Issue An end user has requested guidance for their IT department on how to secure a Building Automation System (BAS) effectively. Product Line Andover Continuum, EcoStruxure Building Activate, EcoStruxure Building Operation, Satchwell BAS & Sigma, Satchwell MicroNet, TAC IA Series, TAC INET, TAC Vista Environment Building Automation Systems (BAS) IT/OT Network Infrastructure Cybersecurity Best Practices Cause With the increasing convergence of IT and OT systems, securing Building Automation Systems has become critical. Customers are seeking best practices to ensure their systems are protected from cybersecurity threats and vulnerabilities. Resolution To assist with securing your Building Automation System, Schneider Electric provides a comprehensive white paper authored by the Buildings BU IT Security Group. 📄 Download the white paper here: Best Practices for Securing an IBMS (PDF) This document outlines: Key cybersecurity principles for Building Automation Systems Network segmentation and access control strategies Secure configuration and hardening guidelines Monitoring and incident response recommendations Compliance with industry standards (e.g., IEC 62443, ISO/IEC 27001) 🔍 Additional Resources Schneider Electric Cybersecurity Solutions Scheider Electric Cybersecurity Support Portal IT System Planning Guide - EcoStruxure Building Management EcoStruxure Building Operation Webhelp

Issue The Flex Server fails to power ON or boot up after first installation Product Line EcoStruxure Building Activate Environment ESXBFXSVR00B008 ESXBFXSVR0BC008 ESXBFXSVRBCW008 Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Cause “Live Insertion” of power supply to the Flex Server or “Hot plugging” the RS485 connector to the Flex Server can lead to internal component failures. These acts can induce transient voltage that exceed the design tolerances of sensitive components. These transients may cause internal components to fail, leading to MODBUS failures or Gateway boot-up failures.   What is “Live insertion”? “Live insertion” is the act of connecting or disconnecting a power connector to the device while the power supply is energized (powered ON).   What is “Hot Plugging”? “Hot plugging” refers to the practice of connecting or disconnecting a device to a system while it is powered on and running, without shutting down the system.   Resolution To protect the Flex Server and ensure long-term reliability, always adhere to the following steps (Safe Connection Procedure) when connecting or disconnecting the DC power supply or RS485 connectors: Connection Procedure: Before connecting or disconnecting the power supply or RS485 connectors, ensure the mains power supply for both the RS485 devices and FlexServer power adapter is completely switched off. Connect the DC terminal block and the RS485 terminal block to the correct sockets firmly, ensuring proper alignment and contact to avoid intermittent connections. Power on the power supply only after all connections are completed.     Disconnection Procedure: Before removing the DC terminal block and RS485 terminal block connectors, switch off the power supply first, verify it is de-energized. Then carefully disconnect the DC power supply and RS485 connectors.  

