Building Automation Knowledge Base

  Issue Schedule a meeting on a day when the site will be closed early. Steps are needed to ensure a door can be configured for 'card only' mode for the meeting. Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause At times it's necessary to schedule a meeting on a day when the site will be closed early. Steps are needed to ensure a door can be configured for 'card only' mode for the meeting and then revert back to the normal schedule or extend the meeting until the end of the standard schedule. Resolution Steps to configure a door(s) with a schedule using holidays and 2 T&Ps to temporarily place the door in Card Only mode and then revert back to the standard schedule. In this example, the standard schedule Unlocks the door from 8a-5p.   Create a Holiday (Early Meeting) for the meeting date and ensure a Holiday Group Membership is selected Configure a schedule(Leave Early) for the meeting date(s) and length of the meeting. Select the Holiday Group in this example named 'Early Meeting Test' in the far right drop-down. The Holiday Group is needed for this to work. Note: The short-duration example was used while testing this multiple times a day. Configure a T&P (Early Meeting TP) to temporarily change the reader mode to 'Card Only' using the schedule (Leave Early). Select the Leave Early schedule and the 'Schedule-Became-Active' Event, the reader mode and the reader(s). The "Indefinite" duration drop-down selection worked. The other drop-down options did not work for this schedule implementation. Configure a T&P (Early Meeting Cancel) to cancel the Temporary Reader mode and revert control back to the standard schedule and to Unlock the door. Select the Leave Early schedule and the 'Schedule-Became-Inactive' Event, the reader mode and the reader(s). Extend the meeting to the end of the standard schedule if needed to keep it in card-only mode. Testing Results: At 3:55p the Leave Early meeting schedule became active and the TP changed the reader mode to card only. * Please disregard the Door held open highlights in the following snapshots At 4:00p the Leave Early meeting schedule became inactive and the TP canceled the temporary reader mode. The door Unlocked in this example after control was handed back to the standard schedule.

Issue An alarm is configured to be triggered by an event and when the event occurs, the Sound Effect (.wav) file configured for the alarm does NOT sound. Playing the .wav file on the PC outside of Access Expert works and it also works within the Access Expert Sound Effects Window.  Product Line EcoStruxure Access Expert Environment Access Expert Hosted v3 Cause The site IT may have blocked one or more ports Resolution Ensure that the Sound effect can be played from the Sound Effects window in Access Expert. If not, test the .wav file(s) in a different program i.e. Windows Media Player to make sure the PC can play sound files. Windows contains quite a few standard .wav files that can be used to test and they are located in the  C:\Windows\Media folder.   If all the above steps work then ensure that these ports below are not blocked as they are needed for Access Expert to function. download.feenicshosting.com tcp/443 keepevents.feenicshosting.com tcp/443 ocsps.ssl.com tcp/80 crls.ssl.com tcp/80 keepapi.feenicshosting.com tcp/443 connect.feenics.com tcp/443

Issue "Access Denied - Invalid Card Format" in live monitoring when the Door Relocks There is no error when the card is presented and the door unlocks normally Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause There is some type of electromagnetic interference affecting the reader Resolution There are at least 2 different situations where this has been observed: 1. When using entry and exit readers that are very close together 2. A strong LED light that was close to an entry reader. In this case, there was no exit reader   The resolutions are to move/remove the device causing the interference or in the case of the LED light to ground the shield wire of the reader to the panel. This stopped the error from happening.

