Building Automation Knowledge Base

Issue Spare Addresses for use as internal points on an SCU 1284 dual address Product Line TAC INET Environment I/NET Access Control SCU1284 dual address mode Cause What are the ramifications of using the spare point addresses for internal points in an SCU 1284 Resolution Note! It's generally not recommended to use the available address on a subLAN. Addresses marked as "Internal" in the MCU configuration are reserved for internal software points. However, it's crucial to consider that doing so may limit the potential expansion of the subLAN to utilize these addresses in the future.   When a SCU1284 is set to dual channel, it only uses 12 inputs, 8 outputs, and 4 reader points.  Here is a list of all software points and their uses:   XX00 DI - XX03 DI Hardware Inputs used by doors XX04 DI - XX07 DI Spare Hardware Inputs XX08 DI & XX09 DI SCU tamper and power monitoring points XX00 DO - XX03 DO Hardware Outputs XX04 DO - XX07 DO Spare software only points XX08 DO & XX09 DO Reader Points YY00 DI - YY03 DI Hardware Inputs used by doors YY04 DI - YY09 DI Spare software only points YY00 DO - YY03 DO Hardware Outputs YY04 DO - YY07 DO Spare software only points YY08 DO & YY09 DO Reader Points   See the following documentation: TCON312-0910.book (schneider-electric.com)

Issue Can the serial port on the NetPlus Router (NPR) communicate at 9600 baud? Product Line TAC INET Environment NetPlus Router (NPR) 2000 Cause Configuration inquiry Resolution This specific configuration port is capable of transmitting data only at a rate of 19,200 baud.

Issue Sequence zero does not run when power is restored to the Micro Regulators (MR). The MRI is on a UPS in another part of the building and never loses power. Product Line TAC INET Environment MicroRegulator (MR) SubLAN devices MicroRegulator Interface (MRI) Controller LAN Interface Cause By design, sequences are stored in the MRI. Sub-LAN controllers do not store sequences. Resolution Sequence zero is designed to trigger the power restore event (Sequence 0) in the event of the Interface (MRI) power failure being restored, hence the MR will not trigger this sequence 0 in the MRI.  The action is correct.

Issue How do I set the Tap emulation for a Process Control Unit (PCU)? Product Line TAC INET Environment Process Control Unit (PCU) 7716/8 Process Control Unit (PCU) 7756 Cause Need to set TAP Emulation type on PCU  Resolution Using the HHC, press [Code], 90 [Enter] Press [Inc] or [Dec] through 7801, 7803, 7806 Tap emulation Press [Enter] to accept your choice 7801 for direct connection and Integrated dial operation 7806 for direct connect, integrated dial, and ADAA For additional details, please see the following documentation:  PCU 7718 TCON106-0910.book (schneider-electric.com) PCU 7756 TCON127-0910.book (schneider-electric.com)

Issue Where can I get example programs and programming information on the Smart sensors? Product Line Andover Continuum Environment Smart Sensors: TTS-SD-LCD-1 TTS-SD-LED-1 Cause Smart sensors require specific Plain English programming that is different from other controllers, where is the documentation to support this? Resolution The Smart Sensor Installation and User's Guide and Example programs for the Smart Sensors are available for download from The Exchange Extranet.   PSS Example programs