Issue SIM card not being detected and internet is not connecting automatically when SIM card is inserted inside the Gateway.   Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Caution While removing gateway cover: Open the gateway screws and delicately remove the top cover. Take extra care during this step, as the top cover is connected to the antenna cable via a thin wire. After opening the top cover, you will be able to see the top view of the board, please insert the active SIM card in the designated slot. Once the Sim Card is properly inserted, fix the screws back and ensure that the 4G&Wi-Fi Antenna is attached properly. If the antenna cable remains disconnected from the board, then the GSM will not work. Cause Some network service providers have a username, password and SIM PIN set by default when they issue the SIM to the customer. If the Gateway is using the SIM for internet, it requires any username, password and SIM PIN to be disabled before inserting the SIM inside the Gateway.  Resolution Contact the Network service provider directly to disable the username and password. The Network service provider can disable the username and password from the backend. For disabling the SIM PIN follow the below procedure: Steps to follow to unlock SIM PIN An example YouTube video on the steps detailed below can be seen at: How to unlock your SIM Card Upon receiving the SIM kit (note down the PUK number and also note down the SIM PIN if available) Insert the SIM card to a Mobile device/cellular device Type in the SIM PIN from the Step 1 and Unlock the SIM Navigate to the settings page – Network section - SIM settings - SIM PIN - Disable the SIM PIN option SIM CARD SETTINGSSIM CARD SETTINGS           SIM PIN DISABLEDSIM PIN DISABLED Reconfirm if the SIM PIN is disabled by reinserting the SIM from the SIM tray and check if it asks for PIN. If the SIM PIN is successfully disabled, it will not ask for SIM PIN at startup. If it still asks, repeat Step 4. Insert the SIM inside the Gateway SIM Slot and check for network connectivity and that the gateway goes online. After inserting the SIM card properly, power up the gateway and allow the gateway to boot up. This process may take up to 5 minutes. Once completed, the device should come online and can be provisioned through a partner portal   In case the SIM PIN is unavailable An example YouTube video on the steps detailed below can be seen at: How to Unlock Sim Card / Sim locked by Pin Code or PUK Code  Insert the SIM card into a Mobile device/cellular device Type in incorrect PIN more than 4 times till it asks to enter PUK code. Contact the Network Service Provider and perform the verification and obtain the PUK Code for the SIM from the Network provider directly Type the PUK code into the mobile device in the PUK code page Navigate to the Network settings - SIM PIN - Set a SIM PIN inside the settings Use this SIM PIN to Disable the SIM PIN lock. Reconfirm that the SIM PIN is disabled by reinserting the SIM from the SIM tray and check that it does not request a PIN.

Issue This article provides information on the SIM cards that are currently supported in EcoStruxure Building Activate and are added to the central database to support field deployment of Flex servers. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Caution While removing gateway cover: Open the gateway screws and delicately remove the top cover. Take extra care during this step, as the top cover is connected to the antenna cable via a thin wire. After opening the top cover, you will be able to see the top view of the board, please insert the active SIM card in the designated slot. Once the Sim Card is properly inserted, fix the screws back and ensure that the 4G&Wi-Fi Antenna is attached properly. If the antenna cable remains disconnected from the board, then the GSM will not work.   Important Note: The SIM must not have a Username, Password, or PIN. These features are not supported. Refer to Steps to follow to unlock SIM PIN when using SIM Card under Flex server The user must ensure that no firewall is applied by the SIM provider. If a firewall exists, it may block connectivity. We recommend using SIMs without any firewall restrictions.Ensure the data plan of the SIM should not be less than 2GB per month for approximately 100-200 streams. Cause This eliminates the need for manual support for the already validated SIM operators individually on each server. Resolution Below is the list of the Network Service Providers whose APN exists in the backend and have already been added: MCC code (Country Code) Operator APN 260 play {"generic": "internet"} 260 plus {"generic": "mbb.mobi-data.com"} 732 claro {"generic": "internet.comcel.com.co"} 454 smc hk {"generic": "Smartone"} 520 ais {"generic": "internet"} 240 tele2 se {"generic": "mbb.mobi-data.com"} 260 t-mobile {"generic": "internet"} 262 t-mobile {"generic": "internet.v6.telekom"} 505 telstra {"generic": "telstra.internet"} 204 nl kpn {"generic": "matooma.m2m"} 208 208 28 {"generic": "datapro"} 234 voda uk {"generic": "wap.vodafone.co.uk"} 901 901 40 {"generic": "internet.m2mportal.de"} 208 free {"generic": "free"} 208 bouygues telecom {"generic": "mmsbouygtel.com"} 208 sfr {"generic": "sl2sfr"} 208 orange {"generic": "orange"} 268 vodafone {"generic": "internet.vodafone.pt"} 268 nos {"generic": "umts"} 405 vi india {"iot": "IOT.ZENATIX.COM"} 404 vi india {"iot": "IOT.ZENATIX.COM"} 405 ind airtel {"iot": "iot.com"} 404 ind airtel {"iot": "iot.com"} 724 tim internet {"generic": "timbrasil.br"} 724 vivo {"iot": "smart.m2m.vivo.com.br", "generic": "zap.vivo.com.br"} 724 claro {"generic": "claro.com.br"} 310 at&t {"iot": "armstrongdynm.com.attz", "generic": "NXTGENPHONE"} 440 fl1 {"generic": "soracom.io"} 302 bell {"generic": "mnet.bell.ca.ioe"} 302 rogers {"generic": "M2Minternet.apn"} 302 at&t {"iot": "armstrongdynm.com.attz", "generic": "NXTGENPHONE"} 404 idea {"generic": "Internet"} 431 etisalat {"generic": "mnet"} 430 etisalat {"generic": "mnet"} 424 etisalat {"generic": "mnet"} 424 du {"generic": "du"} 405 404 11 {"iot": "IOT.ZENATIX.COM"} 405 vodafone {"iot": "IOT.ZENATIX.COM"} 405 airtel {"iot": "iot.com"} 404 airtel {"iot": "iot.com"} 404 vodafone {"iot": "IOT.ZENATIX.COM"} 404 404 11 {"iot": "IOT.ZENATIX.COM"} 404 jio {"generic": "jionet"} 405 jio {"generic": "jionet"} Additional Information Ensure the SIM card is active and properly inserted. Verify the antenna cable is securely connected to the board. Confirm the SIM card has no firewall restrictions and meets the data plan requirements.  

