Building Automation Knowledge Base

Warning Electrostatic Discharge Required: Always discharge static electricity from your person by touching metal prior to handling any hardware. Failure to do so may result in damage to devices. Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue Currently, a procedure exists to do conversion of i2 to b3 and vice versa using Continuum Cyberstation and NetControllers.   However, it is much simpler to do the conversion using the RoamIO and the Infinet/BACnet Service Tools. Product Line Andover Continuum, EcoStruxure Building Operation Environment Continuum i2 Controllers (except -V) Continuum b3 Controller (except -V) Cause This article describes an alternate and simplified conversion method to the original procedure published to convert i2 to b3. Before using this procedure, read the Conversion of Continuum devices from i2 to b3 and vice-versa in the field Knowledge Base article in its entirety for important information about converting i2/b3 controllers in the field.  Resolution Before starting the procedure, you need the following items: The device to be converted. The serial number of the device to be converted. A RoamIO2 configured to communicate with your PC via Bluetooth and the Infinet and BACnet Service Tools A special, firmware application upgrade file for the appropriate device model as provided by Product Support A bootloader file for the appropriate device model, provided by Product Support To convert i2 field devices into b3 BACnet using RoamIO2 Contact Product Support and request the conversion files for the specific model(s) you wish to convert. You will be provided with an application file (e.g. i2920toB3920B4.500077.upd) and a boot loader file (e.g. B3920BootB4.500077.upd) for each model you are converting. Connect the RoamIO2 directly to the i2 device (make sure device is disconnected from field bus) Launch the InfinetServiceToolPC.exe (attached) and click on the connect icon Once the device shows up on the tree, right click on it then select 'Uprev firmware...' Send the conversion application file provided by Product Support Once the uprev operation is complete, click the connect icon to disconnect the Infinet Service Tool from the i2 device then close the InfinetServiceTool app. Cycle power to the RoamIO2 then start the BACnet Service Tool In the BACnet Service Tool, de-select View by networks, then click the connect icon, the conversion from i2 to a b3 causes the device to default to baud 38400 and an invalid BACnet master MAC id, so upon connection the following error will be shown... Click 'Yes' to continue From the 'Tools' menu select 'Set b3 baud rate' and set it to Baud38400  From the 'Tools' menu select 'Set offline b3 MAC id' and enter the serial number of the device and a valid MAC id then click on 'Apply' If the baud and MAC id have been set successfully, the device will automatically pop up in the tree but it will only be partially online, to bring the device fully online, click the red disconnect icon on the BACnet Service Tool to disconnect from the device, wait about 30 seconds then  click the now green connect icon to reconnect the BACnet Service Tool to the device Right click on the device then select 'Update OS', send it the appropriate boot loader file provided by Product Support Once the uprev of the boot loader has completed, select the device and click on 'Cold start device' After the device re-start, click on the device in the tree and select 'Switch view', confirm the firmware and boot loader versions are correct. (you may need to do a refresh from the 'Tools' menu)

Issue Require method on how to latch unlock a Door by Triple Badging. Product Line EcoStruxure Security Expert Environment Security Expert Cause Require Door to be controlled normally with card access but also to allow a valid User to latch unlock the Door with three consecutive valid badges. Resolution Required Objects virtual Output - Flag to trigger latching (v_TripleBadgeLock) Programmable Function - Latches Door when virtual output ON (Door_UnlockLatch) Programmable Function - Unlatches when virtual output OFF (Door_UnlockLatch_Restore) Door - Door to control (MainEntrance) Configuration Create virtual Output v_TripleBadgeLock. Set Module Type to Output (PX) and Module Address and Module Output channel to ones that do not exist. Virtual Output On the Reader Expander > Reader 1 tab - Set Reader 1 Arming Mode to Toggle Function Output on 3 Reads Set Reader 1 Function Output to v_TripleBadgeLock Reader Expander - Configuration Go to Automation > Programmable Functions and create Door_UnlockLatch  - Set Type to Door Control - Set Mode to Normal Programmable Function - General Under Door Control tab - Set Door Function Mode to 2 - Follow Pulse On Output - Set Door Control Mode to 1 - Latch Door Unlock - Set Output To Check to v_TripleBadgeLock - Set Door To Control to MainEntrance - Save changes - Right-click Door_UnlockLatch function and select Start Programmable Function - UnlockLatch - Door Control Go to Automation > Programmable Functions and create Door_UnlockLatch_Restore - Set Type to Door Control - Set Mode to Normal Under Door Control tab - Set Door Function Mode to 5 - Inverted Follow Pulse Off Output - Set Door Control Mode to 0 - Emulate Unlock Menu - Set Output To Check to v_TripleBadgeLock - Set Door To Control to MainEntrance - Save changes Right-click Door_UnlockLatch_Restore function and select Start Programmable Function - Unlatch - Door Control

