microsoft.com/en-au/topic/how-to-back-up-and-restore-the-registry-in-windows-855140ad-e318-2a13-2829-d428a2ab0692  It is suggested to back up the entire Feenics.Keep.ActiveDirectory.Service subkey Open regedit and delete the imagepath subkey Windows Start/Run> regedit Locate the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Feenics.Keep.ActiveDirectory.Service Right-click on the ImagePath subkey and select 'Delete' Only delete this subkey, not the other Reinstall the LDAP integration using the media received directly from Feenics or SE Product Support. i.e. Feenics.Keep.Installer.ActiveDirectory.msi The most recent version of the install can be found on Feenics site: Feenics Keep Active Directory LDAP Installation Media  During the installation ensure the tested username/pw combination is used Verify that the 'Feenics Keep Active Directory Service' starts successfully Go to Start>Run>Services.msc and click Ok Locate the 'Feenics Keep Active Directory Service' Right-click and select Start Open SEQ Log and verify that the Ldap agent is able to connect to the Instance. The SEQ entry at the top of this article 'Ldap agent is not able to connect to the instance.' should no longer appear in the SEQ log. The following entry should be there instead. Verify that the Access Expert Windows User(s) can now be used login to Access Expert

Issue An explanation of Hosted backup options is needed to understand which objects are backed up and which are not. Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause It's important to understand the backup options available for an instance. Resolution By default, each instance includes a one-year transactional history retention, giving one year of Event History backup. Additional event history retention time can be purchased if required, and such purchases will be visible under "Manage License." Example: Note: There are currently no configuration specific backups that are retained or that can be restored to reinstate deleted hardware or objects into an instance.    Recommendations: Exercise caution when deleting objects, especially controllers, from Access Expert. A prompt requests confirmation before deletion. Generate snapshots of controller configurations and other detailed objects. These snapshots serve as references in case of accidental object deletion, assisting the reconstruction of controllers or other objects with their original configurations. Summary reports can also be useful when trying to rebuild objects. For example: Inputs, Outputs, Readers, etc.

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Access Expert uses Docker containers and images for the Bosch and Schindler integrations and at times the virtual machine image(s) need to be updated. Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause Feenics updates virtual machine images which requires an update Resolution Feenics may update a Docker image for one of their integrations.  Note: A Docker software update may be indicated in the bottom right of the Docker Window This is only a software update for Docker and will not update the container image. An image update requires a command to Pull the image down from Feenics. The Docker software update is not required to update the Docker Image. (see yellow highlight in the snapshot below)   Here are the instructions to update the Docker Container Image to the (latest) Open Docker Desktop for Windows 1. Under Containers, make note of the current bosch service name Ex. AX-bosch-service1 2. Stop the container/service using the stop button 3. Click the Red Delete button above the container Click Delete Forever No container after the delete Image still shows 4. Delete the Image by clicking on the Red Delete button under ImagesSelect Delete Forever (Image) Image deleted (See below)5. Click on the Blue button 'Search images to run' Type in the following to search for Imagesfeenics/keep-bosch:latest   6. Select the 'feenics/keep-bosch:latest' Image and Click PULL You will see the progress of the image downloading 7. Click on Containers on the top left - the container will not be there 8. Click on Images and then Click the Play button on the Feenics/bosch entry 9. On the next screen, after selecting Play, select the down arrow next to Optional settings Enter the original container name that was noted above i.e. AX-bosch-service1, Click Run You will see messages from the bosch service startup Although the image is updated and running, you will likely see an 81 exception error in the startup log (see highlight above). Here are some additional steps to finalize this process.   10. Check in Windows Services> Docker Desktop Service One of the updates along the way may have changed the startup type to Manual Double-click on the service and select Automatic for Startup type Click Start (to start the service) Click Ok.   11. Open Windows PowerShell in ADMIN mode (standard mode will not work) Run the following command   docker run -d --restart unless-stopped --name feenics-bosch-service --env-file C:\ENV\env-us.txt feenics/keep-bosch   If you try to run the command with the same name as the original service, you will receive the following message in PowerShell  Successful running of the Power Shell command This command ensures Docker runs with the parameters that are stored in c:\env-us.txt 12. Click on Containers, and there will be 2 Containers Select the one that is NOT running and click the Red Delete button The Delete Forever prompt comes up, select the Delete forever buttonOne container should remain and should be running The panel should be online and communicating 13. Test and verify everything is working with the Bosch integration

