Building Automation Knowledge Base

Issue Binding to a Graphic, what is the correct method? Product Line EcoStruxure Building Operation Environment Bindings Graphics Cause In the chapter "Binding Templates - Binding Values Using a Binding Template" in the "EcoStruxure Building Operation - Technical Reference Guide" it states "When creating bindings, follow the recommended general guidelines: create binding between Inputs and Outputs only, and do not create binding to Public Signals". Does that mean that you should not bind constants used in e.g. curve block or time delays or outputs from expression blocks to a graphic? Does that mean that you should not bind constants used in e.g. curve block or time delays or outputs from expression blocks to a graphic? Resolution Bindings from public signals to graphics is appropriate. When dealing with directional bindings (i.e. in from a schedule, out to an alarm, in from or out to another program, etc.), it's best to bind to input blocks or output blocks.  Graphics bindings are a different animal, though.  Among other things, they are bi-directional and only affect the system when the graphic is displayed.  They also exist to give the user access and control to values throughout the system (rather than to control routine data flow). Our primary reason for communicating this best practice is to help with the binding process.  Programs will operate with un-bound points, but we're encouraging users to simplify the binding process by relying on just inputs and outputs to interconnect a program with other logic and alarms.  In this way, you can visually scan the list of inputs and outputs to see which points still need to be bound. Since most programs typically have a much longer list of public signals, it's easier to overlook a missed public signal binding. Missed graphics bindings should be easier to catch but bindings to another program or alarm may be difficult to identify.

Issue Memory and System Memory in the AS Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Automation Server Premium Building Operation Automation Server Bundled Cause What is the definition of the two different memory types shown in the AS? It is not clearly defined in the documentation. In various places, one can see Memory and System Memory, or even add a column to show.  Resolution For the AS, System Memory is the RAM used by the AS Linux OS. The rest of the memory is what is being used for the processes, such as programs, trends, etc. Memory is the amount of memory consumed by the AS (nsp_servers application), system memory is that used by the Linux OS, however there is much debate about how this is calculated and allocated, so too much should not be read into this, it is there primarily for developers.

Issue Building Operation Server backup set is incompatible for restore. "Importing Backup Set" "Backup set is of a different server type" Product Line EcoStruxure Building Operation Environment Automation server (AS) Enterprise server (ES)  Cause The backup set is for a different server type (version). Determine the server type from the .xbk file to determine which server version will allow a restore. Resolution The quickest method is to run the following tool SBO xbk Analyzer - Communities (se.com) and open the backup (xbk).  It will identify the  File name Controller Type Version / Serial Number Time and type of backup.  i.e., Contents. Config only, Events and Trends, etc. And much more.  See the link above or the Help topic on the tool for further information   Alternative methods are provided below:    The backup set contains information in the compressed .xbk file that can be retrieved this way ... Make a copy of the backup set as a precaution for safety reasons On the copy, for AS change the file extension from .xbk to .zip. For ES change to .tar Use a tool such as 7zip to decompress the file Look for a file by the name x.x.x.xxxx.serverrevision (i.e. 1.3.0.4602.serverrevision) This is the revision that the backup set was created at.    The Backup set can only be restored into a server running this revision.   Look for a file by the name xxxxxxxx-xxxxxx.backuptime This is the date/time when the backup set was created.   Look for a file by the name Automation/Enterprise.servertype This indicates whether the backup set is for AS or ES   Look for a file by the name xxxxxxxxxxxxx.servername This is the name of the server when the backup set was created     Version 1.5 and above There is a file by the name TDxxxxxxxxx.serverserialnr This is the Serial Number of the server.  

Issue The port range used by the Project Configuration Tool is unclear Product Line EcoStruxure Building Operation Environment Project Configuration Tool Cause The ports used by PCT are located in different documents Resolution • TCP on port 4444 (fixed) • HTTP on port 80 (default) • HTTPS on port 443 (default) • Server port 9091 (default) • Server port 9090 (default) • Engineering port 32768-61000

Issue Automation Server has license violation although correct embedded license is activated. ASBaseLicenseStatus has license violation status "inform"   Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Building Operation Automation Server Premium Building Operation Automation Server Bundled Building Operation Edge Server - Standard Cause Adjusting the Automation Server time and date to an earlier time, ex. prior to license activation time, causes license violation. Resolution Make sure that Automation Server has correct date, time and timezone or configure the Automation Server to synchronize its clock with a network time server, refer to: Time and Time Zone Configuration in Automation Server.