Issue Access Expert On-Premise setup needs procedures and tools to backup and restore the database Product Line Access Expert Environment Access Expert Premise Software V3 MongoDB Cause The procedures for backing up and restoring the MongoDB is documented online at the link below. https://docs.mongodb.com/manual/tutorial/backup-and-restore-tools/ However, these instructions do not outline how to use the commands (mongodump and mongorestore) within the Windows OS environment using specific examples. Resolution The following procedures are designed to fill in the gap for Access Expert administrators who need to do manual MongoDB Backup and Restore. These procedures assume that Access Expert V3 has been installed and is functioning normally. You will need 2 separate Command Prompts, run as Administrator, open for these procedures. Mongo DOS Shell to attach to and run commands within MongoDB environment Standard DOS Shell to run the Mongo backup and restore commands MongoDB Backup Ensure MongoDB service is running (Start> Run> services.msc) Open a Command Prompt as Administrator (referred to as the Mongo DOS Shell) Type mongo(command) Type show dbs (command) - shown above, to give a list of the dbs available) If the MongoDB service is "Running," but the client cannot connect when typing mongo, it's probably because the path to the mongo bin folder hasn't been added to the PC's environment. To Add a local path locations variable to a PC environment https://docs.microsoft.com/en-us/previous-versions/office/developer/sharepoint-2010/ee537574(v%3Doffice.14) Ex. C:\Program Files\MongoDB\Server\3.6\bin (This will vary based on the version of Mongo) Open another Command Prompt as Administrator (Standard DOS Shell) Use the CD command to navigate to where you would like the backup files to be created Ex. C:\Data mongodump (command) The mongodump command creates the dump folder with admin, Keep, Signalr subfolders MongoDB Restore In the (Mongo DOS Shell) Prompt show dbs (command) use Keep (command) (Case sensitive) db.dropDatabase() (command) Use the Command Prompt as Administrator (Standard DOS Shell) mongorestore (command) The window should indicate "Finished Restoring Keep.Events," "done" and RESTORE COMPLETE If there are “E11000 duplicate key error collection” Keep.Events errors, it’s because the collection events are already in the folder and need to be deleted first.   Steps to correct the E11000 duplicate issue: (Stop the service, delete and recreate the DB folder, restart service) Right-click on the MongoDB service and Stop (you can’t delete files while the service is running) Delete C:\Data\db folder (not the Data, only DB) MANUALLY CREATE THE DB FOLDER - Right Click > New Folder and name it DB Restart the MongoDB service - this creates the necessary files in the DB folder Once these steps have been done, rerun the mongorestore command mongorestore (command) Verify that users can log into Access Expert with this database

  Issue After adding a new group with limited permissions to a User, the User cannot change their password or Login to the Instance. The Error 'Password is incorrect' is displayed When trying to change the password the dialog box may flash, but not continue. If you click the Ok button again, it will show the 'Password is incorrect' box. Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause A User Group with restricted access to specific objects didn't have permissions to the Instance object Resolution Add permissions to the User Group If 'All Types' are a part of a UserGroup then the 'Instance' object is included. However, if specific object permissions are selected for the User Group then the 'Instance' Read permission must be added at a minimum for the User to have access to the Instance. If the User is required to change their password then they will also need Publish permissions. Original Changed

Issue What new features are planned for inclusion in future product releases? Product Line Andover Continuum, EcoStruxure Building Operation, Field Devices, Satchwell BAS & Sigma, Satchwell MicroNet, TAC IA Series, TAC INET, TAC Vista, EcoStruxure Access Expert, EcoStruxure Security Expert Environment All product ranges Cause Information required on future Product Marketing plans. Resolution This document is no longer published on the Download Center by Product Management. For further information on the future product planning please contact the Product Manager for the specific product in your region. Americas: Americas.EcoStruxureBuilding@schneider-electric.com EMEA: EMEA.EcoStruxureBuilding@schneider-electric.com Asia Pacific & India: AsiaPac.EcoStruxureBuilding@schneider-electric.com

  Issue When adding an onboard downstream device (Ex. LP1502) with 4 Engage wireless gateways installed the onboard downstream device shows as 'Unknown' and will not come online Product Line EcoStruxure Access Expert Environment Access Expert v3 Hosted Cause If the onboard downstream controller(Ex. LP1502 - onboard) was not being used prior to commissioning and addressing the Engage Gateways then it is likely there is an address conflict. Resolution Check all the downstream device addresses by going to Hardware Provisioning> Downstreams If one of the Engage addresses is 0 then it is likely conflicting with the onboard downstream controller's address 0. Go back through commissioning the Engage gateway devices and re-address them. Before After Once the gateway devices have been re-addressed not using address '0' they should all come online as well as the onboard downstream controller and it should not show as 'Unknown'.