Issue Third party system can handle up to 14 user credentials. Is there a limit to the number of Credential Types that can be created, and used, in Security Expert? Product Line EcoStruxure Security Expert Environment Security Expert Custom Card Formats Cause There are no noted limits in current documentation on how many Credential Types can be used. Resolution There is no known maximum to the number of Credential Types that can be created in Security Expert and applied to a User object, however; Limited testing has confirmed that two hundred (200) Credential Types were able to be created, added to a User, and then successfully downloaded to the Controller. This is a rough guide only. Results will vary depending on how many Users are being downloaded to each Controller and the number of Credentials each of those Users has applied.

Issue Events are not showing up with configured text and background colors after configuring the specific Event Types. Product Line EcoStruxure Security Expert Environment Security Expert Cause The Security Expert Data Service needs to be restarted after making changes to the Event Types. Resolution Navigate to Global | Event Types and change the display colors (background and /or text) for your required events. In the example below the operator login/logout events have been changed from the default colors to now be blue text on a yellow background. Note that you can click the column header to sort by name as well as use the search magnifying glass to filter the event list down to make it easier to find specific events. Figure 1 - Event Types After saving your Event Type changes either restart the PC or restart the Security Expert Data Service for your changes to take effect. Start up and log in to Security Expert Client to see the new event colors. Figure 2 - Example Status Page Events Figure 3 - Example Event Report Events

Issue 3rd party BACnet Gateway can be seen  and points found when performing "send to database" but the Life Safety points do not show up. Product Line Continuum BACnet Environment Andover Continuum, EcoStruxure Building Operation Cause We do not currently support the BACnet Life Safety objects with the Andover Continuum or EcoStruxure Building Operation product lines Resolution Use an object that we do support, either an AV (Analog Variable) or MV (Multistate Variable) would probably suffice as long as the 3rd party Gateway can provide this instead of the Life Safety objects. See our BACnet PICS statements at the link below that show what BACnet objects each of our products support. https://www.bacnetinternational.net/btl/index.php?m=20

  Issue When adding an onboard downstream device (Ex. LP1502) with 4 Engage wireless gateways installed the onboard downstream device shows as 'Unknown' and will not come online Product Line EcoStruxure Access Expert Environment Access Expert v3 Hosted Cause If the onboard downstream controller(Ex. LP1502 - onboard) was not being used prior to commissioning and addressing the Engage Gateways then it is likely there is an address conflict. Resolution Check all the downstream device addresses by going to Hardware Provisioning> Downstreams If one of the Engage addresses is 0 then it is likely conflicting with the onboard downstream controller's address 0. Go back through commissioning the Engage gateway devices and re-address them. Before After Once the gateway devices have been re-addressed not using address '0' they should all come online as well as the onboard downstream controller and it should not show as 'Unknown'.

