Building Automation Knowledge Base

Issue In an environment where the Security Expert database is installed on a remote SQL server (i.e. not on the same machine as the one where Security Expert Server is installed), can I use SQL Authentication for the connection between SX and SQL Server? Product Line EcoStruxure Security Expert Environment Security Expert Server Cause SQL Server supports two authentication methods: Windows Authentication and SQL Authentication. Security Expert supports Windows Authentication only. Resolution No, Security Expert does not support SQL Authentication. You must use Windows Authentication, i.e. a domain user account must be setup with permissions both to the machine where SX Server is installed and the one where the SX databases are installed. Please refer to the SX-SRVR Security Expert - Client Server - Installation Guide for more information on the installation pre-requisites. See also KB article Security Expert Multiple Machine Installation for Windows Authentication with Active Directory for further information on how to setup SQL Server and SX on different machines.

Issue Missing Admin user password for the Loytec L-Gate Universal Gateway or LIP router. Product Line TAC Vista Environment L-Gate Universal Gateway LIP Cause Forgot the default admin password. Resolution The default login for L-Gate and the NEW style LIP (blue-grey in color) is: Username: admin Password: loytec4u The default login for OLD style LIP (off-white in color) is: Username: admin Password: admin

Issue What is the maximum number of devices that can be placed on the MS/TP trunk of the ENC-520, UNC-520 and MNB-1000? Product Line TAC IA Series Environment Niagara R2 Niagara G3 UNC-520 ENC-520 MNB-1000 Cause Unit Load is a measure of the electrical loading of an EIA-485 (MS/TP) network. An EIA-485 network may have 32 unit loads. One unit load consists of one full-load transceiver, two half-load transceivers, four quarter-load transceivers, or eight eighth-load transceivers. Resolution All MNB-xxxx, UNC-xxx, and ENC-xxx devices use quarter load transceivers, which mean that a MS/TP network comprised solely of MNB devices can have up to 128 total devices (1 router plus 127 controllers). The maximum number of BACnet devices allowed per MS/TP trunk, if all devices are quarter-load transceiver, is 127 plus the ENC/UNC or MNB-1000 controller. Note: 32 unit loads times 4 transceivers per unit load equals 128 maximum transceivers per network (32 X 4 = 128). UNC/ENC Resource Limit Although the 128 BACnet devices is the stated maximum for a MS/TP trunk, this maximum is normally not achieved. This is because the number of MS/TP devices that can be placed on a MS/TP bus is limited by the resource limit of the UNC/ENC controller. A shortage of resources will limit the devices on an MS/TP network to a number less than the physical limit. Exceeding the resource limit will negatively affect the UNC/ENC-520s, possibly causing poor performance and resets (of the UNC/ENCs). Reference Appendix A of BACnet Wiring and Networking Practices Guide for additional information.

Issue What are the fields in the FIPS-201 PIV FASC-N? Product Line Andover Continuum Environment CyberStation NC2 (9680) ACX2 (ACX5720, ACX5740) Cause Documentation Resolution The Federal Agency Smart Credential Number (FASC-N) consists of 40 total characters encoded as Packed Binary Coded Decimal (BCD) format with odd parity creating a 200 bit (25 byte) record.

Issue When a Netcontroller is powered off, resets or loses communication to the AC-1 IOU modules, the modules become stand alone. Product Line Andover Continuum Environment Netcontroller II (CX9680), Netcontroller (CX9900, CX9940) IOU Modules AC-1, AC-1A, AC-1Plus Custom Wiegand Events Cause Need to understand what functionality AC-1 IOU modules provide without a Netcontroller Resolution If using one of the standard Wiegand data formats i.e. Continuum 37 bit, 26 bit etc then the AC-1 module will operate in site code only: This is known as degrade mode and means any card from that site will be granted access to the door. The module verifies the presented card is of the correct data format and has the correct parity, The module checks the site code against one of the 4 possible site codes stored in NVRAM. The AC1 and AC-1A only support the first two site codes in degrade mode. The AC-1Plus can support all four site codes in degrade mode. There is no recording of events when the Netcontroller comms are lost. Programs that are controlling the module no longer work This is different to normal operation where both the card number and the site code are verified to ensure that the individual person has access to the specific area.   When using custom card formats and the module is operating in degrade mode: Refer to Setting Up a Custom Wiegand Format for information on the behavior of the AC-1, AC1-A and AC1Plus. Refer to Multi Custom Card Formats as the site codes also need to be saved in the AC1 module using a Plain English program, 