  Issue Access Expert Exceptions for specific dates using holiday durations with an example Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause Instructions with an example are needed to allow exceptions to the standard schedule for specific dates and times Resolution At times it's necessary to have schedule exceptions for meetings or other reasons where the date, day, and time need to be specified outside of the standard 8-5 schedule.   In order to configure this within Access Expert use the following method: Verify the main schedule and check the days and times  Note: Adding a schedule duration(interval) to the main schedule allows exceptions to be added however, they will not be specific to a date. The interval add will be for whatever days are selected going forward. For example, All Monday or all Tuesdays in the future for the time specified.   The above schedule works normally from 8AM - 3:45PM and for all Thursdays going forward the door will unlock from 4PM - 4:05PM To specify a specific date and time for an exception to the main schedule an additional schedule and a holiday group is needed. Create another schedule in addition to the standard schedule with the days and times needed. Example: Wed7-19 & Th7-20 Council (Council Meeting 6-7p) From the Access Configuration tab, select Holidays and create a holiday for the specific date(s) needed (Start and End Dates) and select the checkbox for Special Date Example: 7/19 and 7/20/23 Council Meeting Select the Edit Holiday Group Names button and select one of the default groups and edit the name to be descriptive then Save. From the Holiday Group Membership drop-down select the newly added Group just renamed and click Ok and then Save Note: The exception schedule will not work unless a Holiday Group has been added Go back to the new schedule that was created earlier and select the drop-down under Always Active On. Select the checkbox next to the Holiday just created and Click OK then Save. A completed schedule with Wednesday and Thursday exceptions that have 7-19 & 7/20/23 specified as holiday durations. This will unlock the door during the normal schedule 8-5p Lock the door from 5-6p Unlock the door from 6-7p for Wednesday and Thursday 7/19/23 and 7/20/23 Lock the door at 7p for Wednesday and Thursday 7/19/23 and 7/20/23   The holiday exception locked at 4:05p up until 6p The holiday exception schedule locked the door at 6p

Issue Steps for Troubleshooting Readers Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause Readers are offline or not returning the correct card data Resolution Common Issues Issue Solution My reader is not returning any data when I present a card Check to make sure the technology card you are using matches the requirements of the card reader. A prox card will not work on an iClass reader. Check the Reader wiring to confirm CLK and DATA on wired correctly. Check that the Reader addressing matches the reader port. Check the power being supplied to the reader. Multiclass readers cannot be powered off S2 (green boards). They require an external power supply. Bluetooth readers cannot be powered off the S2 (green) boards. The power required by the Bluetooth readers is directly related to the range at which the Bluetooth readers are programmed to work. My reader is returning different results every time I swipe my card. Check the power to the reader. If the reader requires more power than the board can provide, use a dedicated power supply. My reader is returning the correct number of bits but the encoded card information is incorrect. Check to make sure your CLK and DATA wires are not switched. If the CLK and DATA wires are switched the 0's and 1's will be inverted causing the card number reported to be wrong.  My reader is returning the correct number of bits but the raw HEX data is all 0's.  This is most often caused by a bad reader or a bad port on the Mercury board. Check the reader wiring and power first, then try the reader on a different port.    My EP1501 uses the Reader 1 port for my SIO, how do I utilize the on-board reader? The on-board reader for the EP1501 is placed on the internal port and is physically placed on Reader 2 (TB3); it should still be addressed as reader address '0' in Feenics. I wired my reader to Reader 1 on the board, what's my reader address? All reader addresses are -1 from the physical port the reader is wired to. Reader wired into Reader 1 is address 0. I don't understand what to set my offline access method to. No Change: Reader access will remain in the 'Online Access Method'. Facility Code Only: Only the facility code is required to receive and access granted event. Unlock: The reader will unlock during its offline state. Lock Down: The reader will be locked down during its offline state. OSDP Reader goes offline when I select 'Secure Channel'. From the top menu bar select 'Start Linking Mode'. The OSDP reader will come back online. Please Note: The OSDP reader must be new or never have been configured for Secure Channel previously. If it was previously configured for Secure Channel it will need to be reset with a config card. My Engage NDE/LE lock is showing a Magnetic Tamper Follow the manufacturers instructions to calibrate the door sensor. My reader is posting "Access Granted - Not Used" events. This can happen for two reasons. First, the cardholder badged at the door but never opened the door to enter. Second, the door does not have a door contact wired at the door and one is programmed into the system. Since there is no device telling the system if the door was used, the system reports no door use. My reader is posting "Access Denied" events immediately after "Access Granted" events. Whenever troubleshooting event data always be sure to expand the event message to learn more. If the event is returning data is without a card read following the first access event, it suggests there may be power coming back into the comms, or are sending feedback into the comms loop. You can test this by Does removing the load (pull the output/strike) oof the terminal render the same results? Is there any change when placing the reader directly onto the Mercury board? A thorough investigation of the power wiring on the board will help isolate the location of the issue. My reader is posting "Access Denied - Incomplete Card or PIN Sequence" The Card and PIN reader mode requires a valid PIN sequence followed by a valid card read. The Incomplete Card or PIN Sequence can occur Only the card was presented to the reader. Only the PIN Code was entered at the reader. The card was presented before the PIN code was entered. Keep in mind, if someone enters a random PIN sequence at a reader and happens to guess a valid PIN but does not present a card, this event will show. The reader is producing an "Unidentified Person on Site" event. This event is produced when a controller grants access at a reader to a cardholder that is on the controller database, but that is not currently within the Feenics Database. This can happen if a controller missed an event when a person was deleted from the database. The system will delete this card from the controller after this event. The next step is to identify the person and remove them from the building. The reader is posting "Access Denied - Invalid Facility Code" but showing the correct Facility Code in the expanded event data. This can occur if the Card Format programmed with the appropriate Facility Code on the controller does not have the correct parity bits for the card being used. The Mercury Service checks the Card number, the Facility Code, and the parity bits in that order. Due to this, when creating a card format, the parity bit is often the last part of the Card Format to be checked. Access Denied - Card/Pin Not Found The User does not have access to the door. Add the User to the door through an Access Level    

