Label: ecostruxure security expert - Building Automation Knowledge Base

Issue How do you see what authentication settings Security Expert was installed with? Product Line EcoStruxure Security Expert Environment Client/Server Authentication Cause When installing the Security Expert Client/Server you can specify one of three authentication settings for the Client to Server connection.                                   If you intend to use software such as Data Sync or SOAP to also connect to the Server at a later date, you need to know which setting was selected during the installation so that you can set the Data Sync/SOAP the same.  However if this was not recorded at the time the only way you can be 100% sure is to remove and reinstall. Resolution If you navigate on your existing Security Expert installation to: C:\Program Files (x86)\Schneider Electric\Security Expert   You will find a Client Config file called : SecurityExpert.exe.config   This file will show the current Security Settings used in your original installation without the need to reinstall.  (In this example you can see that TLS 1.2 was used)

Issue Can licenses be transferred in Security Expert? Product Line EcoStruxure Security Expert Environment Security Expert Cause Unsure if a single SSN can be authenticated on multiple PC's or if licenses can be transferred or moved. Resolution Each PC requires a separate SSN. These licenses can be transferred between PC's. As part of the licensing process, the hardware details of the computer are recorded against each SSN, so any hardware changes require re-licensing, this also means SSNs cannot be shared across computers, and if used on a virtual machine – it must be assigned a static MAC address. Licenses can be transferred between machines without issue, Product Support will add a registration onto the license and clear the hardware profile after receiving a request. The installer will then do a License Update from the Security Expert server.

Issue What is Domain Name Service (DNS)? Product Line Andover Continuum,EcoStruxure Access Expert,EcoStruxure Building Expert,EcoStruxure Building Operation,EcoStruxure Security Expert,Satchwell BAS & Sigma,Satchwell MicroNet,TAC IA Series,TAC INET,TAC Vista Environment TCP/IP Networks Cause DNS is a distributed hierarchical system for resolving host names into IP address. Under DNS, there is no central database with all of the Internet host information. The information is distributed among thousands of name servers organized into a hierarchy similar to the UNIX file system. DNS has a root domain at the top of the domain hierarchy that is served by a group of name servers called the root servers. Source: TCP/IP Network Administration by Craig Hunt, O’Reilly & Associates, Inc. Resolution Short for Domain Name System (or Service or Server), an Internet service that translates domain names into IP addresses. Because domain names are alphabetic, they're easier to remember. The Internet however, is really based on IP addresses. Every time you use a domain name, therefore, a DNS service must translate the name into the corresponding IP address. For example, the domain name www.example.com might translate to 198.105.232.4. The DNS system is, in fact, its own network. If one DNS server doesn't know how to translate a particular domain name, it asks another one, and so on, until the correct IP address is returned.  

Issue Downloading a license update, such as after adding features to a site license or extending the evaluation period on an evaluation license, and this fails with the below error being shown.   License not found Product Line EcoStruxure Security Expert Environment Security Expert Server Cause This error generally occurs when trying to license Security Expert from a Client and not on the Server. Resolution Go to the Security Expert Server and license/update the license from there.

Issue When integrating SIP Video Intercom to Security Expert video is not showing. IPIC video is not working/able to be configured. Product Line EcoStruxure Security Expert Environment Security Expert Server Cause Version of Security Expert is wrong or camera configuration is incorrect. Resolution Use Security Expert v4.2.241.3 or greater. Use the following settings in the Camera Record. Type: H.264 & Motion JPEG Stream Camera URL: http://:8080/video

Issue Would like to change the default Event Description displayed under Monitoring | Status Page View.  Product Line EcoStruxure Security Expert Environment Security Expert Server Cause Would like to customize Event messages by adding or removing text from the Description field for specific Events. Resolution Unfortunately we are unable to modify any Event Description. Changing, or adding to, the event text is not an option. A couple of alternatives could be: Add a descriptive Instruction to an Alarm that you are filtering (with an Alarm Filter) for raw data events and then monitoring the Alarms feed, instead of the Events feed, for those messages. Setup an "Action" to single out and email those specific Events that you want to see.

