Building Automation Knowledge Base

Issue Out of range alarm attached to i2 device does not work when point's value is out of the range. The 'Alarms' system variable in the controller shows 0 Product Line Andover Continuum Environment CyberStation All i2 devices All InfinityControllers Cause Out of Range alarm is a BACnet alarm and can not be used with Infinity points Resolution Use Expression or Infinity Low/High Limit alarm type.

Issue MSTP controllers go offline when changing the MaxMaster value in the Automation Server from it's default of 127 Product Line EcoStruxure Building Operation Environment Building Operation Workstation Building Operation Automation Server MSTP Master Controllers Cause The MaxMaster value is being set lower than some or all of the MSTP controllers on the network Resolution EcoStruxure Building Operation supports MSTP Master controllers in the address range 0-127 (often refered to as the node id). The MSTP network is a token passing network where the token is passed around the network, until a controller has the token it cannot 'talk' to other devices.   The MaxMaster value is defaulted to 127 to allow all devices on the network to receive the token and reply to online status requests, send values etc. If the MaxMaster value is less than any of the MSTP Master controller addresses then those controllers never receive the token and cannot respond to online status requests.   The value for the MaxMaster needs to be equal to or greater than the highest addressed MSTP controller node id.  For example, if the highest node id=54 then the MaxMaster will need to be set to 54 or higher. For maximum efficiency the MaxMaster should be set 1 or 2 greater than the highest controller address, this allows for adding future devices without needlessly polling for many non-existent devices.    Please refer to BACnet MS/TP Network Properties – Basic Tab or Configuring the MS/TP Network for b3 Communication 

Issue Alarm colors in Workstation Product Line EcoStruxure Building Operation Environment  Building Operation Workstation Cause The default color for active alarms is white font with a red background. Some customers may want this to be in a different color.  Resolution In Building Operation Workstation System tree, go to Alarm Control Panel > Alarm Styles.  From here, the font type, font color and background color of acknowledged, active, disabled, fault or reset alarm states can be changed.  Refer to: Styling the Alarm States in the Alarms Pane and Alarm Views   Also available from EcoStruxure Building Operation 1.9 and above is Alarm Decoration. This allows overriding an alarm configuration for a specific alarm or group of alarms and applying an alarm decoration rule.  An alarm decoration rule is similar to a filter and allows changing other properties in addition to the font type, font color and background color.

Issue How to generate a controller offline Event and Alarm in Security Expert for intelligent controllers. Product Line EcoStruxure Security Expert Environment Security Expert Server Cause Security Expert does not come with any programmed Events or Alarms.  This will detail how to create an Event and Alarm in Security Expert that reports a controller as being offline, but the method can be applied to other Events and Alarms as well. Resolution Navigate to Events -> Event Filter Add a new Event Filter.  In this example, it is named “Controller Offline Alarm. Click Save  Once the Event Filter is created, you will need to navigate to the Event Type option and un-check "Include All Event Types". Select Add and find the specific event.  In this example, it is called “Controller <CONTROLLER_NAME> Offline (Event Server)” and "Controller <CONTROLLER_NAME> Offline (Event Server)".  It is nested under the “All PC Events” section. Click OK, then Save Next, navigate to Events -> Alarms. Create a new Alarm. In this example, it is named “Controller Offline Alarm.” Under Configuration, select the drop-down for Event Filter and select the Event Filter that was created. (Controller Offline in this example). Save When an offline condition occurs, an acknowledgeable alarm will be displayed. It will also display an alarm when the controller returns to an online state.

Issue Is it possible to configure a Xenta 121/122 controller with an STR-150 and lock the thermostat so that the user cannot change the temperature setpoint from the STR-150 device?   Product Line TAC Vista Environment STR-150 Xenta 121 Xenta 122 STR Sensor Cause In some applications, you do not want anyone to change the setpoint from the room unit. Resolution It is possible to configure the STR150 device so that it is not possible to adjust the actual setpoint. Enter configuration mode for the STR150 by Pushing the fan and bypass buttons simultaneously for 2 seconds to enter P0. In P0, hold down the bypass button and push the fan button three times. Press the fan button until you see P7, and change the P7 value to zero. To Exit Configuration Mode, push the fan and man button for 2 seconds. The timeout will exit configuration mode if idle.

