Label: ecostruxure security expert - Building Automation Knowledge Base

Issue User is not being logged out of the Keypad after the log out time. Product Line EcoStruxure Security Expert Environment Security Expert SX-KLCS (Security Expert Keypad) Cause The User had an access level with a Menu Group that had the "Installer Menu Group" option enabled. This option disables the logout time for the keypad so the user is not logged out while the system is being configured. Resolution 1. Disable the "Installer Menu Group" option under the associated Groups | Menu Groups | Option menu; 2. Which will allow the keypad to log the user out after the (10s) "Time User Is Logged In (Seconds)" [2] value set under Expanders | Keypads | Configuration.

Issue Need an example on how to program a required action where a Door Switch activation triggers alarm sounder to turn on and stay on until a Key Switch is closed. Product Line EcoStruxure Security Expert Environment Security Expert Cause Require a programming example. Resolution There may be a number of ways of doing this, one solution is to have a Door Switch trigger an alarm in the Door's Area which triggers an Alarm Output to turn on. A Key Switch Input is linked to another Automation Area that will disarm the Door's Area which turns off the Alarm Output.   In this example we will use the following objects: Input        Door_Switch_Input Input        Key_Switch_Input Output        v_Alarm_Output        (a virtual output for this test) Area        Door_Opened_Area Area        Area_Automation Input Type        KeySwitch_InputType   Setup 1. Create an Output, in my example this is virtual output v_Alarm_Output. 2. If not already created create the Area your Door is located, in my example I created Door_Opened_Area.   3. On the CONFIGURATION tab set the alarm timings to 0. 4. On the OUTPUTS tab set the Alarm Memory Output to your alarm output. 5. create the Area that will be used as an automation area to reset the door alarm. In my example I created Area_Automation for this purpose.   6. On the CONFIGURATION tab set the alarm timings to 0. 7. Create a new Input Type, in my example this is KeySwitch_InputType. On the GENERAL tab set the Control Area to the area with your door switch in it. (Door_Opened_Area) 8. On the OPTIONS (1) tab, under MISCELLANEOUS OPTIONS, set the Disarm Control Area On Input Restore and Arm Control Area On Input Alarm options. 9. If not already created, create your door switch input. In my example this is Door_Switch_Input.   10. On the AREAS AND INPUT TYPES tab set the Area to your door area and the Input Type to Instant. 11. If not already created, create your key switch input. In my example this is Key_Switch_Input.   12. On the AREAS AND INPUT TYPES tab set the Area to your automation area and the Input Type to the input type you created earlier (KeySwitch_InputType). 13. Go to a Status Page view with these two Areas listed and disarm then arm each of them. This needs to be done after any change to the Area or objects within it (such as inputs) so they will function properly with the new changes.   Notes: KeySwitch = Closed -> Alarm disarmed (Area_Automation) KeySwitch = Open -> Alarm armed (Area_Automation) To disable alarm and reset area, KeySwitch must be Closed and then Opened. DoorSwitch needs to be closed for Alarm to be re-enabled with KeySwitch.   Usage 1. Armed normal state. 2. Door Alarmed. Door_Switch opens triggering alarm in Door_Opened_Area triggering v_Alarm_Output to turn On. 3. Alarm silenced by Key_Switch. Key_Switch is Closed triggering Door_Opened_Area to be disarmed and v_Alarm_Output to turn Off . Key_Switch is Opened triggering Door_Opened_Area to re-arm. 4. Alarm will not re-trigger again until Door_Switch is closed and Area re-armed.

