Building Automation Knowledge Base

Issue How to control an output with one or more inputs. Product Line EcoStruxure Security Expert Environment Security Expert Cause Unsure how to program one or more inputs to directly control an output. Input Control Output Resolution The below guide details how to use an Input to activate an Output on Security Expert and SP-C-WEB systems. An output can be assigned to the Input Type and to the Input allowing many to one and one to many configurations.   In order for an Input to activate an Output it needs two things: To be inside an always armed area - This can be an Automation/Dummy area with its only purpose being to activate the output. To have an Input Type that tells it to activate an Output   Single/Multiple Input Activating the same Output If one or more inputs are required to activate the same output, this output can be defined by the input type. The below is a simple scenario where when the Input turns ON the Control Output turns ON, when the Input turns OFF the Control Output turns OFF. Other types of output activations can be configured if required. Creating the Area Navigate to Programming > Areas Add a new area and name it Automation Area, set the Entry and Exit Delay Times to 0. All other settings can be left default. Creating the Input Type Navigate to Programming > Input Types. Create a new Input Type Set the Control Output to the required output Under Options 2 enable the required control options for your scenario e.g. to have the output follow the input exactly enable Activate Control Output on Alarm and Deactivate Control Output on Restore. To have the output activate for a time simply enable Activate Control Output on Alarm and set the Activation Time under the General tab of the Input Type Menu (Control Output Time) For more details on the option see The difference between using "Control Output" and "Input Control Output" Set any other options that may be required Configuring the Input Navigate to Programming > Inputs select the Input and set the following: Set the Area to the Automation Area created in Step 1 Set the Input Type to the Input Type created in Step 2 Testing Check for any related health status messages that need to be resolved Arm both portions of the Area Activate the Input to confirm Output Activates   Multiple Inputs Activating Different Outputs When multiple inputs are required to activate different outputs, one input type can be used and the outputs can be defined at each input. The below is a simple scenario where when the Input turns ON the Control Output turns ON, when the Input turns OFF the Control Output turns OFF. Other types of output activations can be configured if required. Creating the Area Navigate to Programming > Areas Add a new area and name it Automation Area, set the Entry and Exit Delay Times to 0. All other settings can be left default. Creating the Input Type Navigate to Programming > Input Types. Create a new Input Type Under 'Options 3' enable the required control options for your scenario. e.g. to have the output follow the input exactly enable Activate Input Control Output on Alarm and Deactivate Input Control Output on Restore. To have the output activate for a time simply enable Activate Input Control Output on Alarm and set the Activation Time at the Output itself For more details on the option see The difference between using "Control Output" and "Input Control Output" Set any other options that may be required Configuring the Input Navigate to Programming > Inputs select the Input and set the following Set the Control Output to the appropriate Output Set the Area to the Automation Area created in Step 1 Set the Input Type to the Input Type created in Step 2 Testing Arm both portions of the Area Activate the Input to confirm Output Activates

Issue "Access Denied - Invalid Card Format" in live monitoring when the Door Relocks There is no error when the card is presented and the door unlocks normally Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause There is some type of electromagnetic interference affecting the reader Resolution There are at least 2 different situations where this has been observed: 1. When using entry and exit readers that are very close together 2. A strong LED light that was close to an entry reader. In this case, there was no exit reader   The resolutions are to move/remove the device causing the interference or in the case of the LED light to ground the shield wire of the reader to the panel. This stopped the error from happening.

Issue Is EBO External Log Storage with PostgreSQL and TimescaleDB tested on Linux? Product Line EcoStruxure Building Operation Environment Building Operation Timescale Database Cause Need to install External log storage with PostgreSQL on Linux. Resolution Quality assurance testing has been performed by Schneider Electric with TimescaleDB and PostgreSQL installed natively in Windows enviroment. Other deployment scenarios have not been tested by Schneider Electric. For tested Windows versions, check: Information Technology System Planning Guide