Issue How are Elsys LoRaWAN sensors configured with a smartphone using NFC Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause All Elsys sensors are equipped with NFC for easy configuration with a smartphone. There is a requirement to configure these sensors using a Smartphone or tablet using Elsys 'Sensor Settings' application. Resolution Download the ELSYS “Sensor Settings” application from Google Play or the IOS App store and install it on a smartphone or tablet.     Ensure the mobile device supports NFC. Enable NFC on the device and start the application. Position the mobile device directly on the NFC antenna of the sensor. Ensure both devices remain close and stationary to maintain optimal connectivity. Remove the mobile device. The current settings will be displayed in the application. Set the 'Timebase' to 120 seconds using the application. Remember to revert it to 600 seconds after commissioning!    Make note of the following sensor keys: DevEUI: The unique ID of the sensor, found in the blue panel at the top. AppEUI: Application ID (8 bytes or 16 hex digits). Default is 0, can be changed if needed for the application. AppKey: Application unique key (16 bytes or 32 hex digits) that is the encryption key used for messages during every over-the-air activation. Tap the sensor's NFC antenna to transfer the new settings after making the desired changes. Ensure the application confirms the updated settings. Wait for the sensor to reboot, indicated by the LED flashing. The sensor settings should now be updated. Validate your settings by reading the NFC data after the sensor has restarted. Verify that settings have been applied by using the ‘Read’ functionality in the app and touching the sensor’s NFC antenna.    Remember to change the 'Timebase' back to 600 seconds after the commissioning is completed!

Issue The internet is not working at the site, so it's necessary to verify that all antenna connections are secure and the SIM card is correctly placed. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause The Flex Server powers up successfully at the site, but the internet connection fails. This issue might arise if the antenna or SIM card was displaced, disconnected, or damaged during transit due to mishandling. Therefore, it's essential to verify that all connections are secure. However, the technician or engineer on-site may not be familiar with the correct slots. Resolution Carefully open the Flex Server top cover. The internal layout will appear as shown in 'Image 01' below: Image 01Image 01 Image 02Image 02 Identify the slots as follows: Slot 1: Indicates the SIM card slot. Slot 2: Located on the GSM Module marked as 'MAIN', indicates the Cellular antenna slot. Slot 3: Located on the Wi-Fi module marked as 'ANT0 WiFi', indicates the Wi-Fi antenna slot. Verify all connections and ensure they are secure. Carefully close the Flex Server cover.