Issue When trying to open WorkPlace Tech Editor the following error is shown in a pop-up window.   The following error occurred while trying to launch the WorkPlace Tech Ribbon Bar: The add-in could not be installed. Product Line EcoStruxure Building Operation, TAC IA Series Environment Building Operation Workstation (Workplace Tech Editor) I/A Series WorkPlace Tech Cause An installation of the Visio Ribbon has not closed correctly from previous use of WorkPlace Tech Editor or standalone WorkPlace Tech. Resolution Open the Add and Remove function in Windows Select "Program and Feature" Look for an instance of the SE.WorkStation.IA.VisioRibbon when no WorkPlace Tech Editor is running. Right-click and uninstall. Open Workstation and launch WorkPlace Tech Editor  There are other conditions that can cause the ribbon not to run as well.  They are detailed in other articles Similar Error Message Regarding Ribbon Bar  Unable to Load Ribbon 

Issue Getting "An unknown error occurred in the WP4NewProject add-on to Workplace Tech Tool" when trying to download to a device with WorkPlace Tech. Product Line TAC IA Series Environment I/A Series WorkPlace Tech Microsoft Visio (versions noted) Cause Need to enable automation events in Visio. Resolution Below are two options to enable the automation events in Vision 2007 and one option to enable the automation events in Visio 2010 and newer In WorkPlace Tech with Visio 2007: Go to File menu Select Options.  The Visio Options window appears Select Security tab Check the "Enable Automation Events" Click OK Inside Visio 2007: Select Tools and Options. Tools and Options window appears In the Options window, select the Security tab Check the "Enable Automation Events" Click OK In WorkPlace Tech with Visio 2010 through Visio 2021 Go to File menu Select Visio Options. Options window appears Select Advanced from the menu on the left side of the window In the main part of the window, scroll to the "General" section Check the "Enable Automation Events" Click OK   NOTE: This change does not take effect until the WorkPlace Tech Tool or Visio software has been closed and restarted.

Issue The "Display on alarm" feature for the Alarm view object does not display when the Alarm is triggered. This occurs even though the checkbox is checked, as shown below.    Product Line EcoStruxure Building Operation Environment Building Operation Workstation Cause When the user is logged in with a Workspace view that does not show any Alarm viewers, no alarms are presented to the Workspace; hence the "Display on alarm" function does not load.  This is as intended. An example of this type of Workspace would be the Administration Workspace which presents no alarms to the user while they are using this Workspace. Resolution For the Alarm view to "Display on alarm", it is necessary to add the Alarm Pane to the Workspace (as shown below) or use a Workspace view with the Alarm Pane included.  

Issue Which Continuum controllers support a terminal RS-232 interface using a terminal emulation application such as Hyper Terminal? Product Line Andover Continuum Environment HyperTerminal CX9900 CX9940 CX9200 CX9400 Cause Documentation Resolution ONLY the following range of controllers support a terminal interface. CX99xx CX92xx CX94xx Please consult Logging into CX9900 controller using HyperTerminal for additional information.

Issue When swiping / presenting a card to a Wiegand card reader in Continuum it does not open the door..  When opening a Listview of Events the log shows "Card Bad Parity" or it reads an incorrect card number using Custom Wiegand. Product Line Andover Continuum Environment CyberStation all versions, with any of the Access Controllers - ACX700, ACX780, ACX57xx, NetControllers with any of the AC1 module range. Cause This fault is caused by incorrect wiring to the reader or choice of a 3rd party reader that is not compatible with Continuum. Resolution When wiring between a controller and a Wiegand card reader, all wires must be connected straight through to the corresponding terminal. Data1 to Data1 Data0 to Data0, Gnd to Gnd ..............etc. See relevant controller installation guide for further details on reader wiring and cable types. On HID readers be sure to wire between the two Data 1 terminals and the two Data 0 terminals. Do not refer to the Clock and Data legend that is also on the controllers and many readers, as this is only used for ABA data connections. When using a separate Power supply for the reader, the 0V (Ground) terminal must still be connected back to the controller GND terminal to ensure both devices are working from a common ground potential. When testing out cards and readers always use a Listview showing a relevant Event log, as this will provide more information than the event view from the Door editor itself. To assist with troubleshooting data reads by the controller especially when using Custom Wiegand for non standard Continuum formats: Select only Custom Wiegand in the Door configuration. Rename the "AccessFormat" array if one has been created. Present a card to the reader. Check the Listview for Events as this will show the raw binary data string the controller is receiving. Compare raw binary data against the expected data from the reader used.