Issue When trying to connect to a Controller via FTP or Telnet the connection is failing even with known working usernames and passwords. Cannot ping controller after upgrade to 4.3.x Product Line EcoStruxure Security Expert Environment SP-C-Web SP-C SP-ACX SP-AC1 Cause When connecting with FTP via an application such as Filezilla the error 'Bad username/password' is returned. Via Telnet the error is simply 'Logon Incorrect' and the connection once again fails to complete    Resolution FTP and Telnet have been intentionally disabled on the Controllers for Cyber Security purposes and will not be possible to use from firmware version 2.08.1234.  Please see firmware release notes version 2.08.1234. As mentioned in the Controller firmware release notes version 2.08.1018, Ping is disabled by default and can be re-enabled via Controller Commands: EnablePing = true

Issue When attempting to edit a graphic on an SBO/EBO ES or AS the Graphics Editor, Function Block Editor or Script Editor reports it has lost connection. Product Line EcoStruxure Building Operation Environment Building Operation Workstation Building Operation Automation Server Premium Cause A second instance of the workstation is running on the same computer The firewall is blocking the connection. The password was recently changed during the same session Workstation is connected via HTTPS but there is no valid certificate Resolution Solution 1 If using Remote Desktop (RDP) to access the SBO/EBO ES remotely, a second instance of the workstation could be initiated. Close the workstation on both the remote connection and at the SBO/EBO ES. Then open the workstation either at the SBO/EBO ES or via remote connection, not both.   Solution 2 Check if the firewall has been enabled while logged in to the SBO/EBO ES or AS, and disable the firewall Here is an example for McAfee   Solution 3 Make sure the network information (such as gateway) for the PC is entered correctly.   Solution 4 If you just changed the password of the logged in user, log out and in again   Solution 5 Workstation is connected via HTTPS but there is no valid certificate. Ensure that certificates are installed and trusted on the workstation/server so that no certificate warnings are received or use HTTP to connect to the server.   Solution 6 Update the Certificate Revocation List as described in First time a TGML graphic is opened after logging in it takes a long time for the graphic to load.

Issue What are the basic steps when doing a conversion from TAC Vista to EcoStruxure Building Operation (EBO)? Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Automation Server Premium Vista Server Cause When doing a conversion from TAC Vista to EcoStruxure Building Operation (EBO), a tool called TAC Vista Conversion tool is used to build the EBO database using an export file from TAC Vista. Resolution This video shows a basic conversion of a TAC Vista database to EBO, and the steps that needs to be taken for a successful conversion.

Issue Mobile or Cellular companies may require the modem's IMEI number to issue a SIM card for the device. Product Line EcoStruxure Security Expert Environment Security Expert SP-4G-USB Cellular Modem Cause The IMEI number is not displayed on the device labelling. Resolution The IMEI number is printed on the label on a chip inside the SP-4G-USB module. IMEI number This can be seen when looking up close through the slots in the module case and looking down through the top of the module. IMEI through bottom vent Use a phone camera to take a photo of this label so the number can be properly identified. IMEI through bottom vent

Issue When viewing the "Device Properties" of an MNB device in the Workplace Commissioning Tool (WPCT) the controller status indicates "Operational, Read-Only"? Product Line TAC IA Series Environment BACnet MNB controllers WorkPlace Commissioning Tool all versions Cause The MNB-xxxx series controllers contain circuitry that is designed to protect the integrity of the embedded flash memory under low-voltage or questionable input voltage conditions.  In the event of a controller-perceived low-voltage condition, the controller will set a read-only flag and lock out all writes to memory, as well as turn off controller outputs. Resolution The Read-Only status can help serve as an indicator that the input voltage to the controller may be questionable. Attention should also be paid to the wire distance between the central transformer and the secondary loads, especially in the case of half-wave input devices like the MNB-70, MNB-V series and MNB-300 controllers and the MNB-1000-15 remote I/O module. With half-wave type input devices, significant AC input current spikes can occur during the positive half-cycle of the AC input. Large resistances due to the wire lengths can cause significant voltage drops as seen from the controller AC input. In extreme cases, the controller may enter the read-only mode at apparent AC voltages exceeding 20 Vac due to the asymmetrical nature of the AC input voltage waveforms. In these cases, reducing the load on the transformer, reducing the wire length between the controller and the transformer, and using higher current rated wire will correct the problem.  For complete wiring guidelines consult the Micronet BACnet, Wiring, Networking, and Best Practices Guide. Once the power issue is resolved cycling power to the controller will clear the read-only portion of the status. 