Issue Time schedules are not switching off according to the workstation time. Time schedules are delayed. Product Line TAC Vista Environment TAC Vista, Xenta Servers and Controllers (280/300/400) Cause The Time in the TAC Xenta 911 and TAC Xenta controller is not the same as in TAC Vista Server. Resolution To check the time in the TAC Xenta controller follow these steps : Browse to the TAC Xenta controller Right Click on the controller and select Properties Select the Information Tab. This will display the time in the TAC Xenta controller To check the time zone of the TAC Xenta controller select the time settings Tab. Once the TAC Xenta controllers have been set in the right time zone TAC Vista server will sync them to the correct time. By default this occurs every 10 minutes The final step is to ensure the time and time zone of TAC Vista server is correct. To do that locate your TAC Vista Server object and right click then select properties.  Select the Information Tab to show the server time. This time is governed by the PC time so to adjust the PC time through Windows.

Issue If an Automation Server should be used as a LON Device in an OpenLNS Database using the OpenLNS Commissioning Tool? Is that possible to do? Product Line EcoStruxure Building Operation Environment Automation Server 1.4.1.68 or newer   Cause Some sites may wish to use other Lonworks configuration tools than EcoStruxure Building Operation Workstation. Resolution This is possible in 1.4.1.68 and newer. Add a Lonworks Local FT-10 interface and then add an Externally Managed Lonworks Network.

Issue When backup to flash is automatically disabled by the system due to exceeding the flash circuit breaker write limit, no system alarm is sent to make the system's operator aware  Product Line EcoStruxure Building Operation Environment Continuum i2920 Controller Cause Implementation of Continuum Infinet integration in EcoStruxure Building Operation did not include this feature. Resolution As a workaround, a user-created alarm can be used instead of the system alarm. Here is a sample implementation of this workaround:   Under the Infinet Interface create an Alarm, in this example, we are using an 'Expression' alarm Here is the algorithm used as an expression for the alarm Value = BackupDisabld In the i2 device, edit the 'StatusBackup' system variable and attach the alarm above in the Alarm Configuration tab. Make sure to tick the 'Enabled' box to engage the alarm.   The alarm will be sent when the flash circuit breaker trips which in the i2 device takes place after 10,000 backups To resume backups the feature must be manually re-enabled from Workstation by right-clicking the device and selecting DEVICE->ENABLE BACKUP TO FLASH

Issue Time stamps in interval Trend logs of bCX4040 and b3 controllers gradually drift starting in hundredths of a second and eventually accumulating into seconds. In the screen shot below, a Trend log with 15 minute interval was started at 11:00:00 and the entries start correctly aligned at the 15,30,45 and 00 minutes of the hour. After a while, the time stamps experience a drift as seen below Over time the time drift accumulates into seconds and minutes if not corrected Product Line Andover Continuum Environment Continuum bCX4040 Continuum b3s Cause The cause of the drift is unknown, at this time but it is assumed to be a firmware defect. Resolution A PE program can be configured in CyberStation to periodically remove the drift. Note that the program accomplishes this by setting the trend log Start Time to re-align the log entries on the HH, 00(minutes) 00(seconds), also note that this causes the trend log to stop for a brief moment, in this example for a minute.   The following program is provided as a sample and guidelines of how to implement the workaround, significant modifications to the program may be needed to make it suitable for specific site/application.     See attached dump file with program code. This is the result after program execution 1. Program sets the trend log's start time to 0:00:00 at around one minute before mid-night, this shows up as log-disabled event in the screen shot above. 2. At mid-night (0:00:00) the trend log starts, this shows as log-enabled event in the screen shot above. 3. New entries can be seen with time stamp drift removed