Issue EBO system was in sync with Building Advisor Portal and is now not. Product Line EcoStruxure Building Operation, EcoStruxure Building Advisor Environment Building Operation Building Advisor Portal Building Operation Enterprise Server Building Operation Automation Server Cause System ID changed and no longer matches in Building Advisor Portal. Resolution Check EBO Server Trace Log for nsp.pin.Cloud records and there should be one that shows "SystemId". Here is an example: 2023-11-19 12:37:30.437 [320] nsp.pin.Cloud.DspInterface Sending notification {"ProtocolVersion": "1.0", "NotificationType": "TimeSeries", "IotDeviceId": "urn:dev:ops:sebms-sbo-es-fb6b2834ba4749d89cdad333c12704a3", "SystemId": "4ba3db45-0235-7146-981a-c81dc08e39bf", "GeneratedAt": "2023-11-19T12:37:30.0437Z", "GeneratedBy": "SBO 3.2.4.22","Operation": "Update","TimeSeries": [{"TimeSeriesId": "d8e6b6fc-a472-4285-a56d-2d3e4a6915e1","Samples": [{"Timestamp": "2023-11-19T12:37:30.0437Z","Value": "Unknown [null]","Unit": "0x10001","Status": 20}]}]} 2023-11-19 12:37:30.437 [320] nsp.pin.Cloud.DspInterfaceReal edgeAgent_sendMessage: {"ProtocolVersion": "1.0", "NotificationType": "TimeSeries", "IotDeviceId": "urn:dev:ops:sebms-sbo-es-fb6b2834ba4749d89cdad333c12704a3", "SystemId": "4ba3db45-0235-7146-981a-c81dc08e39bf", "GeneratedAt": "2023-11-19T12:37:30.0437Z", "GeneratedBy": "SBO 3.2.4.22","Operation": "Update","TimeSeries": [{"TimeSeriesId": "d8e6b6fc-a472-4285-a56d-2d3e4a6915e1","Samples": [{"Timestamp": "2023-11-19T12:37:30.0437Z","Value": "Unknown [null]","Unit": "0x10001","Status": 20}]}]} (retCode = 0) In Building Advisor Portal, check the BMS System Identifier to ensure it is the same and update as needed. In this case, d057cfba-9fc0-11e4-a62a-3417ebbed129 needed to be updated to 4ba3db45-0235-7146-981a-c81dc08e39bf

Issue When is an "additional 500 points" license required for an Enterprise Server? Product Line TAC IA Series Environment I/A Series R2 IA-ENT-1 Enterprise Server licensed with the IA-DRV-OSD Open Systems Device driver license Cause The basic Enterprise Server license does not include any external point driver capabilities.   Adding the IA-DRV-OSD allows the enterprise server to communicate with up to 25 points of each type, BACnet, OPC, SNMP and ModBus, all using IP communications. Resolution An Enterprise Server can be licensed to directly communicate with  BACnet, OPC, MODbus and SNMP points by adding the IA-DRV-OSD license and will support communication with up to 25 points of each specific type of points. For each additional block of 500 points of a specific type, you need to purchase an additional points license, IA-BAC-500, IA-OPC-500, IA-MOD-500 or IA-SNMP-500.  Here is an example of how these licenses are used.  The Enterprise Server needs to communicate directly with 1250 BACnet IP points and 60 SNMP points.  The following licenses will be required: IA-ENT-1 -- Enterprise server license IA-DRV-OSD -- Open System Driver for direct point communication, includes 25 points each of BACnet, SNMP, OPC and ModBus. IA-SNMP-500 -- allows ES to communicate with the 60 SNMP points, technically allowing communications with a total of 525 SNMP points (25 points included with IA-ENT-1 and 500 with IA-SNMP-500). IA-BAC-500 -- allows the ES to communicate with an additional 500 BACnet points bringing the total to 525 BACnet points IA-BAC-500 -- this second IA-BAC-500 license will allow the ES to communicate with the additional 500 BACnet points, bringing the total allowable BACnet point count to 1025 points IA-BAC-500 -- this third IA-BAC-500 license will allow the ES to communicate with the required additional 225 BACnet points, actually bringing the total allowable BACnet point count to 1525 points. NOTE: On most computers an IA-ENT-1 with the Open System Driver is capable of supporting a maximum of 4000 external points regardless of the number of points licensed in any one communication type.

Issue Reader Expander loses communications to the SP-C, how are Users authenticated when they attempt to access Doors controlled from this Reader Module? Which Users will still have access through Doors when the Reader Expander is offline to the (SP-C) Controller? Product Line EcoStruxure Security Expert Environment Security Expert SP-C SP-RDM2 Cause The SP-RDM2 Security Expert - Door Expansion Module - Installation Guide lists three options for how the SP-RDM2 should behave when it is offline from its SP-C controller.  The resolution below describes what each of these modes means. Resolution There are three options for how to handle access when the Reader Expander is in offline mode (not communicating with the Controller).  1. No Users Under Expanders | Reader Expander | General tab > Configuration section > Offline Operation, the “No Users” option removes access for any cards badged at these Readers. no one will have access while the Reader Expander is offline to the Controller. 2. Any Card Under Expanders | Reader Expander | General tab > Configuration section > Offline Operation, the “Any Card” option allows for any card at all to be granted access when the Reader Expander is offline to the Controller. This is the least secure option as anyone with a valid technology card, which is correctly formatted to either the Primary or Secondary formats defined for the Reader Expander, will be granted access. There is no validation of the card's Facility Code or Card Number. At present there is no option available for providing valid access on reading a card's Facility Code only. 3. First 10 Users plus Cache Under Expanders | Reader Expander | General tab > Configuration section > Offline Operation, the “First 10 Users plus Cache” option allows for the below Users to be granted access when the Reader Expander is offline to the Controller. The first 35 Users in that Controllers Database. The last 150 Users that have badged with valid access. Note: This options text description is an old reference and will be updated in a new software version to reflect that this supports the first 35 Users.