Issue Data cannot be seen on Partner Portal for RS485 devices. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Data for the Modbus devices can be seen on third-party tools like Modscan but not on the Partner Portal. Resolution Follow the steps below if the Flex Server RS485 port is not sending any data: Ensure connections are made according to the installation instructions. Verify the correct port is configured. Double-check that the connections are not reversed. Inspect for any loose wires. Confirm the Modbus/BACnet ID is correct. Verify the baud rate configured for the end device. Check for any loose wire strands shorting on the bus or to the ground. Ensure no Modbus device is connected to the BACnet bus, or vice-versa. Confirm the number of devices in the loop matches the specifications in the installation instructions. Check if the loading of devices causes significant changes in resistance. Do not connect more than two resistors on a single bus. Ensure cables used are as per the specifications in the installation instructions.

Issue If the flex server is not able to connect to the internet via the SIM card, Ethernet, or Wi-Fi, or is in a hanged state, a phone be used by the Flex server/Gateway for troubleshooting connectivity. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Caution While removing gateway cover: Open the gateway screws and delicately remove the top cover. Take extra care during this step, as the top cover is connected to the antenna cable via a thin wire. After opening the top cover, you will be able to see the top view of the board, please insert the active SIM card in the designated slot. Once the Sim Card is properly inserted, fix the screws back and ensure that the 4G&Wi-Fi Antenna is attached properly. If the antenna cable remains disconnected from the board, then the GSM will not work.   Cause USB Tethering may be required at times during provisioning or troubleshooting when the flex server is not able to connect to the internet via the SIM card, Ethernet, or Wi-Fi, or is in a hanged state. Resolution If a a smartphone with data connectivity and a USB cable is available, USB tethering can be used to get a Flex server/Gateway online when a Wi-Fi or Ethernet connection is not established. It essentially turns a smartphone into an external modem for your Flex server/Gateway. This guide will cover both Android and iPhone, since the steps vary slightly. What you'll need: Your smartphone (Android or iPhone) with an active mobile data plan. A USB cable that connects the phone to a computer (the same one you use for charging usually works). A Flex server/Gateway. Part 1: General Preparations (For Both Android and iPhone) Ensure Mobile Data is ON: On the phone, go to quick settings (swipe down from the top of the screen) and make sure "Mobile Data" or "Cellular Data" is turned on. Alternatively, go to Settings > Network & internet (Android) or Settings > Cellular (iPhone) and confirm it's enabled. Important: If the phone has a limited data plan, be mindful of data usage while tethering, as Flex server applications can consume a lot more data than phone apps. Charge the Phone (or Keep it Plugged In): Tethering can drain the phone's battery quickly. It's best to have the phone charged sufficiently or keep it plugged into a power source while tethering. Find Your USB Cable: Make sure you have a working USB cable that connects the phone to the Flex server/Gateway. Ensure the USB cable used is a Data cable and not a charging cable. Part 2: USB Tethering with an Android Phone Video link for Demo (The exact wording of menus might vary slightly depending on the Android version and phone manufacturer, but the general path remains the same.) Connect the Phone to the Flex server/Gateway: Plug one end of the USB cable into the Android phone. Plug the other end of the USB cable into an available USB port on the Flex server/Gateway. Note: there are 2 USB ports in the Flex Server/Gateway