Issue Instructions are required, on how to set up and troubleshoot a Contact ID Reporting Service. Product Line EcoStruxure Security Expert Environment Security Expert Client SP-C-WEB Contact ID Reporting Service Cause Basic information on configuring reporting services is documented in the Security Expert Operator Manual and SP-C-WEB Programming Reference but these do not contain practical steps on configuring this specifically for Contact ID reporting. Resolution The Contact ID Service is used to send Alarms, Tests, and Events using Contact ID reporting to a 3rd Party monitoring station capable of receiving the Contact ID format.   The following steps can be used to configure a basic setup of Contact ID. Note that a modem will be required and modem events can be logged in the events window for troubleshooting.   1. Go to Programming | Phone Numbers. Add your phone numbers, usually primary and backup.   2. Go to Programming | Services. Add a new service, set Service Type to ContactID. Set Service Mode to 1 - Start With controller OS. 3. Set the Client code and select the previously created phone number 4. Select required report options. Log Modem Events to Event Buffer option will log all events. Only use this for troubleshooting.   5. Go to Programming | Areas and assign the Service to required Areas 6. Go back to Programming | Services.  Right-click the Service record, and select Start Service. Without doing this the service will not be running. It needs to be manually started the first time. Check the controller Health Status to see the status of your service if it is started or stopped. When done configuring your Services, Inputs, and Areas. Select Reports | Central Station Report. Select the Reporting Service and the output directory to generate the file. Click Generate and a CSV and HTML file will be generated. This report can be provided to the central station for their database. The HTML version is the easiest to read.   Further details on the Contact ID reporting format and outlines of the reporting and mapping options can be found in the AN 316 Security Expert - Contact ID Reporting in Security Expert and SP-CWEB - Integration Guide application note.   For Details of creating Test Reports for Reporting Services see KB Article : Creating a Trouble Input for Periodic Testing of a Reporting Service such as Contact ID

Issue Windows authentication is not working with Security Expert once configured. Product Line EcoStruxure Security Expert Environment Security Expert Server Windows Authentication Cause Windows authentication was not installed or configured properly during initial install/setup of Security Expert. Resolution Install the Security Expert Server, and any Security Expert Clients, with the "Enable Windows Authentication" option enabled during the installation process. If this was not initially done at install then it will be required to backup the SecurityExpert and SecurityExpertEvents databases, uninstall Security Expert (installing overtop or repairing install may not work) and then re-install Security Expert with the "Enable Windows Authentication" option enabled.  Refer to Determining Security Expert authentication settings after installation to determine the authentication used. When Windows Authentication is enabled in the client go to Global (1) and select Operators (2).  Create a new operator as below: Select to add a new operator (1).  Enter a Name (2).  The name does not need to be the same as the operator's username. Enter a UserName (3).  The username must match the domain name and domain username required to have access to Security Expert.  This is in the form of "DomainName\UserName" as shown in the example image. Set a Role for this operator (4). Enable the "Use Windows Authentication" checkbox (5) and save the changes. Go to Global (1) and select Home (2) and logout of Security Expert. On the login page select the "Use Windows Authentication" checkbox (1), set the Server to the Security Expert Server machine name (2).  Leave this blank if it is the local machine) and press Log in (3). The system should now be logged into Security Expert with the Windows username being used.   If an "Access Denied" is received or another error then confirm the following before contacting Product Support for further help. Ensure Security Expert Client and Server were installed with the "Enable Windows Authentication" option enabled.  Refer to Determining Security Expert authentication settings after installation to determine the authentication used. There is an operator object created in Security Expert with the same domain and user name as the domain user required for login. The "Use Windows Authentication" option is enabled on this operator object. At the login screen "Use Windows Authentication" is enabled and the Server is set correctly.