Issue How to change the STR-150 temperature display, setpoint adjustment range, etc. Product Line TAC Vista Environment STR-150 STR Sensor Cause The communication between the STR-150 and the TAC Xenta 121/122 device is one way, space temperature and setpoints are sent from the sensor to the controller. Therefore some STR-150 functions (for example, the setpoint adjustment) can not be configured though Zbuilder, but needs to be done manually in the STR 150 device. Resolution Buttons on the thermostat: Increase Button Decrease Button Bypass button Fan button Wrench symbol   Steps of changing the STR-150 configuration are listed below: Enter Configuration: Push the fan and bypass button simultaneously for 2 seconds to enter P0 In P0, hold down the bypass button and push the fan button three times to enter configuration mode. NOTE: the wrench symbol is lit when the STR-150 is in configuration mode.   In configuration mode: Press the fan button repeatedly until reaches desired parameters (refer to the configuration table below). NOTE: the two digits farthest to the left on the display show the parameters, while the two digits farthest to the right show the value Use increase button or decrease button to change the value.   Exit configuration mode: Push the fan and bypass button simultaneously for 2 seconds. Or, the timeout will exit configuration mode if idle.   Configuration Options: Parameter Function Value/Range Default value P0 Software Version - - P1 °C or °F temperature display 1=°C, 2=°F 1=°C P2 Reference temperature (Reftemp) 15-30°C / 60-90°F 22°C / 72°F P3 Setpoint or room temp. 1=Setpt, 2=Room 1=Setpt P4 Timeout 5-90 seconds 10 seconds P5 Fan Settings 0=No fan 1=On/Off fan 2=Two-speed fan 3=Three-speed fan 3=Three-speed fan P6 Room temperature and setpoint display resolution 0.1 or 0.5 °C 0.2 or 1.0 °F 0.5 °C or 0.2 °F P7 Max adjustable setpoint span above or below Reftemp (P2). +/- 0 - +/- 5°C +/- 0 - +/- 10°F +/- 3° or +/- 6°F P8 Bypass button and occupancy indication When = 2, no bypass command is sent  to the controller 1= Symbol on, off Or flashing 2=Symbol always off Default 1=on, off Or flashing P9 Setpoint as Absolute or Offset value 1=Absolute 2=Offset 1=Absolute   Click here to read STR-150 user's manual.

Issue Which communication paths are secured with encryption when Continuum network security (IPSec) is enabled? Product Line Andover Continuum Environment CyberStation NetController II - CX9680 ACX II - ACX5740, ACX5720 Cause Information required on Continuum network security. Resolution Continuum IPSec implementation secures communications between Continuum controllers and CyberStations.     The following paths are secured: CyberStation to CyberStation CyberStation to controllers Controllers to controllers. Controllers can be configured to allow communications with other controllers that do not support network security such as the CX9900. Consult the Network Security Configuration Guide for further information.   Securing the communication path between workstations running CyberStation and the DB server is outside the scope of the Continuum implementation and is left up to the site’s IT department to put in place.

Issue External Log Storage PostgreSQL / TimescaleDB schema. Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation 3.0 and above External Log Storage Cause Need to understand what is supported with regards to third-party queries to the PostgreSQL / TimeScaleDB  Resolution The PostgreSQL database schema is not published by R&D (The Report Server schema can be generated via WebReports see Obtaining a Database Schema for EBO WebReports / Report Server - Communities, but should not be compared with External Log Storage) In order to get visual diagrams that show relations of the Extended Log Storage PostgreSQL TimescaleDB, you can download tools such as "SchemaSpy ", ERBuilder, or similar to generate it. Sample outputs are attached from SchemaSpy and ERBuilder. The PostgreSQL database schema is likely to change with each EBO version and hence is not published External Log Storage is designed to operate with EBO, rather than provide data directly to a third party - no support is offered with the third-party connection and data transfer Only third-party read querying is allowed Most tables are self-explanatory, the "trend_data" table, "Type" column is detailed below: It's a number representing which record type TrendRecordTypes = { RecordTypes::s_trendrecordTLogValueRecord, RecordTypes::s_trendrecordTLogEditValueRecord, RecordTypes::s_trendrecordTLogCommentRecord, RecordTypes::s_trendrecordTLogEventRecord, RecordTypes::s_trendrecordTLogEventValueRecord, RecordTypes::s_trendrecordTLogMeterChangeRecord, RecordTypes::s_trendrecordTLogNullEventRecord, RecordTypes::s_trendrecordTLogReconfigRecord, RecordTypes::s_trendrecordTransferEventRecord }; The record type that is most common is the TLogValueRecord, and it's 0 and so on   For reference, the only other documents available would be Alarms - Add/Remove Columns Dialog Box (Alarms) (se.com) Events - Add/Remove Columns Dialog Box (Events) (se.com) Trends - Add/Remove Columns Dialog Box (Trends) (se.com)