Issue There are a number of object tabs that support the functionality of exporting to a CSV file. Can this CSV file then be used as a template and imported into another site? Product Line EcoStruxure Security Expert Environment Security Expert Cause Not sure how to import objects from CSV as a database creation tool. Resolution The export options are so you can export the required records to a file as part of site documentation, administration etc. There is no way to import anything other than users using a CSV file. A database backup that is already configured can be restored to a new system to be used as a site template. Another option for using the same configuration is the Copy Controller Feature. If you want to have multiple sites within a single Security Expert Server, take a bank for example where each branch is a separate site in the one server but configured pretty much the same, you could utilize the Copy Controller feature to copy all the programming from the template controller to a new one. Please note that although this feature currently exists within Security Expert it is currently being worked on by our engineers to improve its functionality.

Issue Seeing a pop up warning message when updating modules or making changes to an online Controller. “It has been detected that your programming contains links between controllers, but the firmware on one or more of these controllers does not support this. Therefore the manual command you are trying to perform may not behave as intended. Are you sure you wish to continue?” Figure1 - Pop up message Product Line EcoStruxure Security Expert Environment Security Expert Client SP-C Cause Configured Programmable Functions are trying to query the state of inputs on expander modules but this is failing due to one or all of the expander modules being offline. Resolution Bring all the expander modules online and the error message will no longer be seen.

Issue What bit formats are accepted by the Security Expert Controller (SP-C) for communicating with third-party card reader with pin? Product Line EcoStruxure Security Expert Environment Security Expert Server Security Expert Controller Cause When using pin pad readers with the Security Expert Controller there are only a few supported bit formats.  Resolution Only these following formats are support and tested with Security Expert at this time: 26 Bit (Site 0) ARK-501 4 Bit 4 Bit Parity 4 Bit Buf 4 Bit Buf & Par 36 Bit (IEI S0)

Issue What type(s) of 125 kHz proximity cards are supported by Security Expert Card Readers? How to configure Secure Expert to read an Indala card (125 kHz)? Product Line EcoStruxure Security Expert Environment Security Expert Smart Card Reader Cause Card readers work by modulating the electromagnetic wave in different ways to resolve between 1s and 0s. There are several different ways to bring card data across 125 kHz; ASK, FSK and PSK. ASK : Amplitude Shift Keying FSK : Frequency Shift Keying PSK : Phase Shift Keying Since the technology used is determined at the hardware level,  a reader would need to have the hardware to read a specific type. Security Expert 125 kHz readers make use of FSK only, which means that e.g. Indala cards (125 kHz PSK technology) will not work with them. Resolution Use FSK technology 125 kHz cards with Security Expert Smart Card Readers.

Issue Can HID iCLASS format cards be used with Security Expert card readers? Product Line EcoStruxure Security Expert Environment Security Expert HID iCLASS Cause iCLASS format is a proprietary card format. Resolution The iCLASS format is an exclusive card format for HID readers and will only work on HID readers and will not work with the current Security Expert readers.