Issue Security Expert PSU has Fault Icon lit and Status Light Flashing Red Every 3 Seconds indicating an issue with PSU Addressing Product Line EcoStruxure Security Expert Environment Security Expert PSU Cause The module address 254 is the default value which all modules are shipped with and is outside the range the controller can accept. This must therefore be changed during commissioning. See Page 41 of the Operator Reference Manual for details. There is an overall limit of 250 modules that can be connected to a single controller with the following limit on each type of module: Keypad Modules: 200 Input Expanders: 248 Reader Expanders: 64 Output Expanders: 32 The module addressing is defined per module type not by the position of that module on the network. You could have all modules at the same address as long as they are all different types. Example: With the following modules we could have all modules be set to use address 1: 1 x Controller 1 x Keypad 1 x Reader Expander (In this case onboard Reader) 1 x Analogue Expander (PSU) Resolution 1. Right Click on the SP-C Controller and select Module Addressing. Change the Address of the Analog Expander (PSU) from its default value of 254 in this case to a value of 1. 2. Then Update all Modules. 3. Select the Analog Expander (PSU) in the System and also change its Physical Address to also be 1. Save the changes. 4. The PSU should now come online and the Fault Icon on the PSU will no longer be lit.

Issue A duress input is only triggering duress alarm events and not the return to normal events after the duress input is reset. The point going into alarm is seen on the Monitoring | Status page when viewing all alarms but the return to normal events are not being displayed. Product Line EcoStruxure Building Operation, Security Expert Environment Security Expert Cause The problem is due to how the Event Filter the Event Report is configured. Resolution Check to see that the Event Filter includes all of the Event Types that should come through as shown alarms. In the example this would be at least "Input Opened" and "Input Closed" under the "All Input Events" folder.   Event Filter: Create an Event filter and include the correct Event Types that you wish to report on.   Event Report: Add the Event Filter you configured in step 1. To show those Alarms, create/modify a Status Page under Monitoring | Setup > Status Page Editor, set the Type to Event Windows and add the Event Report from step 2 above to the Record field.

Issue A control room requires that someone is physically in the room at all rimes. Require a sample programming solution for triggering an alarm output if the Area is empty for a specified amount of time.  Product Line EcoStruxure Security Expert Environment Security Expert Cause Sample programming solution. Resolution There are a number of ways to do this depending on the exact requirements. The easiest solution is to have an input trigger an alarm that then triggers an output. In my example I will create: Area - System Input - Motion Sensor Input Type - No Motion Detected Alarm Output - VO No Motion Alarm Bell 1. Create new Input Type, in my example mine is called "No Motion Detected Alarm". 2. On the OPTIONS (1) tab enable Generate Alarms, Generate 24HR Alarms and Report Alarms. 3. On the OPTIONS (3) tab enable Activate Input Control Output On Alarm and Deactivate Input Control Output On Restore. 4. On the Input set the Control Output field to your output you want to trigger. Set the Alarm Input Speed to 10m or 30m. (This is the caveat here, we do not have 15m selection with this option. If 15m is the required time then we will need to use another solution utilizing automation.) Set the Restore Input Speed to 0s or your preferred selection. 5. On the AREAS AND INPUT TYPES tab set the Area, in my case this will be System. Set the Input Type to the new one you created earlier, in my case this is No Motion Detected Alarm. You may need to change the Contact Type (on the OPTIONS tab) depending on what action the PIR is doing. Note1: You could also use the Bell output field in the Area (on the OUTPUT tab) as that will be triggered when the Area goes into alarm and reset when it restores to normal.  

Issue Unable to control Door output on SP-C when configured as onboard Reader Expander. Manual control of the Door outputs work but the Reader Expander will not control the Door outputs when a valid card is read. Product Line EcoStruxure Security Expert Environment Security Expert SP-C Cause The Controller was not registered as a Reader Expander. This is not done automatically for you when configuring the Controller through the wizard and needs to be done manually to be able to use the onboard readers. Resolution 1. Go to Sites > Controllers and on the Configuration tab select the address to Register as Reader Expander and the configuration of the Onboard Reader Lock Outputs. 2. Update modules and download. Note: In later Security Expert versions, it will say "Controller Relay 3/4 outputs" under "Onboard Reader Lock Outputs".  