Issue Does Building Operation use Unicast or Multicast? Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Automation Server Building Operation Workstation Cause Does Building Operation use Unicast or Multicast? Definitions: Unicast packets are sent from host to host. The communication is from a single host to another single host. There is one device transmitting a message destined for one receiver. Multicast is a protocol for use with IP. Multicast enables a single device to communicate with a specific set of hosts, not defined by any standard IP address and mask combination. This allows for communication that resembles a conference call. Anyone from anywhere can join the conference, and everyone at the conference hears what the speaker has to say. The speaker's message is not broadcasted everywhere, but only to those in the conference call itself. A special set of addresses is used for multicast communication. Broadcast is when a single device is transmitting a message to all other devices in a given address range. This broadcast could reach all hosts on the subnet, all subnets, or all hosts on all subnets. Broadcast packets have the host (and/or subnet) portion of the address set to all ones. By design, most modern routers will block IP broadcast traffic and restrict it to the local subnet. Resolution Building Operation is using only IPv4 and therefore Unicast only. This may change when Building Operation begins using IPv6. At that time, a site may want to use the IPv6 multicast features to address groups of targets.

Issue Site may be migrating from I/NET to another access control system and would like to import the data. Product Line TAC I/NET Environment I/NET Seven SQL Management Studio Cause The site is migrating from I/Net to Continuum or another access control system. Resolution Open SQL Management Studio and create a New Query by clicking on the "New Query" button Run the script below: SELECT * FROM InetDb.dbo.IdWorksView Note:  This view only shows the Primary Group associated with each individual.     Select File>Save Results As... Save the file as a .csv to a location of your choosing