Issue The default LED Output names for Reader Expanders (eg. RD Red R1) do not always match the colour of the LEDs on the card reader Product Line EcoStruxure Security Expert Environment Security Expert Controller Security Expert Reader (New version only) Cause The default LED output names/labels don't accurately describe their function. Resolution The "RD Green R1/R2" Outputs represent the reader's LED colour in its "active" state. By default: These outputs are not inverted; (in Programming|Outputs|Options General section, "Invert output" checkbox) When the output is activated, the reader's LED is green; When the output is deactivated, the reader's LED returns to blue; The "RD Red R1/R2" Outputs represent the reader's LED colour in its "resting" state. By default: These outputs are inverted When the output is activated, the reader's LED colour is also green When the output is deactivated, the reader's LED returns to blue To have the Red LED in the active state, you must add the following to the output's command console (found in Programming|Outputs|General Commands section): LEDColour = 1, where 1 is Red.   Here is a list of available colours: 1= Red 2= Amber 3= Orange 4= Yellow 5= Lime 6= Green 7= Mint 8= Turquoise Note: Please refer to AN 270 to identify new from old versions of the reader hardware  

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue The list of visitors has become very large on the VMS front page Product Line EcoStruxure Security Expert Environment Security Expert Controller Cause By default, visitor users are not deleted automatically from the system Resolution 1. In The Security Expert client, go to Visitor | Template | General Tab. Select the template you want to edit. 2. Scroll down and expand the Configuration section. In the Checkout mode, select 'delete user'. 3. Click Save.

Issue How does SP-C communicate with grouped TKE controllers? Product Line EcoStruxure Security Expert Environment Security Expert 4.0.128 (or higher) Security Expert Controller 2.08.582 (or higher) TKE Controller (American) v2r0 (only supported version) SX-ELV-HLI-TK license to enable the integration Cause ThyssenKrupp TKE IP address configuration process occurs in the back-end. Resolution The integration operates over IP and the connection is established by the SP-C controller firmware based on who answers the heartbeat messages sent out. You do not need to input the IP address of the TKE controllers.   In the TK environment, our SP-C controllers take the place of 'Security Server' as seen in the image below. When controllers are grouped, one TKE Controller per group is designated as the Master. It is the lowest online Car ID in each group. All comms will pass through the Master. Security Server sends out a UDP broadcast message and TKE replies to it, Security Server takes note of the device's IP address and subsequent data messages are sent to this address.   What happens if the connection is lost from the Master: Offline scenario 1: If Elevator 1 was the Master from the ES Group 1 and it fell offline, then Elevator 2 would become the master and it would start replying to those heartbeats with its IP address, Security Expert takes note and starts sending messages there instead.   Offline scenario 2: If we can't communicate with them at all (legitimately offline), then TKE's default behaviour in 'Loss Of Security Communication Mode' is to free all DED/DEC/Kiosk buttons. This is configured on the TK Elevator's end.