  Issue Information needed for using Mercury downstream controllers with Access Expert Product Line EcoStruxure Access Expert Environment Access Expert V3 Hosted Cause List of Mercury downstream controller and configuration information Resolution Mercury Downstreams    Overview Mercury controllers are an open architecture controller made by Mercury Security. Access Expert supports the series 2 and series 3 SIO boards.   Controller Equivalent    Features FN-RIM1 MR50 Single-card reader interface panel and supports Wiegand, clock and data, magnetic stripe, F2F, Supervised F2F, OSDP, keypad, and biometrics reader technologies. FN-RIM2 MR52 The MR52 is a dual-card reader interface panel. Each unit can connect two card readers, eight general-purpose input monitor points and six control relays to any Mercury EP series intelligent controller. FN-16IN MR16IN The  MR16IN interface panel can support 16 general-purpose input circuits and two dedicated programmable relay outputs. FN-16OUT MR16OUT The MR16OUT interface panel provides 16 general-purpose outputs as Form C relay contacts. FN-MR51e MR51e The MR51e is a single-door, network-ready interface panel.     Adding Downstreams to Access Expert Disconnect the power supply from the downstream and the controller. Set the RS485 jumper to the 2 wire position. Wire the RS485 communication from the downstream to the controller. Downstream Controller TR+ CLK/Data1 TR- DAT/Data0 GND GND Apply power to the downstream and the controller. In Access Expert, from the top bar menu (located at the top left corner of the screen) click on the ‘View All Hardware’ button to open the 'Hardware tree'. In the 'Hardware Tree', double click on the controller or right-click and select ‘Open’ top open the controller page. Alternatively, click on the 'Hardware Provisioning' tab (located a the top of the screen) to open the menu. Click on the 'Controllers' icon(located to the left of the 'Hardware Provisioning' menu to open the 'Controllers' page). Double click or right-click and select 'Open' on the controller, to open that controllers 'Controller Configuration' page. Click on the ‘Add downstream’ button (located at the top of the controller page) to add a downstream. From the drop-down menu, select the appropriate downstream model. Enter a unique ‘Display Name’ for the downstream. Set the ‘Panel Address’ of the downstream. Example: To set devices address to 3, DIP switch 1 and 3 must be ON and 2,3 and 4 OFF and 'Panel Address' in Access Xpert must be set to 3. The DIP switches on the downstream must match the ‘Panel Address’ in the 'Downstream Configuration' page. Note: DIP switches 1 through 5 sets the device address of the downstream and is binary. DIP switch 1 = 1, DIP switch 2 = 2, DIP switch 3 = 4, DIP switch 4 = 8, DIP switch 5 = 16 Confirm that DIP switch 6 and 7 are in the ON position to enable for 38.400BPS communication. Leave DIP switch 8 in the OFF position. Click on the ‘Save’ button (located at the bottom of the page) to apply changes to the downstream.   Downstreams are added to Access Expert from the Controller page. When adding a downstream, you will need to select the downstream type from the drop-down list. If the downstream you are trying to add does not match one of the types listed, it is either not supported on that port or not supported by that controller.     Downstream Addressing Chart     Common Issues Issue                                             Solution The EP/LP1501 has no SIO port The EP/LP1501 uses the CLK and DATA on Reader 1 to communicate to downstreams. This means that if you are leveraging a downstream device, the EP/LP1501 only supports 1 onboard reader. My MR52 is toggling on and offline. The MR52 has a conflicting address with another downstream. Confirm your dipswitches are set to the correct address. Addressing is done on dipswitch 1-5 and baud rate is set on dipswitch 6 and 7 (suggested both on). Dipswitch 8 should always be off. J3 - The jumper for 2 wire and 4 wire RS-485 also needs to be set. By default is set to 2 and should not need changing but this does happen. J5 is the Termination jumper that needs to be set on the last unit in the series. My MR51e is programmed for Static IP but won't connect Check the dip switches on the board. Make sure the dip switches are set back to static IP mode after programming. Check to make sure the static IP address programmed in is valid. Make sure the Downstream can be seen by the controller. My downstream will not come online but my other downstream did. If you have a Mercury downstream on the same port as an Engage Gateway, the Mercury downstream will not be able to come online. Engage Gateway's and Mercury downstreams cannot share a port. Confirm the addressing on your downstream is correct.  My downstream device says "Timeout" This is due to incorrect addressing or incorrect baud rate set on the downstream. Dipswitches 1-5 set the address in a binary fashion and dipswitches 6 and 7 set the baud rate. We suggest leaving both 6 and 7 on. My downstream device says it is in "loader mode" and will not leave that mode Follow the steps below to correct the loader mode: Remove Power from the controller and downstreams Disconnect all downstreams from the controller Bulk Erase the controller. Once the controller is powered back on, reconnect the downstream that is in loader mode only. Reboot the controller.