Issue Alarms need to be sent to specific Workstations and then escalated to other Workstations if they have not been acknowledged within a specific amount of time. Product Line EcoStruxure Building Expert Environment Security Expert Cause Documentation does not describe specific steps for how to configure alarm escalation. Resolution You will be able to do the alarm escalation with Security Expert by using the Alarm Routing options under the Events Menu. 1. Create your Workstations by going to Events | Workstations. The name of the new Workstation object in Security Expert will need to correspond to the actual Windows PC name for alarms to be routed properly. 2. After you have created all of the Workstations you will need to create Workstation Groups under the Events menu. One group for each level of alarm routing that you want to do. If you have three workstations and want to route from one to the next to the next, then you would need to create three Workstation Groups and add one Workstation to each of them. 3. Next you will need to create an alarm routing list under Events | Alarm Routing. On the Workstation Groups tab add the time for Transfer After (this is in seconds) which is when the alarms will be routed to the Workstations in the next Workstation Group. Set the Routing Order for those groups, the first group is 0. Next set the Transfer Priority if you have specific alarms that are to be routed to these Workstation Groups, leave blank if all alarms are to be routed. Set the routing group active to enable routing. 4. The last bit is to go to your Alarms that you want to route and add the routing list you created in step 3 to the Alarm Routing List field. This will now route these alarms to the Workstations you've configured.

Issue The SX-KLCS Keypad is offline in the Client and shows ' Keypad 256 error address size' on screen If you attempt to adjust the Keypad Address in the Client it is not even visible Product Line EcoStruxure Security Expert Environment Security Expert SX-KLCS-B, SX-KLCS-W Cause SX-KLCS Keypads are normally delivered brand new to site with a default Keypad Address of 256 which the SP-C controllers cannot use and the Security Expert Client cannot even recognize to change the address via software Resolution The Keypad's address must be manually changed to a value between 1 - 254 using its touch pad. Keypad Address   Please refer to the full SX-KLCS_Security_Expert_Touch_Sense_LCD_Keypad_Installation_Manual from which this extract was taken.   Once the Keypad Address has been set to a value between 1- 254 the Keypad should then be visible to the Client and you should be able to bring it online as usual.       The SX-KLCS Keypad will now display 'Security Expert by Schneider' by default.

Issue If one Input is required to activate an Output and another Input to de-activate the Output, this Output can be defined by Input Types. The below is a simple scenario where when the first Input turns ON the Control Output turns ON, when the second Input turns ON the Control Output turns OFF. In this scenario we are activating a Duress alarm when an Input goes on and resetting that Alarm when the reset Input is triggered. Product Line Security Expert Environment Security Expert SP-C Cause Require detailed instructions on how to program a latching duress alarm scenario. Resolution Objects required:   1x Area - "Duress_Area" 2x Input Types - "Duress Enable", "Duress Reset" 2x Inputs - "VI Duress Trigger", "VI Duress Reset" 1x Output - "VO Duress Alarm"   Note: The above object names are what is used in this example, you can set these to whatever you require.     Instructions:   Creating the Area 1. Navigate to Programming > Areas. Add a new area (Duress Area), set the Entry and Exit Delay Times to 0. All other settings can be left default.   Creating the Input Types 1. Navigate to Programming > Input Types. Create a new Input Type (Duress Enable) 2. Set the Control Output to your Output (VO Duress Alarm). 3. Under Options 1 enable Generate Alarms. 4. Under Options 2 enable Activate Control Output on Alarm . 5. Set any other options that may be required. 6. Create a new Input Type (Duress Reset) and redo steps 2 - 5 above except under Options 2 enable Deactivate Control Output On Alarm.   Configuring the Inputs 1. Navigate to Programming > Inputs select the Input (VI Duress Trigger) and set the following: 2. Set the Area to the Dummy Area (Duress_Area) created earlier. 3. Set the Input Type to the Input Type (Duress Enable). 4. select the Input (VI Duress Reset) and set the following: 5. Set the Area to the Dummy Area (Duress_Area) created earlier. 6. Set the Input Type to the Input Type (Duress Reset).   Testing 1. Arm both portions of the Area 2. Activate the Input (VI Duress Trigger) to confirm Alarm is generated and Output Activates. 3. Activate the Input (VI Duress Reset) to confirm Alarm is generated and Output Deactivates. 