Issue Unable to bring interfaces(downstream devices) online, showing as unknown Product Line EcoStruxure Access Expert Environment Access Expert in Cloud or On-Premise SSC (Security System Controller) Downstream controllers Cause Offline interfaces can occur under a number of circumstances, below are the most common reasons. The controller is not yet active. Once all interfaces, readers, and I/O have been added, it’s important to remember set the device as active. Interfaces were added to the controller after it was made active. The controller requires a reboot to download the correct configuration. Dipswitches and addressing on the board may be incorrect Check Wiring  Resolution Go through the following steps to get interfaces online Set the device as active (Go go back to the controller page ) Reboot the controller (containing the interface) Check that the DIP switch settings are correct on the controller (see the Mercury hardware manual) Switches 1-5 on an interface module set the address in binary, this means 32 addresses are available (0-31). Users must set the correct address inside Access Expert that matches the DIP switch value. Switches 6 & 7 set the Baud rate, both on for default 38400. Switch 8 should be off to disable AES key encryption. (Communication is instead encrypted over TLS 1.2) Note: The orientation of the DIP switches may be upside down compared to some labels on other connectors, so it's easy to have everything inverted. On this MR52 board, the On label on the connector is DOWN. These dip switches are configured for address 0, baud rate 38400, and no encryption. Check wiring Ensure that the panels are wired correctly. Verify your RS485 communication and refer to the hardware installation guides Verify End of Line Termination Verify End of line termination jumpers are set, refer to hardware installation guides

Issue The Area Report shows a list of cardholders by first and last name along with the name of the Area that the cardholder is located in. Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause Area Report is not included in Access Expert Reports by default Resolution To Run an Area Report Select the 'Access Control' Tab. Select the "Reports" Button. Select "Add Report". Double-Click "Area Report" (OPTIONAL) Enter a Display Name if you would like to save this report configuration for later. (OPTIONAL) Enable "Include Child Folders" if you would like to include all people within an Enterprise Click "Generate" to run the report, or "Save & Generate"