Issue How to populate emailed event messages with specific event details. Product Line EcoStruxure Security Expert Environment Security Expert Server Cause Security Expert documentation is missing instructions on how to add specific object details to emailed event messages. Resolution 1. The following email tags can be inserted in the Message and Subject fields to dynamically populate the event email. <FIELDTIME> or <FIELD_TIME>   <EVENTID> or <EVENT_ID>   <LOGGEDTIME> or<LOGGED_TIME>   <FACILITYNUMBER> or <FACILITY_NUMBER>   <USERNAME> or <USER_NAME>   <CARDNUMBER> or <CARD_NUMBER>   <USERID> or <USER_ID>   <INSTRUCTIONS>   <DESCRIPTION>   <INSTRUCTIONS2> (second language)   <DESCRIPTION2> (second language)   <ALARM>   <COMMENTS>   <ACKNOWLEDGED>   <DOORNAME> or <DOOR_NAME>     2. Security Expert documentation is being modified to include this information on the email tags that can be used to populate email messages.

Issue How to setup user photos so they are shown when accessing through a Door. Product Line EcoStruxure Security Expert Environment Security Expert Server Cause Unsure how to add photos to users and have them displayed when that user is accessing through Doors. Resolution There is an option for User photos in Security Expert and the Photo Id option is included with the base Security Expert license. With this "Photo ID" feature enabled you will see the Photo tab on the User object and will then be able to add photos to your users.   1. You can associate a photo to your users in the Photo tab of Users | Users.   2. In Monitoring | Setup | Status Page Editor, you can set the Style to Display User Image. Doing this will show the users photo with the access event.

Issue Cannot bring Reader Expander online. Product Line EcoStruxure Security Expert Environment Security Expert Server Security Expert Controller Security Expert Door Expansion Cause Module addressing has not been configured or is incorrect. Resolution Check the following:   1. Controller (SP_C) Module addressing is correct. When creating the controller for the first time you will need to register it as a Reader Expander to be able to use it's reader ports. Go to the Configuration tab  of the controller and set "Register as Reader Expander" to 1 and the Lock Outputs to the default "Controller PGM 3/4 outputs" setting.     2. Reader Expander Module address. A new module from the factory will default to an id of 254, this will need to be changed. If you only have the controller and one expander module then the SP-C will be id=1 so make the second expander id=2.     3. Health status. Check the Health status of your controller to see if anything shows up there.     4. Update. Update your modules to download changes, review the health status again.

Issue Windows authentication is not working with Security Expert once configured. Product Line EcoStruxure Security Expert Environment Security Expert Server Windows Authentication Cause Windows authentication was not installed or configured properly during initial install/setup of Security Expert. Resolution 1. Install the Security Expert Server, and any Security Expert Clients, with the "Use Windows Authentication" option enabled during the installation process. If this was not initially done at install then you will need to backup your SecurityExpert and SecurityExpertEvents databases, uninstall Security Expert (installing overtop or repairing install may not work) and then re-install Security Expert with the "Use Windows Authentication" option enabled.   2. Go to Global | Operators and create a new operator. The Name can be anything you want. The User Name must be the domain name and domain username you want to have access to Security Expert. This is in the form of "domain\username" as shown in the example image. Set a Role for this operator. And then enable the "Use Windows Authentication" checkbox and save the changes.   3. Go to Global | Home and logout of Security Expert. 4. On the login page select the "Use Windows Authentication" checkbox, set the Server to your Security Expert Server machine name (or blank if it is the local machine) and press Logon.   5. You should now be logged into Security Expert with your Windows username being used.   If you receive an "Access Denied" or other error then confirm the following before contacting Product Support for further help. Security Expert Client and Server were installed with "Use Windows Authentication" option enabled. There is an operator object created in Security Expert with the same domain and user name as the domain user you are trying to login with. The "Use Windows Authentication" option is enabled on this operator object. At the login screen you have enabled "Use Windows Authentication" and set the Server correctly.