you can connect to either port to establish USB Tethering. The Flex server/Gateway prioritizes usb0 (the top USB) interface by default for troubleshooting purpose. USB PortsUSB Ports   Allow USB Debugging (If Prompted): When you connect the phone, you might see a pop-up on your phone asking for "Allow USB debugging?" or similar. If you do, tap "Allow" or "OK." Access the Phone's Settings: Open the Settings app on the Android phone. Navigate to Network & Internet Settings: Look for an option like "Network & internet", "Connections", or "Wireless & networks." Tap on it. Find Hotspot & Tethering: Within the Network settings, you should see an option called "Hotspot & tethering" or just "Tethering." Tap on it. Enable USB Tethering: Inside the Hotspot & tethering menu, you will see a toggle switch labeled "USB tethering." Tap this switch to turn it ON. The switch should change color (e.g., green or blue) to indicate it's active. Check Your Flex server/Gateway is online from the Dashboard. The Gateway Status LED will be Solid Green.   LED patternLED pattern   To Disable USB Tethering (Android). Go back to Settings > Network & internet > Hotspot & tethering on the phone and turn OFF the "USB tethering" switch. Alternatively, unplug the USB cable from the phone or Flex server/Gateway. Part 3: USB Tethering with an iPhone Video link for Demo (The exact wording of menus might vary slightly depending on your iOS version.) Connect Your iPhone to Your Flex server/Gateway: Plug one end of the Lightning (or USB-C on newer iPhones) cable into the iPhone. Plug the other end of the USB cable into an available USB port on your Flex server/Gateway. Note: there are 2 USB ports in the Flex Server/Gateway you can connect to either port to establish USB Tethering. The Flex server/Gateway prioritizes usb0 (the top USB) interface by default for troubleshooting purpose.  USB Port for tetheringUSB Port for tethering   Trust This Device? (If Prompted): The first time you connect the iPhone to a new Flex server/Gateway, the iPhone will ask, "Trust This Device?". Tap "Trust" on the iPhone. You may need to enter the iPhone passcode to confirm. Access iPhone Settings: Open the Settings app on the iPhone. Navigate to Personal Hotspot: Scroll down and tap on "Personal Hotspot." Enable Personal Hotspot: You will see a toggle switch labelled "Allow Others to Join." Tap this switch to turn it ON. It will turn green to indicate it is ON. Important: You might see options for Wi-Fi Password or "USB Only." For USB tethering, you don't necessarily need to worry about the Wi-Fi password unless you also plan to use Wi-Fi hotspot. Check the Flex server/Gateway is online. The Gateway Status LED will be Solid Green. Gateway Status LEDGateway Status LED   Blink pattern for Internet connectionBlink pattern for Internet connection   To Disable USB Tethering (iPhone): Go back to Settings > Personal Hotspot on the iPhone and turn OFF the "Allow Others to Join" switch. Alternatively, you can just unplug the USB cable from the iPhone or Flex server/Gateway Troubleshooting Tips: Restart everything: If it's not working, try restarting the phone and then the computer. Try a different USB port: Sometimes, a particular USB port on your Flex server/Gateway might be faulty. Try a different one. Try a different USB cable: Not all USB cables are created equal. Some are only for charging and don't support data transfer. Try a different cable if you have one. Disable VPN on the phone: If you're using a VPN on the phone, try disabling it before tethering, as it can sometimes interfere. Check data plan: Ensure you haven't run out of mobile data. Contact the mobile carrier: Some mobile carriers have restrictions on tethering or require a specific plan. If you've tried everything else, check with your carrier. By following these steps, you should be able to successfully set up USB tethering and get the Flex server/Gateway online using a smartphone's internet connection!