Issue General use of the Wireshark program. Product Line Access Expert, Andover Continuum, EcoStruxure Building Expert, EcoStruxure Building Operation, Pelco, Satchwell MicroNet, Satchwell Sigma, TAC IA Series, TAC INET, TAC Vista Environment Ethernet Networks Cause General Information on using WireShark. Resolution Wireshark is an Ethernet packet analysis programme, Which can be downloaded from: Latest version available from Wireshark Locally stored version 1.0.9 Installing Wireshark If necessary, unzip the WireShark executable file to a suitable location on the PC/Laptop you wish the programme to be installed on. Run the executable file and follow the on-screen instructions. Rules for capturing LAN traffic using Wireshark: Do not use a switch or router to connect the LAN capture PC to the network as these will filter important network activity that you will need to see. You will want to capture everything that is passing over the network at the point of concern. Usually, this means tapping into the ethernet at the Controller or controllers, that is having an issue. midBit-Technologies-LLC-10-100 is an example of a device that can be used to easily tap into the network to take the capture. The monitoring PC must see all traffic from the controller's point of view. The monitoring PC can be connected in either two ways: Connected to the network at the controller The customers IT department can mirror all the network traffic from the controllers port to another port the PC can be connected to. If connected to the network at the controllers, the connection must be made through a true ethernet hub. A hub will not selectively filter important network traffic as a switch or a router will do. More information on what a "true ethernet hub" can be found at http://wiki.wireshark.org/HubReference There are however some switches that feature port mirroring, please see How to Configure a NETGEAR Prosafe Plus Switch for Mirroring. If connected to a mirrored port, the port must mirror 100% of the network traffic to and from the controller. No filtering should be done. Once a complete capture file has been obtained it can be filtered after the fact using WireShark or EtherReal. Using Wireshark Run WireShark Start a trace by choosing the "Capture" menu and then select "Interfaces" Choose the appropriate interface. Generally, this can be identified by its IP Address, but if not, then the packets increasing are an indication. Press the "Start" button. The trace will start and will be similar to the following screenshot. After an appropriate time, the trace can be stopped by selecting "Capture" menu and "Stop" To save the capture file, choose "File" menu and "Save As".

Issue Need to mirror a switch port in order to capture controller data with Wireshark.   Product Line Access Expert, Andover Continuum, EcoStruxure Building Expert, EcoStruxure Building Operation, TAC IA Series, TAC INET, TAC Vista Environment NETGEAR Prosafe Plus Switch Cause Need a step-by-step guide to set up a mirrored port and an understanding of how it works.  Resolution View the attached video.   Use the link to the original post in Area360 to get written instructions.

Issue The Otis Destination Dispatch integration with Access Expert is not enforcing badge requirements for access to restricted floors. Users can select any elevator key without presenting a badge. Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Mercury EP/LP4502 controller Otis Destination Dispatch elevator Compass System Cause The issue stems from missing routing table entries in the Mercury EP/LP4502 controller. These entries are essential for enabling communication between the Otis system and the Access Expert controller, which is required to enforce badge-based access restrictions. Resolution To resolve the badge enforcement issue: Verify Routing Table Entries on the LP/EP4502 controller’s web interface. Ensure the following entries are present: 192.168.50.0 – Enables communication with the Otis Compass Server. 192.168.1.0 – Enables communication with the Otis Destination Entry Computer. Important: If either entry is missing, the systems will not communicate properly, and badge enforcement will fail. Refer to the Hardware Setup section in the integration guide for detailed instructions: Access Expert Otis Elevator Integration Guide   Detailed instructions for installing the Otis Destination Dispatch Access Expert Integration can be found in the Access Expert Otis Elevator Integration with Destination Dispatch Knowledge Base article.