Issue Require details on how to setup a counter to count input activations and trigger an alarm after a certain number has been reached. Product Line EcoStruxure Security Expert Environment Security Expert Cause Unsure how to program a counter and require an example. Resolution Need to create: 2x Data Value (Data Up, Data Compare) 2x Variable (Up Count, Compare) 3x Programmable Function (Door Up Count, Value Compare, Reset Alarm) 2x Output (vAlarm OP, vReset OP)   Instructions: Virtual Outputs Under  Programming | Outputs  create two (2) new outputs. One will be the alarm trigger, the other the alarm and counter reset. Save changes.   Data Value Under Automation | Data Values create two Data Values to store the appropriate data in the system. Set the Preset Value for Data Up to 0, and for Data Compare to the number of activations you want to trigger an alarm at. In the example, this is 2. Save changes.   Variable Under Automation | Variables create two Variables to count in the correct scale for each Data Value. Up Count: Set the Scale to 1, MaximumValue to the top end of your counting scale and the Data Value to the Data Up Data Value created earlier. Save changes. Compare: Set the Scale to 1, MaximumValue to the top end of your counting scale and the Data Value to the Data Compare Data Value. Save changes.   Programmable Functions Under Automation | Programmable Functions create three new Programmable Functions. Door Up Count to increment the counter register, Value Compare to compare the current register against the setpoint, and ResetAlarm to reset the alarm output Door Up Count: Set Type to Register Counter and Mode to Normal On the Register Counter tab set Input to Count to the physical input you want to count, Counter Register to Data Up, tick Increment on Input Open, tick Log Counter events, and set Reset Output to vReset OP. Save changes. Right-click the new Programmable Function just created and select "Start". Value Compare: Set Type to Value Compare, Mode to Normal. On the Value Compare tab set Activate Output When Above Setpoint to vAlarm OP,  Analog Input Data Variable Register to Data Up and Set Point Data Value to Data Compare. Save changes. Right-click the new Programmable Function just created and select "Start". Reset Alarm: Set Type to Logic Control and Mode to Normal. On the Logic Control tab set Logic Function Mode to 3 - Inverted Follow Pulse On First Output, First Output To Check to vReset OP and Output To Control to vAlarmOP. Save changes. Right-click the new Programmable Function just created and select "Start".   Test the Functions: Create a Floor Plan with Compare, Up Count, vAlarm OP and vReset OP added so this can be monitored in real-time. Pulse the monitored Input and confirm Up Count increments. When it gets to the set point value confirm vAlarm OP goes on to trigger an alarm. When vReset OP is enabled confirm the Up Count is reset to 0 and vAlarm OP is disabled.

Issue User is not being logged out of the Keypad after the log out time. Product Line EcoStruxure Security Expert Environment Security Expert SX-KLCS (Security Expert Keypad) Cause The User had an access level with a Menu Group that had the "Installer Menu Group" option enabled. This option disables the logout time for the keypad so the user is not logged out while the system is being configured. Resolution 1. Disable the "Installer Menu Group" option under the associated Groups | Menu Groups | Option menu; 2. Which will allow the keypad to log the user out after the (10s) "Time User Is Logged In (Seconds)" [2] value set under Expanders | Keypads | Configuration.

Issue Need an example on how to program a required action where a Door Switch activation triggers alarm sounder to turn on and stay on until a Key Switch is closed. Product Line EcoStruxure Security Expert Environment Security Expert Cause Require a programming example. Resolution There may be a number of ways of doing this, one solution is to have a Door Switch trigger an alarm in the Door's Area which triggers an Alarm Output to turn on. A Key Switch Input is linked to another Automation Area that will disarm the Door's Area which turns off the Alarm Output.   In this example we will use the following objects: Input        Door_Switch_Input Input        Key_Switch_Input Output        v_Alarm_Output        (a virtual output for this test) Area        Door_Opened_Area Area        Area_Automation Input Type        KeySwitch_InputType   Setup 1. Create an Output, in my example this is virtual output v_Alarm_Output. 2. If not already created create the Area your Door is located, in my example I created Door_Opened_Area.   3. On the CONFIGURATION tab set the alarm timings to 0. 4. On the OUTPUTS tab set the Alarm Memory Output to your alarm output. 5. create the Area that will be used as an automation area to reset the door alarm. In my example I created Area_Automation for this purpose.   6. On the CONFIGURATION tab set the alarm timings to 0. 7. Create a new Input Type, in my example this is KeySwitch_InputType. On the GENERAL tab set the Control Area to the area with your door switch in it. (Door_Opened_Area) 8. On the OPTIONS (1) tab, under MISCELLANEOUS OPTIONS, set the Disarm Control Area On Input Restore and Arm Control Area On Input Alarm options. 9. If not already created, create your door switch input. In my example this is Door_Switch_Input.   10. On the AREAS AND INPUT TYPES tab set the Area to your door area and the Input Type to Instant. 11. If not already created, create your key switch input. In my example this is Key_Switch_Input.   12. On the AREAS AND INPUT TYPES tab set the Area to your automation area and the Input Type to the input type you created earlier (KeySwitch_InputType). 13. Go to a Status Page view with these two Areas listed and disarm then arm each of them. This needs to be done after any change to the Area or objects within it (such as inputs) so they will function properly with the new changes.   Notes: KeySwitch = Closed -> Alarm disarmed (Area_Automation) KeySwitch = Open -> Alarm armed (Area_Automation) To disable alarm and reset area, KeySwitch must be Closed and then Opened. DoorSwitch needs to be closed for Alarm to be re-enabled with KeySwitch.   Usage 1. Armed normal state. 2. Door Alarmed. Door_Switch opens triggering alarm in Door_Opened_Area triggering v_Alarm_Output to turn On. 3. Alarm silenced by Key_Switch. Key_Switch is Closed triggering Door_Opened_Area to be disarmed and v_Alarm_Output to turn Off . Key_Switch is Opened triggering Door_Opened_Area to re-arm. 4. Alarm will not re-trigger again until Door_Switch is closed and Area re-armed.