Issue Controller and graphic names in Vista Workstation are red, italicized. Product Line TAC Vista Environment Vista Workstation Cause A red, italicized controller or graphic name indicates that this Vista object has been "checked out."  During a partial Vista database export, there is an option for whether or not to indicate the item has been checked out.  This can be used if multiple people are working on a single server from several engineering locations to prevent overlap. Resolution To restore the database: Import the original export .zip file. If you do not have this file, you can also right click on what you want to return to normal and select "Undo Check Out."

Issue Problems backing up a database after an upgrade to 2.13 Product Line TAC INET Environment I/NET Seven rev 2.13 Cause Problems backing up a database after an upgrade to 2.13 Resolution Shut down I/NET and I/O Server Start DB Create, select the option to Upgrade Database Force an upgrade to the database. Select Verify Database, to ensure that there are no differences. Start I/O Configuration, modify the active profile, hit the OK button, and don’t make any changes. Close it again. Start I/Net again and verify that all I/NET functions are normal. Shut down I/NET and I/O Server again. Start DB Create and verify that all the functions are available to you again.

Issue There are a number of difference between CyberStation and web.Client Product Line Andover Continuum Environment Continuum CyberStation Continuum web.Client Server Cause There are different features and abilities in web.Client and CyberStation and it's necessary to understand those differences. Resolution The web.Client Planning and Installation Guide (Chapter 1) describes the main differences.    You generally use web.Client to view and monitor objects that were defined in CyberStation. The following table lists the levels of support offered with each major web.Client feature. For information on web.Client features, see the web.Client online help. LEVELS OF web.Client SUPPORT  Feature  View  Modify  Delete  Create  Personnel  X  X  X  X  Schedules and Calendars  X  X  X Events within schedules only  Events within schedules only  Reports  X  X    X  Areas  X        Groups  X        Loops  X  X      Graphics  X        Alarms  X  X      Events  X        Distribution Events  X  X  X    Points and objects  X  X  X Except: BACnet objects cannot be deleted.    TrendLogs  X  X      Video  X  1     Doors  X  X      Controller Web Pages  X          Video can be modified, but not saved. For example, you can change cameras, show/hide time, change focus, zoom, but you will lose these changes if the page is refreshed or you open another editor.  ** Graphics are slower through webpinpoint. Higher availability graphics may require a CyberStation.  

Issue What is the maximum number of registers that can be read/written using the multiple read/write function codes in Modbus Product Line EcoStruxure Building Operation Environment Building Operation Automation Server Modbus Register Groups Cause When deciding how to group registers using a Modbus Register Group, what are the maximum number of registers that can be grouped. Resolution There is a limit to the number of packets that can be polled in a single packet, however, if this number is exceeded then two or more polls will be made (blocks).  The nominal Read multiple registers maximum is 125 16 bit registers (250 8-bit bytes, so the register count will vary for 32 and 64bit polls).  The Register Group Properties Tab shows the number of blocks being polled. The Modbus register grouping function has a direct effect on system performance. A poorly grouped device can easily increase the overall poll time as points, or blocks, in each Modbus network are polled sequentially.  See the section "Batch Read Function" in the EcoStruxure Building Operation Technical Reference Guide for full details. Note: Multiple group writes are not possible and are not controlled via Modbus Register Groups.  

Issue How and when are Modbus points polled? Product Line EcoStruxure Building Operation Environment Building Operations Enterprise Server Building Operation Automation Server Cause Need to understand the Modbus poll mechanism Resolution Consult the 'Modbus Deep Technical Reference' chapter of EcoStruxure Technical Reference Guide Or use WebHelp to find information on the Modbus Poll Manager, which manages all polling of the points/data and devices, and the Poll List which contains all the current subscriptions (eg. data being referenced within Programs, Listviews, Graphics, Logging, etc) These mechanisms isolate the Modbus Polling from programs and graphics. Note: For each network, the poll manager operates with a poll list and a poll task. If a Modbus Object value is only required for logging purposes, then the  "Requested poll interval" is set to a high number (typically 2,147,483,647 ms) This means the object values are not currently being polled. When the time arrives for the log value to be collected, the "Requested poll interval" is set to 1000ms, until the value is collected, at which point it reverts to this higher number.