Issue When the Flex Server/Gateway is unable to connect to the internet, it's important to verify the network priority settings to understand how the device attempts to connect to the cloud. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause The Flex Server/Gateway is not designed for direct exposure to public networks. Improper network priority settings may cause the device to go offline when connected to the internet. Resolution The Flex Server/Gateway supports multiple internet connectivity options: Cellular (GSM): Supports two SIM cards for redundancy. Ethernet Wi-Fi (via Wi-Fi receiver) USB Tethering (via the top USB port, usb0, for troubleshooting) Learn more about USB tethering: USB Tethering for Flex Server   Connectivity Priority (Default Order) USB Tethering (usb0) Cellular (GSM) Ethernet Wi-Fi Note: If GSM fails and Ethernet is connected, the server will automatically switch to Ethernet. If both GSM and Ethernet are unavailable, it will switch to Wi-Fi (if configured). SIM Card Failover If one SIM card loses internet connectivity, the server automatically switches to the second SIM after a few minutes.   Best Practices Install the server in a secure location to prevent tampering (e.g., unplugging Ethernet or removing LTE antenna). Avoid direct exposure to public internet to maintain security and stability.

Issue Installing a Flex server/gateway that supports multiple industrial and building automation protocols (e.g., BACnet IP, BACnet MSTP, Modbus RTU, Modbus TCP/IP, SNMP, OpenThread, and LoRaWAN) at a live site is complex and requires careful planning. Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Cause Improper installation often leads to degraded performance or unreliable device behavior Resolution Site Survey & Environmental Considerations Physical Location: Choose a secure, climate-controlled, and accessible location (e.g., equipment room or control panel). Install in a locked cabinet or secure room to restrict access. Power Availability: Ensure a dedicated, stable power supply with proper grounding. Use a UPS for critical applications to prevent data loss during outages. Network Infrastructure: Confirm availability of Ethernet ports for BACnet/IP, Modbus TCP/IP, and internet access. Install Ethernet cables in wall cavities or conduits. For cellular networks, monitor data usage and set up alerts to avoid over usage charges. RF Environment (LoRaWAN & OpenThread) LoRaWAN: Conduct a radio-mapping survey to determine optimal gateway placement. Use high placement, clear line-of-sight, and low-loss coaxial cables (e.g., LMR-400). Select appropriate antenna gain (e.g., 6 dBi for urban areas). Consider multiple gateways for redundancy. OpenThread: Identify interference sources (e.g., Wi-Fi, Bluetooth in the 2.4 GHz band). Ensure strong signal strength for reliable mesh networking. RS-485 Cabling (BACnet MSTP, Modbus RTU) Cable Type: Use shielded twisted-pair cables (e.g., Belden 3105A). Termination: Install 120-ohm resistors at both ends of the bus. Topology: Use a daisy-chain layout. Avoid star or stub configurations. Length Limits: Follow RS-485 specs (typically up to 1200 meters). Grounding: Maintain a common ground to prevent loops. Polarity: Verify A (+) and B (-) connections. Device Compatibility & Data Mapping Object/Register Mapping: Map BACnet objects, Modbus registers, and SNMP MIBs to internal gateway points. Document data types, scaling factors, and offsets. Device IDs & MAC Addresses: Assign unique IDs for Modbus (1–255) and BACnet MS/TP (1–127). Document all assignments. Adjust network priority if BACnet uses Ethernet and Wi-Fi is used for internet. Baud Rates & Serial Settings: Match baud rate, data bits, stop bits, and parity across all serial devices. Disable unused interfaces to reduce noise and resource usage. Conclusion By following these best practices, you can ensure a successful and reliable Flex server/gateway installation, enabling seamless communication across diverse automation protocols.

  Issue The LEDs on the Flex Server indicate the status of the gateway's connection with the Internet and server. This article provides detailed guidance to help interpret these LED indicators.   Product Line EcoStruxure Building Activate Environment ESXBFXSVR00B008 ESXBFXSVR0BC008 ESXBFXSVRBCW008 Cause The top and bottom LEDs on the Flex Server serve different diagnostic purposes. Understanding their behavior is essential for effective troubleshooting. Resolution The LED blink patterns provide diagnostic information about: Internet connection Server connection SD card health Gateway firmware status Device connectivity Data transmission LED Indicator Reference Diagrams Figure 1: Side View of the Flex Server showing LED locations Figure 2: Gateway Status LED indications Figure 3: Network Status LED indications Figure 4: Ethernet Status LED indications Figure 5: Power LED indications Fig 1: Side View of the Flex-Server showing LED location       Fig 2: Gateway Status LED indication     Fig 3: Network Status LED   Fig 4: Ethernet Status LED   Fig 4: Power LED indications  