Issue Require method on how to Arm and Disarm an Area by Triple Badging at the Door. Product Line EcoStruxure Security Expert Environment Security Expert Cause Require Door to be controlled by a Schedule but also to allow a valid User to override the Schedule with three consecutive valid badges. Resolution Required Objects virtual Output - Flag to control area status (v_TB_AreaArmedFlag) Area - Area to control (TB_Inside_Area) Programmable Function - Arms Area when virtual output ON (TB_Inside_Area_Arm_PF) Programmable Function - Disarms Area when virtual output OFF (TB_Inside_Area_Disarm_PF) Schedule - Operating hours of Area (TB_Schedule) Door - Door to control Area status (TB_Entrance_Door) Configuration Create virtual Output v_TB_AreaArmedFlag. Set Module Type to Output (PX) and Module Address and Module Output channel to ones that do not exist. virtual Output On the Reader Expander > Reader 1 tab - Set Reader 1 Arming Mode to Toggle Function Output on 3 Reads Set Reader 1 Function Output to v_TB_AreaArmedFlag Reader Expander - Configuration Under Reader Options section set Allow Reading Opened/Unlocked. Under Misc Options section set Allow Access When Area Armed Reader Expander - Misc Options On the Doors > General tab - Set Area Inside Door to to TB_Inside_Area - Set Unlock Schedule to Never Door - General On the Options tab under Door Options 2 section  - Set Door Lock Follows Inside Area Door - Options On the Area > Configuration tab under Schedule set Arm/Disarm Schedule to TB_Schedule Set Disarm Area When Schedule Starts Set Arm Area When Schedule Ends Area - General On Outputs tab set Armed Output to v_TB_AreaArmedFlag Area - Outputs Go to Automation > Programmable Functions and create TB_Inside_Area_Arm_PF - Set Type to Area Control - Set Mode to Normal Programmable Function - Arm - General Under Area Control tab - Set Area Function to 2 - Area Arms on Output Turning On - Set Output To Check to v_TB_AreaArmedFlag - Set Area To Control to TB_Inside_Area - Save changes - Right-click TB_Inside_Area_Arm_PF function and select Start Programmable Function - Arm - Area Control Go to Automation > Programmable Functions and create TB_Inside_Area_Disarm_PF - Set Type to Area Control - Set Mode to Normal Under Area Control tab - Set Area Function to 5 - Area Disarms on Output Turning Off - Set Output To Check to v_TB_AreaArmedFlag - Set Area To Control to TB_Inside_Area - Save changes Right-click TB_Inside_Area_Disarm_PF function and select Start Programmable Function - Disarm - Area Control

Issue An Operator with restricted access to the site needs the ability to run and configure Security Expert in Visitor Management System (VMS) mode. Product Line EcoStruxure Security Expert Environment Security Expert Visitor Management System Cause An Administrator Role is needed for the Operator that is going to be running Security Expert in VMS Mode. A more restricted Role is required for this but using anything other than Administrator results in Cards not being able to be issued to visitors. Resolution  1. Create a new Role with Preset set to "Administrator". 2. On the Tables tab change everything to "Deny" except for "Access Levels", "Card Template Editor" and "Users" - these should remain at "Grant Full Access". Figure 1 - Role Configuration 3. Create a new Operator and set the Role to the one you created in step 2 above. Figure 2 - Operator Roles 4. This new Operator will now be able to run the VMS and edit the settings for the VMS objects as required. 5. If required, the Role can further be locked down through the use of Security Levels and Record Groups. See application note Security Expert Security Levels - Multi Floor.pdf for details on this.  

Issue There are large jumps in Database ID numbers in the lists of objects in Security Expert. Most notably seen in the Trouble Inputs table. In the below example the Database ID's in the Trouble Input table jumped from 420 to 1424. Figure 1 - Database ID's Product Line EcoStruxure Security Expert Environment Security Expert Server Security Expert Client Cause This is a rare occurrence but when seen can be due to the creation and deletion of Controllers and Expanders as a site is being configured or just normal operation as SQL maintains the Security Expert database. Resolution No action required. This is a benign condition which does not affect the normal operation of Security Expert.

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support Services for assistance. Issue Require a method on how to apply individual setpoints in EBO when Users are granted access at a Security Expert  Door. Product Line EcoStruxure Security Expert, EcoStruxure Building Operation Environment Security Expert EcoStruxure Building Operation Cause An example of this would be to have room temperature setpoints, or other specific settings, be changed when specific Users are granted access to a room or area. One method on how to do this would be to create a separate Access Level and Access Level Output for each user. When the User with that Access Level is granted access the associated output will be enabled. Using the EWS integration, the states of these virtual outputs can then be monitored within EBO and action were taken when they change state. Resolution Perform the following steps to configure this: Create an Access Level for each User object. Create a virtual output for each User object. A virtual output is an output object that is not assigned to an output expanders physical outputs. You could create outputs on existing expanders above the maximum output channel that you will be using but it is recommended putting these virtual outputs on a completely different module address outside the range that will be used for any physical modules. Module address = 32 would be a recommended starting value. Steps would be: Under Programming | Outputs create three new outputs. Set Module Type to "Output (PX)" Set module address to "32" or greater. Set Module Output to "1", "2", "3", etc... Save the changes. For each of the Access Levels add the corresponding virtual output to the Access Levels Output tab. Access Level Outputs Ensure the Access Level has access to the Door(s) in question. Set the Time to Activate (seconds) in the Access Level | General tab to something appropriate such as 5s. The output will disable after this time period. Set the Reader Access Activates Output on the Access Level. Set Activate Access Level Output on the Reader Expander | Misc Options.    