Issue Modbus Register Groups feature can overcome some Modbus communication problems. It has been seen before where the Modbus controller falls offline for a few seconds then comes back online. This cycle will repeat every few seconds. When register groups are not used, there may also be issues with the amount of time it takes for a Modbus points to update. Product Line EcoStruxure Building Operation Environment Building Operation Workstation Building Operation Enterprise Server Building Operation Automation Server Premium (AS-P) Building Operation Automation Server Bundled (AS-B) Cause In a normal Modbus network, a Modbus polling device obtains data from a polled device by sending a query message to the device and then waiting for the response message that contains the requested value from the selected register. If data from another register is required, the polling device sends out a new query message and awaits the response message. This process is repeated until all subscribed points values have been read. The Modbus Register Groups are a batch read function to poll Modbus devices. Instead of reading each register individually, the batch read function reads registers in manually created groups. When all registers in a group have been read, the response message returns subscribed register values for the whole group. Register grouping provides a dramatic saving in the time taken to poll your devices. For more guidance and tips on this topic, see Section "Batch Read Function" in the EcoStruxure Building Operation Technical Reference Guide.  Note: When viewing a graphic containing Modbus values, those values will update at the same interval as their Modbus register group. Resolution When grouping Modbus points, it is important to keep in mind some of the following points. Try to ensure that as many Modbus points as possible are contained in as few groups as possible. This will reduce the overall time it takes the Enterprise Server or Automation Server to read all the subscribed points in each Modbus device. Network performance can be enhanced by choosing the method of grouping that is most suitable for each device in the Modbus network.  Network performance can be enhanced by selecting a different default poll time for each register group. Network performance can also be enhanced by grouping points that have the same or similar polls. Start with higher group poll times to ensure a stable system before reducing the poll time. Make sure to delete Modbus points out of a register group individually before deleting the group. If this is not done, it can cause system delays. See article Modbus Batch Read Multiple Registers Groups Creating a Modbus Register Group In Workstation, in the System Tree pane, right-click on a Modbus device and select New Object (1).  In the create object window select Modbus Register Group (2), provide a name and select Create (3). Now that the group has been created, existing Modbus points can be dragged and dropped into the group. New Modbus points can also be created in the group.  Right-click on the Modbus Register Group and select New Object (1).  In the create object window expand Modbus Point (2), select a point type (3), provide a name and select Create (4).

Issue A Cyberstation program will not transfer the value of an AnalogValue in a third party device to an AnalogValue point in Continuum. The Cyberstation program consistently errors out and disables. Product Line Andover Continuum Environment Continuum Cyberstation Cause Using a Cyberstation program to set the value of a point in a BCX controller to equal the value of a point in a third party device without an intermediate step. Resolution Create AnalogValues in the Cyberstation.  Point values should first be transferred from the third party device to the Cyberstation points.

Issue My Server has a 100,000 alarms and a lot of old trend data.  How can I delete them quickly? Product Line TAC IA Series Environment I/A Series R2 Niagara Cause The APP folder under the station holds all alarm and trended data.  When this folder gets too big, i.e. >500 MB the Server functionality can slow down while working with this large database file. Resolution Stop the Server station Rename the existing APP folder to something other than APP Restart the Server station.  When the Server station restarts it will check for the presence of a folder called APP and when none is found it will create a new one and use that one to archive alarms and trend data. 

Issue Is it possible to have different software versions on the Cyberstation workstations? Product Line Andover Continuum Environment Continuum Cyberstation Cause When adding an extra workstation to a system does it have to match the version of existing workstations? Resolution All workstations on the same system must be exactly the same version including any service packs. This also includes Web Client servers. You will either need to install the same version as the rest of the system or upgrade all other workstations to the latest version, although this may need an upgrade of the security keys. Cyberstation software can be downloaded from The Exchange Download Center.