Issue Reporting is a powerful tool that allows for advanced monitoring of a system. It also allows for individuals or departments to monitor the usage and patterns of access. Scheduling a report allows for the delivery of reported data at a reliable interval and allows for the meeting of process requirements. *Important Note: This is a Hosted Feature Only Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause Scheduled Reports not included in Access Access Reports by default Resolution When adding a New Report, the Schedulable column indicates whether a report can be scheduled or not. Scheduled Reporting Each report can be generated at the moment desired or configured to run on a schedule. *Note: Scheduled reports must be created by a user within the instance the report is to be run in. To schedule a Report Open the desired report. Click the “Schedule Report” button. Name the scheduled report. Select the Scheduled Report Tab on the Bottom Left Corner Enable the Report Set the desired timing. Apply the appropriate filters. Click “Save”. The report will now run based on the set schedule. Report Settings The Report settings configure the name of the report, the duration that the report will run, and the recipients of the report. The Display Name is the name that will show within Access Expert for that report. The ‘Starting On’ and ‘Ending On’ dates are OPTIONAL fields that allow a report to be run for a given time frame. For example, if construction is occurring in a section of the building for 3 weeks, an access request report can be run on the readers going into that area for the 3 weeks construction is taking place. The “Enabled” checkbox turns the scheduled report on or off. By unchecking this box, the report is scheduled but never runs. This box is checked by default. The recipient list shows who will receive the report. By default, the user who creates the report will receive the report via email. Additional recipients can be added by selecting the “Add Recipient” button and typing the name of the additional recipient. Setting the Timing The timing of the report is set using the generation time and pattern. Report Generation Time The Report Generation Time is the time of the day that the report will run on. The time zone drop-down allows the time to be set into the local time. By setting the time on the drop-down to 8:30 AM and the time zone to Central Time, the report will start to run at 8:30 AM central time every time it runs. Recurrence Pattern The recurrence pattern sets the frequency the report will run on. Daily: This sets the report to be run every given number of days. Weekly: This option allows for the report to be run on specified days of the week. The report can be set to run weekly or every 2/5/etc. weeks. The example below shows the report configured to run every Monday, Wednesday, and Friday each week. Monthly: This option allows for the report to be set up to run every X months, i.e. every 3 months for a quarterly report, or monthly on a specific date. It is important to note that if a date is selected that does not occur in that month, the report will not run, i.e. the 31 st . If a monthly report is desired for the end of the month, it is best practice to set the report to run on the 1 st  of the month. Context Menu To access the Context Menu, Right-Click the desired report as shown below. 

Issue The Event History Report shows the Event History for the instance over a period of time. The report will show the event, the priority, if the event was acknowledged, the time and date the event occurred on and the controller, reader, displayed card number and person associated with the event (if available). Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause Documentation does not detail the steps to run an Event History Report Resolution To Run an Event History Report Select the 'Access Control' Tab. Select the "Reports" Button. Select "Add Report". Double-Click "Event History Report" (OPTIONAL) Enter a Display Name if you would like to save this report configuration for later (OPTIONAL) Enable "Include Child Folders" if you would like to include all people within an Enterprise (OPTIONAL) Filter by People, Access Levels, or Badge Types Filter by a timeframe or Date Range. Click "Generate" to run the report, or "Save & Generate" Scheduling the Report The scheduling and timing of the report should be set up as described in Scheduled Reports. Then the options for the report are selected. The scheduled report only allows for the selection of a time frame instead of the selection of a specific date range. This forces the data to calculate the dates based on the scheduled time of the run.

Issue The Reader Mode Report shows the readers configured for the instance. The report will show the reader if the reader is running in the online access method, if the reader has a programmed reader mode, the schedule associated with the reader mode, the action and access method of the reader mode. Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause Documentation does not detail the steps to run a Reader Modes Report Resolution To run a Reader Modes Report Select the 'Access Control' Tab. Select the "Reports" Button. Select "Add Report". Double-Click "Reader Modes Report"