Issue HID Corporate 1000 48-bit card not natively supported by Continuum System Product Line Andover Continuum Environment CX9900/9940 CX9702 CX9680 ACX5740/5720 Cause Continuum does not have built-in support for the HID Corp 1000 48-bit cards.  The system must be configured using a custom card format program. Beginning March, 2015, HID Global will introduce a new Corporate 1000 format referred to as “Corporate 1000 – 48”. All end-users who register for the Corporate 1000 program after February, 2015 will be issued a unique Company ID in the new Corporate 1000 – 48 format. The original 35-bit Corporate 1000 format will now be referred to as “Corporate 1000 – 35”. Those end-users who have been issued a unique Company ID in the Corporate 1000 – 35 format can continue to order credentials without interruption or change. Introduction of the new format will not impact or affect customers who registered for the program under the original structure. Resolution Here is the process to create a custom format for a HID Corp 1000 48-bit card in Continuum.  Only one custom card format can be used in NC1(CX99xx), NC2(CX968x) using AC1 modules, while up to four custom formats can be used with the ACX57xx and NC1/NC2 using AC1Plus modules. Create in each NC1, NC2, ACX57xx an InfinityNumeric point called AccessFormat (use this spelling exactly!). During the creation process, attach a manual array (log) with 22 entries to the point.  If creating more than  custom card format create InfinityNumeric points called Accessformat2, AccessFormat3 and AccessFormat4. Create the following InfinityProgram in each controller. The program should be type FallThru, and AutoStart.  The program can be copied to other access controllers where it is needed.   Note: The HID Corp 1000 48-bit card format allows site codes to be up to 22 bits, however, site codes in Continuum are restricted to a 16 bit value (0 to 65535), due to this Continuum limitation only the 16 least significant bits of the site code encoded on the cards can be read in Continuum, site code values above 65535 will show as different smaller number in Continuum. Program Name: SetCustCrdArray FlowType: FallThru AutoStart: True Code: Line SetFormat Set accessformat[0] to 1 'array has been initialized Set accessformat[1] to 48 'total number of bits in the format Set accessformat[2] to 0 'control mask Set accessformat[3] to 0 'mfg mask Set accessformat[4] to 0 'start bit of mfg Set accessformat[5] to 0 'end Set accessformat[6] to 8 'start of site code Set accessformat[7] to 23 'end Set accessformat[8] to 24 'start of card number Set accessformat[9] to 46 'end of card Set AccessFormat[10] to 14043 ' odd parity mask, first 16 bits Set AccessFormat[11] to 28086 ' odd parity, next 16 Set AccessFormat[12] to 56173 'odd parity, next 16 Set AccessFormat[13] to 0 ' odd parity, next 16 Set AccessFormat[14] to 23501 ' even parity, first 16 Set AccessFormat[15] to 45811 ' even parity, next 16 Set AccessFormat[16] to 28086 'even parity, next 16 Set AccessFormat[17] to 0 ' even parity, next 16 Set accessformat[18] to 0 'even number multiplier Set accessformat[19] to 0 'card number divider Set accessformat[18] to 0 'even number multiplier Set accessformat[19] to 0 'card number divider Set accessformat[20] to 0 'start bit of issue code Set accessformat[21] to 0 'end bit of issue code Set accessformat[22] to 0 'decimal shift of issue code stop

Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices.   Issue If you lose access to your comms expander or need to reset all of the settings how do you default the module? Product Line Security Expert Expert Environment Security Expert SP-MNR2 Firmware 1.0.27 (and higher) Cause A physical link is needed to default the module Resolution These are the settings that are resets Password to admin Repeater Mode to RS-485 mode UDP IP/Host to 192.168.1.2   1. Link the N+ N- NA and NB connections between all three COM ports 2. Cycle power to the device   Please note: this does not reset the IP address, so you may need to default the IP address separately. 1. Unlink all COM3 terminals and leave COM 1 and 2 linked 2. Cycle power and connect to the built-in web interface at 192.168.111.222 3. Configure IP address as desired 

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue If SOAP is already enabled, what functionality is added with SX SDK Enabled? Product Line Security Expert Expert Environment Security Expert Controller Security Expert SOAP Web Service Software Development Kit (SX-SOAP-SDK) Cause The SDK license allows you to develop and deploy new and custom third-party integrations Resolution SOAP itself is included with Security Expert. You can use first-party apps like web client(s) or existing integrations. If you are building your interface or integration (third-party apps), then the SDK license is required. There is no change in the product itself. The SDK license includes all the development tools necessary (API documentation and sample codes) to develop a custom interface and build custom integration to the Security Expert Server