Issue How is the Otis elevator destination dispatch system configured in Access Expert? Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Otis elevator system Mercury controller LP4502/EP4502 Cause Configuration steps needed for Otis Destination Dispatch in Access Expert Resolution An Otis Elevator Compass Destination Dispatching System model allows the LP/EP4502 to inform Access Expert if a cardholder is allowed and authorized for specific floors.   Elevator Control Types in Access Expert There are 2 main types of Elevator control in Access Expert: Basic - does not track the destination of the elevator and cardholder Destination Dispatch - tracks the destination of the elevator and the cardholder Licensing & Hardware Requirements License required: FN-DEST-OTISRS Controllers: LP4502 or EP4502 Mercury Recommended Adapters: LP4502: Micro-B USB adapter (Pluggable USB2-OTGE100) EP4502: USB 2.0 adapter (Pluggable USB2-E100 Hardware Setup: Connect the USB adapter to the controller and connect the Ethernet cable for the NIC2 to the Otis network. Log in to the controller page and navigate to the Network page Under Interface 2 (NIC2), select Static IP Type 192.168.50.250 in the IP address field. Type 255.255.255.0 in the subnet mask field. Click on Accept at the bottom of the page. Navigate to Apply Settings. The controller should reboot to apply the changes. Mercury Controller Configuration Ensure the following routes are configured in the Mercury Controller web interface. Feenics Setup From the Controller Page in Feenics: On the LP/EP4502 controller page, navigate to the "Destination Dispatch" Tab, located on the bottom of the page. Select Otis. Update the floor offset to reflect your Otis setup. The offset must be greater than or equal to 0. Make sure to take into consideration this offset when assigning elevator floor access. Enable "Has front and rear floors" if your Otis setup has front and rear floors.  Make sure to take into consideration this flag when assigning elevator floors access. Enable the "Primary Otis controller" option. Press Save. Issue a "Push Controller Database" command.   Note: The Otis Destination Dispatch Systems can only support one EP/LP4502. In order to support multiple EP/LP4502’s, a Primary and Secondary needs to be configured. The Primary EP4502 will manage communications to the Otis DDS. Communications between the Otis DDS and the Secondary EP4502’s will have to go through the Primary EP4502.   Reader Page: On the reader page, navigate to the "Elevator" tab and select "OTIS Destination Dispatching" as the Elevator Type. In the Dispatch IP enter the DEC (Destination Entry Computer "Touch screen or Keypad") IP address. For the Elevator Dispatch Mode, select the desired mode. You can hover over the tool-tip to read a description of the mode. If desired, select an Override Elevator Access Level. This will allow a set of floors to be public during defined schedules. Press Save. Look for an "Otis DEC {Reader} is Online" event in Live Monitoring that reports the controller communication with the DEC. The controller will report "Otis DEC {Reader} is Offline" if the communication between it and the DEC drops. Person Page: On the person page, navigate to the "Destination Dispatch Settings" tab. On the "Otis Settings" tab, click on "Add Otis Setting". Select the Otis controller and press OK. Select a Default Floor and Floor side. This floor will be served when a DEC is set to Mode 1. Select User flags. Note that Standard and ADA are mutually exclusive. Cardholder Flag selection descriptions: Standard - Standard access, speed and features. Disability - When checked, this indicates the cardholder has a disability. The Otis system recognizes this indicator and cab be set up to provide special accommodations (such as dispatch an adjacent car, extended time to board an elevator car, provide audible announcements at each floor). VIP - When checked, this indicates the cardholder is a VIP. The Otis system can be set up to dispatch an empty elevator car that runs non-stop to the destination floor. Vertigo - When checked, this indicates the cardholder experiences vertigo. The Otis system can be set up to accommodate this passenger by not dispatching them to a glass elevator. SplitGroup - When checked this indicates the cardholder belong to a split group. The Otis system is set up to recognize this person as belonging to a separate group of passengers who use a separate elevator car(s) that is not used by the general population (such as service elevators where technical or service staff do not mix with regular guests). Vertigo2 - no description  CartSvc - no description CIMOverride - Compass Inter-floor Matrix override. This overrides the segmentation used to place certain tenants into certain elevators. Technical Notes DECs must be represented by readers which can be connected to "fake" downstreams such as the MR52. The Cab used will be sent by the Otis system to Feenics upon access granted and displayed in event data.