Issue Security Expert PSU has Fault Icon lit and Status Light Flashing Red Every 3 Seconds indicating an issue with PSU Addressing Product Line EcoStruxure Security Expert Environment Security Expert PSU Cause The module address 254 is the default value which all modules are shipped with and is outside the range the controller can accept. This must therefore be changed during commissioning. See Page 41 of the Operator Reference Manual for details. There is an overall limit of 250 modules that can be connected to a single controller with the following limit on each type of module: Keypad Modules: 200 Input Expanders: 248 Reader Expanders: 64 Output Expanders: 32 The module addressing is defined per module type not by the position of that module on the network. You could have all modules at the same address as long as they are all different types. Example: With the following modules we could have all modules be set to use address 1: 1 x Controller 1 x Keypad 1 x Reader Expander (In this case onboard Reader) 1 x Analogue Expander (PSU) Resolution 1. Right Click on the SP-C Controller and select Module Addressing. Change the Address of the Analog Expander (PSU) from its default value of 254 in this case to a value of 1. 2. Then Update all Modules. 3. Select the Analog Expander (PSU) in the System and also change its Physical Address to also be 1. Save the changes. 4. The PSU should now come online and the Fault Icon on the PSU will no longer be lit.

Issue A duress input is only triggering duress alarm events and not the return to normal events after the duress input is reset. The point going into alarm is seen on the Monitoring | Status page when viewing all alarms but the return to normal events are not being displayed. Product Line EcoStruxure Building Operation, Security Expert Environment Security Expert Cause The problem is due to how the Event Filter the Event Report is configured. Resolution Check to see that the Event Filter includes all of the Event Types that should come through as shown alarms. In the example this would be at least "Input Opened" and "Input Closed" under the "All Input Events" folder.   Event Filter: Create an Event filter and include the correct Event Types that you wish to report on.   Event Report: Add the Event Filter you configured in step 1. To show those Alarms, create/modify a Status Page under Monitoring | Setup > Status Page Editor, set the Type to Event Windows and add the Event Report from step 2 above to the Record field.

Issue A control room requires that someone is physically in the room at all rimes. Require a sample programming solution for triggering an alarm output if the Area is empty for a specified amount of time.  Product Line EcoStruxure Security Expert Environment Security Expert Cause Sample programming solution. Resolution There are a number of ways to do this depending on the exact requirements. The easiest solution is to have an input trigger an alarm that then triggers an output. In my example I will create: Area - System Input - Motion Sensor Input Type - No Motion Detected Alarm Output - VO No Motion Alarm Bell 1. Create new Input Type, in my example mine is called "No Motion Detected Alarm". 2. On the OPTIONS (1) tab enable Generate Alarms, Generate 24HR Alarms and Report Alarms. 3. On the OPTIONS (3) tab enable Activate Input Control Output On Alarm and Deactivate Input Control Output On Restore. 4. On the Input set the Control Output field to your output you want to trigger. Set the Alarm Input Speed to 10m or 30m. (This is the caveat here, we do not have 15m selection with this option. If 15m is the required time then we will need to use another solution utilizing automation.) Set the Restore Input Speed to 0s or your preferred selection. 5. On the AREAS AND INPUT TYPES tab set the Area, in my case this will be System. Set the Input Type to the new one you created earlier, in my case this is No Motion Detected Alarm. You may need to change the Contact Type (on the OPTIONS tab) depending on what action the PIR is doing. Note1: You could also use the Bell output field in the Area (on the OUTPUT tab) as that will be triggered when the Area goes into alarm and reset when it restores to normal.  

Issue Unable to control Door output on SP-C when configured as onboard Reader Expander. Manual control of the Door outputs work but the Reader Expander will not control the Door outputs when a valid card is read. Product Line EcoStruxure Security Expert Environment Security Expert SP-C Cause The Controller was not registered as a Reader Expander. This is not done automatically for you when configuring the Controller through the wizard and needs to be done manually to be able to use the onboard readers. Resolution 1. Go to Sites > Controllers and on the Configuration tab select the address to Register as Reader Expander and the configuration of the Onboard Reader Lock Outputs. 2. Update modules and download. Note: In later Security Expert versions, it will say "Controller Relay 3/4 outputs" under "Onboard Reader Lock Outputs".  