Issue The Output Summary Report shows the outputs configured for the instance. The report will show the output, the address of the output, the programmed activation time, and the downstream the output is attached to. Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause Documentation does not detail the steps to run Output Summary Reports Resolution To run an Output Summary Report 1. Select the 'Access Control' Tab. 2. Select the "Reports" Button. 3. Select "Add Report". 4. Double-Click "Output Summary Report" 5. (OPTIONAL) Enter a Display Name if you would like to save this report configuration for later. 6. (OPTIONAL) Enable "Include Child Folders" if you would like to include all people within an Enterprise 7. Click "Generate" to run the report, or "Save & Generate"

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Access Expert LDAP agent unable to connect to Instance Product Line EcoStruxure Access Expert Environment Access Expert V3 Hosted LDAP agent installed OnPrem on-site server (Not the appliance installed by Feenics) Cause LDAP agent cannot connect because the Username/PW may be stored in a registry that is no longer valid Resolution Double-check the site setup documentation records that the Username/PW combination is correct Run the SEQ Log and see if there's an entry that indicates that the 'Ldap agent is not able to connect to the instance' Note: In earlier versions of the LDAP on-site installer, it did not remove all registry entries including username/pw, so an older username/pw combination may be used instead of an updated combination.  If the username or password was changed at some point or if alternate combinations were used for troubleshooting then an incorrect combination could be used by the ldap agent to connect to the instance and it cannot. Check the login to Access Expert with one of the ldap username/password combinations and if there are 2 (Users) listed in Access Expert, delete the username/pw combination that does not work in Access Expert. Regedit Backup and old Username/PW deletion To obtain a registry backup just in case before deleting an entry: https://support.microsoft.com/en-au/topic/how-to-back-up-and-restore-the-registry-in-windows-855140ad-e318-2a13-2829-d428a2ab0692  It is suggested to back up the entire Feenics.Keep.ActiveDirectory.Service subkey Open regedit and delete the imagepath subkey Windows Start/Run> regedit Locate the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Feenics.Keep.ActiveDirectory.Service Right-click on the ImagePath subkey and select 'Delete' Only delete this subkey, not the other Reinstall the LDAP integration using the media received directly from Feenics or SE Product Support. i.e. Feenics.Keep.Installer.ActiveDirectory.msi During the installation ensure the tested username/pw combination is used Verify that the 'Feenics Keep Active Directory Service' starts successfully Go to Start>Run>Services.msc and click Ok Locate the 'Feenics Keep Active Directory Service' Right-click and select Start Open SEQ Log and verify that the Ldap agent is able to connect to the Instance. The SEQ entry at the top of this article 'Ldap agent is not able to connect to the instance.' should no longer appear in the SEQ log. The following entry should be there instead. Verify that the Access Expert Windows User(s) can now be used login to Access Expert

Issue How to Prepare a Server for Access Expert Premise Software Product Line Access Expert V2 On-Premise ONLY Environment Windows Server 2012 and above Cause There is no documentation on how to prepare a server for a Premise Install. Resolution In order to do this there are several pieces that needs to be followed on how to configure it correctly. First step is to install the server software, in this case Windows Server 2012: Configure the local server Add Roles and Features, Click Next Server Selection, select a server (should be the local machine) Click Next a few times, to complete this part Scroll down to the bottom and select WebServer IIS and add all features Click Next to complete this part Click on .net Framework 4.5 Features Check the box for ASP.net 4.5 Expand WCF Services Click on HTTP Activation, Add Features Scroll down to Message Queuing Expand and scroll down to SMTP Server - Add Feature, Click next a couple of times to install Once completed, Close and Exit Installing SQL Server Open media where software is located and launch the installer Select the option to Install a new instance and click Next Select Install DB Engine and Mgmt Tools, click Next Select Default instance, click Next Use same service accounts, click on Server Configuration Tab Add - License Administration as a Group Select the Data Directories Tab, change where the data files are stored by default Create new Folders for SQL Data, SQL Logs Change Directory Paths as well for Temp Create new folder for Backup Click on next and Install Once finished, close out to complete the install. Enable sysadmin in SQL for NTAuthority Installing Keep Here is a link of a video that goes through this process as well. Premise Installation of Keep for Access Expert Download Keep By Feenics software from the Software Downloads Tab on the Feenics training site http://www.feenics.com/training/courses/technical-certification/ Browse to the location and launch Keep Installer, click on Next When complete, Test Db Connection, once it passes, click on Next Make sure all elements are selected, click on Next to install Launch the Keep Instance Management, click on Connect Connect to the local Host Give the site a name that will used for the instance (if this name is changed, it would require a new instance license key to be generated) Give a url to the name db name with username and password (admin/admin) Change the path for file location and DB Log location from earlier steps Save configuration and Close On the Web Browser, Go to Tools - IIS Manager Add a new Binding, check the Box for "Do not show messages" Delete the default website Click on created website and select Bindings Click on Add - use same name in original browser Start IE Browser (url) created earlier Load license from Activation Code and Activate Log in to the system. Host File If the browser does not start and fails to open the page, then modify the Host File to contain the IP address of the server as well as the URL of the instance Go to C:\Windows\System32\drivers\etc hosts Modify the file by entering the IP address of the server as well as the URL Save and close. Open up the page again and it should allow the application to be started. For V3 On-Premise Installation Instructions, see the following link: https://ecoxpert.se.com/search?documentUUID=846b8347-4412-42ad-a983-53ef97bb5cc4&title=AccessXpert%20On%20Premise%20Deployment%20Walkthrough%20v3.pdf  