Issue Trouble synchronizing the time of the Automation Server or Enterprise Server to a NTP server or between each other Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Enterprise Server EcoStruxure Building Operation Automation Server Cause The Enterprise Server and the Automation Server (ASP/ASB) do not synchronize time to each other, they must use an NTP server for synchronization Resolution The information below is mainly concerned with synchronizing the time setting but not the actual time.   Overview To synchronize the server times an NTP Server will be required, they do not synchronize time with each other. A common misconception is that the Automation Servers sync time with the Enterprise Server via server-to-server communications. To find an external NTP server consult support.ntp.org . Alternatively, an existing internal NTP server can be used or consult Setting up a Local / Internal NTP Server to configure the Enterprise Server computer as a time server The time settings on the Enterprise Server are configured through the operating system settings on the computer where Enterprise Central is installed.  EcoStruxure Building Operation cannot be used to configure the NTP server for the Enterprise Server. Please refer to Network Time on WorkStation, Enterprise Server, and Enterprise Central To find the Network Time Protocol (NTP) configured on a WorkStation, Enterprise Server, or Enterprise Central computer open a command prompt and enter w32tm /query /peers. If configured the peer NTP server(s) will be listed If you need to ensure an NTP server is actually running on certain IP or DNS address, please reference Ensure IP or DNS address is valid NTP server The time settings on the Automation Servers can only be configured via the Workstation. As per the image they can be configured to look at an NTP server (1) or set manually (2). For synchronization, they must use an NTP Server. Please refer to  Network Time Server on an Automation Server on Webhelp Starting in version 1.5, the time adjustment depends on how much the Automation Server drifts from the NTP server. The faster the Automation Server drifts, the more frequently the time is updated.  Please refer to How often will an Automation Server ask the NTP server for the time?  If the time server is a URL, such as time.nist.gov, then it is critical that a Primary DNS is set for each Automation Server, and possibly a Secondary DNS via Device Administrator. Without a DNS, the Automation Server will be unable to resolve the URL to an IP address. Please refer to Configuring the Automation Server IP Address on Webhelp The time displayed for a server in Workstation (Properties -> Basic) will reflect the time zone of the local computer that Workstation is installed on. All events and alarms will be automatically modified to match the time of the workstation that was used to log into the server. The "Server time" will represent the date and time of the server adjusted to client local time zone, while the fields below "Server time" represent the settings of the Automation Server.   How to synchronize date and time settings on multiple Automation Servers   IMPORTANT: Only the time settings are synchronized via the Lead/Shadow configuration, the time itself IS NOT synchronized via the Lead/Shadow but rather by all servers synchronizing with the configured timer server.   The synchronizing of multiple Automation servers can be achieved with a lead/shadow relationship. The primary and secondary network time server settings for connected shadow Automation servers are defined on the Enterprise server. Setting up the Primary and secondary time servers in the Enterprise Server only passes those configuration settings to the AS controllers, it does not send the actual time and date value.   Select the Enterprise server (1), click the Date & Time tab (2), select Enable (3) and enter the Primary time server (4) and, if used, the Secondary time server (5) the Automations Servers will use. Ensutre the time zone for the Enterprise Server is set correctly (6).   Save the settings  From EBO version 2.0 all Automations Servers are automatically configured to shadow the date and time settings configured in the Enterprise Server. To verify this expand the System folder of an Automation Server and select Time Settings -> Date and Time (1). Observe the Date and Time are Shadow-Read only (2), replicating the Enterprise Server settings. Attempting to change any of the settings, other than the Lead object (3), will result in an error. All the Automation Servers will be 'looking' to the same Primary (4) and Secondary time servers, i.e. they will all receive the same time and be synchronized Similarly, select the Time Zone (1) of the Automation Server in the System Tree; this will also be shadow-read only (2). The lead object is set to the Time Zone on the Enterprise Server (3) Before EBO version 2.0 the Automation Servers were not automatically set to shadow the Enterprise Server settings but this could easily be achieved en masse using Search . In the Search box in the top right corner of the Workstation, type "Date and Time" and click Search (1) to find the date and time object of all connected servers. In the Search view select the servers (2) that require their Date and Time settings synchronized to the Enterprise Server, the Enterprise Server does not need selecting. Select the Time tab (3) and then click the triple dots (4) to navigate to and select the Date and Time object on the Enterprise Server (5)   You may need to stop and start the Enterprise server to get the configuration settings to pass down to the shadow Automation servers Note: To set up synchronization of the time zone settings follow the above search steps for date and time but search on Time Zone Tip/Tricks To see the time of on the Enterprise Server and multiple Automation Servers use the Search to find the Date and Time object (1). Individually select each server (2) and then drag the Date and Time object (3) into the Watch Window (4) It is the Automation Server that initiates the synchronization. To check the Automation Server communication settings select the Automation Server (1) and in the Communication tab (2) select the Enterprise Server (3) and make sure the Automation Server has the correct IP address (4) To check the Enterprise Server communication settings select the Enterprise Server (1) and in the Communication tab (2) select each Automation Server (3) and make sure the correct IP address is specified for each Automation Server (4).  If a firewall exists ensure that the ports are open so the Automation Server can connect to the Enterprise Server. Please search for the EcoStruxure Building Operation IT Reference Guide on Exchange for details Further Information Release 1.2.0 and higher Until the time is set, b3 data will not update in the Watch Window Until the time is set, BACnet COV will not be functional Automation Server time does not synchronize directly with the Enterprise Server. Instead, all servers can synchronize to the same accessible time server To adjust the Automation Server time, time zone, and DST, access to the Automation Server is through a WorkStation

Issue Need to verify Network Time Protocol (NTP) server is running/listening on IP or DNS address. Product Line EcoStruxure Building Operation Environment Building Operation Enterprise Server Building Operation Automation Server Cause Automation Servers require valid local or internet NTP servers for accurate timekeeping. Resolution Check an NTP server using this command at the Windows Command Prompt: w32tm /stripchart /computer:<IP Address> /dataonly /samples:5 Substitute the DNS name or IP you want to test for <IP Address>.   Additional Notes: Windows machine must be on the primary ethernet network, as Automation Server's secondary IP Port will not route NTP traffic. Connected to site VPN may or may not perform as expected based on VPN Configuration for the site. One can always remote desktop the Enterprise Server and run Command Prompt to check locally. If the Enterprise Server is configured in a Virtual Environment or on a separate subnet from the Automation Servers, then Enterprise Server Gateway may be an NTP server, so one change to check that IP address using this method. Examples of Success First screenshot is local Enterprise Server running Meinburg NTP server. Second screenshot is an internet NTP server. Example of Failure Screenshot is local Enterprise Server gateway that is NOT running an NTP Server.  Related Article: Time Synchronization of the ES and AS