Issue During communication issues with a Continuum BACnet controller, a large amount of the following error messages are seen in the controllers' error log. 0x8000001e 0x00236400 0x08023a50 0x4c000000 0x00000000 BACnet request timeout 0x00001408 0x0023a600 0x080af632 0x000000bc 0x00000284 Not enough memory Product Line Andover Continuum Environment BACnet Controllers Cause Most likely due to incorrect configuration or excessive BACnet traffic..... or both. Resolution Check the following: What is the version of Controller Firmware being used in each controller? This needs to be checked against the Continuum Compatibility Matrix to ensure that it is compliant with the version of Continuum being used on the SQL Server Are BBMDs configured on this site? If so, where are they located and how are they configured? Confirm the "maxinfoframes" value currently set for all controllers. By default, a bCX for example should be set to 8 By default, b3 controller should be set to 2. If these are different from the default then why this has been changed? Confirm the BACtMaxMaster value in each is set to the maximum b3 NodeID + 1. This defaults to 127 but can cause comms delays on a smaller network. Confirm that all controllers on the MSTP are configured for the same Baud Rate. Any talking at a different baud rate would seem like noise on the network and disrupt communications, resulting in many 1408 error messages. Check the COV increment on points. The default of 0 can cause too much traffic on the bus and should never be left at Zero

Issue Replacement for defective controller is unable to be brought online in Security Expert. The online status is offline and last download shows as failed. controller status A review of the event server diagnostic window shows it is full of "Unencrypted event packet received" messages. event server diagnostics window Product Line EcoStruxure Security Expert Environment Security Expert Client Security Expert controller (SP-C, SP-AC1, SP-ACX) Cause The previous failed controller had been setup for encrypted communications with the Security Expert server. Since the newly installed replacement controller did not have the encryption keys to be able to decode the packets from the server it was not able to be brought online. Resolution On the controllers Configuration tab press the Disable controller encryption, then Yes to confirm. Wait for communications to be established with the controller, review the controller health status and update any modules that require it. To re-initialize encrypted communications with the controller press the Initialize controller encryption button to establish a new encryption key with the new controller. controller encryption buttons

Issue Troubleshoot Security Expert Controllers showing offline in the client. Product Line EcoStruxure Security Expert Environment Security Expert Cause Require some common troubleshooting steps to help determine why controllers may be offline to the client. Resolution The main items to check are: Refer to the Troubleshooting Security Expert Controller Connectivity - Application Note on Exchange. If a controller has failed and the Replacement controller unable to be brought online then check if controller encryption had been enabled on the replaced controller. Restart the client software. Power restart the controller. Remove power Wait for all LED's on the controller to go completely off Apply power to the controller. In the controller web interface, on the Settings page, check that Event Server 1 has the correct IP address. Check that the Firewall is disabled. Check any Anti-Virus Firewalls/settings as well. If the Firewall cannot be disabled, ensure that all required ports are open between devices. See SX-SRVR Security Expert - Network Administrators - Installation Guide for details. Restart the Security Expert services under the PC's Services option in Control Panel. These need to be restarted when any changes are made. Confirm that the User Interface, Data Server, Event Server and Download Server module versions are all the same. Go to About  > Version and check there. If the database has not been upgraded to the same version as the client software, then this can cause communications issues. On the Security Expert Server check that MSMQ is installed as this is now a requirement   Security Expert MSMQ is required (Not showing live point status / shows "Unknown Status" error)   If MSMQ was installed after Security Expert, you'd need to reinstall Security Expert to allow it to run correctly. If MSMQ is installed and controllers are still not coming online (or the controllers are "bouncing" offline/online) then anecdotal evidence suggests enabling Windows 8 Compatibility Mode may help especially for Windows Server 2016 and Server 2019. Set the Windows 8 Compatibility Mode checkbox in the Properties page for C:\Program Files (x86)\Schneider Electric\Security Expert\SecurityExpertEvtSvr.exe   Also, note that if a database backup has been imported, then there is a need to check/change some other settings as well to ensure everything is set up for the specific server and controller.   Under Global > Download Server confirm that your computer name is the name of the PC where the download server service is running. Under Global > Event Servers ensure that the computer name is the name of the PC where the event server service is running. Under Sites > Controllers confirm the Serial number, IP Address, Download Port, Download Server and Control and Status Request Port match what is set in the controller's configuration web page (browse to the controllers IP Address to view). On that same General tab go to Diagnostic Windows and open the download and event server windows. Review the information contained and if there are any errors shown. Right click the controller and select Get Health Status. Review the status messages displayed.