Issue How to populate emailed event messages with specific event details. Environment Security Expert Cause Security Expert documentation is missing instructions on how to add specific object details to emailed event messages. Resolution 1. The following email tags can be inserted in the Message and Subject fields to dynamically populate the event email. <FIELDTIME> or <FIELD_TIME>   <EVENTID> or <EVENT_ID>   <LOGGEDTIME> or<LOGGED_TIME>   <FACILITYNUMBER> or <FACILITY_NUMBER>   <USERNAME> or <USER_NAME>   <CARDNUMBER> or <CARD_NUMBER>   <USERID> or <USER_ID>   <INSTRUCTIONS>   <DESCRIPTION>   <INSTRUCTIONS2> (second language)   <DESCRIPTION2> (second language)   <ALARM>   <COMMENTS>   <ACKNOWLEDGED>   <DOORNAME> or <DOOR_NAME>     2. Security Expert documentation is being modified to include this information on the email tags that can be used to populate email messages.

Issue Security Expert Client crashes when attempting to browse to the Status Page Editor. Unable to create Status Pages for system monitoring. When viewing Status Pages none are shown and the word "Frame" is displayed in the view. Product Line EcoStruxure Security Expert Environment Security Expert Client Status Pages Cause The problem is due to the site database not containing the default id=0 objects.  As there is no id=0 Status Page for your site, the Client crashes when browsing to Monitoring | Setup | Status Page Editor.  This can occur when the original 'default controller' is not created during initial Site configuration. A number of default objects are also created as well as the first controller. If you look at the site database, you will also find that it does not contain any id=0 Event Filters or Actions which means that no events will be logged either. Status Page Resolution There are two options to resolve these missing default records: Start with a new Security Expert database and ensure that when creating your Site that the first 'default controller' is created with the Controller Wizard (when prompted). At the end of this process, the default id=0 site objects will also be created. Raise a case with Product Support to arrange for a remote connection.  PSS engineers will then attempt to create the missing id=0 records retrospectively. The site's SSN may need to be provided.. 

Issue The EWS Interface is working and object status updates show in SBO but no alarms come in. Alarms are being triggered and showing in the Alarms Status Page in Security Expert Client but these same alarms are not showing in SBO. Product Line EcoStruxure Building Operation, Security Expert Environment Struxureware Building Operation Workstation Security Expert EWS SOAP Cause The authentication for the interface is not set up correctly. Resolution In the EWS Configuration Manager set the Authentication to Digest and define the SBO User Name and SBO User Password that the interface will use. These same credentials need to be used in the Web Services Interface when it is setup in SBO.

Issue Require details on how to setup a counter to count input activations and trigger an alarm after a certain number have been reached. Product Line Security Expert Environment Security Expert Cause Unsure how to program a counter and require an example. Resolution Need to create: 2x Data Value (Data Up, Data Compare) 2x Variable (Up Count, Compare) 3x Programmable Function (Door Up Count, Value Compare, Reset Alarm) 2x Output (vAlarm OP, vReset OP)   Instructions: Virtual Outputs Under  Programming | Outputs  create two (2) new outputs. One will be the alarm trigger, the other the alarm and counter reset. Save changes.   Data Value Under Automation | Data Values create two Data Values to store the appropriate data in the system. Set the Preset Value for Data Up to 0 and for Data Compare to the number of activations you want to trigger an alarm at. In the example this is 2. Save changes.   Variable Under Automation | Variables create two Variables to count in the correct scale for each Data Value. Up Count: Set the Scale to 1, MaximumValue to the top end of your counting scale and the Data Value to the Data Up Data Value created earlier. Save changes. Compare: Set the Scale to 1, MaximumValue to the top end of your counting scale and the Data Value to the Data Compare Data Value. Save changes.   Programmable Functions Under Automation | Programmable Functions create three new Programmable Functions. Door Up Count to increment the counter register, Value Compare to compare the current register against the setpoint, and ResetAlarm to reset the alarm output Door Up Count: Set Type to Register Counter and Mode to Normal On the Register Counter tab set Input to Count to the physical input you want to count, Counter Register to Data Up, tick Increment on Input Open, tick Log Counter events, and set Reset Output to vReset OP. Save changes. Right click the new Programmable Function you just created and select "Start". Value Compare: Set Type to Value Compare, Mode to Normal. On the Value Compare tab set Activate Output When Above Setpoint to vAlarm OP,  Analog Input Data Variable Register to Data Up and Set Point Data Value to Data Compare. Save changes. Right click the new Programmable Function you just created and select "Start". Reset Alarm: Set Type to Logic Control and Mode to Normal. On the Logic Control tab set Logic Function Mode to 3 - Inverted Follow Pulse On First Output, First Output To Check to vReset OP and Output To Control to vAlarmOP. Save changes. Right click the new Programmable Function you just created and select "Start".   Test the Functions: Create a Floor Plan with Compare, Up Count, vAlarm OP and vReset OP added so we can monitor in real-time. Pulse your monitored Input and confirm Up Count increments. When it gets to the set point value confirm vAlarm OP goes on to trigger an alarm. When vReset OP is enabled confirm the Up Count is reset to 0 and vAlarm OP is disabled.