Issue Alarms need to be sent to specific Workstations and then escalated to other Workstations if they have not been acknowledged within a specific amount of time. Product Line EcoStruxure Building Expert Environment Security Expert Cause Documentation does not describe specific steps for how to configure alarm escalation. Resolution You will be able to do the alarm escalation with Security Expert by using the Alarm Routing options under the Events Menu. 1. Create your Workstations by going to Events | Workstations. The name of the new Workstation object in Security Expert will need to correspond to the actual Windows PC name for alarms to be routed properly. 2. After you have created all of the Workstations you will need to create Workstation Groups under the Events menu. One group for each level of alarm routing that you want to do. If you have three workstations and want to route from one to the next to the next, then you would need to create three Workstation Groups and add one Workstation to each of them. 3. Next you will need to create an alarm routing list under Events | Alarm Routing. On the Workstation Groups tab add the time for Transfer After (this is in seconds) which is when the alarms will be routed to the Workstations in the next Workstation Group. Set the Routing Order for those groups, the first group is 0. Next set the Transfer Priority if you have specific alarms that are to be routed to these Workstation Groups, leave blank if all alarms are to be routed. Set the routing group active to enable routing. 4. The last bit is to go to your Alarms that you want to route and add the routing list you created in step 3 to the Alarm Routing List field. This will now route these alarms to the Workstations you've configured.

Issue The SX-KLCS Keypad is offline in the Client and shows ' Keypad 256 error address size' on screen If you attempt to adjust the Keypad Address in the Client it is not even visible Product Line EcoStruxure Security Expert Environment Security Expert SX-KLCS-B, SX-KLCS-W Cause SX-KLCS Keypads are normally delivered brand new to site with a default Keypad Address of 256 which the SP-C controllers cannot use and the Security Expert Client cannot even recognize to change the address via software Resolution The Keypad's address must be manually changed to a value between 1 - 254 using its touch pad. Keypad Address   Please refer to the full SX-KLCS_Security_Expert_Touch_Sense_LCD_Keypad_Installation_Manual from which this extract was taken.   Once the Keypad Address has been set to a value between 1- 254 the Keypad should then be visible to the Client and you should be able to bring it online as usual.       The SX-KLCS Keypad will now display 'Security Expert by Schneider' by default.

Issue If one Input is required to activate an Output and another Input to de-activate the Output, this Output can be defined by Input Types. The below is a simple scenario where when the first Input turns ON the Control Output turns ON, when the second Input turns ON the Control Output turns OFF. In this scenario we are activating a Duress alarm when an Input goes on and resetting that Alarm when the reset Input is triggered. Product Line Security Expert Environment Security Expert SP-C Cause Require detailed instructions on how to program a latching duress alarm scenario. Resolution Objects required:   1x Area - "Duress_Area" 2x Input Types - "Duress Enable", "Duress Reset" 2x Inputs - "VI Duress Trigger", "VI Duress Reset" 1x Output - "VO Duress Alarm"   Note: The above object names are what is used in this example, you can set these to whatever you require.     Instructions:   Creating the Area 1. Navigate to Programming > Areas. Add a new area (Duress Area), set the Entry and Exit Delay Times to 0. All other settings can be left default.   Creating the Input Types 1. Navigate to Programming > Input Types. Create a new Input Type (Duress Enable) 2. Set the Control Output to your Output (VO Duress Alarm). 3. Under Options 1 enable Generate Alarms. 4. Under Options 2 enable Activate Control Output on Alarm . 5. Set any other options that may be required. 6. Create a new Input Type (Duress Reset) and redo steps 2 - 5 above except under Options 2 enable Deactivate Control Output On Alarm.   Configuring the Inputs 1. Navigate to Programming > Inputs select the Input (VI Duress Trigger) and set the following: 2. Set the Area to the Dummy Area (Duress_Area) created earlier. 3. Set the Input Type to the Input Type (Duress Enable). 4. select the Input (VI Duress Reset) and set the following: 5. Set the Area to the Dummy Area (Duress_Area) created earlier. 6. Set the Input Type to the Input Type (Duress Reset).   Testing 1. Arm both portions of the Area 2. Activate the Input (VI Duress Trigger) to confirm Alarm is generated and Output Activates. 3. Activate the Input (VI Duress Reset) to confirm Alarm is generated and Output Deactivates.