Issue How does the controller determine which workstation will log the alarm into the SQL database when using "Enhanced Alarm logging"? Product Line Andover Continuum Environment Workstation Enhanced Alarm Logging Cause Alarms will be delivered by a NetController to all Workstations that have Ids between 191 and 254 assuming a teach was done. The first Workstation to receive the Alarm will log it in the Database. There is a ratcheting algorithm that is used by the NetController to determine which Workstation will be the first one to receive Alarms. In many applications, it is necessary to control which workstation will be the first to receive the alarm and log it in the Database. Knowing how the algorithm works provides the ability to design a system with a designated alarm logging workstation. Resolution The algorithm is as follows: The Netcontroller will take its own AccNetid and mask it with 63 stripping off the 2 high bits of its id leaving a result in the range of 1 to 63. Further explanation of the binary masking: NetControllers with Ids between 1 and 63, result is their ID. NetControllers with Ids between 64 and 127, result is their ID - 64 (ID range of 0 to 63). NetControllers with Ids between 128 and 190, result is their ID - 128 (ID range of 0 to 62). That result is then added to 190 and that is the ID of the first Workstation to get the Alarm and Log it in the Database. If there is not a Workstation with that ID (or the workstation with that ID is offline), the NetController will send the alarm to the Workstation with the next highest ID above the one calculated by the ratcheting algorithm. If none of the Workstation Ids are higher than the one calculated, the routine will loop around and use the lowest Workstation ID to send to the first. Example 1: NC1, id1 NC2, id2 NC3, id3 WS1, id191 WS2, id192 WS3, id193 Result of ratcheting routine: NC1 sends to WS1 first NC2 sends to WS2 first NC3 sends to WS3 first Example 2: NC1, id1 1+190=191 NC2, id2 2+190=192 NC3, id3 3+190+193 WS1, id201 WS2, id202 WS3, id203 Result of ratcheting routine: NC1 sends to WS1 first NC2 sends to WS1 first NC3 sends to WS1 first Example 3: NC1, id101 101-64=37, 37+190=227 NC2, id102 102-64=38, 38+190=228 NC3, id103 103-64=39, 39+190=229 WS1, id191 WS2, id192 WS3, id193 Result of ratcheting routine: NC1 sends to WS1 first NC2 sends to WS1 first NC3 sends to WS1 first

Issue When attempting to log into a server, the error message "Failed to establish connection with server" appears. Product Line EcoStruxure Building Operation Environment Building Operation Workstation Building Operation Servers Cause WorkStation is unable to make a connection to the desired server for one of several reasons. Resolution Unable to log into the Enterprise Server Verify that the Enterprise Server is running Go to Start Software Administrator Verify that the Server Status is Running. If it is stopped, then click the Start Service button, and click OK. Log into the server through Workstation. Lockout after restoring a backup set If an enterprise server backup set has just been restored, it may take several minutes for the server to return online, depending on the database size. Wait for the server to come back online and try logging in again. Unable to log into the Automation Server Verify the Ethernet connection Go to Run > cmd. Ping the IP address of the automation server. If it fails to communicate to the controller, verify that the ethernet connections are good and that there are no IT issues. Lockout after restoring a backup set If an automation server backup set has just been restored, it may take several minutes for the server to return online, depending on the database size. Wait for the server to come back online and try logging in again. Verify the IP address Go to Device Administrator  Connect to the Automation Server with a USB cable. Select the automation server once it is visible in the Device Administrator window and click on its name. Note: If the device indicates "Password Required," - Login into the automation server (default login is admin, and password is admin). Once the details open - Select the Ethernet 1 Configuration option and verify or enter the IP address details. After applying the information, enter this IP Address in WorkStation "Server" option to log on.  For further troubleshooting help see the following online help topic: Failed to Establish Connection