Issue Access Expert SEQ Log Installation Information Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause The SEQ Log is a valuable troubleshooting tool to be installed separately from Access Expert Resolution Overview Access Expert utilizes a system logging application called SEQ which is used for troubleshooting and diagnostic purposes. While this service is not technically required to run any of the Feenics services, it provides valuable information when troubleshooting. Downloading SEQ The latest version can be downloaded at https://getseq.net/Download Installing SEQ Once the MSI is launched the wizard will prompt for installation as shown in the following Figures. SEQ service installation dialog Once the SEQ logs are installed, click 'Browse Seq' button to open the log in the default browser. Bookmark or Favorite It may be beneficial to set the SEQ logs as a bookmark for easy access. The example below is from Chrome. SEQ Settings Click on the 'Settings' option at the top of the page to access and change the defaults. Initially after clicking on Settings, the API keys page opens. Add an API key if required. API Keys Retention Policy From the settings page, select 'Retention' from the left-hand side menu. Once at the Retention page, click add and set the retention policy. The Access Expert/Feenics default is 21 days. This is adjustable to your needs, however, it is recommended to never go below 7 days. Note: Seq will periodically delete events covered by the policy based on their timestamp. Disk space will be reclaimed by a background compaction process and may not be available immediately. Default is ‘all events’ Example Seq Log Note: Left Click once to expand an event and click it again to shrink it

  Issue Instructions needed to configure the Card Format for 75-bit Wiegand PIV  Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause Steps needed to configure 75-bit Wiegand PIV Class card format Resolution A site may have converted from Continuum or is a greenfield site needing to configure 75-bit PIV Smart cards. Below are the card format instructions: Access Expert Card Format snapshot Additional configuration tips: Keep Live monitoring open while configuring this format. Present a User's (Cardholder's) card and you'll see an "access denied entry". While setting this format, a "-1 as a facility code" will show when expanding access denied events while presenting a card in Live Monitoring. This is expected. In Live monitoring the encoded card number is shown. Type the card number into Notepad Copy the card number into the User's Card Assignments> Encoded Card Number field and Save.  Repeat for each cardholder and Test

Issue Before installing Access Expert on premise server software, the Mongo DB must be installed and the Mongo service started, this requires creation and editing of a configuration file where the data and log directories are specified. There have been many cases of YAML errors seen during V3 on premise installation when attempting to start the Mongo service. Product Line EcoStruxure Access Expert Environment V3 Mongo DB Cause The YAML parser that reads the "mongod.cfg" file is very sensitive to the format of the configuration file including some very strict rules about spaces, double quotes and back slashes. When editing the file, it helps to setup the text editor to display ALL characters which will show any hidden characters that might be causing a parsing error. Ex. In Notepad++: Select View>Show Symbol> Show All Characters Resolution Space is needed between key and value pair. Enclose paths in double quotes. Double back slash required in Windows systems.