Issue A Schedule or PE program can not change the value of a point because it is set by another process at a higher Command Priority. Product Line Andover Continuum Environment CyberStation bCX4040 B3s Cause Command value must be Relinquished at the priority that no longer needs to control the point's value so that a command with a lower priority can take control of it. Resolution Edit the point from the BACnet view. Go to the Command Priority tab, this tab shows the 16 priorities and their current statuses   Select the priority to relinquish and then click on the Relinquish button. The command with the next highest priority should then immediately take over.

Issue Configuration of BACnet Foreign Device Registration Product Line EcoStruxure Building Operation,  Andover Continuum Environment BACnet IP  BBMD Foreign device Cause  Foreign Devices registration can be confusing Resolution When configuring a Foreign Device Registration on a B/IP BACnet Network. The Foreign Device only needs to register with the one BBMD on its B/IP Network Segment. The BBMD that has the Foreign Device registered with it creates a table called FDT (Foreign Device Table) internally which is different from the BDT(Broadcast Distribution Table) that the BBMD uses to communicate with other BBMDs.   Once the FDT confirms the Foreign Device, it is up to that BBMD to distribute BACnet communications to and from the necessary BBMD's in its BDT. and the all Foreign Devices in its FDT.  In this way the Foreign Devices does NOT perform Broadcasts.

Issue Help with Creating Custom Reports for EcoStruxure Reports Server Product Line EcoStruxure Building Operation Environment SQL Report Builder 3.0 Cause In order to create a custom report for EcoStruxure, the user must have a basic knowledge of SQL and writing SQL SELECT Statements.  Report Builder 3.0 can walk a user through most of the process but there is a bit of a learning curve. Resolution If you are attempting to create a custom report the most difficult piece of information is determining what Tables store which information.  To get definitions of Table Rows, run the provided Database Schema report in the Web Reports browser.  This will show primary/foreign key relationships as well as give you information on what is stored in each column. Information on Extended Trend Logs is stored in the tbLoggedEntities table and the tbLogTimeValues Tables.   Additional Metering information can be found in tbMeter, tbMeteringLogFilter, tbEntityData and tbEntityRelation

Issue Performing Load Sources in the EcoStruxure ETL tool causes errors with the following headers:   There was no endpoint listening at http://localhost:8080/EcoStruxure/DataExchange that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. The HTTP request is unauthorized with client authentication scheme 'Digest'. The authentication header received from the server was 'Digest realm="ews@SxWBM",qop="auth",nonce="AEEE5A9347E49ECADC753B5AA17EECE0",OPAQUE="5B4718"'. Product Line EcoStruxure Building Operation Environment EcoStruxure Energy Expert (formally Power Manager) Enterprise Server Automation Server Cause The EBO EWS Extract Task settings are incorrect in regards to the EcoStruxure ES or AS that it is trying to access.    There was no endpoint listening at... This error is due to the use of the incorrect port numbers in the EWS Web Service URL.   The HTTP request is unauthorized with client authentication scheme 'Digest'... This error is due to the use of the incorrect admin Username and/or Password.  Resolution The settings of EBO EWS Extract Task need to be verified and corrected.    Click on the Tasks tab in the ETL tool and select the "EWS Extract Task". The extract task settings will be displayed on the right side of the screen.                                                                               Verify that the port number in Web Service URL address corresponds to the port number being used by the ES or AS  Verify that a valid Username and Password has been entered into the EWS Web Service User Name and Web Service Password fields. 