Issue The following record is seen in trace logs of EBO servers that have a BACnet Interface:   nsp.pin.BACnet.VariableProperty PollingVariableProperty: variable is a zomby!! Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Automation Server Building Operation Edge Server Cause A zomby variable is the BACnet plugin coming across an object that will be deleted but has not yet. Resolution No further action is required.

Issue Connected to a remote site network via WorkPlace Tech and a VPN connection, but unable to see the sites BACnet devices. No I/A Series MNB-1000s, or any 3rd Party BACnet devices, are found in Workplace Tech or the Commissioning Tool. Product Line TAC I/A Series Environment MNB-1000 WorkPlace Tech (all versions) Cause The VPN does place the connecting WorkPlace Tech PC on the site network, but the BACnet/IP (MNB-1000 and 3rd Party) devices are on a different subnet then the subnet assigned to the WorkPlace Tech PC. Resolution When BACnet/IP devices are on different subnets, BBMD must be used in order for the BACnet/IP devices to communicate across IP subnets. Only one BACnet/IP device can be enabled as BBMD per subnet.   Setup the MNB-1000 as a BBMD device using the Commissioning Tool Open Device Properties of the MNB-1000 controller and select the IP tab. For Device Type select BBMD and save change. Setup WorkPlace Tech to connect to the BBMD device Select Tool from the WPT Select Configure Communication… Select BACnet and click on Change Select IP and click next Select Access a remote internetwork. For Host BBMD Address, enter the IP address of the MNB-1000 which was setup as a BBMD device. Click the Finish button to save changes. You should now be able to see and connect to the I/A Series and 3rd Party BACnet devices using WorkPlace Tech.

Issue All inputs on an Continuum Infinet controller read 999.99 when viewing the electrical value "elecvalue" Product Line Andover Continuum Environment Infinet Controller Cause This indicates that the internal voltage reference is "out of range". Resolution Verify that inputs coming from external transducers are not exceeding the voltage input range, either 5 or 10 volts depending on model, if so use a voltage divider on the input.  Verify that any input wiring is not run in the same conduit as high voltage cable, or is properly shielded and grounded.  If there is voltage getting coupled into the input wiring, separate the input wiring from the interference, or shield the cables.  If the interference is being caused by the end device such as an auxiliary contact from a high voltage device, a cap between .01 and 1 microfarads across the input terminal to earth ground may alleviate the problem. Remove field I/O wiring from the controller and recheck operation.  If the problem goes away determine which I/O wire is the culprit and correct it. Power down the Infinet controller and restart while connected to network.  This will eliminate this unit having a duplicate ID on the network and it will also run the power up diagnostics.  Verify proper grounding at the Infinet controller on the AC power terminals, poor grounding can cause erratic operation and communication problems.  The easiest method to verify ground is to connect a digital voltmeter between the earth ground terminal on the powerstrip of the controller and the shield of the Infinet.  This method will only work if you have connected your shields all through the network back to the Infilink and CX controller. Lastly, a board or controller replacement may be necessary