Issue There is a need to identify the Ports, URLs and Static IPs which must be open through customer's firewall for EcoStruxure Building Activate Flex Server and Partner Portal Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause Ports, URLs and Static IPs list needed to create firewall exceptions for EcoStruxure Building Activate Flex Server and Partner Portal in order to keep them functioning correctly. Resolution Below are the list of ports, URLs and static IPs that must be open through a site's firewall/network: URL Port Protocol Usage https://sentry.zenatix.com 443 TCP Allows the gateway to upload error logs and diagnostics. https://router.zenatix.com 443 TCP Allows the gateway to download Linux & Python updates from the Zenatix Server. Regularly polls the Zenatix Server to check internet connectivity. https://timesync.zenatix.com 9090 TCP Time server allows the gateway system & gateway clock to remain synchronized with Zenatix Server. https://gitlab.zenatix.com 443 TCP Used for troubleshooting to update the gateway codebase from the Zenatix Server. https://telemetry.zenatix.com 443 TCP Used for sending IoT device data and gateway health data to the Zenatix Server. https://emqx.zenatix.com 8883 TCP Used for communication between gateways and Zenatix cloud services for getting configuration or alarms from Zenatix Server to gateway and vice versa. 54.169.200.193 1194 UDP Allows Zenatix to remotely access and do API calls to the gateway through OpenVPN. https://mender.zenatix.com 443 TCP Used to download firmware updates to gateway from Zenatix Server.   Note: For the list of URLs to be whitelisted for the Global Portal, please refer to Required list of URLs/Ports to be whitelisted under firewall/network for EcoStruxure Building Activate (Global Portal).

Issue There is a need to identify the Ports and URLs which must be open through the customer's firewall and network security for EcoStruxure Building Activate Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause To ensure the Flex Server operates correctly, specific URLs must be whitelisted within the customer's firewall and network security settings. Resolution Below is the list of URLs which must be open through a site's firewall/network: Domain Name Protocol Description telemetry.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Used for sending IoT Sensor Data streams. mender.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Used to download firmware update. emqx.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Used for communication of Flex-Server with Schneider Electric cloud services such as configuration, data, or alarms. openvpn.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Allows Schneider Electric to remotely access the Flex- Server through VPN. timesync.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Time server allows the Flex- Server clock to remain synchronized. router.ecostruxure-buildingactivate. se.app HTTPS (TCP port 443) Allows the Flex-Server to download linux updates   Note: For the list of URLs to be whitelisted for the India Portal, please refer to Required list of URLs/Ports to be whitelisted under firewall/network for EcoStruxure Building Activate (India Only) 

  Issue This document gives guidelines on the device constraints that effect the system capabilities or the system limitations of the Flex Server.  Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause Understanding this document helps in efficiently designing architecture and Single line Diagrams. Identifying potential bottlenecks in a system allows for preemptive action. If you know a system parameter has limited device capacity, you can optimize the distribution methods or plan for upgrades before it becomes a critical issue. Understanding the limitations of system allows for the implementation of backup measures. Resolution Thes guidelines provide the recommended Flex Server design limits for common applications. These are the configurations that have been tested and supported by Schneider Electric. Environmental factors such as network traffic and radio interference may reduce the stated limits of these guidelines. Deviations from these guidelines may result in performance related issues or product failures.   Flex Server Capacity Parameter Maximum Number Number of total devices (all protocols combined) 50 Number of controlled points (all protocols combined) 500   BACnet Parameter Maximum Number Number of BACnet MSTP devices per RS485 port 32 a b e Number of BACnet MSTP networks per server 2 c Number of BACnet IP devices 50 d e   a. Maximum number of devices according to protocol specifications and guidelines. b. BACnet MS/TP adheres to RS485 rules for wiring, wire type, termination etc. c. There is one onboard RS485 port, an additional port can be added via USB. d. BACnet IP uses default UDP port 47808 (0xBAC0). e. The total number of devices across all protocols must not exceed 50   Modbus Parameter Maximum Number Number of Modbus RTU devices per RS485 port 32 a b e Number of Modbus RTU networks per server 2 c Number of Modbus TCP devices 50 d e   a. Maximum number of devices according to protocol specifications and guidelines. b. Modbus RTU adheres to RS485 rules for wiring, wire type, termination etc. c. There is one onboard RS485 port, an additional port can be added via USB. d. Modbus TCP uses default TCP port 502. e. The total number of devices across all protocols must not exceed 50   LoRa a Parameter Maximum Number Number of LoRa sensors per server 32 b c d Maximum number of messages per day (per server) 100   a. LoRa distances – LoRa is noted for its long range and deep penetration. LoRa transmissions can penetrate glass, metal and concrete found in most buildings. The radio’s antenna and installation can affect the range of LoRa sensors. You must test the transmission and signal strength, when installing wireless devices. b. Maximum number of devices according to protocol specifications and guidelines. c. Every LoRaWAN sensor manufacturer has their own decoder. d. The total number of devices across all protocols must not exceed 50   SNMP Parameter Maximum Number Number of SNMP devices 10 a Maximum number of messages per day (per server) 1024   a. The total number of devices across all protocols must not exceed 50   Object Limits Object Type Maximum Number Analog values 500 a Digital values 500 a Multi-state values 500 a Analog Input 500 a Multi-state input 500 a Analog output 500 a Digital output 500 a Multi-state output 500 a   a. The total number of combined points must not exceed 500