Issue The EWS interface in the SBO system tree shows as online but when browsing to the hardware folder all that shows up is the class folders, no objects are loaded.   When reviewing the settings in Security Expert EWS Manager.exe a prompt showing "Please set the password" is shown before loading the main configuration window.   You can then see that the Operator Password field is blank and that subsequent attempts to set this and save seem to work but when closing and re-opening the Configuration Manager that the password is not saved. Product Line EcoStruxure Building Operation, Security Expert Environment Security Expert Cause The current language for non-Unicode programs is set to a value other than English. In one specific case this was set to Chinese (Simplified,PRC). Resolution In the Region and Language settings for Windows go to the Administrative tab and select Change system locale... Set this to English, save and reboot the machine. The Operator Password should now be able to be set in the EWS Configuration Manager and EWS connection established.

Issue Security Expert database size increasing rapidly and getting large. SecurityExpert Database size From the screen capture below, it can be seen that the Security Expert transaction log file SecurityExpert.ldf has increased to a large size. SecurityExpert database log file Product Line EcoStruxure Security Expert Environment Security Expert Microsoft SQL Server Cause The Recovery model of the Security Expert database is set to FULL and the database has not been maintained. When using the Full recovery model, regular backups of the transaction log should be performed to prevent the transaction log file size from growing out of proportion to the database size.   New user databases are created with the same recovery model as the model database. The default recovery model for the model database depends on the edition of SQL Server you have installed. Editions targeted at test and development environments (SQL Server Express) set the recovery model of the model database to SIMPLE. Other editions set the recovery model of the model database to FULL. Resolution For Security Expert, it is recommended that the Recovery model be set to the default of SIMPLE.   You can reduce the size of the logs and also prevent them from getting too large again by changing the recovery model of the database from FULL to SIMPLE. The databases are then shrunk to free up drive space.   Refer to the following steps: Take a backup of both the SecurityExpert and SecurityExpertEvents databases and store them in a safe location Change the Recovery Model of the SecurityExpert database from Full to Simple in SQL Server Management Studio. To do this, right click on the SecurityExpert database and go to its properties. Select 'Options'. Change the Recovery Model setting to Simple. Recovery Model Simple Right click on the SecurityExpert database and select Tasks > Shrink > Files Shrink In the Shrink File - Security Expert window, change the File type to Log. Shrink File Type Log Click OK Repeat steps 2-5 for the SecurityExpertEvents database   It is recommended that regular scheduled backups be configured when using the SIMPLE recovery model. In SIMPLE recovery mode, changes since the most recent backup are unprotected.

Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue SP-C Controllers randomly going offline / online.  Restarting the controller resolves the issue for a short period of time. SP-C Controller ports showing TIME_WAIT when a netstat command is run. Product Line EcoStruxure Security Expert Environment Security Expert Controller (SP-C) Cause Under normal conditions an SP-C needs to update the Security Expert Server with new data. During this time the IP Socket of the SP-C is in a Waiting State, refusing to communicate to anyone else while waiting for an opportunity to upload. Once the controllers data has been uploaded to the server however the controller releases the IP Socket and it is open again to new communication. In an extremely small number of cases the SP-C controller goes into this waiting state as usual but then never comes out of that state, holding onto the IP Socket forever and blocking any further communication until the controller is power reset. This only affects a very small percentage of SP-C controllers running Microsoft Windows CE OS Version 16. Resolution In these extremely rare cases the first step is to identify if the affected controllers are indeed running OS Version16.  For SP-C Firmware builds before 2.08.921 Log into the controllers configuration web page. Browse to the Configuration tab. Check the OS Version field at the bottom of the page. For SP-C Firmware build 2.08.921 and above the OS is now shown in a different location.   Once it is clear, that the OS is version 16, Product Support can be contacted to arrange to upgrade the controller OS to Version 20 (or greater) as is found in SP-C controllers shipping now. As this is a high risk procedure and can result in complete failure of the controller if anything goes wrong there are two options for upgrading the OS. Install the affected controller on a test bench with remote access for Product Support to remote in to and perform the update. Have the controller sent back to the factory to be updated and returned to site. Both options will require replacing the controller with temporary stock while the upgrade is being performed.

Issue Downloading a license update, such as after adding features to a site license or extending the evaluation period on an evaluation license, fails with the below error being shown. Hardware details do not match Product Line EcoStruxure Security Expert Environment EcoStruxure Security Expert Cause The hardware details on record do not match the hardware details of the machine that is trying to be licensed. Resolution Contact support to have the hardware profile reset.

Issue Where are the reports of fixed issues/bugs for the various product lines located? Product Line TAC Vista, TAC INET, Andover Continuum, Satchwell MicroNet, Satchwell Sigma, TAC IA Series, EcoStruxure Building Operation, EcoStruxure Building Expert, Access Expert, Security Expert Environment Technical Product Announcements Cause TPAs contain information of changes made per version of the different product lines. A TPA may report enhancements and/or broken functionality. Resolution Navigate to Exchange Extranet to view all TAC Vista documents tagged as TPA. The documents will be listed in reverse chronological order. Log in to view these documents. See Register for The Exchange Download Center for more information on registration.

Issue How to update a demo Security Expert License once it expires. Product Line Security Expert Environment Workstation Cause Not sure how to re-active the demo license after it has expired. Resolution To extend the demo license, contact your local country product support group. Product support can have the license expiration date extended and then it can be updated/download again.  Go to About -> License, go to License Update tab and click on Download License and then OK to update. From v4.2.243 you will now be able to perform manual license activation's that can be used for installations that do not have Internet access. For more information see Performing a manual license registration.

Issue What HID Corporate 1000 card formats are supported by Security Expert? Product Line EcoStruxure Security Expert Environment Security Expert Server Security Expert Controller Security Expert Smart Card Reader Cause Information about HID Corporate 1000 card formats is needed to configure the card readers correctly. The existing documentation does not mention this. Resolution HID Corporate 1000 35-bit format has been validated with Security Expert. To use this go to Expanders | Reader Expanders | Reader 1 and set the Reader 1 Format setting to HID Corp 1000 as shown below. Other HID Corporate 1000 formats may work however they have not been validated.  If the format specification is known, it is possible to program the cards in a custom format. As an example, below are the custom format settings used for the HID Corporate 1000 48-bit format cards. Go to the Custom Reader Format tab of your controller and enter the following values. HID Corporate 1000 48-bit format 1 HID Corporate 1000 48-bit format 2 If the format is different from the above two examples or is not known, please provide support with the site code, card number and raw data output for Any Bit RAW card reads from at least three different cards to help determine the format. Refer to article Show raw card data of a badged card in Security Expert for further details on this.