Issue During certain situations, it may be required to switch from a hardwired to a wireless connection or wireless to a hardwired. In addition, you may be required to replace a failed NIC card with a new variant that may or may not be the same in terms of connection type. Other more rare situations where a technician travels with a laptop that has PCT "SERVER" mode installed would also be affected. Example: PCT Version - 1.1.2.57 Server mode was set up on a physical server that has two NIC cards. The initial setup was performed on NIC1 and now we are required to utilize NIC 2 which is wireless as a temporary solution. NIC card 1 is disabled and NIC card 2 is set up with the same IP details as NIC card1. In addition, the wireless network is an extension of the original network that was configured in NIC card 1. The server then gets rebooted. Once the server is up you start PCT and attempt to open a project. You receive the following errors: "VBoxManager.exe: error: Nonexistent host networking interface" "Failed to open project."    Product Line EcoStruxure Building Operation Environment Windows Client versions (64 Bit Only) Windows Server versions (64 Bit Only) PCT SERVER versions (64 Bit OS Only ) SBO Project Configuration Tool All versions Cause During the initial setup of Project Configuration Server mode, you are prompted to select a network interface card from a list of available NICs. PCT requires that you continue to use the same interface and if you change your connection type at the windows level PCT has no method of knowing this and will not be able to connect to previously created projects. PCT will produce the following complaint as seen in the log below: "Nonexistent host networking interface"   You can find the log path as follows: C:\ProgramData\Schneider Electric StruxureWare\Building Operation\Project Configuration Tool\loggermodule "ProjectsModule.log"   Resolution There are two solutions to address this: Revert your connection type back to the original Network Interface Card. Reboot the machine. Open PCT and attempt to get back into the project. If the idea is to stick with a different NIC, you would simply need to reinstall PCT and select the new NIC during "SERVER" mode setup. Reboot the machine. Open PCT and attempt to get back into the project.

Issue After setting up a REST gateway in SmartConnector, how can it be tested to see that it is working using the built in test client called Swagger? Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Enterprise Central SmartConnector   Cause Swagger is a built in test REST client which can be used to read and set values in EBO. So it can be used instead of a "real" REST client to test the REST gateway in the SmartConnector and test that the connection between SmartConnector and EBO is working. Resolution The objective in this video is to set up a REST gateway in SC and show how we can test that the gateway is working using the built in test REST client called Swagger. Please see video.

Issue Receive alarm messages as "Server does not exist or access denied", "08001: [FreeTDS][SQL Server]Unable to connect to data source" or "08S01: [FreeTDS][SQL Server]Unable to connect: Adaptive Server is unavailable or does not exist" when using SQL Server Express for External Log Storage even though login credentials are correct. 08001: [FreeTDS][SQL Server]Unable to connect to data source 08S01: [FreeTDS][SQL Server]Unable to connect: Adaptive Server is unavailable or does not exist" Product Line EcoStruxure Building Operation Environment Enterprise Server Workstation External Log Storage SQL Server Cause SQL Server Express is using Windows Authentication and/or the TCP/IP network protocol is disabled. Resolution To use external log storage with SQL Server Express the User must be able to login with SQL Server Authentication (e.g. a username and password) and the TCP/IP Network protocol must be enabled.  Consult Setup External Log Storage using MSSQL for additional details.   Check SQL external log storage host address: In the host address type the IP address or DNS name of your external log storage, without the SQL instance name. Having the SQL instance name in the host address can cause communication failure if EBO server is connecting to remote SQL server, refer to: Microsoft SQL Server - Basic Tab. To check the User login credentials: Open SQL Server Management Studio and enter the details from EcoStruxure Building Operation into the SQL Server connection window.  Choose SQL Server Authentication (A), enter the server details (1), user name and password (2) and attempt to login. If an error message appears indicating cannot connect and the credentials are correct it is possibly SQL Server Authentication is not enabled. Login to the SQL Server using Windows Authentication and follow the Microsoft article Change server authentication mode to set to 'SQL Server and Windows Authentication mode'. Attempt to login to SQL Server and the specific database should be visible. To enable the TCP/IP Network protocol:  Open SQL Server Configuration Manager (1) In the SQL Server Network Configuration menu, select Protocols for SQLExpress (2) Right-click TCP/IP (3) and select Properties (4) In the window that opens, click the IP Addresses tab (5) Either set a different port number for each one of the IP addresses or simply set one for all (6).  The default is 1433 but will need to be a port that is free.   Click OK. Back in the SQL Server Management Studio ensure the SQLExpress service is restarted. For additional information please consult Default SQL Server Network Protocol Configuration and Enable or disable a server network protocol            