Issue Is it possible to override interlocked doors with a user card? Product Line EcoStruxure Security Expert Environment Security Expert Door interlocking Cause Require an option to allow specific users to access through locked down interlocked doors. The "User has Super Rights" option in the User record seems to provide this since it notes that one of the permissions this option provides is to "Unlock doors that have been locked down". user has super rights Resolution Unfortunately the User has Super Rights option does not work in this scenario. The option was never designed to work with interlocked doors.  To request for this feature to be implemented, a new feature request can be made with your local solution category management team.

Issue How to subscribe to a topic in Azure IoT hub via MQTT protocol. Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Automation Server Premium Building Operation Automation Server Bundled Building Operation Edge Server Cause Need to configure EBO MQTT interface and Azure IoT Hub, so EBO can subscribe to MQTT messages from Azure MQTT IOT Hub. Resolution The following video will illustrate how to: Create IoT interface and Azure MQTT client in EBO Configure the MQTT connection Create and configure MQTT data values Create and configure a data group Configure the subscription parameters Test the connection Things you need: EBO 2022 or later with valid MQTT license or demo license (Enterprise Server, AS-P or AS-B) valid Azure Subscription with possibility to use free account during testing. For each Azure subscription one IoT hub in the free tier can be created, refer to IoT Hub | Microsoft Azure Visual studio code to be used to test the connection between EBO and Azure IoT hub, can be download from: Visual Studio Code

Issue How can I watch live events for a single door   Product Line EcoStruxure Security Expert Environment Security Expert Client Cause The All Events Status Page may be too busy to focus on just one door when troubleshooting or commissioning.  Resolution A Floor Plan can be used to create a Live Status Window for one door. Go to MONITORING >> SETUP >> FLOOR PLAN EDITOR. Click ADD. Name it and click OK. Click Devices in the Properties window. Click Add. Select Door in the drop-down. Find the door you want. Click on it and drag it to the floor plan (placing near the top is better). Add Text if you want. Save. Go to MONITORING>> FLOOR PLAN VIEW and select the floor plan you just created. Note that it automatically adds the filtered Floor Plan Events for that door at the bottom and the Status List for the door in the upper right. All three of these will be updated in real time. 