Issue When evaluating Inet Transition sites, a common error seen when uploading I/NET controllers under the  Inet Interface is an upload failure.  The Background Status and trace log will contain a changeset error as shown below: UploadDevice failed to process changeset on link: 93 station: 10, type index: 17 cannot continue upload Product Line EcoStruxure Building Operation, TAC INET Environment Ecostruxure Building Operation Inet Interface  Cause Understanding the ChangeSet Indices used by the developers will help pinpoint where the issue is originating from.  The message typically isolates the Link and Station but does not identify where within this controller the problem may lie.  Resolution The current list of ChangeSet Indices are listed below and attached Changeset_index.txt Index Affected 9 DCU passwords, States, Eng units, Conversion Coeff., Controls, Holidays, DDC history, Override access, Sunrise/Sunset 11 Points 15 Action message, DCU DDC, Event sequences 17 Calculation 19 Event extension 21 Extension general (can be one of: Runtime, Consumption, or Alarm inhibit - depends on DCU type) 23 ATS 25 ATC 27 Extension application (can be one of: Demand, ORB, ORBEM, UC, LZ, LC, Elevator - depends on DCU type) 29 Trend 31 Lookup table (raw data) 33 Demand load (raw data) 35 MCU 37 MR DDC 39 AIC sequence (raw data) 43 LCD page, Istat param, IAS (raw data) 45 Access control (raw data) Note: "raw data" indicates user cannot manipulate in EBO but it is uploaded and save in raw form to allow for a download/restore Working with the example shown in the Issue, the message indicates a changeset value of Index: 17.  Using the attached list, Index 17 indicates that the issue is within the Calculation Editor. Using the SAV file from the site and working offline within I/NET open this SAV file and check each of the editors, in this case, calculations. In most cases, it will either be an invalid character or invalid point address - which will be shown as 'blank' as seen below: Correcting this and updating the SAV file to the controller (Station Restore) will typically correct this issue. If the same error persists then please provide an Export of the Inet Interface and the SAV files of the controllers having this problem through your local support channel.   

Warning Potential for Data Loss: The steps detailed in the resolution of this article may result in a loss of critical data if not performed properly. Before beginning these steps, make sure all important data is backed up in the event of data loss. If you are unsure or unfamiliar with any complex steps detailed in this article, please contact Product Support for assistance. Issue How to bring a BACnet controller online after restoring a backup Product Line EcoStruxure Building Operation Environment EcoStruxure Building Operation Cause Customers may want to take a backup from a site and use it on other setups. If there would be any BACnet controller under the Backup, they may need to know the process of hosting the BACnet controllers under the restored backup on the physical BACnet controllers.   Resolution This video will demonstrate how to bring a BACnet controller online after restoring a backup. NOTE After matching up the Device ID of the BACnet controller under the restored server and the Object ID of the physical BACnet controller, if the hosting status shows “Not hosted”, users need to perform a "Repair Hosting". Please refer to Repair Hosting a BACnet/IP controller 

Issue Configuring Security Expert Readers Product Line EcoStruxure Security Expert Environment Security Expert Smart Card Readers Cause Security Expert Smart Card Readers have options such as Mifare Reading Mode, LED colors, etc. that can be configured. How the readers are configured will depend on the reader's firmware. Resolution The method used to configure a Security Expert Smart Card Reader depends on the firmware version it is using. There is no way to visually determine the firmware version. To identify what firmware the reader was shipped with from the factory refer to Knowledge Base article Identifying Security Expert Smart Card Readers Firmware. 1. Smart Card Readers with firmware below build 200 - (I.e. 1.04.64) These are older readers which were configured with a serial terminal program by connecting to the reader using a USB-RS485 converter. Please refer to the 'Installer Programming' section of the attached Smart Card Reader Installation Manual - Feb 2017. This has been replaced by a newer version of the manual on Exchange which no longer includes this information. 2. Smart Card Readers with firmware build 200 or above (I.e. 1.04.229) These newer readers do not have a serial interface and will require a configuration card to change reader options. The configuration card (SX-ISO-CONFIG) is ordered from Schneider Electric, see the Security Expert Credentials Order Form for details.

Issue How can the firmware version of Security Expert Smart Card Readers be determined. Product Line EcoStruxure Security Expert Environment Security Expert Smart Card Readers Cause It is not possible to easily identify the firmware which a reader has been shipped with. Serial Numbers are not sequential and cannot be used as general guide. Resolution To find out a reader's original shipped firmware version raise a case with Product Support including the Reader's Serial Number and they will be able to check with manufacturing to determine which firmware version was loaded at the time.