  Issue Identifying a potential power supply/source failure to the Flex Server for a specific time period.  Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause The Flex Server went offline for some time and then came back online again. There is a need to identify if this happened due to a power source failure to Gateway.  Resolution Login to the Partner Portal and select the customer from the settings icon in the top right corner. Navigate to the Controller section in the left pane and select the particular Gateway from the dropdown. Navigate to 'Plots' tab and select 'PowerSource' Gateway stream under 'MSP430'. The 'PowerSource' stream value should always be equal to '1' as shown above. If this indicates '0' at any time, this suggests a potential loss of power supply to the Gateway.

  Issue There are issues for Flex Server to synchronize time with the Real Time Clock (RTC). Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause The RTC parameter fails the synchronization test.  Resolution Check the voltage of the coin cell using a multimeter. If the voltage is less than 3.3V, replace the coin cell. If the voltage is equal to or greater than 3.3V and the test still fails, report the issue to technical support.

Issue EcoStruxure Building Activate Flex Server fails the Wi-Fi Signal Strength test.   Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause If the Flex Server Gateway is configured on Wi-Fi, it must achieve a RSSI value greater than -75 or value does not go below -80 more than 3 times. If these conditions are not met, Gateway will fail the test.   Resolution Below steps should be checked/followed to check the issue: Check Network Type: Ignore this issue if gateway is using a GSM network Verify Wi-Fi Receiver: Ensure the Wi-fi receiver is properly inserted into the USB port of the gateway Optimize Placement: Make sure the Gateway is near or in line of sight with the router to improve signal strength. Restart Router: Restart the router and check with your network provider for any issues.

  Issue EcoStruxure Building Activate Flex Server doesn't pass the GSM Signal Strength test.   Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Flex Server EcoStruxure Building Activate Partner Portal Cause The Flex Server must achieve a GSM Signal Strength greater than 14 to pass the test. If the signal strength is less than 14, the test will fail.   Resolution Below are the troubleshooting steps which should be checked/followed: Ensure the Gateway is located in an area with good network coverage. If possible, reposition the Gateway to improve signal strength. Verify that the APN settings for the SIM card in the Device Management Dashboard are correct. Change the network carrier and reconfigure the APN again

  Issue While performing the verification tests, an error is displayed: 'error: There is no change in the configurations' as shown below:   Product Line EcoStruxure Building Activate Environment EcoStruxure Building Activate Partner Portal Cause This error occurs under the following conditions: The user made changes in the Partner Portal but later reverted to the original settings/configuration, assuming there should be some changes, and then started the verification tests again. The user chose to perform the test and verification process once post-submission, resulting in this error message. Resolution When the verification process is initiated, it goes through four checkpoints. The user can safely ignore this error message and proceed with the tests directly. Clicking on the 'Load Mapping' button will remove this error message.