Issue When using EBO's registration page, the registration website that is opened allows the user to login and enter the new system ID, however, the user then cannot proceed any further. Product Line EcoStruxure Building Operation Environment Building Operation WorkStation Cause The link https://registration.smartstruxure.schneider-electric.com/, which redirects to the https://registration.smartstruxure.schneider-electric.com/WebConnectUI/RegisterUser/home This page may not allow the user to complete the site’s registration with the new system ID. Resolution Register the site’s EBO new system ID using the following website address. https://registration.smartstruxure.schneider-electric.com/ebo/Home

Issue When trying to change a BACnet value unit, the following error message pops up Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Cause Using a unit that is not supported by BACnet standard or using a prefix with a unit that doesn't support a prefix in BACnet. In the following example, we can see the "Airflow Input" has the kPa unit. Now, if the user wants to change the unit to N/M 2 , without removing the prefix k(10 3 ), an error pops up upon saving the settings.   Resolution Make sure to select a unit that is supported by the BACnet protocol. Supported engineering units in BACnet are listed in BACnet standard, ASHRAE 135 clause 21, refer to BACnet Engineering Units enumerations. To resolve the issue in the above example, the user needs to omit the prefix before selecting the unit OR  They need to make sure the selected unit supports that prefix.    

Issue When using an Echelon U10/U20 USB or other Lon network adaptor for communication with a laptop and standalone WorkPlace Tech, not WorkPlace Tech Editor, you must change the default configuration settings.  The default Lon Network Domain ID length (1 byte), Domain ID (18 decimal) and Subnet (254) in the AS-P conflicts with the defaults used by WorkPlace Tech. Product Line TAC IA Series, EcoStruxure Building Operation Environment I/A Series WorkPlace Tech (Lon Network communication settings) Building Operation Automation Server Premium Building Operation Enterprise Server Cause Lon Network configuration Resolution Look at the LonWorks Network "Advanced" tab in the AS-P to determine the addressing information. Open the WorkPlace Tech WorkStation Communication Settings and select LonWorks.  Open the Change Address window Select the "Manual Setup" radio Button Modify to match the AS-P Lon Works Network configuration.  If a different Domain ID or subnet has been assigned in the AS-P, it will need to be assigned the same in WorkPlace Tech You can now browse the LonNetwork from the laptop.  If the MNL devices are assigned applications from the AS-P, do not modify the programs from the WorkPlace Tech Tool  

Issue Downloading a license update, such as after adding features to a site license or extending the evaluation period on an evaluation license, and this fails with the below error being shown. The SSN is invalid for this installation. Product Line EcoStruxure Security Expert Environment Security Expert Cause Wrong SSN being used. The SSN being used is different to what was used when Security Expert was initially installed. Resolution Uninstall Security Expert and re-install using the correct SSN. Backup the SecurityExpert and SecurityExpertEvents databases and copy the resulting backup files somewhere safe. Manual backups can be initiated from the Global > Global Settings menu. Select the directory location and press backup now. Uninstall Security Expert from Windows Add or Remove Programs. Search for "Security Expert" to filter the results. Install Security Expert from available installation files. When asked for the license make sure to use the correct SSN.