Issue There is a requirement to change the WebReport server name. Product Line EcoStruxure Building Operation Environment Building Operation Report Server Building Operation WebReports SQL Server Cause Changing the WebReports server name after the WebReports software has been installed, does not change the PC name references in the WebReports or the database. Resolution If possible, ensure that the PC name will not need to be changed after the PC has been configured for WebReports. If having configured a PC for WebReports, the PC name has to be changed, then backup all SQL data first then uninstall the WebReports software, ensuring that the following process is followed step by step. Below is an overview of the uninstall process, the exact details are shown in section 15.11 of the WebReports Reference Guide. 15.11 Uninstalling WebReports Complete the following tasks to uninstall WebReports and the WebReports database: Uninstall the WebReports application and services using Windows Control Panel Delete the WebReports database using Microsoft SQL Server Management Studio Delete the WebReports reports using SQL Server Reporting Services Report Manager Remove the virtual directories for WebReports and the WebReports service using Internet Information Services (IIS) Manager Remove the WebReports application pools using the Internet Information Services (IIS) Manager Delete the appuser and IUSR accounts (if they exist) using SQL Server Reporting Services Report Manager, Microsoft SQL Server Management Studio, and Windows Computer Manager. Please note that having uninstalled the WebReports software, follow the steps shown on the following Microsoft website: Rename a computer that hosts a stand-alone instance of SQL Server - SQL Server If this procedure fails then SQL Server should also be reinstalled after having changed the PC name first.

Issue When trying to create or update a Security Expert database the error 'Invalid Database Server is displayed Product Line EcoStruxure Security Expert  Environment EcoStruxure Security Expert  Microsoft SQL Server Cause The path to the SQL Server from the Client is incorrect or inaccessible and will not resolve Resolution There are a number of resolutions to this issue depending on the cause. This article mainly focuses on a configuration where the Security Expert and Microsoft SQL Server are on separate PCs. The error can happen locally also but is less likely. One or more of these resolutions may be required to fix the issue. 1. The Server / Instance name is incorrect when typing it into the Database Server dialogue box during installation. (Local SQL Server) Default Database Server Dialog Box    There can be some confusion on what to enter into the dialogue box because, by default, the instance name and the main database name are the same. Ex. Server Name\Instance Name    Database       localhost\SecurityExpert            Security Expert   (Remote SQL Server) Ex. Server Name\Instance Name    Database       SVR19SQL19\SecurityExpert     Security Expert Note: If just the ServerName SVR19SQL19 or SVR19SQL19\SecurityExpert\Security Expert The Invalid Database Server error would occur   Copy and Paste the Server and Instance Names using SQL Management Studio (SMSS) This method can help to avoid typing errors Install SMSS on the same PC that has Security Expert Installed or use SMSS on the SQL server with Remote Desktop From the Connect to Server dialog> Server name, select <browse for more...> Select Network Server and then select the remote SQL server and click OK Right Click> Copy on the blue highlighted server name and instance Paste into the Security Expert Database Server Dialog box   For a detailed description of Instanced and Database, click on the following link Microsoft Database and Instance Article  Note: Try using the IP address instead of the SQL server name. 2. Make sure SQL Server Service is running on the remote SQL server 3. If using a named instance, make sure the SQL Server Browser Service is running on the remote SQL Server 4. Ensure Firewalls have an open port for SQL server (default 1433) 5. Make sure the SQL Server is configured to allow remote connections 6. The Windows account being used to do the Security Expert Installation must have access to create the database on the remote SQL Server.  7. Check the Windows Application and System logs on the Security Expert and SQL Server for errors related to the Security Expert Install, DNS or Connection errors 8. Examine the SQL Server Log for error messages   Ex. If Active Directory is being used, the error “The SQL Server Network Interface library could not register the       Service Principal Name (SPN)” This issue can be fixed by giving the domain account the appropriate permissions in Active Directory. Permissions required are:  ServicePrincipalName: Read  ServicePrincipalName: Write   Log in to the server running your Active Directory service and execute the following steps: Run Adsiedit.msc In the ADSI Edit snap-in, expand Domain [YourDomainName], expand DC= RootDomainName, expand CN=Users, right-click CN= [YourAccountName, and then click Properties. In the CN= AccountName Properties dialog box, click the Security tab. On the Security tab, click Advanced. In the Advanced Security Settings dialog box, select one (any) of "SELF"'s row Click Edit, Open Permission Entry dialog box. Make sure the Principal is "SELF", Type is "Allow" and "Applied to" is "This Object Only", in the Properties section, select the properties below: Read servicePrincipalName Write servicePrincipalName Click OK to apply all changes and exit the ADSI Edit snap-in Finally, you need to restart the SQL Service(s) that use the account in question.   9. If you are still unable to get passed the "Invalid Database Server' error, please open a case with Technical Support.