Issue Tips for Configuring HID OSDP Reader LED Colors Product Line EcoStruxure Security Expert Environment EcoStruxure Security Expert OSDP Reader Cause Additional tips for configuring OSDP Reader LED Colors Resolution The Configuring LED Colors section of AN-254 Configuring OSDP Readers in Security Expert  details the basic steps for LED configuration. This article details some additional areas of the HID reader setup and Security Expert configuration that may be useful when configuring the LED colors.   Note: The steps in this article are specific to an HID Signo RP10 Reader BLE and may not apply to other HID reader models or other brands of OSDP readers.   Upgrade the Reader firmware to the latest version. Earlier versions of the reader firmware would not correctly allow LED control. The Bluetooth option allows the configuration of the reader using the HID Reader Manager App. For detailed information see HID Reader Manager App Information Note: To use the HID Reader Manager App to configure a reader, the Security Technician or Security Installer needs to create and register an account with HID. The Reader Manager Administrator for your organization or company needs to enroll this new account using the Reader Manager Service and issue an invitation code and key authorization for this and other readers. The Security Technician can then verify the key authorization has been received in the HID Reader Manager app. Detailed instructions for all of this are included in the HID Reader Manager App Information URL listed above.   HID Reader Manager App Firmware snapshots       In the HID Reader Manager App, change the Reader Options for LED color to "Host Controlled" in 2 places. The reader must be controlled by the Security Expert controller. Credential Reader AV LED Idle Color Ensure that the firmware for the following hardware is upgraded to these versions or greater in order for LED Color Output to work. Security Expert 4.3.308.46 SP-C 2.08.1234 MRDM2 1.2.590 In Security Expert the Outputs to control the LEDs need to be manually created. Programming> Outputs> Add A pop-up asking to Invert Output will display, select 'No' when prompted Output 3 (GreenLED Port 1) Output 4 (Red LED Port 1) Output 6 (Green LED Port 2) Output 7 (Red LED Port 2)   Name the Outputs whatever is appropriate Example:  GreenLEDPortON RedLEDPortOff LED Colors The default LEDs are Blue when Idle and Green when active. As an example, the LED colors will be changed to Red when Idle and Green when Active. Color Options:   Set the colors for both Red(idle) and Green(active) in the Security Expert Output Command Window for the newly created outputs RedLEDPortOff   GreenLEDPortOn Update the modules and wait for about 15 seconds before activating the output to test. Just saving the updated command setting doesn't work, the module must be updated.   Activate the GreenLEDPort1 - the color should change to what the output was set to in the command. In this case, green. Deactivate goes back to Off (idle) Red. GreenLEDPort1 = On State RedLEDPort1 = Off State   Note: The Off state if left at the default of Blue can't be used with the On state of custom(non-default). Both Outputs must be specified in the command window for the colors to work together.   Example: If the OFF state is left at the default of blue and the color of the ON state is set in the command window and Activated, the LED color will change to what it is set to(green), but when deactivating the Off(idle) output it will not turn blue.

  Issue Access Expert Exceptions for specific dates using holiday durations with an example Product Line EcoStruxure Access Expert Environment Access Expert Hosted V3 Cause Instructions with an example are needed to allow exceptions to the standard schedule for specific dates and times Resolution At times it's necessary to have schedule exceptions for meetings or other reasons where the date, day, and time need to be specified outside of the standard 8-5 schedule.   In order to configure this within Access Expert use the following method: Verify the main schedule and check the days and times  Note: Adding a schedule duration(interval) to the main schedule allows exceptions to be added however, they will not be specific to a date. The interval add will be for whatever days are selected going forward. For example, All Monday or all Tuesdays in the future for the time specified.   The above schedule works normally from 8AM - 3:45PM and for all Thursdays going forward the door will unlock from 4PM - 4:05PM To specify a specific date and time for an exception to the main schedule an additional schedule and a holiday group is needed. Create another schedule in addition to the standard schedule with the days and times needed. Example: Wed7-19 & Th7-20 Council (Council Meeting 6-7p) From the Access Configuration tab, select Holidays and create a holiday for the specific date(s) needed (Start and End Dates) and select the checkbox for Special Date Example: 7/19 and 7/20/23 Council Meeting Select the Edit Holiday Group Names button and select one of the default groups and edit the name to be descriptive then Save. From the Holiday Group Membership drop-down select the newly added Group just renamed and click Ok and then Save Note: The exception schedule will not work unless a Holiday Group has been added Go back to the new schedule that was created earlier and select the drop-down under Always Active On. Select the checkbox next to the Holiday just created and Click OK then Save. A completed schedule with Wednesday and Thursday exceptions that have 7-19 & 7/20/23 specified as holiday durations. This will unlock the door during the normal schedule 8-5p Lock the door from 5-6p Unlock the door from 6-7p for Wednesday and Thursday 7/19/23 and 7/20/23 Lock the door at 7p for Wednesday and Thursday 7/19/23 and 7/20/23   The holiday exception locked at 4:05p up until 6p The holiday exception schedule locked the door at 6p