Issue Access Expert On-Premise setup needs procedures and tools to backup and restore the database Product Line Access Expert Environment Access Expert Premise Software V3 MongoDB Cause The procedures for backing up and restoring the MongoDB is documented online at the link below. https://docs.mongodb.com/manual/tutorial/backup-and-restore-tools/ However, these instructions do not outline how to use the commands (mongodump and mongorestore) within the Windows OS environment using specific examples. Resolution The following procedures are designed to fill in the gap for Access Expert administrators who need to do manual MongoDB Backup and Restore. These procedures assume that Access Expert V3 has been installed and is functioning normally. You will need 2 separate Command Prompts, run as Administrator, open for these procedures. Mongo DOS Shell to attach to and run commands within MongoDB environment Standard DOS Shell to run the Mongo backup and restore commands MongoDB Backup Ensure MongoDB service is running (Start> Run> services.msc) Open a Command Prompt as Administrator (referred to as the Mongo DOS Shell) Type mongo(command) Type show dbs (command) - shown above, to give a list of the dbs available) If the MongoDB service is "Running," but the client cannot connect when typing mongo, it's probably because the path to the mongo bin folder hasn't been added to the PC's environment. To Add a local path locations variable to a PC environment https://docs.microsoft.com/en-us/previous-versions/office/developer/sharepoint-2010/ee537574(v%3Doffice.14) Ex. C:\Program Files\MongoDB\Server\3.6\bin (This will vary based on the version of Mongo) Open another Command Prompt as Administrator (Standard DOS Shell) Use the CD command to navigate to where you would like the backup files to be created Ex. C:\Data mongodump (command) The mongodump command creates the dump folder with admin, Keep, Signalr subfolders MongoDB Restore In the (Mongo DOS Shell) Prompt show dbs (command) use Keep (command) (Case sensitive) db.dropDatabase() (command) Use the Command Prompt as Administrator (Standard DOS Shell) mongorestore (command) The window should indicate "Finished Restoring Keep.Events," "done" and RESTORE COMPLETE If there are “E11000 duplicate key error collection” Keep.Events errors, it’s because the collection events are already in the folder and need to be deleted first.   Steps to correct the E11000 duplicate issue: (Stop the service, delete and recreate the DB folder, restart service) Right-click on the MongoDB service and Stop (you can’t delete files while the service is running) Delete C:\Data\db folder (not the Data, only DB) MANUALLY CREATE THE DB FOLDER - Right Click > New Folder and name it DB Restart the MongoDB service - this creates the necessary files in the DB folder Once these steps have been done, rerun the mongorestore command mongorestore (command) Verify that users can log into Access Expert with this database

Issue How much ethernet bandwidth do lonworks systems consume using Loytec L-IPs, iLons, etc.? Environment TCP/IP ethernet network LNS System Cause IT professionals will sometimes hesitate to allow the control system to use the same TCP/IP network as the internet, phones, etc. They may ask what the expected bandwidth usage will be before granting access. Resolution It is impossible to explicitly state how much bandwidth a LonWorks system will consume on the ethernet. It depends heavily on the amount of LON traffic being sent by the controllers. The routers themselves do not produce traffic, they only pass the traffic onto and off of the ethernet. The traffic is created by the LON devices, Xenta controllers, Vista and LonMaker or other HMIs. Vista can create a maximum of 15 LON telegrams/second. This is very little traffic with respect to IP bandwidth. Unless you have made bindings into the LNS NI (which we never do in a Vista-scenario, since Vista cannot read these) there is basically nothing at all going out from LonMaker/LNS unless you are commissioning devices. Starting the LonMaker Browser also generates traffic. But this is also normally just in the design phase of the network, not in "operating mode". SNVT bindings or TAC network variables from one LON network to another over the IP channel also generate traffic. A typical Xenta can produce 2 SNVTs propagation/second and/or maybe 10 TACNV. This is not much (as IP-traffic), but if there are hundreds of nodes communicating simultaneously all passing through L-IP gateways, the amount of IP traffic will grow. If you are using a Loytec L-IP, it uses a protocol feature called "packet bunching". Before it sends out a packet on the IP side, it waits for an adjustable time (Aggregation Time, default = 16ms) if some packets are following, which have to be sent to the same IP addresses. If some packets are following, it puts the packets in the same IP frame and sends it all together in a single IP packet. The receiving node unpacks it and makes multiple EIA-709 (Lonworks) packets again.