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Continuum cardholders with PINs that start with "0" (zero) are not importing into Security Expert using Data Sync Tool Product Line EcoStruxure Security Expert Environment Security Expert Continuum Transition Cause Due to the database's configuration, Any PIN in Continuum starting with a "0" (zero) will be truncated. When DSS runs, the personnel (cardholders) with truncated PINs will be rejected by the PIN length restriction and sent to the error folder. Example: If you have a Continuum site with four-digit PINs and a PIN is entered into Continuum as 0123, will be truncated to 123 in Continuum (Continuum ignores the zero at the reader keypad as well). If you have SX configured for a 4-digit PIN length. This cardholder will not import. Resolution Option 1: Identify the truncated PINs in the Continuum database by running a query and have those users' PINs updated before running CTT and DSS. This should be done as part of your system cleanup before transitioning. Option 2: If you have a minimum PIN length configured in Security Expert, Stop DSS if running. Go to Global|Sites|Site Defaults tab and scroll to Site security enhancements. Set minimum PIN length to "0". Save changes. Start DSS. You will still have to correct any PIN that are less than the site minimum before enabling this feature again.       Note: This option should only be chosen for a one-time sync. If you are running a continuous/lengthy transition, you should use Option 1. Otherwise, you will run into this problem again.

Issue Creating a Listview/Report to show all the personnel objects which have access to a given area.   Product Line Andover Continuum   Environment CyberStation   Cause Reports can be used to do a security audit of which individuals have access to certain Areas in a building.   Resolution Create a Listview object In the class field select AreaLink Add columns for PersonID and AreaID (Add any other column as needed) In the Qualifier tab enter the following qualifier: AreaID Is XXX Id where XXX = full path to area Example: AreaId is Root\AreaFolder\Lobby Id **NOTE Use folder\area aliases ONLY in the qualifier, do not use names. Save and run the Listview.  The Listview should show all Personnel objects that have the Area specified by AreaID in their Area list. To generate actual Report Object from the list view see How to create a Report from a Listview.

Issue Sending the results of a Listview to a Report.   Product Line Andover Continuum   Environment CyberStation   Cause Available options are not commonly known   Resolution There are two ways to display the contents of a Listview in a Report.   The first method is to create a Report and set its data source to 'Listview'.  Then in the filter tab add the desired Listview as a filter. Please note that only ONE list view can be added. When the Report executes it populates data from the Listview object.   The second method is to create an HTML Report template Then the HTML Report in the Listview's Report Template field In this case the report can be invoked right from the Listview

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue How to configure the relative path permissions Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Cause Relative path permissions help configure the path permission for multiple modules (i.e.100 AS-Ps) or many different folders Resolution Here's how to give 'read-only' analog value permissions for 2 separate folders: 1. Go to Relative path permissions. Select the type of permissions desired (Full permissions for Analog Value/ NO permissions for Digital Value) 2. Go to the Local Account Group and select the Permissions tab. Under Path Permissions, add (+) the created path permissions to the desired folders. 'Folder' and 'Folder 2' are selected to have the same path permissions. Save and apply configuration.   3. When viewing the system tree, both 'Folder' and 'Folder 2' have read permission for Analog Value

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue DSS error occurs while importing users into Security Expert Product Line EcoStruxure Security Expert Environment Continuum Transition Tool I/NET Transition Tool Data Sync Service Cause The Data Sync Service settings file contains a mapping for a credential named “User ID” but cannot find the User ID credential type. The User ID credential was not created before starting the Data Sync Service.  It is important to determine if the site is using user PINs and whether they are all unique before selecting the following option in the transition tools.   By default, SX does not allow duplicate PINs. A unique PIN is a requirement for signing into intrusion keypads with only a PIN number. Resolution Option 1: The site does not have user PINs in the legacy database or PINs are unique. Stop the data sync and transition services Uncheck the 'Allow PIN Duplication' option Click the 'Create Data Sync Service Settings File' button below   Delete the export history of Users   Start both Data Sync and Continuum Database Transitions services. (All users will get exported again) Option 2: The site uses PIN numbers and there may be duplicates. Keep the “Allow PIN Duplication” option checked In Security Expert, Go to Global | Sites| Site Defaults Tab Scroll down and expand the Site security enhancement section Enable the top 3 checkboxes (Require dual credential...; Auto Populate User ID... and Allow PIN duplication)   Click Save.

Warning Hazard of Electric Shock: Remove all power from all devices before removing any covers or doors of the system. Disconnect power at the device and at the power source. Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices.   Issue What are the supported USB Adaptors for SP-C? Product Line Security Expert Environment Security Expert Controller (With USB Port) Resolution The USB port on the SP-C supports USB to ethernet adaptors. It MUST have the following chipset ID: ASIX - AX88772C