Issue Initialization errors when starting I/NET Seven 2.42 or higher Error: "You must install an instance of SQL 2008R2 (64bit) before completing the INET install" Product Line TAC INET Environment I/NET Seven 2.42 Windows Server 2008 64-bit Windows 7 64-bit SQL 2008 64-bit Windows 8 Cause I/NET 64-bit requires specific installation process in order to function on a 64-bit PC Resolution Installing SQL Download SQL2008 R2 Express 64 bit (SQLEXPR_x64_ENU.exe) from this location: http://www.microsoft.com/en-us/download/details.aspx?id=30438 Run SQLEXPR_x64_ENU.exe In the left hand section, select Installation In the Right and section, select New SQL Server stand-alone installation of add features to an existing installation. At the "Setup Support Rules" screen select OK At the "Product Key" screen, select Next At the "License Terms" screen, check accept and select "Next" At the "Setup Support Files" screen, select Install At the "Setup Support Rules" screen, select Next At the "Feature Selection" screen select: Database Engine Services, SQL Server Replication, Management Tools - Basic (If Present) and SQL Client Connectivity SDK. Leave the Shared feature directory as default. At the "Instance Configuration" screen, select the Default instance option, accept the default Instance ID, accept the Instance root directory default settings and select next. At the "Disk Space Requirements" screen, select Next At the "Server Configuration" screen, under SQL Server Database Engine set the Account name to NT AUTHORITY/SYSTEM, leave the password field blanks, and set the startup type to automatic. Under SQL Server Browser Service, set the Startup Type to Automatic At the Database Engine Configuration screen, set the Authentication Mode to "Mixed Mode", Define a strong password (example: @sql2008), in the Specify SQL Server administrators section click "Add Current User". Select Next. At the "Error and Usage Reporting" screen, select Next At the "Installation Rules" screen, select Next At the "Ready to Install" screen, select Install At the Installation Progress screen, when the setup process is complete, select Next At the "Complete" screen, select Close. SQL Configuration: In the Windows Start Menu, launch the SQL Server Configuration Manager In the Left hand section of the window, highlight SQL Server Services Verify that SQL Server Browser and SQL Server are Running In the left hand section of the window, expand SQL Server Network Configuration and highlight Protocols for MSSQLSERVER Enable Named pipes and TCP/IP Close the SQL Server Configuration Manager Restart the PC Installing SQL Server 2005 Backward Compatibility On the I/NET 2.42 or higher installation CD, look in Support\SQLBCM_64Bit and launch the SQLServer2005_BC_x64.msi file Follow all the prompts on each screen and accept all defaults. Install I/NET Seven 2.42 or higher Install I/NET Seven 2.42 or higher using the installation CD Follow prompts and use defaults When prompted for the SQL password, select "Windows Authentication" Restart the PC Open I/NET Configuration through the start menu. Modify the default Config profile or create a new profile. Close I/NET Configuration Start I/NET NOTE: If error occurs during SQL installation stating invoke or begin invoke failed, follow instructions at this link: http://support.microsoft.com/kb/975055 UPDATE: SQL2008 SP1 prevents the invoke failed error. It can be installed with the same instructions as above. Download it at this link: http://www.microsoft.com/en-us/download/details.aspx?id=25052

Issue The object identifier of a BACnet device (device id) must be unique internetwork-wide, different vendors use different methods for calculating the device id default value. When integrating devices from different vendors sometimes it become necessary to change a device's default object id. Product Line Andover Continuum Environment bCX4040 b3s Third party BACnet devices Cause BACnet integration Resolution If the BACnet device is a Continuum device (bCX4040 or b3), Continuum provides a mechanism for changing the default device id. For a third party BACnet device, VTS can be used to write to the Object Identifier of the device in order to change the device id. Note that this will only work if the device manufacturer has made the object identifier for the device object writable. Click here to download VTS Click here to see the procedure to follow to set a third party device id using VTS.

Issue Are username and passwords encrypted during transmission from the remote client or the web client to the Sigma server? Product Line Satchwell Sigma Environment Sigma Remote Client WebClient Cause Are username and passwords encrypted during transmission from remote client to the Sigma server? Are username and passwords encrypted during transmission from web client to the Sigma server? Resolution Usernames are not encrypted during HTTP transmission from the remote client and web client to the Sigma server. Passwords are encrypted during HTTP transmission from the remote client and web client to the Sigma server.